$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft File: suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json) Hash identifier: D6Z4BNO7+J7PW/61nosSBdc0lfC8wh+oAaP35BeWxVo= Subject key identifier: 2A:96:FD:D4:6D:92:52:D4:FB:57:43:6E:3F:58:C5:7E:21:0E:F5:C7 Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft Manifest number: D3 Signing time: Sat 09 Aug 2025 06:01:37 +0000 Manifest this update: Sat 09 Aug 2025 06:01:37 +0000 Manifest next update: Sat 16 Aug 2025 06:01:37 +0000 Files and hashes: 1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: rB1TvZKyHjQt+pDwrYlOgvLt81gG9sYjj6uD9DLy2mE=) 2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: EPqvpxlJgwQtY4nw1cFwMuEYfLLzI7V4J9A9JpW8gvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Validity Not Before: Aug 9 06:01:37 2025 GMT Not After : Aug 16 06:01:37 2025 GMT Subject: CN=6896e441-1ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:e5:13:d2:12:86:18:33:f3:03:da:02:ba: 6c:7b:9a:fa:2c:6b:c0:f8:34:96:b2:ea:7c:7b:ce: 0e:f5:9c:68:0a:cf:6a:1a:bc:cb:ed:72:7a:33:d8: 96:e6:70:a0:40:a7:ad:04:7a:3b:fd:c1:ba:1e:7f: ca:0a:2d:42:1c:14:48:8a:4b:d6:d8:c5:1a:cb:76: b1:66:c2:12:13:21:1f:eb:fc:02:a0:0c:86:78:41: 48:23:31:19:9d:4c:19:b6:66:94:af:85:95:0c:e7: 5c:bd:e1:d2:a8:55:9b:8a:07:eb:17:4e:a3:90:f7: 32:fa:0e:fd:be:76:58:6e:e7:34:fa:a8:8c:39:6a: 24:e2:0b:a1:4f:18:42:6f:77:cc:6f:87:7f:d3:f0: 47:6b:06:fc:bd:75:f2:12:38:9b:9d:b9:2d:67:d4: 4f:ac:54:af:f8:a6:28:ee:69:07:67:c6:51:18:3b: f7:2e:9f:16:d2:ef:9b:14:3d:15:a1:88:16:24:89: 9b:3c:09:33:51:21:da:49:c9:d4:70:1c:77:39:63: 32:88:cb:30:c0:c6:28:97:cc:53:b5:d0:86:8d:44: ed:41:cd:c1:97:b4:bb:47:3a:75:7a:3e:36:80:ba: 4e:6c:38:14:b9:93:87:6f:ca:f6:2b:f1:86:5a:e5: c5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:96:FD:D4:6D:92:52:D4:FB:57:43:6E:3F:58:C5:7E:21:0E:F5:C7 X509v3 Authority Key Identifier: keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:97:ec:01:4f:3c:21:1d:16:43:16:89:ce:89:8c:26:dd:8f: ef:fa:20:31:93:a6:fd:e5:20:ab:99:f3:bf:07:56:d5:f9:4b: 95:f5:33:bc:57:d2:e9:a6:60:88:ca:94:a6:6a:56:07:e1:e6: b3:7a:7c:ff:ba:f0:a6:5d:9b:2b:86:60:9a:b7:52:1e:af:61: 12:73:5b:06:cb:70:c1:51:95:19:b9:27:d5:bf:c3:64:89:c9: ac:40:d9:7c:2d:35:83:b3:b5:f1:e3:3b:1d:2e:20:e3:01:33: df:9f:fc:45:d3:41:58:0c:5a:f2:90:2e:94:e7:7a:43:d1:68: a0:d4:18:39:19:cb:4c:a5:c6:71:25:28:21:c2:64:37:24:79: a6:04:ad:d4:c0:2e:b0:52:41:9f:c8:af:97:71:ca:ec:21:94: 3d:8e:c9:9c:98:cb:98:40:54:b2:7b:54:3a:2f:13:ec:0d:76: ee:01:40:52:5b:ec:61:9f:4b:7b:c3:cf:43:e1:12:61:5c:3c: 2b:0e:90:17:2a:70:3a:54:51:5e:ad:dc:9c:0a:3c:80:17:c6: 43:d4:c5:26:77:51:b2:f9:cf:83:d0:23:d0:3b:65:8c:77:71: 97:e5:ac:d3:64:c6:4e:43:e5:6d:59:87:8a:3e:b4:93:09:a6: 54:05:b7:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKEIyRTg4RUREMzYxQkNDNjE5NEM5N0Y2OEM0NzI1MTgw RkYwMkY3MjQwHhcNMjUwODA5MDYwMTM3WhcNMjUwODE2MDYwMTM3WjAYMRYwFAYD VQQDEw02ODk2ZTQ0MS0xZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3krlE9IShhgz8wPaArpse5r6LGvA+DSWsup8e84O9ZxoCs9qGrzL7XJ6M9iW 5nCgQKetBHo7/cG6Hn/KCi1CHBRIikvW2MUay3axZsISEyEf6/wCoAyGeEFIIzEZ nUwZtmaUr4WVDOdcveHSqFWbigfrF06jkPcy+g79vnZYbuc0+qiMOWok4guhTxhC b3fMb4d/0/BHawb8vXXyEjibnbktZ9RPrFSv+KYo7mkHZ8ZRGDv3Lp8W0u+bFD0V oYgWJImbPAkzUSHaScnUcBx3OWMyiMswwMYol8xTtdCGjUTtQc3Bl7S7Rzp1ej42 gLpObDgUuZOHb8r2K/GGWuXFDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqW/dRt klLU+1dDbj9YxX4hDvXHMB8GA1UdIwQYMBaAFLLojt02G8xhlMl/aMRyUYD/Avck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9CRDg1OUY5NjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpHR1V5WDlveEhKUmdQOEM5 eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1aU8zVFliekdHVXlYOW94SEpSZ1A4Qzl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9CRDg1OUY5NjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpH R1V5WDlveEhKUmdQOEM5eVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnl+wBTzwhHRZDFonOiYwm3Y/v+iAxk6b95SCrmfO/B1bV+UuV9TO8 V9LppmCIypSmalYH4eazenz/uvCmXZsrhmCat1Ier2ESc1sGy3DBUZUZuSfVv8Nk icmsQNl8LTWDs7Xx4zsdLiDjATPfn/xF00FYDFrykC6U53pD0Wig1Bg5GctMpcZx JSghwmQ3JHmmBK3UwC6wUkGfyK+XccrsIZQ9jsmcmMuYQFSye1Q6LxPsDXbuAUBS W+xhn0t7w89D4RJhXDwrDpAXKnA6VFFerdycCjyAF8ZD1MUmd1Gy+c+D0CPQO2WM d3GX5azTZMZOQ+VtWYeKPrSTCaZUBbcM -----END CERTIFICATE-----Generated at Sat Aug 9 15:18:35 2025 by rpki-client