$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft File: sunaXrOJa-_A39Wn6zDbKTFLuhI.mft (raw, json) Hash identifier: VUNdPWN618uOIreKR5bam9aelSsp0GAbYx1WykE7t30= Subject key identifier: 69:57:52:5F:6F:AE:5F:01:45:01:EF:77:A4:3F:7A:A7:04:A2:22:12 Authority key identifier: B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 Certificate issuer: /CN=A91BA941/serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft Manifest number: 6B Signing time: Sun 01 Jun 2025 06:39:51 +0000 Manifest this update: Sun 01 Jun 2025 06:39:51 +0000 Manifest next update: Sun 08 Jun 2025 06:39:51 +0000 Files and hashes: 1: sunaXrOJa-_A39Wn6zDbKTFLuhI.crl (hash: oYZ4o91Zweoe5hqzli+Yq2mBvuOiiQgG/9cdaGQJT+4=) 2: 083E1314A0A111EF84620260C4F9AE02.roa (hash: 20U7R8Yje/fzXp5s/Ng4KAPvO8aTGVHHdc0Vt45hE8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=B2E9DA5EB3896BEFC0DFD5A7EB30DB29314BBA12 Validity Not Before: Jun 1 06:39:51 2025 GMT Not After : Jun 8 06:39:51 2025 GMT Subject: CN=683bf5b7-d69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:13:06:dc:b1:c0:e6:c1:1a:c4:d5:94:f0: d1:29:97:36:96:df:86:4e:6e:9a:55:7d:cb:de:ff: dd:8a:3d:2e:c8:18:28:29:c2:80:93:31:0d:45:75: 9c:a5:02:37:49:6a:33:1b:ee:d6:65:a5:9e:1a:5e: 8a:29:16:ec:26:43:55:da:c4:bb:c4:85:e5:89:66: 81:9d:af:2d:4d:80:27:07:c3:73:ed:78:9c:f5:7d: 2a:81:0a:ca:da:0f:85:2c:a6:ed:4a:15:c4:3f:95: fb:b3:94:a3:78:ff:fe:e1:49:7d:b9:34:bd:34:96: 85:97:a3:6b:8c:b9:18:25:6a:c5:46:de:8a:bf:71: 73:7d:2d:a2:ae:99:dd:9c:c1:22:35:87:0e:cc:c4: 95:ae:8c:17:d0:91:5d:f6:e1:81:46:98:cc:a7:08: a2:13:4f:48:cc:05:3b:7f:ef:6b:c4:31:c8:38:f1: c1:03:da:b0:71:bf:52:c8:01:9d:90:b4:8d:33:03: bb:51:8d:fa:25:59:41:77:df:07:45:4d:bd:b2:5b: f0:eb:ee:73:35:55:da:bd:dc:68:16:6f:48:05:ad: 1b:4f:9b:3d:fe:ac:b0:a9:5a:66:b1:8e:3a:3b:16: f5:f0:38:8f:ed:fa:fe:57:e0:61:48:07:2c:c2:5a: 79:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:57:52:5F:6F:AE:5F:01:45:01:EF:77:A4:3F:7A:A7:04:A2:22:12 X509v3 Authority Key Identifier: keyid:B2:E9:DA:5E:B3:89:6B:EF:C0:DF:D5:A7:EB:30:DB:29:31:4B:BA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sunaXrOJa-_A39Wn6zDbKTFLuhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/93ACAB64A0A011EF9052325FC4F9AE02/sunaXrOJa-_A39Wn6zDbKTFLuhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:0c:61:17:f6:1e:be:24:7b:51:e4:86:5c:a8:7f:7a:09:e1: 