$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: 3g9hLiXVskd+BgBQnQla4ZT6f7m/6to0rpusqSilPco= Subject key identifier: 38:7C:2F:E1:90:0D:FF:D4:C4:D9:B4:CA:F6:7C:BD:22:E9:6E:3B:CD Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 09E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 09C6 Signing time: Mon 02 Jun 2025 20:11:30 +0000 Manifest this update: Mon 02 Jun 2025 20:11:30 +0000 Manifest next update: Mon 09 Jun 2025 20:11:30 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: Hz2UAtbRvrNLpZHxR4wiwAFH06wc4qw4SHwNKqRDjUo=) 2: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: cv1XOQDllKYXcpEWN6EDo+84rWYyoCQRLW84g8KQ5ZA=) 3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: 19peW13UIPklgma9IsoYtyIgEi8rvSKuXv+9ezxIut4=) 4: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: VqWzdPFCvuqUEShaf6/toPwLspmfOG4EJ7lP9CUoJW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2536 (0x9e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Jun 2 20:11:30 2025 GMT Not After : Jun 9 20:11:30 2025 GMT Subject: CN=683e0572-b0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:18:dd:d0:33:e8:df:aa:3a:0f:36:80:15: 43:ca:47:ba:43:b0:8f:7f:a0:31:fd:cb:97:c1:f2: 3f:5c:7d:2b:bf:f8:68:84:71:a2:aa:39:92:9b:4d: 0d:fb:e5:4f:c9:dc:d2:ee:a4:ec:66:b8:88:0a:89: bb:48:79:35:4e:ac:d7:2d:2a:97:2e:fb:2d:3f:17: a1:18:53:a1:e5:28:65:fc:98:d3:9a:b6:c9:89:7d: 06:53:9b:e6:ce:85:64:61:f9:55:d7:82:9b:4a:bb: 00:8b:81:e1:12:36:a9:cb:d1:5f:6a:d5:6c:c9:97: bf:90:5b:58:45:4d:aa:12:91:cc:62:8b:0a:ae:4a: 2d:d9:c1:44:c9:6e:7a:35:c1:dd:5b:7b:bb:59:0b: 9e:31:39:36:54:f5:8e:30:d3:4e:32:d9:bc:be:08: ce:98:f7:b2:81:84:84:a4:79:32:68:06:68:7f:43: 87:31:db:e0:fb:6a:57:a2:55:b9:61:a1:46:a9:0a: 2e:d7:48:2f:0e:66:ed:63:49:ad:6b:a7:f3:19:43: 23:d2:da:3a:fa:68:6a:6b:1d:71:14:c7:79:4a:e1: c5:a6:75:5c:8c:6d:d6:af:4d:93:05:b1:0f:9c:49: 90:ff:a6:e3:b1:b6:f0:e4:87:88:c2:2e:e2:78:1c: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7C:2F:E1:90:0D:FF:D4:C4:D9:B4:CA:F6:7C:BD:22:E9:6E:3B:CD X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:01:1c:62:01:e9:c7:78:ec:85:30:46:f2:85:43:7f:e5:98: 38:e7:d7:16:c9:6f:da:46:6e:f1:83:a9:f4:04:4d:7d:b0:40: fd:9d:86:64:43:a9:fd:b2:d8:3e:2f:76:72:df:19:f3:33:13: 24:b8:bb:7c:85:ac:2d:d7:9b:cd:1f:74:44:36:be:1d:67:50: b6:57:d2:0c:9b:f7:6e:3b:ab:f4:cb:df:e6:47:ec:c0:56:2b: 7a:32:eb:13:9b:ea:0d:32:6a:6e:b4:ef:d8:38:d4:f4:3c:63: 48:60:8c:ce:18:64:58:4d:cb:30:94:b8:bb:b9:63:a4:92:d8: fc:1d:6f:5f:88:99:29:19:5f:6c:79:9f:b7:a1:62:c0:ee:18: a1:ac:9a:7c:70:ec:46:c8:fd:d1:b1:ca:d8:49:3d:1b:88:59: bd:6b:44:30:0f:d3:3e:ba:7a:2b:d8:da:e3:9d:f4:0c:12:f0: 9d:91:a1:ca:3b:5a:7c:d3:c0:7d:64:13:5c:19:65:c1:fc:61: 7a:a6:a9:cf:ff:57:2b:53:af:4b:e3:06:a9:e4:56:21:d1:53: 42:52:85:57:c8:ef:eb:4a:85:b9:99:f8:1c:85:7c:c2:ed:e5: f6:da:a1:11:7d:ff:10:09:2c:1a:3f:7b:36:e5:bd:4a:6a:91: dc:2f:bb:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjUwNjAyMjAxMTMwWhcNMjUwNjA5MjAxMTMwWjAYMRYwFAYD VQQDEw02ODNlMDU3Mi1iMGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ4Y3dAz6N+qOg82gBVDyke6Q7CPf6Ax/cuXwfI/XH0rv/hohHGiqjmSm00N ++VPydzS7qTsZriICom7SHk1TqzXLSqXLvstPxehGFOh5Shl/JjTmrbJiX0GU5vm zoVkYflV14KbSrsAi4HhEjapy9FfatVsyZe/kFtYRU2qEpHMYosKrkot2cFEyW56 NcHdW3u7WQueMTk2VPWOMNNOMtm8vgjOmPeygYSEpHkyaAZof0OHMdvg+2pXolW5 YaFGqQou10gvDmbtY0mta6fzGUMj0to6+mhqax1xFMd5SuHFpnVcjG3Wr02TBbEP nEmQ/6bjsbbw5IeIwi7ieByy8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDh8L+GQ Df/UxNm0yvZ8vSLpbjvNMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRARxiAenHeOyFMEbyhUN/5Zg459cWyW/aRm7xg6n0BE19sED9nYZk Q6n9stg+L3Zy3xnzMxMkuLt8hawt15vNH3RENr4dZ1C2V9IMm/duO6v0y9/mR+zA Vit6MusTm+oNMmputO/YONT0PGNIYIzOGGRYTcswlLi7uWOkktj8HW9fiJkpGV9s eZ+3oWLA7hihrJp8cOxGyP3RscrYST0biFm9a0QwD9M+unor2NrjnfQMEvCdkaHK O1p808B9ZBNcGWXB/GF6pqnP/1crU69L4wap5FYh0VNCUoVXyO/rSoW5mfgchXzC 7eX22qERff8QCSwaP3s25b1KapHcL7sT -----END CERTIFICATE-----Generated at Wed Jun 4 00:17:12 2025 by rpki-client