$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json) Hash identifier: nIu3RfEI6tClZMS7EqcRy0KcVJDrz0r8C15Ogm+i8LY= Subject key identifier: F4:8D:1A:B1:4E:3A:1A:18:D6:AF:26:E7:EA:31:2E:BA:29:8D:78:3D Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft Manifest number: 07AE Signing time: Thu 12 Jun 2025 20:55:12 +0000 Manifest this update: Thu 12 Jun 2025 20:55:12 +0000 Manifest next update: Thu 19 Jun 2025 20:55:12 +0000 Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: W+0nf4vsV/tMUP0TPtH1URWOugwSBCU6EsAHfJ83ZVA=) 2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: wrP/aiUubLvMy2sDZxNt1LMzFgR4k2obYAa+c5WHPY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Validity Not Before: Jun 12 20:55:12 2025 GMT Not After : Jun 19 20:55:12 2025 GMT Subject: CN=684b3eb0-ead5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:1b:d5:f3:0e:52:8b:36:c3:61:57:a1:6f: aa:98:84:83:19:28:9d:31:93:e3:fd:37:06:1c:d4: 85:21:49:54:4b:61:e5:b8:71:33:b0:71:45:69:77: a5:90:81:32:b6:8c:e5:5c:fe:c6:e8:e3:b8:d2:19: 4b:d0:7b:45:09:37:6a:94:7a:71:5c:94:ce:37:70: 78:e6:09:1f:fe:8c:e3:27:9d:6c:4f:1f:38:c7:89: 50:9f:49:36:5c:1b:45:7b:1a:3b:10:55:99:0a:8f: a5:8f:00:3b:59:74:db:83:0a:24:fe:ff:c9:30:8d: ae:24:27:2d:a3:87:e1:5c:d1:d2:30:f3:2d:2b:0b: 23:b4:82:10:0b:46:0e:a1:bb:3d:65:13:0f:7f:c1: 79:6f:da:b4:6d:a3:3b:59:5f:48:70:9e:76:6b:1b: fe:cf:49:fd:29:3c:aa:1f:83:07:c1:e0:f6:66:33: d5:76:fd:58:bf:03:17:84:6f:b6:7b:88:31:7b:b4: 21:f8:79:4e:ee:01:13:92:19:ee:35:0e:cb:1d:96: ac:d7:59:93:75:60:e8:74:48:bf:16:40:e9:67:7e: e4:b2:7d:5e:75:d8:53:c1:3b:b0:57:db:84:48:db: 14:53:14:6c:ec:51:bc:06:ef:2a:aa:60:8c:37:6b: 62:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8D:1A:B1:4E:3A:1A:18:D6:AF:26:E7:EA:31:2E:BA:29:8D:78:3D X509v3 Authority Key Identifier: keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:94:af:cf:e4:80:b8:a2:dd:50:c4:6b:26:af:dd:d9:36:87: 51:79:21:8c:86:8d:ec:d3:7e:68:c4:11:4e:2b:d1:6f:2b:05: 91:9a:8a:ee:f4:ee:e7:c9:a0:2f:df:00:1b:89:f6:02:a9:bb: 7f:e8:b0:9e:b8:7c:3f:39:44:c3:dc:31:57:f5:23:61:6f:3e: 33:20:4c:54:04:7a:a1:00:25:b7:cb:03:ba:f9:06:95:05:77: 1d:be:47:fc:61:57:31:47:2f:b9:b2:19:f4:2d:c9:42:62:11: 1b:87:54:0e:ae:80:4b:9e:0a:ab:f1:7c:aa:9d:29:8a:2a:d2: 86:81:7d:d4:d3:07:37:63:6b:0f:4e:c9:53:62:3d:a9:d2:d9: f3:05:36:c5:6c:3e:ef:ac:18:46:4a:7a:93:ec:f9:ec:0d:06: 63:68:f6:ca:22:bd:97:5a:3d:c8:07:45:19:c5:63:29:0a:fe: 63:61:ec:c4:bc:11:ed:a1:94:7f:f2:6f:12:6e:37:22:86:8f: 73:0f:ba:bd:64:77:30:c6:b9:b8:f8:fb:ae:f9:f4:d1:d2:82: c8:d1:50:1f:7c:56:3c:f8:2e:20:25:69:b5:cd:8a:3c:4d:b2: 95:14:6c:d3:be:51:90:54:58:63:ef:68:24:6e:ca:84:6d:91: 64:7d:da:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz OEJFNTQwOUUwHhcNMjUwNjEyMjA1NTEyWhcNMjUwNjE5MjA1NTEyWjAYMRYwFAYD VQQDEw02ODRiM2ViMC1lYWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZ4b1fMOUos2w2FXoW+qmISDGSidMZPj/TcGHNSFIUlUS2HluHEzsHFFaXel kIEytozlXP7G6OO40hlL0HtFCTdqlHpxXJTON3B45gkf/ozjJ51sTx84x4lQn0k2 XBtFexo7EFWZCo+ljwA7WXTbgwok/v/JMI2uJCcto4fhXNHSMPMtKwsjtIIQC0YO obs9ZRMPf8F5b9q0baM7WV9IcJ52axv+z0n9KTyqH4MHweD2ZjPVdv1YvwMXhG+2 e4gxe7Qh+HlO7gETkhnuNQ7LHZas11mTdWDodEi/FkDpZ37ksn1eddhTwTuwV9uE SNsUUxRs7FG8Bu8qqmCMN2tiMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSNGrFO OhoY1q8m5+oxLropjXg9MB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq d3pXelBFbUNwelk0dmxRSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAolK/P5IC4ot1QxGsmr93ZNodReSGMho3s035oxBFOK9FvKwWRmoru 9O7nyaAv3wAbifYCqbt/6LCeuHw/OUTD3DFX9SNhbz4zIExUBHqhACW3ywO6+QaV BXcdvkf8YVcxRy+5shn0LclCYhEbh1QOroBLngqr8XyqnSmKKtKGgX3U0wc3Y2sP TslTYj2p0tnzBTbFbD7vrBhGSnqT7PnsDQZjaPbKIr2XWj3IB0UZxWMpCv5jYezE vBHtoZR/8m8Sbjciho9zD7q9ZHcwxrm4+Puu+fTR0oLI0VAffFY8+C4gJWm1zYo8 TbKVFGzTvlGQVFhj72gkbsqEbZFkfdoh -----END CERTIFICATE-----Generated at Sat Jun 14 18:13:53 2025 by rpki-client