$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: CU18gngiBEiif2QQ+8dkPgqyEJU7hNJG7+kqn7HoGTU= Subject key identifier: A1:AB:11:A5:6E:30:C1:42:8C:9E:4A:05:AC:7A:C4:1C:23:59:C2:C2 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0A1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 09F9 Signing time: Sat 06 Sep 2025 20:07:25 +0000 Manifest this update: Sat 06 Sep 2025 20:07:25 +0000 Manifest next update: Sat 13 Sep 2025 20:07:25 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: 4H7d6vdbWypRUIXNyyrNLQjskv8BPY5EEnnplh4Zs8s=) 2: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: 4oLW18xAlE3B8nPyqU3w32UG4L4+C+i7k1rNnlKSQ7s=) 3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: PcZXGp5zvO/A3lEsDn884MTZ2FtXJ7tXRCkkHLH+i5g=) 4: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: 7NNAaJL+KytCopmMwh7xFBD72cI0M9FvnIHrWbUqbbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2590 (0xa1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Sep 6 20:07:25 2025 GMT Not After : Sep 13 20:07:25 2025 GMT Subject: CN=68bc947d-74c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:d2:63:bd:65:17:ce:f3:18:c5:48:f4:41: 45:3e:09:29:36:57:69:79:b7:65:9e:53:4c:de:5e: 7b:2b:c4:cd:0c:fb:8b:ff:a3:89:c9:ae:b5:81:6e: a3:03:f5:76:4a:be:34:0d:b8:df:5b:c9:1a:be:2b: 7b:33:67:45:0e:32:29:75:54:19:1f:ac:9b:43:c7: f4:e4:2f:c9:be:8e:8e:2a:d5:a4:ab:dc:d6:1a:ad: 10:ec:6b:95:f7:f9:8c:84:9e:98:3d:48:9c:c1:d8: 30:80:16:62:76:36:ab:7d:ae:c3:9e:7c:98:70:bf: f5:e4:fd:c8:13:8a:9e:a3:eb:24:80:dc:2d:1d:28: 50:59:9b:00:c9:47:fb:e5:5d:bb:20:71:dc:db:ba: e4:29:2f:c5:10:55:85:7c:26:4d:71:6d:8c:8e:54: c9:24:7c:b3:e5:bd:e0:a3:8e:a4:0b:5b:ef:84:52: 47:3e:51:57:b8:0b:2c:2b:0d:fa:f2:fe:5d:c7:3d: f3:d4:8c:e0:6e:ce:de:cb:cf:46:52:13:23:b0:be: 00:3b:71:46:d0:8f:41:8c:ea:dd:d6:28:e5:64:6b: 6b:69:c0:7b:53:7e:35:d6:cb:35:48:51:2a:b4:ae: d8:d7:49:08:19:8b:02:96:88:22:73:47:c9:35:b7: 63:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AB:11:A5:6E:30:C1:42:8C:9E:4A:05:AC:7A:C4:1C:23:59:C2:C2 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0c:29:25:06:fa:3a:dc:a4:4a:77:98:c0:d4:f6:c3:db:4b: 86:8c:8d:0f:0c:f3:59:fd:e7:4d:f5:ad:bf:3d:89:7c:49:32: 40:2f:51:2d:32:97:e4:9b:f4:37:f1:8e:62:47:56:82:ef:c5: 22:93:56:23:fd:c7:3f:54:ad:f6:8e:dd:cb:53:35:19:c2:4d: b3:bc:eb:e8:60:10:8d:f8:15:b8:22:ba:a5:b5:ed:f1:22:0b: 8f:bd:39:2d:c3:00:58:69:fc:d0:9a:8c:3b:8f:f1:06:dd:fb: 07:aa:76:a4:d4:8e:77:cc:96:3e:34:0d:85:2b:e4:94:2c:6c: c1:8a:97:78:eb:b2:cb:75:70:1b:3a:d7:81:4f:6a:b4:bf:bc: fd:a1:fb:01:84:15:8f:ee:85:2c:62:04:46:c5:58:2d:da:80: 0a:de:3e:23:39:9c:43:db:51:09:65:7e:b7:de:d0:ea:82:7f: d2:a0:e2:17:a1:a7:27:cc:a2:61:0f:4a:63:b4:f8:29:6a:c2: 08:a9:11:05:3b:61:33:52:ca:4c:1f:82:5f:c5:87:e6:d1:fc: 03:76:e1:4f:ec:0b:02:a3:68:08:e7:d4:ce:6f:6b:2d:9f:ca: e4:6c:af:1c:de:28:a8:83:1f:ef:60:ef:b1:ad:42:6e:14:3f: 7d:51:9b:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjUwOTA2MjAwNzI1WhcNMjUwOTEzMjAwNzI1WjAYMRYwFAYD VQQDEw02OGJjOTQ3ZC03NGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/7SY71lF87zGMVI9EFFPgkpNldpebdlnlNM3l57K8TNDPuL/6OJya61gW6j A/V2Sr40DbjfW8kavit7M2dFDjIpdVQZH6ybQ8f05C/Jvo6OKtWkq9zWGq0Q7GuV 9/mMhJ6YPUicwdgwgBZidjarfa7DnnyYcL/15P3IE4qeo+skgNwtHShQWZsAyUf7 5V27IHHc27rkKS/FEFWFfCZNcW2MjlTJJHyz5b3go46kC1vvhFJHPlFXuAssKw36 8v5dxz3z1Izgbs7ey89GUhMjsL4AO3FG0I9BjOrd1ijlZGtracB7U3411ss1SFEq tK7Y10kIGYsClogic0fJNbdjewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGrEaVu MMFCjJ5KBax6xBwjWcLCMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMDCklBvo63KRKd5jA1PbD20uGjI0PDPNZ/edN9a2/PYl8STJAL1Et Mpfkm/Q38Y5iR1aC78Uik1Yj/cc/VK32jt3LUzUZwk2zvOvoYBCN+BW4Irqlte3x IguPvTktwwBYafzQmow7j/EG3fsHqnak1I53zJY+NA2FK+SULGzBipd467LLdXAb OteBT2q0v7z9ofsBhBWP7oUsYgRGxVgt2oAK3j4jOZxD21EJZX633tDqgn/SoOIX oacnzKJhD0pjtPgpasIIqREFO2EzUspMH4JfxYfm0fwDduFP7AsCo2gI59TOb2st n8rkbK8c3iiogx/vYO+xrUJuFD99UZvU -----END CERTIFICATE-----Generated at Sat Sep 6 20:59:09 2025 by rpki-client