$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: qAWq69DzXKz4tnBzaVari3D0hcSE9OT0ePPCDWEB2nk= Subject key identifier: 73:76:C5:CF:25:90:D5:0E:76:50:42:B9:23:F7:7E:CE:C9:55:CE:DE Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 35DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 355A Signing time: Thu 24 Jul 2025 14:23:27 +0000 Manifest this update: Thu 24 Jul 2025 14:23:26 +0000 Manifest next update: Thu 31 Jul 2025 14:23:26 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: PgpEBTwSG7mEVpaHg+0URiotUTaS/z6DnAsRXwSiHrQ=) 2: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: K1247atG6VcquFBVwBls5U4Yo0bOwGwF2rk8wL92RbY=) 3: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: agkjmUvruNWx97AQQ1tqZMJkgxJIavfnk0MQ7A0ZaCQ=) 4: 1A938A72619D11F0B4D0AB3BC4F9AE02.roa (hash: MNI6wSEESEbHrkvuX9WUxP9QninqH4z0ey0y6anlGpE=) 5: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: rAOd8xVKvANxmyBwOeyZF3qLA857c4wVbRSif1s6BJM=) 6: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: XHgWXPYofK0UqDGJyFt5vqak/B9drtR7oomIl0a3mgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 14:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13788 (0x35dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: Jul 24 14:23:26 2025 GMT Not After : Jul 31 14:23:26 2025 GMT Subject: CN=688241de-4cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:e2:3a:0a:e4:55:81:42:0e:3f:53:71:09: c2:e9:46:83:18:1c:ac:d4:1b:e9:e3:43:b3:c5:a0: f9:f6:53:44:7a:f2:fa:d7:b5:0e:f7:3f:9a:32:81: 3a:8e:99:28:96:f9:5d:ec:34:6e:50:40:dc:6e:a6: 16:67:91:5d:93:64:f5:b5:41:99:04:5a:68:ed:4e: f9:1b:0e:2a:7a:3b:60:35:f2:32:4c:c7:09:1f:78: 6b:b6:db:66:66:26:9c:96:a9:57:26:16:36:03:41: 99:11:3a:fc:02:ba:41:79:d7:57:e5:57:98:ce:1c: e4:b1:b2:97:10:ca:94:c5:dc:21:ac:9d:3e:54:3e: 97:45:6f:ae:32:ca:df:15:6b:15:44:05:6a:c0:10: bb:cf:e8:a5:90:6d:49:de:f5:6f:67:b5:f9:a8:7a: 69:55:af:ea:2f:bf:3b:48:80:0b:a1:57:a2:27:8c: fa:21:95:eb:17:60:33:ca:d4:b2:9e:e9:12:f5:b5: 5c:0c:05:53:fd:1f:75:4d:d8:39:2a:cc:5c:13:75: c5:cd:aa:fd:63:ce:c8:98:94:3b:71:13:1b:2c:e9: 17:4e:54:db:f1:3c:24:5a:02:99:67:68:0a:42:95: df:69:9d:19:3a:ab:17:fa:b2:5d:41:7b:02:62:07: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:76:C5:CF:25:90:D5:0E:76:50:42:B9:23:F7:7E:CE:C9:55:CE:DE X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:8f:ee:99:48:20:c2:1d:eb:38:f6:94:00:78:12:3b:a8:f0: ba:97:2a:2c:08:bf:51:53:f8:51:3e:7e:41:cf:7c:52:65:61: 19:d5:81:0b:55:c8:3d:93:35:e6:71:7b:32:dd:48:b5:44:f3: c5:6c:99:21:b9:4a:4a:4c:58:ad:c3:52:71:5b:3b:1d:5e:4e: 06:55:d6:1b:ab:4f:5f:e2:6b:3a:0a:4b:02:79:5d:7a:3a:fa: c4:f8:5d:62:cf:3e:07:23:fe:46:51:2b:cd:f0:59:a6:76:f8: c1:57:46:25:e9:bf:92:01:4b:05:ae:99:23:89:d5:63:af:5d: ce:7d:a8:60:01:6b:2d:80:78:dd:ff:96:80:ce:a1:8f:61:95: 48:86:51:f9:d0:10:a6:ab:eb:01:ba:c6:a9:69:04:ab:74:b6: 5a:70:96:ca:a7:8e:d3:91:1e:9e:58:30:2e:28:0a:f8:ad:dc: c7:ec:11:5e:72:bc:b5:3a:c3:2b:18:3d:ef:10:f4:d2:0b:b0: ab:91:c0:67:03:7d:23:04:ac:dd:e4:88:ab:24:20:69:88:97: 6b:b8:d9:70:23:63:d3:51:02:b5:ed:e4:e1:48:90:53:f5:65: c2:d9:d7:0f:f8:5b:c8:be:33:29:f7:90:54:43:65:11:b1:63: 8d:9c:9d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjUwNzI0MTQyMzI2WhcNMjUwNzMxMTQyMzI2WjAYMRYwFAYD VQQDEw02ODgyNDFkZS00Y2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuufiOgrkVYFCDj9TcQnC6UaDGBys1Bvp40OzxaD59lNEevL617UO9z+aMoE6 jpkolvld7DRuUEDcbqYWZ5Fdk2T1tUGZBFpo7U75Gw4qejtgNfIyTMcJH3hrtttm ZiaclqlXJhY2A0GZETr8ArpBeddX5VeYzhzksbKXEMqUxdwhrJ0+VD6XRW+uMsrf FWsVRAVqwBC7z+ilkG1J3vVvZ7X5qHppVa/qL787SIALoVeiJ4z6IZXrF2AzytSy nukS9bVcDAVT/R91Tdg5KsxcE3XFzar9Y87ImJQ7cRMbLOkXTlTb8TwkWgKZZ2gK QpXfaZ0ZOqsX+rJdQXsCYgdeOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHN2xc8l kNUOdlBCuSP3fs7JVc7eMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATj+6ZSCDCHes49pQAeBI7qPC6lyosCL9RU/hRPn5Bz3xSZWEZ1YEL Vcg9kzXmcXsy3Ui1RPPFbJkhuUpKTFitw1JxWzsdXk4GVdYbq09f4ms6CksCeV16 OvrE+F1izz4HI/5GUSvN8FmmdvjBV0Yl6b+SAUsFrpkjidVjr13OfahgAWstgHjd /5aAzqGPYZVIhlH50BCmq+sBusapaQSrdLZacJbKp47TkR6eWDAuKAr4rdzH7BFe cry1OsMrGD3vEPTSC7CrkcBnA30jBKzd5IirJCBpiJdruNlwI2PTUQK17eThSJBT 9WXC2dcP+FvIvjMp95BUQ2URsWONnJ1Q -----END CERTIFICATE-----Generated at Thu Jul 24 22:59:41 2025 by rpki-client