$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: bSKAyMIysA9/ecy82ULCrRPu/iJpkRVK3tQLCywEBDM= Subject key identifier: 5F:95:DF:39:C6:F7:F6:EE:77:4B:64:DA:4A:A1:34:21:06:0F:4E:03 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0A04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 09DF Signing time: Fri 18 Jul 2025 20:12:58 +0000 Manifest this update: Fri 18 Jul 2025 20:12:57 +0000 Manifest next update: Fri 25 Jul 2025 20:12:57 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: kGZR16+bio4PTiphdXTfg4Trv7Ox7T5J1MOfxLOm/gw=) 2: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: 4oLW18xAlE3B8nPyqU3w32UG4L4+C+i7k1rNnlKSQ7s=) 3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: PcZXGp5zvO/A3lEsDn884MTZ2FtXJ7tXRCkkHLH+i5g=) 4: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: 7NNAaJL+KytCopmMwh7xFBD72cI0M9FvnIHrWbUqbbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2564 (0xa04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Jul 18 20:12:57 2025 GMT Not After : Jul 25 20:12:57 2025 GMT Subject: CN=687aaaca-cb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:65:78:1d:82:3e:6a:2e:17:1d:b2:b4:1f:1b: 2c:ca:93:e9:dc:90:14:83:4e:38:a3:c2:05:1d:d1: 20:de:d7:18:f2:de:f1:31:4e:47:77:9f:08:19:2a: fb:84:16:88:af:54:4b:ea:2c:74:4d:94:19:93:36: 24:3f:53:82:8c:c2:1e:92:af:f2:7c:26:13:34:6e: 6a:d4:d5:1c:74:a4:5f:ae:f7:5e:9d:38:cb:a5:e4: b5:31:aa:10:34:e6:13:89:d7:e1:4b:1c:85:fa:0e: 7c:0c:50:7a:84:c3:8f:82:dc:2f:bb:47:c8:64:d8: 96:79:6c:14:1f:c6:25:43:e3:d7:59:72:48:e2:7e: 3d:67:ab:ab:df:e3:13:a6:1c:b9:8e:00:66:d0:e0: 44:53:cd:6b:74:9d:b2:93:7f:7d:92:ef:4a:62:eb: f8:90:1f:38:ed:90:34:0b:99:65:f3:37:56:53:1f: 2a:3c:6a:df:05:74:19:dd:be:3e:af:4d:9c:00:e2: 5f:ea:51:9b:8e:7b:bb:7b:cb:ec:2b:cb:03:1c:72: 85:e6:33:5f:57:f8:cf:a0:c3:7c:a3:65:3a:2d:b9: 84:50:41:79:88:fa:58:fa:e7:6f:51:a4:11:51:34: 66:69:4b:a9:d7:4f:3b:17:30:28:84:70:f5:c4:77: b2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:95:DF:39:C6:F7:F6:EE:77:4B:64:DA:4A:A1:34:21:06:0F:4E:03 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:34:a4:2e:81:39:ff:c8:62:14:66:6e:c5:4b:93:79:c2:8d: c4:ab:cd:20:c3:79:db:61:2c:ce:31:2e:12:bd:64:67:35:db: d0:8f:e6:b1:6f:59:ad:52:d0:c2:af:af:6b:0a:3d:f8:6c:a1: c8:fa:bd:71:f8:72:aa:15:9c:7c:3c:78:49:c4:25:25:56:67: 70:1e:62:48:2d:92:89:be:7a:b9:2e:7d:a5:48:ca:62:92:07: 25:ae:41:d9:e9:24:70:73:8e:db:5e:14:34:66:1e:ce:f8:c7: c0:96:a1:03:fb:c4:e2:74:9e:eb:a9:a0:35:ab:6e:1f:54:6a: 74:da:60:81:de:69:65:ad:20:b7:1d:2d:d8:a4:9f:48:e8:96: a6:a5:43:71:ac:30:76:06:6c:ae:b8:29:5f:0e:4f:45:a9:0c: a5:9a:e0:e3:df:bd:52:15:54:e9:90:18:34:76:e9:61:07:a4: 8a:18:7f:dc:8a:bb:7c:67:bb:c8:b9:0d:58:ea:a8:34:5c:fb: 84:19:ea:80:c4:4f:ee:87:62:65:55:fb:25:15:dd:6a:f4:ef: 3e:c0:b5:1b:84:37:ee:18:3f:9c:3d:93:2e:60:6d:8d:e5:45: 60:cf:00:8f:f3:25:e9:b8:82:70:8b:01:8a:73:02:13:de:df: 8b:d4:96:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjUwNzE4MjAxMjU3WhcNMjUwNzI1MjAxMjU3WjAYMRYwFAYD VQQDEw02ODdhYWFjYS1jYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWV4HYI+ai4XHbK0HxssypPp3JAUg044o8IFHdEg3tcY8t7xMU5Hd58IGSr7 hBaIr1RL6ix0TZQZkzYkP1OCjMIekq/yfCYTNG5q1NUcdKRfrvdenTjLpeS1MaoQ NOYTidfhSxyF+g58DFB6hMOPgtwvu0fIZNiWeWwUH8YlQ+PXWXJI4n49Z6ur3+MT phy5jgBm0OBEU81rdJ2yk399ku9KYuv4kB847ZA0C5ll8zdWUx8qPGrfBXQZ3b4+ r02cAOJf6lGbjnu7e8vsK8sDHHKF5jNfV/jPoMN8o2U6LbmEUEF5iPpY+udvUaQR UTRmaUup1087FzAohHD1xHeynwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+V3znG 9/bud0tk2kqhNCEGD04DMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbNKQugTn/yGIUZm7FS5N5wo3Eq80gw3nbYSzOMS4SvWRnNdvQj+ax b1mtUtDCr69rCj34bKHI+r1x+HKqFZx8PHhJxCUlVmdwHmJILZKJvnq5Ln2lSMpi kgclrkHZ6SRwc47bXhQ0Zh7O+MfAlqED+8TidJ7rqaA1q24fVGp02mCB3mllrSC3 HS3YpJ9I6JampUNxrDB2BmyuuClfDk9FqQylmuDj371SFVTpkBg0dulhB6SKGH/c irt8Z7vIuQ1Y6qg0XPuEGeqAxE/uh2JlVfslFd1q9O8+wLUbhDfuGD+cPZMuYG2N 5UVgzwCP8yXpuIJwiwGKcwIT3t+L1JY1 -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:32 2025 by rpki-client