$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: 7emevFe9hFUQq4sYyCiUNztTomJGcxJsZpH4AC+ksU0= Subject key identifier: D9:74:4A:B1:86:F7:95:5E:4F:11:AA:E5:F7:AF:0B:0F:D4:9B:89:8B Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 0510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 04F3 Signing time: Mon 15 Sep 2025 00:06:39 +0000 Manifest this update: Mon 15 Sep 2025 00:06:39 +0000 Manifest next update: Mon 22 Sep 2025 00:06:39 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: qm70M1UteniamPFeh1n525sp6sv6Od/XtWyOZXCIXL8=) 2: 1BEFBED451B911F097C15C49C4F9AE02.roa (hash: ZvucB2E7NeTigUiBDA7qRL8qFkVVJvyXSrzFIulP+x8=) 3: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: 00gQlkZJ/La3W11cygPUEyOgfEz6qTJK4E6QUbIb+4w=) 4: 1CC78D4651B911F097C15C49C4F9AE02.roa (hash: CBpPhJ6pPqhVc/HJrSFukBxQwV65YTwQkZm/veGYg0U=) 5: C32D1F4A13A011F09B8EF66AC4F9AE02.roa (hash: StmcDPPzK2yilWPNElLi3+ESljyQBtG5nEZLldO1WuA=) 6: 1D854DF451B911F097C15C49C4F9AE02.roa (hash: xaxaySmnWqQ+K7erniFCyus+l9/HXrQPK69GxtJF7qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 00:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1296 (0x510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Sep 15 00:06:39 2025 GMT Not After : Sep 22 00:06:39 2025 GMT Subject: CN=68c7588f-3db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:aa:c7:94:a4:6f:cc:aa:1e:51:ed:4d:0f: df:d6:b1:38:a1:24:a1:78:28:6d:bc:62:4d:8a:26: e3:d1:98:7c:d3:92:61:bc:96:f0:4e:e7:3b:99:6e: a8:45:25:7b:08:5d:02:44:64:26:27:7b:4b:5f:2e: 24:94:66:ff:de:41:27:fd:cb:1e:80:92:2c:1a:f6: 01:63:00:bb:1d:6a:d5:08:1c:aa:61:f6:87:00:69: ac:af:d0:e1:67:0c:c8:2c:61:42:19:21:52:0d:08: ec:bc:e1:58:db:39:85:71:ee:a3:25:99:2e:bf:c5: d7:6b:78:aa:3d:e3:fa:f5:09:97:19:5c:49:20:8a: cf:1c:28:63:b9:f2:b4:68:84:ba:ec:35:2b:cd:57: 60:19:b4:d3:94:ad:6d:40:ff:ec:c0:20:7b:73:8f: b7:07:4a:25:5c:56:5b:f9:3f:49:b9:ac:8c:c9:f5: bb:4b:18:0b:53:80:9e:44:b4:98:53:27:25:8d:d8: 99:b3:f5:da:8f:41:74:6d:2a:19:71:0e:18:67:17: 76:d8:e7:93:5a:45:2d:90:e2:5a:dd:6d:84:1d:af: 85:ff:2f:ac:ae:9a:4e:51:7e:9b:f8:2e:df:ae:61: 53:a2:42:2b:af:a0:2d:a2:81:b0:29:19:88:7a:37: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:74:4A:B1:86:F7:95:5E:4F:11:AA:E5:F7:AF:0B:0F:D4:9B:89:8B X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:77:bb:87:32:81:99:29:5d:f0:35:cc:31:0c:c9:1d:d8:87: b9:6c:96:70:78:94:a7:84:87:22:8b:f0:6b:2e:a6:76:ab:12: 2b:f8:16:02:e4:b3:ba:be:63:66:1e:e8:d3:49:44:fd:14:74: b2:5b:10:37:e8:67:ac:3c:33:f5:82:51:38:44:44:a3:40:bc: 79:1b:1e:7b:21:94:8b:d1:79:d4:63:b2:cc:9b:58:c4:e1:6a: 19:f0:fc:c7:fd:b7:62:65:4a:e7:d3:04:58:d0:34:91:21:29: 01:ae:17:9f:3a:e5:39:e7:f8:a5:6e:4c:d0:92:4b:91:a3:aa: b9:96:79:c7:3d:90:8e:2a:d8:be:77:09:74:87:75:27:ca:7b: 8b:55:8a:2c:fc:64:57:e5:dc:cf:c0:e6:2d:55:a4:79:de:33: 5d:8d:ea:15:e2:7b:47:68:f7:75:28:eb:da:5f:6d:48:0b:b1: e6:37:00:ae:a4:d9:8f:4a:1e:39:8f:25:b3:b7:20:f9:33:d3: 60:10:72:72:6d:09:ee:85:65:ee:fc:49:7d:b9:f0:09:b1:b5: 83:e8:18:bd:a7:e4:90:61:2b:39:a2:84:39:e6:8c:fb:ba:56: 96:8c:d8:be:82:ab:7c:5a:03:d7:f6:2f:3b:29:57:2e:ed:5f: 80:e3:ea:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUwOTE1MDAwNjM5WhcNMjUwOTIyMDAwNjM5WjAYMRYwFAYD VQQDEw02OGM3NTg4Zi0zZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9iqx5Skb8yqHlHtTQ/f1rE4oSSheChtvGJNiibj0Zh805JhvJbwTuc7mW6o RSV7CF0CRGQmJ3tLXy4klGb/3kEn/csegJIsGvYBYwC7HWrVCByqYfaHAGmsr9Dh ZwzILGFCGSFSDQjsvOFY2zmFce6jJZkuv8XXa3iqPeP69QmXGVxJIIrPHChjufK0 aIS67DUrzVdgGbTTlK1tQP/swCB7c4+3B0olXFZb+T9JuayMyfW7SxgLU4CeRLSY UycljdiZs/Xaj0F0bSoZcQ4YZxd22OeTWkUtkOJa3W2EHa+F/y+srppOUX6b+C7f rmFTokIrr6AtooGwKRmIejfd3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNl0SrGG 95VeTxGq5fevCw/Um4mLMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmd7uHMoGZKV3wNcwxDMkd2Ie5bJZweJSnhIcii/BrLqZ2qxIr+BYC 5LO6vmNmHujTSUT9FHSyWxA36GesPDP1glE4RESjQLx5Gx57IZSL0XnUY7LMm1jE 4WoZ8PzH/bdiZUrn0wRY0DSRISkBrhefOuU55/ilbkzQkkuRo6q5lnnHPZCOKti+ dwl0h3UnynuLVYos/GRX5dzPwOYtVaR53jNdjeoV4ntHaPd1KOvaX21IC7HmNwCu pNmPSh45jyWztyD5M9NgEHJybQnuhWXu/El9ufAJsbWD6Bi9p+SQYSs5ooQ55oz7 ulaWjNi+gqt8WgPX9i87KVcu7V+A4+oW -----END CERTIFICATE-----Generated at Mon Sep 15 13:50:55 2025 by rpki-client