$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json) Hash identifier: XqbM9SFuQDAkh5AOBXHKYXHQuYLk6vNRUgCvSrMD/08= Subject key identifier: 5D:5F:7E:AA:18:29:12:3D:34:72:FD:2F:08:45:68:D1:5C:E4:EF:5F Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Certificate serial: 34EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft Manifest number: 34D4 Signing time: Sat 06 Sep 2025 14:39:44 +0000 Manifest this update: Sat 06 Sep 2025 14:39:43 +0000 Manifest next update: Sat 13 Sep 2025 14:39:43 +0000 Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: i5aA82yBnuzpjz5LmlbHM0S46on6zTSsFVDW8w1X+BA=) 2: 5E26899A1B2211F093230420C4F9AE02.roa (hash: zE8hcTYNfmMkBUxWlaCkDNF/PasBwsyXryHfs3QbRWs=) 3: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: 6EQRx6aa031JyIEDFgnynaOZ+5bnvuDSyDIypITveC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13550 (0x34ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Validity Not Before: Sep 6 14:39:43 2025 GMT Not After : Sep 13 14:39:43 2025 GMT Subject: CN=68bc47b0-1f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:46:c0:46:52:b4:de:29:e6:fb:2a:6d:7b: dc:96:6c:29:2a:7f:b8:f3:d1:81:3d:11:05:44:ab: 9b:0b:5b:67:28:fb:c5:02:be:62:bf:8f:68:69:7d: 6f:2b:72:ec:55:04:6f:44:16:c2:f5:51:6c:e7:95: 54:10:e9:77:10:41:18:b2:bf:11:17:34:12:24:86: 34:91:f2:4d:b8:21:9f:7b:74:02:ef:cd:0e:3c:93: 2d:fd:c9:e5:bd:21:f4:70:28:7a:bc:66:d4:69:9f: 4a:d4:03:a6:0a:0d:0b:c9:60:ef:d6:d7:93:67:e5: 7d:1f:3a:c2:29:59:68:7e:76:4a:29:2a:1b:d4:da: f9:22:89:61:8b:21:e2:d2:bd:02:1f:ac:c9:29:8e: ab:3d:5a:cc:8c:d2:ea:2a:3c:03:97:82:76:65:20: 2a:f7:2d:af:6c:08:6b:b8:74:c9:7e:54:1f:f2:5e: c0:ed:98:4b:02:6b:31:1d:af:5d:94:47:52:2b:cd: 7b:f5:d6:e8:f5:f2:d3:44:66:78:b4:df:7d:a0:1d: b5:f0:bb:6f:2a:0e:90:64:2a:48:c1:1f:1f:71:ad: 2a:13:53:5d:db:63:51:91:9c:d2:a9:1e:c5:66:00: 47:bf:1d:af:7a:09:58:88:41:6c:73:21:f3:36:5e: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5F:7E:AA:18:29:12:3D:34:72:FD:2F:08:45:68:D1:5C:E4:EF:5F X509v3 Authority Key Identifier: keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:51:c5:a7:c4:ea:ca:a8:f1:41:9c:a6:3b:7c:6a:59:f0:05: d8:29:dc:96:06:8d:0f:3d:98:d0:34:91:32:b2:9d:03:dd:b0: 19:c9:45:e2:93:e5:9a:00:fd:36:ef:4d:7b:41:b1:05:c0:7b: 9c:61:84:27:88:c9:b0:12:55:0d:01:af:bf:99:2e:7f:3f:be: 9f:f1:18:8b:2b:9b:1b:b9:7c:f1:2a:34:6b:e0:32:b6:4d:09: 1f:19:99:9c:3d:97:f3:83:a0:16:db:db:11:e6:20:3d:bd:10: b5:14:b6:b2:f7:29:a5:af:16:3e:be:ec:27:51:2e:2a:1f:e8: a6:b3:ba:ab:9a:fb:56:37:12:54:02:10:51:43:56:5f:ec:bc: 37:ce:09:36:da:42:07:fc:3a:a7:e5:ff:b7:68:19:ad:de:93: ae:30:e7:e0:df:b4:51:0b:cf:6a:d8:ae:5c:d7:f3:7c:39:0c: 94:17:a2:5b:29:d0:0f:97:12:95:42:51:7e:15:6a:5b:ea:a1: a3:0f:9d:ec:cc:86:e1:da:77:a1:ff:00:35:1f:05:b9:30:0d: 92:f1:f1:c0:8b:92:a4:19:17:1a:21:b7:6a:26:a7:c2:d3:be: 1e:5a:1f:37:64:41:7c:6c:43:74:e6:76:29:52:a8:d5:1d:aa: 12:6e:5e:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD MkFGMkM2RjAwHhcNMjUwOTA2MTQzOTQzWhcNMjUwOTEzMTQzOTQzWjAYMRYwFAYD VQQDEw02OGJjNDdiMC0xZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgRGwEZStN4p5vsqbXvclmwpKn+489GBPREFRKubC1tnKPvFAr5iv49oaX1v K3LsVQRvRBbC9VFs55VUEOl3EEEYsr8RFzQSJIY0kfJNuCGfe3QC780OPJMt/cnl vSH0cCh6vGbUaZ9K1AOmCg0LyWDv1teTZ+V9HzrCKVlofnZKKSob1Nr5IolhiyHi 0r0CH6zJKY6rPVrMjNLqKjwDl4J2ZSAq9y2vbAhruHTJflQf8l7A7ZhLAmsxHa9d lEdSK8179dbo9fLTRGZ4tN99oB218LtvKg6QZCpIwR8fca0qE1Nd22NRkZzSqR7F ZgBHvx2veglYiEFscyHzNl6PKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1ffqoY KRI9NHL9LwhFaNFc5O9fMB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR YWRxNDczcFhhcUxDcnl4dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2UcWnxOrKqPFBnKY7fGpZ8AXYKdyWBo0PPZjQNJEysp0D3bAZyUXi k+WaAP027017QbEFwHucYYQniMmwElUNAa+/mS5/P76f8RiLK5sbuXzxKjRr4DK2 TQkfGZmcPZfzg6AW29sR5iA9vRC1FLay9ymlrxY+vuwnUS4qH+ims7qrmvtWNxJU AhBRQ1Zf7Lw3zgk22kIH/Dqn5f+3aBmt3pOuMOfg37RRC89q2K5c1/N8OQyUF6Jb KdAPlxKVQlF+FWpb6qGjD53szIbh2neh/wA1HwW5MA2S8fHAi5KkGRcaIbdqJqfC 074eWh83ZEF8bEN05nYpUqjVHaoSbl5+ -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:55 2025 by rpki-client