$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json) Hash identifier: pHNF87SxaRuWOCE+fxMWlLsfO13TF6BSTtL7Q+sfAow= Subject key identifier: 54:05:F2:F2:36:28:0B:C3:04:98:BC:D4:D1:83:DA:CE:4A:AB:25:E5 Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft Manifest number: 07E0 Signing time: Thu 18 Sep 2025 21:20:36 +0000 Manifest this update: Thu 18 Sep 2025 21:20:35 +0000 Manifest next update: Thu 25 Sep 2025 21:20:35 +0000 Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: AZGU1xYGg9/FjrwewEEZkGpxULpIRkX5nvtBhxYA0NQ=) 2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: wrP/aiUubLvMy2sDZxNt1LMzFgR4k2obYAa+c5WHPY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Validity Not Before: Sep 18 21:20:35 2025 GMT Not After : Sep 25 21:20:35 2025 GMT Subject: CN=68cc77a4-0c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:aa:c0:31:65:19:51:9b:ca:f7:8d:4b:34: cb:b6:d4:d1:34:0c:93:8a:67:f8:4c:75:40:99:58: 3e:96:34:95:52:70:5f:22:4b:94:a8:92:d1:fe:df: a1:93:97:6f:22:30:8e:d1:99:72:72:d9:45:0d:88: 8b:c6:79:a2:ac:19:22:8e:e9:7a:05:be:57:de:44: 63:6c:56:95:82:c9:05:79:12:97:2a:22:38:1b:92: 95:47:c1:f8:5f:50:08:d2:7f:85:3a:97:f8:cd:98: e1:cc:0c:53:89:c9:2e:d9:af:5c:73:84:02:32:26: 7b:42:f0:fa:e3:da:30:c0:10:94:b1:26:3f:cf:4a: 2a:b4:d5:8a:40:df:54:4e:64:4a:10:29:58:42:99: f7:1d:06:76:ef:d7:f8:51:49:f2:2a:9b:2d:18:e3: c1:a9:1f:be:95:d7:4d:a5:8b:59:00:7d:4c:84:d7: 5f:da:cf:45:85:49:88:79:5c:bd:9e:3a:66:1f:2e: 97:a7:11:57:1f:00:d9:d0:ff:ba:d2:f5:43:98:f3: 5d:23:60:2c:d2:3a:67:83:36:44:2f:e8:10:dc:af: 6a:eb:ad:10:99:fb:b0:13:d5:ff:93:cb:1c:14:76: cc:7b:9a:87:6d:82:8e:18:73:1e:c0:20:f8:0c:5d: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:05:F2:F2:36:28:0B:C3:04:98:BC:D4:D1:83:DA:CE:4A:AB:25:E5 X509v3 Authority Key Identifier: keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:95:7d:2a:50:74:b6:e6:40:17:63:38:ce:43:c9:f8:45:c5: b3:32:19:b0:d8:e9:ab:19:91:f7:00:99:a1:82:33:ae:d1:e1: fe:5b:a8:e8:43:0b:d5:79:69:03:f3:9d:04:75:d6:5f:8e:d5: 55:e1:cd:85:b4:7d:b1:8a:4e:55:21:0b:a9:93:ef:14:55:81: 6a:a8:40:19:35:65:e8:67:18:6d:15:2a:3c:69:c7:0e:3d:c1: 95:2a:06:85:26:1c:b0:fa:fa:23:18:c5:3e:47:5d:a1:50:23: 12:6f:c8:d3:c5:16:75:74:d5:a1:c1:5c:41:30:c4:13:5e:31: a4:66:e1:1e:e3:3e:97:ae:41:1b:ed:0c:ca:79:0f:d6:62:10: e9:9b:8f:0f:d2:fd:f5:b7:93:2a:6e:d6:f7:c9:9a:c3:e8:f0: 36:93:d4:bc:2d:9d:d7:aa:02:f2:fd:fc:49:bd:8d:39:02:48: e6:81:bf:e3:8a:bc:37:80:ae:1c:74:80:05:2f:31:e7:4c:64: 79:55:33:c9:52:53:8e:c0:85:cc:33:b1:4e:54:28:14:a1:6e: e9:49:ac:f4:16:8a:08:a8:25:7c:0b:e1:08:66:40:43:3f:51: 48:a4:a2:4c:97:fa:35:44:65:ff:0a:c0:18:4c:01:d2:84:4c: 38:77:4e:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz OEJFNTQwOUUwHhcNMjUwOTE4MjEyMDM1WhcNMjUwOTI1MjEyMDM1WjAYMRYwFAYD VQQDEw02OGNjNzdhNC0wYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAKqwDFlGVGbyveNSzTLttTRNAyTimf4THVAmVg+ljSVUnBfIkuUqJLR/t+h k5dvIjCO0ZlyctlFDYiLxnmirBkijul6Bb5X3kRjbFaVgskFeRKXKiI4G5KVR8H4 X1AI0n+FOpf4zZjhzAxTicku2a9cc4QCMiZ7QvD649owwBCUsSY/z0oqtNWKQN9U TmRKEClYQpn3HQZ279f4UUnyKpstGOPBqR++lddNpYtZAH1MhNdf2s9FhUmIeVy9 njpmHy6XpxFXHwDZ0P+60vVDmPNdI2As0jpngzZEL+gQ3K9q660QmfuwE9X/k8sc FHbMe5qHbYKOGHMewCD4DF1ddwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQF8vI2 KAvDBJi81NGD2s5KqyXlMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq d3pXelBFbUNwelk0dmxRSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIlX0qUHS25kAXYzjOQ8n4RcWzMhmw2OmrGZH3AJmhgjOu0eH+W6jo QwvVeWkD850EddZfjtVV4c2FtH2xik5VIQupk+8UVYFqqEAZNWXoZxhtFSo8accO PcGVKgaFJhyw+vojGMU+R12hUCMSb8jTxRZ1dNWhwVxBMMQTXjGkZuEe4z6XrkEb 7QzKeQ/WYhDpm48P0v31t5Mqbtb3yZrD6PA2k9S8LZ3XqgLy/fxJvY05Akjmgb/j irw3gK4cdIAFLzHnTGR5VTPJUlOOwIXMM7FOVCgUoW7pSaz0FooIqCV8C+EIZkBD P1FIpKJMl/o1RGX/CsAYTAHShEw4d07C -----END CERTIFICATE-----Generated at Fri Sep 19 00:33:14 2025 by rpki-client