$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft File: suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json) Hash identifier: IDg2rIEuMGmS9ZejV68xwbeIZL32rmCuCFVsbi+eA7Q= Subject key identifier: 09:67:68:A2:1E:EB:3C:D2:55:A2:69:84:37:EF:54:37:F7:9E:C0:17 Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft Manifest number: B7 Signing time: Thu 19 Jun 2025 05:16:32 +0000 Manifest this update: Thu 19 Jun 2025 05:16:31 +0000 Manifest next update: Thu 26 Jun 2025 05:16:31 +0000 Files and hashes: 1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: jRR1sZBqZrDkQZvOaNLEw3w7Fhk/PuuCfOPcpUeGF5U=) 2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: lY5HgP2b+DiZvOALHw+tr2ZxBjEGaK357GqXMmb0Brk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Validity Not Before: Jun 19 05:16:31 2025 GMT Not After : Jun 26 05:16:31 2025 GMT Subject: CN=68539d30-1e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:5b:de:85:db:b1:75:f2:33:85:4c:a6:fb: dd:5b:88:4f:86:cf:1e:40:20:8a:72:fa:e5:ca:2e: ac:81:b7:36:6d:fe:95:2e:74:8d:72:d1:99:8e:58: 18:72:f7:dc:3c:f5:01:2d:26:26:68:9a:2c:4e:51: 74:52:e4:bd:a2:58:e5:67:8d:ce:8f:06:3a:3a:32: 3b:62:95:21:0a:08:0a:2f:1a:2b:a3:03:44:19:da: df:0d:1b:c7:6a:71:9b:a6:6f:b0:a2:ed:01:0d:40: 41:a7:c3:64:13:00:28:6f:1f:96:42:30:86:ff:1b: f7:41:b5:f2:5a:0e:4f:dc:78:c1:e2:82:bc:e8:9e: 9f:1d:a3:84:38:fc:65:44:0a:cb:f9:60:67:32:a3: de:cb:54:0b:59:b8:cd:20:72:38:8e:77:69:06:d1: 57:d0:0e:f6:a5:17:4c:86:0e:0e:74:4b:3f:2d:32: 6b:b5:11:88:36:85:49:ef:14:ca:46:2f:7c:89:04: b5:5b:9e:23:3c:1c:a3:66:a4:f5:28:b3:b0:de:d3: 38:fb:9a:00:05:49:13:d4:7e:6e:69:8e:12:7d:73: 0d:69:23:98:cc:11:fe:b1:4b:10:62:7e:da:88:f2: 49:43:36:07:b4:47:14:6c:c5:83:6e:2a:2f:f4:21: 2d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:67:68:A2:1E:EB:3C:D2:55:A2:69:84:37:EF:54:37:F7:9E:C0:17 X509v3 Authority Key Identifier: keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:72:a3:66:85:72:01:42:8d:23:4a:8a:f9:30:3b:ca:50:f0: 08:bd:e4:68:61:ab:d3:fa:7e:9b:80:56:d6:24:a4:2c:96:0f: c4:8a:f4:30:77:69:4d:4d:df:ac:e9:8e:09:9e:9b:aa:58:33: b2:d7:25:2e:07:e0:67:36:45:3d:15:84:92:9a:89:ae:fe:ad: ba:d9:9f:5d:9f:f8:e2:f6:bc:ac:f5:ac:3a:68:45:c3:06:5b: ab:9d:65:ce:36:d5:93:ff:c7:4d:32:f8:ae:5c:69:62:f9:8b: 2b:37:dd:33:76:9e:aa:9a:d5:a3:5e:6a:64:7b:1d:e8:a5:73: e4:f1:96:71:4d:72:30:bd:da:f4:8a:f1:f0:16:9b:f3:ee:7b: e4:a5:6a:ea:86:c4:62:ea:f7:27:65:31:13:43:9e:3a:e2:52: 5c:ee:8a:15:d6:c2:96:24:a2:14:39:0a:3d:64:f7:77:bc:38: d4:73:42:68:46:89:5e:45:e1:09:f6:18:37:51:ac:0c:14:2a: a7:03:52:c3:91:b6:d3:bc:cc:12:4f:95:01:89:fa:4b:6e:a8: c0:a7:a1:85:d9:79:a7:de:6c:28:1b:47:ba:e1:56:94:09:32: f6:d1:42:18:fa:84:df:68:ae:bb:b3:eb:f8:a8:e4:df:b5:12: 2b:0d:22:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKEIyRTg4RUREMzYxQkNDNjE5NEM5N0Y2OEM0NzI1MTgw RkYwMkY3MjQwHhcNMjUwNjE5MDUxNjMxWhcNMjUwNjI2MDUxNjMxWjAYMRYwFAYD VQQDEw02ODUzOWQzMC0xZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsitb3oXbsXXyM4VMpvvdW4hPhs8eQCCKcvrlyi6sgbc2bf6VLnSNctGZjlgY cvfcPPUBLSYmaJosTlF0UuS9oljlZ43OjwY6OjI7YpUhCggKLxorowNEGdrfDRvH anGbpm+wou0BDUBBp8NkEwAobx+WQjCG/xv3QbXyWg5P3HjB4oK86J6fHaOEOPxl RArL+WBnMqPey1QLWbjNIHI4jndpBtFX0A72pRdMhg4OdEs/LTJrtRGINoVJ7xTK Ri98iQS1W54jPByjZqT1KLOw3tM4+5oABUkT1H5uaY4SfXMNaSOYzBH+sUsQYn7a iPJJQzYHtEcUbMWDbiov9CEtIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlnaKIe 6zzSVaJphDfvVDf3nsAXMB8GA1UdIwQYMBaAFLLojt02G8xhlMl/aMRyUYD/Avck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9CRDg1OUY5NjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpHR1V5WDlveEhKUmdQOEM5 eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1aU8zVFliekdHVXlYOW94SEpSZ1A4Qzl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9CRDg1OUY5NjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpH R1V5WDlveEhKUmdQOEM5eVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQcqNmhXIBQo0jSor5MDvKUPAIveRoYavT+n6bgFbWJKQslg/EivQw d2lNTd+s6Y4JnpuqWDOy1yUuB+BnNkU9FYSSmomu/q262Z9dn/ji9rys9aw6aEXD BlurnWXONtWT/8dNMviuXGli+YsrN90zdp6qmtWjXmpkex3opXPk8ZZxTXIwvdr0 ivHwFpvz7nvkpWrqhsRi6vcnZTETQ5464lJc7ooV1sKWJKIUOQo9ZPd3vDjUc0Jo RoleReEJ9hg3UawMFCqnA1LDkbbTvMwST5UBifpLbqjAp6GF2Xmn3mwoG0e64VaU CTL20UIY+oTfaK67s+v4qOTftRIrDSLR -----END CERTIFICATE-----Generated at Fri Jun 20 04:00:55 2025 by rpki-client