39:b3:1a:87:e5:17:13:ef:f0:04:6c:6c:1f:6c:72:da:f4:04: d6:46:92:fc:6d:9f:c1:21:9f:27:97:e5:ad:7d:93:f1:81:a6: 80:ad:8e:41:ed:58:f6:e4:d7:8e:50:3a:58:4e:96:8c:14:53: e3:cc:64:b9:a1:a0:bd:75:02:27:cb:aa:29:90:19:75:39:0f: 3c:91:fb:5b:02:64:9a:d8:91:5a:38:76:a4:12:ff:11:40:5c: b1:0c:de:bd:62:d7:6a:7e:de:d1:27:e6:aa:03:72:a6:b1:21: bc:27:fa:7d:99:e3:2f:0d:10:82:ef:e1:76:99:65:0e:c6:b1: b9:0f:9c:0e:84:17:fb:4b:db:4e:b4:a3:46:36:96:80:5b:0e: 2d:e4:33:bb:c9:e1:1b:ca:75:4f:22:ec:d3:49:49:92:e2:55: b1:79:cd:c5:62:bc:f4:63:4a:84:64:25:6d:f9:ed:b5:15:4f: 6e:95:fc:dc:f3:82:d0:7a:84:8e:2b:69:95:b8:e8:8f:e0:74: f2:b0:6a:ec:cc:9a:46:08:cd:69:71:b5:27:f6:cb:d5:cb:94: 22:4f:ca:ee:8a:1b:a6:6f:a7:da:6e:92:1d:6e:d4:56:da:c4: 43:92:e2:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTk0MTExMC8GA1UEBRMoQjJFOURBNUVCMzg5NkJFRkMwREZENUE3RUIzMERCMjkz MTRCQkExMjAeFw0yNTA2MDEwNjM5NTFaFw0yNTA2MDgwNjM5NTFaMBgxFjAUBgNV BAMTDTY4M2JmNWI3LWQ2OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC90hMG3LHA5sEaxNWU8NEplzaW34ZObppVfcve/92KPS7IGCgpwoCTMQ1FdZyl AjdJajMb7tZlpZ4aXoopFuwmQ1XaxLvEheWJZoGdry1NgCcHw3PteJz1fSqBCsra D4Uspu1KFcQ/lfuzlKN4//7hSX25NL00loWXo2uMuRglasVG3oq/cXN9LaKumd2c wSI1hw7MxJWujBfQkV324YFGmMynCKITT0jMBTt/72vEMcg48cED2rBxv1LIAZ2Q tI0zA7tRjfolWUF33wdFTb2yW/Dr7nM1Vdq93GgWb0gFrRtPmz3+rLCpWmaxjjo7 FvXwOI/t+v5X4GFIByzCWnnbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaVdSX2+u XwFFAe93pD96pwSiIhIwHwYDVR0jBBgwFoAUsunaXrOJa+/A39Wn6zDbKTFLuhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBOTQxLzkzQUNBQjY0QTBB MDExRUY5MDUyMzI1RkM0RjlBRTAyL3N1bmFYck9KYS1fQTM5V242ekRiS1RGTHVo SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc3VuYVhyT0phLV9BMzlXbjZ6RGJLVEZMdWhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB OTQxLzkzQUNBQjY0QTBBMDExRUY5MDUyMzI1RkM0RjlBRTAyL3N1bmFYck9KYS1f QTM5V242ekRiS1RGTHVoSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGMMYRf2Hr4ke1Hkhlyof3oJ4TmzGoflFxPv8ARsbB9sctr0BNZGkvxt n8EhnyeX5a19k/GBpoCtjkHtWPbk145QOlhOlowUU+PMZLmhoL11AifLqimQGXU5 DzyR+1sCZJrYkVo4dqQS/xFAXLEM3r1i12p+3tEn5qoDcqaxIbwn+n2Z4y8NEILv 4XaZZQ7GsbkPnA6EF/tL2060o0Y2loBbDi3kM7vJ4RvKdU8i7NNJSZLiVbF5zcVi vPRjSoRkJW357bUVT26V/NzzgtB6hI4raZW46I/gdPKwauzMmkYIzWlxtSf2y9XL lCJPyu6KG6Zvp9pukh1u1FbaxEOS4i4= -----END CERTIFICATE-----Generated at Mon Jun 2 20:56:50 2025 by rpki-client