$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json) Hash identifier: JfFRz4MTbT0Y1lpb8bpmB7GBlobRj112QhGUIRSlDtA= Subject key identifier: F2:3E:7E:14:9E:01:07:EB:BA:B7:51:25:87:29:4E:0A:55:1D:BF:AE Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Certificate serial: 34BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft Manifest number: 34A3 Signing time: Mon 02 Jun 2025 14:41:20 +0000 Manifest this update: Mon 02 Jun 2025 14:41:20 +0000 Manifest next update: Mon 09 Jun 2025 14:41:20 +0000 Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: r8PLlVrjc9MfuIVce6umDpAKdnGYPjev0FCCCO4qQTc=) 2: 5E26899A1B2211F093230420C4F9AE02.roa (hash: zE8hcTYNfmMkBUxWlaCkDNF/PasBwsyXryHfs3QbRWs=) 3: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: 6EQRx6aa031JyIEDFgnynaOZ+5bnvuDSyDIypITveC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13501 (0x34bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Validity Not Before: Jun 2 14:41:20 2025 GMT Not After : Jun 9 14:41:20 2025 GMT Subject: CN=683db810-315c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:56:48:ea:35:3f:d4:b0:97:8c:ec:4c:23:82: c1:6c:ac:f0:a4:0d:73:8b:5e:75:b1:03:f4:02:d4: de:38:3f:75:03:10:1d:4b:84:bb:54:53:03:34:24: 82:72:c7:eb:9b:b2:e0:16:d1:a7:5f:ca:6a:c8:99: a4:eb:92:f8:51:15:ff:93:82:7a:e5:d2:96:2f:f3: e6:88:47:ea:b3:51:7e:0a:b8:36:00:82:59:d0:08: 53:b2:69:88:7d:a5:36:d0:c7:97:a9:4e:39:2e:b7: 44:ae:13:36:a7:b6:4f:fa:d0:b3:f1:4e:b4:a3:16: 21:c6:93:b4:ca:32:5b:a9:30:4b:22:5f:12:b4:ee: 72:1c:24:88:3b:e1:23:fe:50:f3:a5:6b:e6:6f:54: 05:4f:79:19:1c:56:f6:15:5b:a8:13:35:2d:71:27: cd:88:45:3f:3a:55:7b:5a:f4:3e:78:be:6f:ce:4e: f7:d5:0e:09:10:12:60:6e:0f:47:06:df:1a:02:74: ef:ba:81:c9:a5:d0:7d:05:a4:b2:b2:d9:33:9f:44: ad:f1:89:86:d6:6b:0c:95:ac:68:52:cd:42:f0:21: 3e:84:ed:8a:40:fd:24:46:8d:50:cf:f4:74:c1:41: 95:4c:f5:e5:9a:65:2b:e7:42:ec:60:cf:87:59:33: 19:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3E:7E:14:9E:01:07:EB:BA:B7:51:25:87:29:4E:0A:55:1D:BF:AE X509v3 Authority Key Identifier: keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e7:c0:23:a6:f7:8b:36:92:8e:fd:5d:25:32:d6:2d:80:82: 1e:1c:e6:39:fe:38:d6:8d:18:61:d6:71:da:58:b6:ed:83:f1: 37:20:4a:0d:93:dd:f9:fa:f1:60:84:6f:e3:ff:e2:db:2d:74: 99:19:6f:e2:9f:68:d2:fe:44:41:05:b8:38:50:24:c4:1d:b9: ce:43:dd:2f:e7:fa:df:2c:9f:d8:32:35:4c:ea:df:55:f3:a7: 7a:fc:a4:a9:ca:c0:31:37:47:60:ae:7a:76:b0:65:ce:66:b1: 5e:22:8a:e6:db:3a:de:59:35:22:2a:8c:06:9b:8a:08:dd:15: 43:6e:1b:09:39:ff:45:cb:c8:48:93:04:c7:cf:a8:c4:78:a5: 70:3d:bb:fb:ca:f3:ca:d7:40:bd:0d:f4:7d:c3:98:50:e4:43: fa:20:7e:86:fe:5d:ec:9c:80:47:cd:cb:06:4e:9d:43:68:de: ce:d0:47:69:ff:a8:d3:5b:c8:97:ac:2f:aa:42:c3:5c:2b:8f: 5d:74:e1:5b:6f:64:ce:b4:c4:29:ba:32:57:db:48:20:d3:79: 51:3e:66:07:cc:75:2a:56:41:89:26:6f:35:59:55:aa:2f:15: 06:94:4e:c5:61:cc:ec:f4:7e:73:75:f0:21:a5:ad:f9:84:4a: 83:26:ca:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD MkFGMkM2RjAwHhcNMjUwNjAyMTQ0MTIwWhcNMjUwNjA5MTQ0MTIwWjAYMRYwFAYD VQQDEw02ODNkYjgxMC0zMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FZI6jU/1LCXjOxMI4LBbKzwpA1zi151sQP0AtTeOD91AxAdS4S7VFMDNCSC csfrm7LgFtGnX8pqyJmk65L4URX/k4J65dKWL/PmiEfqs1F+Crg2AIJZ0AhTsmmI faU20MeXqU45LrdErhM2p7ZP+tCz8U60oxYhxpO0yjJbqTBLIl8StO5yHCSIO+Ej /lDzpWvmb1QFT3kZHFb2FVuoEzUtcSfNiEU/OlV7WvQ+eL5vzk731Q4JEBJgbg9H Bt8aAnTvuoHJpdB9BaSystkzn0St8YmG1msMlaxoUs1C8CE+hO2KQP0kRo1Qz/R0 wUGVTPXlmmUr50LsYM+HWTMZ0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPI+fhSe AQfrurdRJYcpTgpVHb+uMB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR YWRxNDczcFhhcUxDcnl4dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe58AjpveLNpKO/V0lMtYtgIIeHOY5/jjWjRhh1nHaWLbtg/E3IEoN k935+vFghG/j/+LbLXSZGW/in2jS/kRBBbg4UCTEHbnOQ90v5/rfLJ/YMjVM6t9V 86d6/KSpysAxN0dgrnp2sGXOZrFeIorm2zreWTUiKowGm4oI3RVDbhsJOf9Fy8hI kwTHz6jEeKVwPbv7yvPK10C9DfR9w5hQ5EP6IH6G/l3snIBHzcsGTp1DaN7O0Edp /6jTW8iXrC+qQsNcK49ddOFbb2TOtMQpujJX20gg03lRPmYHzHUqVkGJJm81WVWq LxUGlE7FYczs9H5zdfAhpa35hEqDJsoy -----END CERTIFICATE-----Generated at Mon Jun 2 22:34:24 2025 by rpki-client