$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json) Hash identifier: uWZURWLiSGutr0g6B4KDnjUD8XN/b9AkLTP2eBMDP2E= Subject key identifier: 9A:95:99:D0:9C:54:16:A6:26:77:D6:79:74:B7:B6:A6:E4:11:65:6B Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Certificate serial: 0868 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft Manifest number: 0860 Signing time: Wed 20 May 2026 20:47:51 +0000 Manifest this update: Wed 20 May 2026 20:47:51 +0000 Manifest next update: Wed 27 May 2026 20:47:51 +0000 Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: Yggo7L3nGAphhu3DBUF13wUi+7pwgcxvosU5m+QTCTg=) 2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: ttDGmX8Wz8ITP3sU4vGhTPNCup0+jAVIOIBp2YmhCbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Validity Not Before: May 20 20:47:51 2026 GMT Not After : May 27 20:47:51 2026 GMT Subject: CN=6a0e1df7-aecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:19:d5:e7:a4:6d:70:b6:c6:79:bd:d4:4f: 51:b5:6e:35:6b:90:89:b9:48:a3:e7:07:4f:d3:be: 4a:8f:e9:ad:7e:a9:b6:46:bf:c1:d7:76:4e:d1:66: 21:48:42:d0:89:34:24:e4:67:83:f6:c2:d1:64:c6: d7:aa:92:0e:ba:e5:17:85:b3:b4:4c:93:e5:ef:8d: f8:82:4e:96:17:7f:36:e7:e7:30:d3:be:c0:e7:75: 06:3e:30:40:7b:65:ee:07:44:b0:94:7f:37:50:b7: b3:94:cb:d1:b0:0e:94:66:ef:35:24:64:65:fa:0b: 5b:03:5e:16:cc:a0:03:c1:f5:aa:5c:49:0e:ec:39: 85:6a:60:93:38:3c:b4:39:92:42:37:b5:d0:03:4b: ef:4d:30:26:be:fd:a2:b3:dd:25:6b:c1:f9:6f:09: d3:ca:23:aa:d4:c3:74:89:75:23:d5:72:bf:89:bf: c6:8c:2b:61:5a:18:62:f6:73:ff:9c:b7:42:43:bf: d9:d5:36:20:d9:3c:7f:c4:84:17:75:8c:63:a8:15: 3a:2f:c1:99:ef:3a:73:07:af:fe:bd:a1:16:2f:5a: f7:01:2c:77:31:97:3c:b0:e4:23:8a:c5:0e:8f:c7: 89:a8:9f:ea:a3:1e:6c:73:30:07:dc:67:a2:72:30: 7a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:95:99:D0:9C:54:16:A6:26:77:D6:79:74:B7:B6:A6:E4:11:65:6B X509v3 Authority Key Identifier: keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:28:e3:cd:1e:3d:fa:6b:50:e3:48:76:bd:03:3e:a4:e5:9e: 08:96:48:31:d1:96:04:00:fb:e9:86:46:3b:1c:01:cd:1c:8a: 70:f4:4b:e1:b6:91:34:cf:50:68:f6:9f:83:44:07:4a:ed:55: 75:9c:1a:ec:b4:73:0d:92:8c:6a:4e:88:32:cd:55:a3:3b:64: e2:42:11:c1:4f:f5:a1:59:89:81:a4:d6:41:85:c4:36:93:56: c6:20:8c:59:38:f2:2d:4f:93:f1:af:0b:23:bf:cf:8e:13:69: 92:09:5f:25:96:d4:f4:d2:21:eb:62:2b:df:5a:c3:74:5f:07: cb:99:5e:c5:69:30:6b:67:96:05:70:39:67:56:98:ce:c7:ad: 35:64:5a:d8:d5:0b:ee:ad:31:b1:21:c3:15:82:5d:e9:82:b4: c1:31:2b:ab:49:ee:71:f4:40:ae:80:7c:27:62:fb:9f:46:5f: b3:b3:88:a8:66:69:b5:fc:28:0e:c6:69:7e:07:ad:80:53:ae: e6:24:d7:9a:52:2d:f7:61:17:01:c4:00:aa:7f:e1:d7:ad:ef: f6:4e:6f:e6:ed:02:c2:f4:98:06:fc:00:9d:ae:e0:31:0a:ad: 45:97:8a:a0:54:99:f6:9a:25:f5:70:15:66:70:b6:3e:9b:54: 2c:70:43:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz OEJFNTQwOUUwHhcNMjYwNTIwMjA0NzUxWhcNMjYwNTI3MjA0NzUxWjAYMRYwFAYD VQQDEw02YTBlMWRmNy1hZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/wZ1eekbXC2xnm91E9RtW41a5CJuUij5wdP075Kj+mtfqm2Rr/B13ZO0WYh SELQiTQk5GeD9sLRZMbXqpIOuuUXhbO0TJPl7434gk6WF3825+cw077A53UGPjBA e2XuB0SwlH83ULezlMvRsA6UZu81JGRl+gtbA14WzKADwfWqXEkO7DmFamCTODy0 OZJCN7XQA0vvTTAmvv2is90la8H5bwnTyiOq1MN0iXUj1XK/ib/GjCthWhhi9nP/ nLdCQ7/Z1TYg2Tx/xIQXdYxjqBU6L8GZ7zpzB6/+vaEWL1r3ASx3MZc8sOQjisUO j8eJqJ/qox5sczAH3GeicjB6nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqVmdCc VBamJnfWeXS3tqbkEWVrMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq d3pXelBFbUNwelk0dmxRSjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASijjzR49+mtQ40h2vQM+pOWeCJZIMdGWBAD76YZGOxwBzRyKcPRL4baRNM9Q aPafg0QHSu1VdZwa7LRzDZKMak6IMs1Voztk4kIRwU/1oVmJgaTWQYXENpNWxiCM WTjyLU+T8a8LI7/PjhNpkglfJZbU9NIh62Ir31rDdF8Hy5lexWkwa2eWBXA5Z1aY zsetNWRa2NUL7q0xsSHDFYJd6YK0wTErq0nucfRAroB8J2L7n0Zfs7OIqGZptfwo DsZpfgetgFOu5iTXmlIt92EXAcQAqn/h163v9k5v5u0CwvSYBvwAna7gMQqtRZeK oFSZ9pol9XAVZnC2PptULHBD/Q== -----END CERTIFICATE-----Generated at Thu May 21 09:39:15 2026 by rpki-client