$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json) Hash identifier: FGH4ti7O8ZVet7PXGyU8CvCHqVMJn89dyfObsgWcujQ= Subject key identifier: 9F:B4:48:DD:E0:95:03:78:EA:95:16:77:F5:17:DB:86:E9:44:D3:31 Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Certificate serial: 11CC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft Manifest number: 11C1 Signing time: Sun 02 Nov 2025 14:46:40 +0000 Manifest this update: Sun 02 Nov 2025 14:46:40 +0000 Manifest next update: Sun 09 Nov 2025 14:46:40 +0000 Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: X7c8Vo+A5TBk9du27gI71h+WW0vdV4Q17a1QtSf9yHw=) 2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: F1C9gg2kIzcE7dZNTOK9MxUtKleWFfTF43eCI9Ja9n8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4556 (0x11cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Validity Not Before: Nov 2 14:46:40 2025 GMT Not After : Nov 9 14:46:40 2025 GMT Subject: CN=69076ed0-18b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:ba:f9:10:fc:5d:80:f8:c6:52:d5:5a:45: dd:fe:98:06:96:7d:1c:fe:f9:0b:c9:c3:48:a8:fa: 39:10:bc:07:b9:bf:9a:1c:ba:6b:17:e7:22:f7:10: cf:b5:f3:9c:6b:1a:51:f2:cc:41:45:1f:32:90:43: ad:da:e2:fa:46:ef:54:d4:83:5c:7b:70:89:1b:eb: e1:65:da:f9:8f:67:30:85:c3:58:b8:30:f5:bb:65: 44:ff:42:f2:34:72:c7:99:f6:99:99:4d:2a:13:18: 8e:47:e5:17:61:96:d0:75:b8:e0:d5:6a:2b:99:23: f2:13:26:fa:71:6b:c8:8c:66:61:65:a5:a7:ae:8c: 5f:5a:43:52:98:ee:75:19:30:8c:ac:c9:7a:e0:97: e6:9b:d7:c6:9a:04:cb:40:8c:0b:2c:47:72:16:bf: 20:79:e3:ba:c0:fb:b5:b1:9d:68:66:62:06:74:e0: 83:32:12:d8:64:83:c1:bd:37:88:4e:1c:e7:17:dc: f5:7f:d9:12:25:07:46:f4:fc:31:e8:bc:ab:f3:eb: 8a:e6:fb:ae:c6:f5:04:d6:c7:2f:e5:88:67:5d:20: 91:30:86:7e:08:24:d6:8f:a8:42:c5:cb:3c:34:b7: 2d:0a:fa:b7:31:fc:2d:49:58:94:15:db:0f:86:ae: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B4:48:DD:E0:95:03:78:EA:95:16:77:F5:17:DB:86:E9:44:D3:31 X509v3 Authority Key Identifier: keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:54:9a:ac:98:0b:ab:3d:23:f2:81:91:7a:b9:45:8d:ab:c9: ca:05:61:4e:dd:d4:d4:2d:c6:b6:3d:e0:ca:a3:33:21:f3:42: 50:8b:78:3a:f4:13:e4:34:80:63:c2:fc:72:0a:e8:d5:fd:0b: 9f:40:5f:a9:34:f9:0e:68:5e:e6:63:9b:f5:11:58:f0:60:94: 5e:c4:c8:d7:e3:c7:ea:d4:6d:f0:65:e3:d2:78:07:0e:b0:12: ad:e0:02:d7:14:36:13:79:d8:84:b5:64:8e:bd:0e:da:12:a5: 9a:be:ee:5a:6c:df:cb:02:4f:bc:91:91:09:62:c0:69:f0:3b: 01:0b:38:1a:c8:a0:aa:b0:47:1a:83:2e:0a:31:bf:32:40:d5: 75:db:61:2f:65:12:29:d2:10:bf:85:a0:bb:4c:98:a9:b4:07: 76:3f:9d:5e:85:89:f6:78:b8:d2:30:e9:c6:30:d8:d7:ac:10: 1e:e2:25:6d:b6:8b:ff:38:e2:38:8b:d3:8d:5e:6f:09:60:91: f8:69:53:48:c8:ad:ff:43:c1:2f:39:0b:76:a8:d2:b7:80:b3: d9:80:40:00:84:07:03:bb:02:e1:83:22:da:02:0b:dc:20:d4: 1f:73:90:1c:28:8b:a6:56:44:32:24:33:75:ed:02:46:d7:87: e1:9c:92:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx OTRBQ0ZBNTgwHhcNMjUxMTAyMTQ0NjQwWhcNMjUxMTA5MTQ0NjQwWjAYMRYwFAYD VQQDEw02OTA3NmVkMC0xOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5y6+RD8XYD4xlLVWkXd/pgGln0c/vkLycNIqPo5ELwHub+aHLprF+ci9xDP tfOcaxpR8sxBRR8ykEOt2uL6Ru9U1INce3CJG+vhZdr5j2cwhcNYuDD1u2VE/0Ly NHLHmfaZmU0qExiOR+UXYZbQdbjg1WormSPyEyb6cWvIjGZhZaWnroxfWkNSmO51 GTCMrMl64Jfmm9fGmgTLQIwLLEdyFr8geeO6wPu1sZ1oZmIGdOCDMhLYZIPBvTeI ThznF9z1f9kSJQdG9Pwx6Lyr8+uK5vuuxvUE1scv5YhnXSCRMIZ+CCTWj6hCxcs8 NLctCvq3MfwtSViUFdsPhq7SjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+0SN3g lQN46pUWd/UX24bpRNMxMB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0 MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT Qk9PdHd0N05iU29aU3MtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIVJqsmAurPSPygZF6uUWNq8nKBWFO3dTULca2PeDKozMh80JQi3g6 9BPkNIBjwvxyCujV/QufQF+pNPkOaF7mY5v1EVjwYJRexMjX48fq1G3wZePSeAcO sBKt4ALXFDYTediEtWSOvQ7aEqWavu5abN/LAk+8kZEJYsBp8DsBCzgayKCqsEca gy4KMb8yQNV122EvZRIp0hC/haC7TJiptAd2P51ehYn2eLjSMOnGMNjXrBAe4iVt tov/OOI4i9ONXm8JYJH4aVNIyK3/Q8EvOQt2qNK3gLPZgEAAhAcDuwLhgyLaAgvc INQfc5AcKIumVkQyJDN17QJG14fhnJJd -----END CERTIFICATE-----Generated at Mon Nov 3 22:48:00 2025 by rpki-client