$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json) Hash identifier: Ntb6EEjnYHvqfj4BOf/Lywnx6ieMs55XKjeLgZjLRn8= Subject key identifier: 67:1C:C6:EB:7A:81:38:D0:1E:8B:CD:CE:C4:70:66:D1:A7:5D:CC:6F Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft Manifest number: 9E Signing time: Fri 05 Sep 2025 06:48:12 +0000 Manifest this update: Fri 05 Sep 2025 06:48:12 +0000 Manifest next update: Fri 12 Sep 2025 06:48:12 +0000 Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: XeoX5stU4Nd1iy2UBwS2W/nwtg3eA1T/RaafQU6iQwQ=) 2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: Yj2V8/6jOgitXcRoNNna3W/sKqY/mfOcuez+bXMF3yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Validity Not Before: Sep 5 06:48:12 2025 GMT Not After : Sep 12 06:48:12 2025 GMT Subject: CN=68ba87ac-b664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:ba:77:2e:48:53:cf:7f:0a:dd:ba:1b:9e: ee:09:54:ae:f2:f1:e8:2b:9b:71:7e:6d:8b:43:dc: 0e:de:e7:d5:6c:4e:d6:5c:c6:61:b7:c4:a8:79:1b: d8:a6:c4:80:2e:5f:37:81:24:10:bb:76:b6:8b:91: bc:84:12:d4:4e:27:d6:60:bc:37:d1:93:01:10:87: 02:d2:9a:bb:96:26:b7:ee:74:85:22:b8:e3:a6:8c: 93:3d:17:1f:44:66:9f:5e:21:31:3e:47:27:86:f7: b1:a0:6d:34:1d:81:ec:2b:8d:f5:cc:d5:f4:a2:95: 0c:5f:ed:42:5b:90:04:0c:02:d3:05:fc:65:67:38: d2:d4:3c:b0:29:9e:3e:f2:d5:3d:f5:6e:0b:d8:4b: 06:54:3e:50:f2:9e:68:e6:b4:fa:5b:45:4e:28:16: 01:d9:89:7b:8f:d4:0a:96:72:4d:3c:63:85:4c:6d: 7b:80:d5:1f:68:ec:2c:cc:37:d3:7c:92:2a:2c:57: 86:80:c6:ff:be:88:4d:03:54:cc:67:c3:04:c1:6f: f3:34:db:7c:fd:9f:03:e7:04:68:46:23:7b:bd:b0: 82:3a:06:56:15:c3:cf:31:79:22:b4:70:9a:e5:d0: 0c:54:c1:c2:3c:f2:4d:49:94:c6:4c:fb:f1:d0:f4: d0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1C:C6:EB:7A:81:38:D0:1E:8B:CD:CE:C4:70:66:D1:A7:5D:CC:6F X509v3 Authority Key Identifier: keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:05:44:08:33:1c:38:44:90:7e:90:f1:79:c1:66:77:55:6e: a3:71:af:66:d0:e5:69:00:07:bd:6b:41:b9:20:97:87:85:79: ca:76:3c:f5:89:71:45:61:b7:eb:ca:7c:fc:19:5e:c5:bf:35: 4a:20:74:8b:8d:8e:b3:3f:21:cc:84:7e:26:e6:c8:a6:3d:55: 2a:c0:7f:80:18:ff:4b:b6:af:4f:fb:b8:b3:87:07:a5:fe:56: 55:dc:7f:61:48:95:6b:c0:44:82:c0:b4:20:16:fe:5c:e4:bf: e2:17:54:c4:32:91:8b:09:24:79:32:4b:ae:ed:5c:a8:7e:a3: 37:65:db:c9:61:21:b4:7f:a0:49:e2:4a:b6:7d:59:e3:2b:8e: 9b:28:7d:7c:d5:db:65:8a:c5:83:40:fc:2b:25:79:fe:60:03: f1:25:a3:e5:4c:f4:73:cd:5a:cd:a5:99:76:ef:0f:6e:84:2f: 2d:60:5e:5d:f4:c5:a1:1e:ce:5b:60:d3:b0:64:1b:d6:d0:14: 3d:2d:a0:3d:6e:97:84:4f:98:a7:b3:a4:1f:f0:10:36:6a:dd: 08:6c:9b:9d:63:f1:e4:69:8d:cd:7a:f1:bc:85:3c:d1:e9:8f: 91:37:12:e1:99:13:ee:4e:32:76:98:f6:fe:da:1d:fc:16:2e: 69:78:32:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5NDExMTAvBgNVBAUTKEIyRTlEQTVFQjM4OTZCRUZDMERGRDVBN0VCMzBEQjI5 MzE0QkJBMTIwHhcNMjUwOTA1MDY0ODEyWhcNMjUwOTEyMDY0ODEyWjAYMRYwFAYD VQQDEw02OGJhODdhYy1iNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuam6dy5IU89/Ct26G57uCVSu8vHoK5txfm2LQ9wO3ufVbE7WXMZht8SoeRvY psSALl83gSQQu3a2i5G8hBLUTifWYLw30ZMBEIcC0pq7lia37nSFIrjjpoyTPRcf RGafXiExPkcnhvexoG00HYHsK431zNX0opUMX+1CW5AEDALTBfxlZzjS1DywKZ4+ 8tU99W4L2EsGVD5Q8p5o5rT6W0VOKBYB2Yl7j9QKlnJNPGOFTG17gNUfaOwszDfT fJIqLFeGgMb/vohNA1TMZ8MEwW/zNNt8/Z8D5wRoRiN7vbCCOgZWFcPPMXkitHCa 5dAMVMHCPPJNSZTGTPvx0PTQ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGccxut6 gTjQHovNzsRwZtGnXcxvMB8GA1UdIwQYMBaAFLLp2l6ziWvvwN/Vp+sw2ykxS7oS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85M0FDQUI2NEEw QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9zdW5hWHJPSmEtX0EzOVduNnpEYktURkx1 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1bmFYck9KYS1fQTM5V242ekRiS1RGTHVoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTk0MS85M0FDQUI2NEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9zdW5hWHJPSmEt X0EzOVduNnpEYktURkx1aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPBUQIMxw4RJB+kPF5wWZ3VW6jca9m0OVpAAe9a0G5IJeHhXnKdjz1 iXFFYbfrynz8GV7FvzVKIHSLjY6zPyHMhH4m5simPVUqwH+AGP9Ltq9P+7izhwel /lZV3H9hSJVrwESCwLQgFv5c5L/iF1TEMpGLCSR5Mkuu7VyofqM3ZdvJYSG0f6BJ 4kq2fVnjK46bKH181dtlisWDQPwrJXn+YAPxJaPlTPRzzVrNpZl27w9uhC8tYF5d 9MWhHs5bYNOwZBvW0BQ9LaA9bpeET5ins6Qf8BA2at0IbJudY/HkaY3NevG8hTzR 6Y+RNxLhmRPuTjJ2mPb+2h38Fi5peDLM -----END CERTIFICATE-----Generated at Sat Sep 6 15:17:31 2025 by rpki-client