$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json) Hash identifier: /O7SvZ0lsoxnrtmHomXQXJ4iRL5HpLc9TnNpTgbJfp4= Subject key identifier: C7:D5:91:92:7D:E5:EF:F2:FF:98:AC:3F:33:15:AB:8E:4B:B6:E0:40 Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Certificate serial: 1192 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft Manifest number: 1188 Signing time: Fri 18 Jul 2025 14:47:54 +0000 Manifest this update: Fri 18 Jul 2025 14:47:53 +0000 Manifest next update: Fri 25 Jul 2025 14:47:53 +0000 Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: x02u422i0yPuyw0ulYVGheym4+pllbJLFEV4R1C2eZw=) 2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: XN60w0eRqVpxeIfX7b6c8hnme3sk6Z9ebx38NO7BFYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4498 (0x1192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Validity Not Before: Jul 18 14:47:53 2025 GMT Not After : Jul 25 14:47:53 2025 GMT Subject: CN=687a5e9a-95c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:5b:3f:be:b4:34:9c:26:8f:ec:fe:b1:34: c0:0c:86:05:96:f7:6c:07:a9:19:16:c4:55:f3:b9: e1:5e:4e:a3:99:87:ad:37:40:7e:fa:26:a2:3b:40: 5b:bb:d1:e7:72:e8:8e:0b:ef:c2:ce:9f:6e:a4:fb: bc:40:b9:1c:97:ec:76:fc:ab:83:84:33:53:84:d9: 1f:41:ca:18:87:60:72:25:74:a7:b3:7c:bd:89:db: 00:9a:3e:c8:1d:ea:e8:70:79:07:c7:33:96:bf:fd: a3:a0:cb:31:1d:d0:ff:61:33:88:f3:7a:20:9e:3f: d9:3e:b4:49:fe:00:0b:c2:5f:72:f5:76:d2:38:19: de:ba:ab:9e:89:1a:fe:21:e7:a8:b4:19:95:6f:b3: 48:30:55:d2:41:55:35:af:6c:a2:dd:c7:6d:d3:f0: c6:08:24:97:cd:9c:ef:ef:cd:db:3e:9c:bd:57:5b: 89:62:87:22:fa:83:13:af:36:a1:c9:33:bd:dd:46: a7:45:4a:13:8d:9c:2b:32:fd:ef:95:b5:b7:90:d5: d7:89:da:ae:ec:63:22:33:0d:da:5e:d3:f5:73:ef: a1:5e:ff:3f:cc:6f:76:47:20:b9:13:db:5e:d0:38: 16:b5:66:63:25:38:97:c0:a4:dd:8f:91:59:18:ad: 8e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D5:91:92:7D:E5:EF:F2:FF:98:AC:3F:33:15:AB:8E:4B:B6:E0:40 X509v3 Authority Key Identifier: keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:e0:17:64:ee:4e:cc:4b:60:46:53:de:e7:0b:ef:13:b5:34: 4f:0a:cb:78:04:0d:8f:58:e3:90:ab:b6:87:44:d3:2b:49:3e: 6f:82:24:89:15:4f:7c:45:2b:28:7d:e8:28:ea:0a:c6:9d:69: 96:08:41:61:3f:27:e3:b9:24:ec:ca:c0:df:1d:2e:85:21:51: e7:32:ac:4d:af:56:3c:11:8f:d2:00:73:60:6f:ca:ab:c5:9c: 8e:13:1a:75:20:d7:65:53:bc:e0:a3:d2:5a:02:55:c9:20:26: f0:2c:13:95:2f:65:23:f2:6b:69:b0:f0:53:f1:b8:b6:ce:0a: a2:6e:90:21:49:ae:cd:4c:be:33:7d:1a:3f:9c:5c:fd:26:c7: 9e:c5:57:e1:b3:c9:dd:23:cb:34:4b:00:5a:09:43:7f:b4:95: 9d:3e:d4:e0:98:27:2d:7e:53:df:1c:57:61:84:01:56:38:9e: 19:30:b4:2b:cc:83:21:ad:0e:40:7d:f4:a9:84:dd:21:91:c9: 85:c5:8c:17:aa:84:6b:f6:c6:60:1e:8d:4b:32:8c:44:a8:31: fa:fe:7e:95:12:f5:be:82:b2:ff:6d:ab:46:9a:2c:0c:7e:6d: 56:4f:a0:3d:77:7e:f2:99:10:56:35:14:90:01:a6:81:94:ec: dc:25:51:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx OTRBQ0ZBNTgwHhcNMjUwNzE4MTQ0NzUzWhcNMjUwNzI1MTQ0NzUzWjAYMRYwFAYD VQQDEw02ODdhNWU5YS05NWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0z1bP760NJwmj+z+sTTADIYFlvdsB6kZFsRV87nhXk6jmYetN0B++iaiO0Bb u9HncuiOC+/Czp9upPu8QLkcl+x2/KuDhDNThNkfQcoYh2ByJXSns3y9idsAmj7I HerocHkHxzOWv/2joMsxHdD/YTOI83ognj/ZPrRJ/gALwl9y9XbSOBneuqueiRr+ IeeotBmVb7NIMFXSQVU1r2yi3cdt0/DGCCSXzZzv783bPpy9V1uJYoci+oMTrzah yTO93UanRUoTjZwrMv3vlbW3kNXXidqu7GMiMw3aXtP1c++hXv8/zG92RyC5E9te 0DgWtWZjJTiXwKTdj5FZGK2OowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfVkZJ9 5e/y/5isPzMVq45LtuBAMB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0 MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT Qk9PdHd0N05iU29aU3MtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZ4Bdk7k7MS2BGU97nC+8TtTRPCst4BA2PWOOQq7aHRNMrST5vgiSJ FU98RSsofego6grGnWmWCEFhPyfjuSTsysDfHS6FIVHnMqxNr1Y8EY/SAHNgb8qr xZyOExp1INdlU7zgo9JaAlXJICbwLBOVL2Uj8mtpsPBT8bi2zgqibpAhSa7NTL4z fRo/nFz9JseexVfhs8ndI8s0SwBaCUN/tJWdPtTgmCctflPfHFdhhAFWOJ4ZMLQr zIMhrQ5AffSphN0hkcmFxYwXqoRr9sZgHo1LMoxEqDH6/n6VEvW+grL/batGmiwM fm1WT6A9d37ymRBWNRSQAaaBlOzcJVHp -----END CERTIFICATE-----Generated at Sun Jul 20 15:12:48 2025 by rpki-client