$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json) Hash identifier: voeIJE0H6BiuFF+Gx8zN8ZS9aMs4NT9wusA7vdJsQgM= Subject key identifier: 2B:D2:9A:A4:B7:55:DD:C2:03:62:65:B9:D3:18:1C:FD:7D:67:89:51 Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft Manifest number: 07C1 Signing time: Sun 20 Jul 2025 21:16:42 +0000 Manifest this update: Sun 20 Jul 2025 21:16:41 +0000 Manifest next update: Sun 27 Jul 2025 21:16:41 +0000 Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: PwPTdteQfCBQmelV7Y+JQOHAy5SLeXTUA1UhVdlIQaI=) 2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: wrP/aiUubLvMy2sDZxNt1LMzFgR4k2obYAa+c5WHPY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Validity Not Before: Jul 20 21:16:41 2025 GMT Not After : Jul 27 21:16:41 2025 GMT Subject: CN=687d5cba-abd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e2:0a:ef:47:0a:ed:dd:67:bd:b8:8d:83:dd: 56:f0:cf:2c:90:c4:01:a5:22:c6:5e:ca:68:fb:e7: 20:a8:92:a0:3c:89:74:a5:a1:d7:a0:d3:b2:f4:e3: e6:1c:08:0a:32:cb:8f:ff:c0:ac:13:6c:b8:16:a5: e6:ba:13:82:94:3e:4a:57:fb:0c:09:35:fd:08:80: d4:96:49:f2:51:ad:f8:82:56:cc:c2:39:25:0d:76: 0d:db:ae:d6:40:c1:e6:38:86:a3:8a:c0:cf:b5:cf: ee:e5:71:bb:8c:19:75:ae:28:a2:2a:7e:a1:6f:06: 56:fe:f3:65:cf:f0:7c:e1:13:ab:0f:cc:ec:a1:69: 02:0f:5d:aa:ab:99:2a:4c:11:aa:1a:d8:1f:77:cb: f5:fe:fa:27:f8:23:76:89:69:c4:0b:47:53:c9:b7: 54:64:d8:8d:ce:35:f5:e0:ec:41:75:ba:41:2a:27: 70:85:2f:24:24:9a:c6:98:31:9b:4c:a6:70:f6:3c: e1:f8:34:08:63:4d:17:27:3b:f7:20:60:e8:82:81: 78:9c:7b:e8:54:42:82:cd:25:5f:07:bd:c0:20:13: b2:de:53:00:b4:6f:80:92:4a:79:aa:86:7c:ec:18: 3c:7d:07:cd:3a:71:b4:39:97:f5:60:36:56:8b:5b: f0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D2:9A:A4:B7:55:DD:C2:03:62:65:B9:D3:18:1C:FD:7D:67:89:51 X509v3 Authority Key Identifier: keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c6:41:20:9a:b3:78:9a:8f:a1:98:34:51:de:11:41:69:08: a6:4d:f9:a3:0e:b1:ef:c2:24:b9:26:9b:db:d6:fe:e0:6a:0c: 33:37:ba:ce:25:bc:ab:46:ab:ab:43:91:80:d8:7a:44:72:89: 33:40:33:40:d8:d2:42:03:47:7e:3b:de:5f:e2:db:c8:cd:9e: 7e:bb:4f:50:e0:71:20:1d:fc:7a:78:0a:92:03:a7:12:c9:62: b8:6d:b5:9b:12:05:b6:c9:f9:3c:73:03:58:cb:a0:47:7b:02: a1:75:79:04:1a:a1:61:a1:fa:d4:cf:45:bb:3c:74:28:92:6c: 94:ca:6f:86:dc:9b:0f:a7:72:02:bc:05:b1:06:7b:6f:04:63: b7:bd:99:c6:69:c9:7b:c5:16:fb:7d:c5:36:b6:96:6a:d0:c1: 0f:af:75:59:c9:9e:2a:6b:f1:9a:9f:41:0c:43:42:60:b2:c6: 47:47:ae:61:a7:0f:5c:51:10:69:da:5e:de:8f:f2:b2:8f:bf: 36:6c:f3:3e:d5:49:88:1d:a0:9b:71:70:5d:8a:c0:0b:e6:8d: 66:a7:28:58:a2:8a:1d:6c:74:26:c4:eb:12:e7:c3:c8:fe:f3: 9f:ff:e3:d9:43:79:27:e0:c0:27:7c:62:0f:87:81:9c:51:03: 4d:e2:ff:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz OEJFNTQwOUUwHhcNMjUwNzIwMjExNjQxWhcNMjUwNzI3MjExNjQxWjAYMRYwFAYD VQQDEw02ODdkNWNiYS1hYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OIK70cK7d1nvbiNg91W8M8skMQBpSLGXspo++cgqJKgPIl0paHXoNOy9OPm HAgKMsuP/8CsE2y4FqXmuhOClD5KV/sMCTX9CIDUlknyUa34glbMwjklDXYN267W QMHmOIajisDPtc/u5XG7jBl1riiiKn6hbwZW/vNlz/B84ROrD8zsoWkCD12qq5kq TBGqGtgfd8v1/von+CN2iWnEC0dTybdUZNiNzjX14OxBdbpBKidwhS8kJJrGmDGb TKZw9jzh+DQIY00XJzv3IGDogoF4nHvoVEKCzSVfB73AIBOy3lMAtG+Akkp5qoZ8 7Bg8fQfNOnG0OZf1YDZWi1vwswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvSmqS3 Vd3CA2JludMYHP19Z4lRMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq d3pXelBFbUNwelk0dmxRSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDxkEgmrN4mo+hmDRR3hFBaQimTfmjDrHvwiS5Jpvb1v7gagwzN7rO JbyrRqurQ5GA2HpEcokzQDNA2NJCA0d+O95f4tvIzZ5+u09Q4HEgHfx6eAqSA6cS yWK4bbWbEgW2yfk8cwNYy6BHewKhdXkEGqFhofrUz0W7PHQokmyUym+G3JsPp3IC vAWxBntvBGO3vZnGacl7xRb7fcU2tpZq0MEPr3VZyZ4qa/Gan0EMQ0JgssZHR65h pw9cURBp2l7ej/Kyj782bPM+1UmIHaCbcXBdisAL5o1mpyhYooodbHQmxOsS58PI /vOf/+PZQ3kn4MAnfGIPh4GcUQNN4v9O -----END CERTIFICATE-----Generated at Mon Jul 21 12:46:07 2025 by rpki-client