$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft File: suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json) Hash identifier: 3X58qWwr1ZPRZVAgfhHpG8HZPST1oYuAKOt2iRleTWI= Subject key identifier: 5E:79:4A:D8:9C:EB:1E:1D:DA:E1:BA:AA:C2:ED:88:49:A8:AC:54:E2 Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft Manifest number: C6 Signing time: Sat 19 Jul 2025 05:56:53 +0000 Manifest this update: Sat 19 Jul 2025 05:56:53 +0000 Manifest next update: Sat 26 Jul 2025 05:56:53 +0000 Files and hashes: 1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: tcBHG1PPH3oJ/uvlT0u2CnTQNx2Ke+rkLZSSpYFvb1I=) 2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: lY5HgP2b+DiZvOALHw+tr2ZxBjEGaK357GqXMmb0Brk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Validity Not Before: Jul 19 05:56:53 2025 GMT Not After : Jul 26 05:56:53 2025 GMT Subject: CN=687b33a5-8630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f4:25:d4:ba:85:8a:79:9e:c6:57:e5:6e:4d: 24:48:0c:43:15:05:b8:c2:ed:3a:90:64:7d:ab:17: ab:0a:ab:18:84:25:67:85:ab:f8:b8:d6:b6:f3:8c: 96:5c:33:4e:00:9e:e8:a3:46:a1:02:d1:96:dd:5c: 2b:05:da:07:20:f5:2f:fc:72:4d:1c:d7:0e:f2:de: 79:ae:3a:81:ab:a3:74:18:51:74:97:48:5a:76:27: cc:02:16:f2:38:ec:63:fc:8d:15:a5:ca:36:86:8f: ed:3e:dc:ad:64:3f:6e:8c:e8:1f:2e:1a:9b:eb:7b: ef:05:e9:8b:60:7e:2b:81:49:ed:d0:a8:fa:0e:bc: 4c:8f:0f:07:47:61:99:91:fa:63:4c:2d:06:47:79: 87:f2:6c:7c:86:23:0c:da:4c:14:9f:c1:11:9b:8c: fb:f6:b1:d2:17:e3:cd:43:52:46:6f:65:97:44:e6: 9f:71:9e:df:97:47:99:52:d4:0e:40:2d:53:2b:85: bc:53:f9:cd:55:05:95:ce:d5:82:bd:de:f9:a1:1c: 27:62:fc:11:5c:37:b5:fd:5f:2b:78:5c:95:8f:3d: 16:57:15:8d:0c:ac:f3:d9:72:8d:af:73:33:83:3c: 9a:a8:ea:4e:d2:dc:0e:23:27:61:3e:2e:10:67:cf: 83:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:79:4A:D8:9C:EB:1E:1D:DA:E1:BA:AA:C2:ED:88:49:A8:AC:54:E2 X509v3 Authority Key Identifier: keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:34:b2:f2:4b:b1:b3:be:39:b6:b7:18:17:6e:f7:a8:a5:6c: 46:cb:7a:6c:31:0d:31:88:d9:b0:07:d7:0c:59:1d:6c:18:ee: 2d:6d:50:20:d4:f2:45:c2:d1:49:f9:78:47:5c:39:7e:07:ea: e0:cd:cc:d6:b3:f7:16:15:a2:f8:42:07:57:c1:38:81:80:9b: ba:72:80:54:fe:db:0a:06:22:6c:3f:ba:bf:ac:79:59:29:5d: 16:e4:98:9e:03:fe:aa:e0:23:5f:70:b0:37:8f:72:f5:7c:a0: 08:30:56:ad:db:69:88:80:39:f2:2a:a1:f7:ac:25:88:e7:0d: 68:c6:c5:ff:6d:1d:5f:35:8d:c3:18:29:e9:7e:c7:d2:40:21: ba:a3:13:7f:58:7a:bd:de:9e:75:45:8e:82:f2:0d:d8:4e:67: cb:09:0b:59:d0:9f:16:14:63:7d:71:39:33:4a:ec:4a:05:44: 08:45:f4:44:c9:14:03:31:43:d0:89:6e:39:3d:72:78:63:e5: 5e:0a:0b:c1:d8:7e:da:ca:5d:65:88:03:65:32:f7:34:32:f6: 3f:42:ac:12:6d:94:5d:ad:33:46:c7:ba:ae:80:11:1b:07:d7: 1a:41:3c:82:15:4b:d4:e9:d2:cc:c5:28:3d:ff:06:fb:10:72: 2c:03:f4:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKEIyRTg4RUREMzYxQkNDNjE5NEM5N0Y2OEM0NzI1MTgw RkYwMkY3MjQwHhcNMjUwNzE5MDU1NjUzWhcNMjUwNzI2MDU1NjUzWjAYMRYwFAYD VQQDEw02ODdiMzNhNS04NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPQl1LqFinmexlflbk0kSAxDFQW4wu06kGR9qxerCqsYhCVnhav4uNa284yW XDNOAJ7oo0ahAtGW3VwrBdoHIPUv/HJNHNcO8t55rjqBq6N0GFF0l0hadifMAhby OOxj/I0Vpco2ho/tPtytZD9ujOgfLhqb63vvBemLYH4rgUnt0Kj6DrxMjw8HR2GZ kfpjTC0GR3mH8mx8hiMM2kwUn8ERm4z79rHSF+PNQ1JGb2WXROafcZ7fl0eZUtQO QC1TK4W8U/nNVQWVztWCvd75oRwnYvwRXDe1/V8reFyVjz0WVxWNDKzz2XKNr3Mz gzyaqOpO0twOIydhPi4QZ8+D4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF55Stic 6x4d2uG6qsLtiEmorFTiMB8GA1UdIwQYMBaAFLLojt02G8xhlMl/aMRyUYD/Avck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9CRDg1OUY5NjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpHR1V5WDlveEhKUmdQOEM5 eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1aU8zVFliekdHVXlYOW94SEpSZ1A4Qzl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9CRDg1OUY5NjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpH R1V5WDlveEhKUmdQOEM5eVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDNLLyS7Gzvjm2txgXbveopWxGy3psMQ0xiNmwB9cMWR1sGO4tbVAg 1PJFwtFJ+XhHXDl+B+rgzczWs/cWFaL4QgdXwTiBgJu6coBU/tsKBiJsP7q/rHlZ KV0W5JieA/6q4CNfcLA3j3L1fKAIMFat22mIgDnyKqH3rCWI5w1oxsX/bR1fNY3D GCnpfsfSQCG6oxN/WHq93p51RY6C8g3YTmfLCQtZ0J8WFGN9cTkzSuxKBUQIRfRE yRQDMUPQiW45PXJ4Y+VeCgvB2H7ayl1liANlMvc0MvY/QqwSbZRdrTNGx7qugBEb B9caQTyCFUvU6dLMxSg9/wb7EHIsA/Q+ -----END CERTIFICATE-----Generated at Sun Jul 20 11:26:33 2025 by rpki-client