$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json) Hash identifier: nPfB91TOO6vg3hixQgvtPXfKv+YiSWx2gvjE3F6oRUk= Subject key identifier: 6C:86:F3:A3:77:60:51:92:FA:F2:9A:68:FC:22:34:E3:25:0A:D3:2A Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Certificate serial: 34D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft Manifest number: 34BB Signing time: Sun 20 Jul 2025 14:40:57 +0000 Manifest this update: Sun 20 Jul 2025 14:40:57 +0000 Manifest next update: Sun 27 Jul 2025 14:40:57 +0000 Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: 2xBbCJuT0T5GeoYhPDAod/wdkKORUZfJsUpR9Reaplw=) 2: 5E26899A1B2211F093230420C4F9AE02.roa (hash: zE8hcTYNfmMkBUxWlaCkDNF/PasBwsyXryHfs3QbRWs=) 3: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: 6EQRx6aa031JyIEDFgnynaOZ+5bnvuDSyDIypITveC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Validity Not Before: Jul 20 14:40:57 2025 GMT Not After : Jul 27 14:40:57 2025 GMT Subject: CN=687cfff9-6964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:e9:13:b7:fe:a5:22:14:ca:e2:93:57:e3: f4:35:23:c9:fe:d3:8c:4e:4d:e0:91:e6:5f:eb:5e: 71:71:5e:49:9a:d7:4b:c2:61:03:18:20:90:7e:99: 25:91:d0:a9:c9:f2:c0:eb:17:51:42:bb:58:22:62: b1:b9:ec:04:36:39:3a:6a:1d:18:e2:62:66:0f:06: 46:84:6b:43:11:29:c3:d7:67:09:fa:1a:c9:47:35: ee:d5:98:ff:1b:af:2a:24:0f:20:e6:45:c8:a0:5c: aa:40:d8:0d:99:7e:ee:dc:f3:19:33:6e:90:76:78: 21:0a:7a:c0:dc:39:cb:80:14:aa:d0:1f:82:85:12: be:d5:fa:0f:b0:9e:c6:24:b0:fb:bc:85:ea:1e:50: 1a:5f:fb:18:4e:e6:24:64:cf:b8:b8:3a:33:b1:32: 2f:52:95:56:38:81:38:e0:5c:c2:c7:95:99:18:35: 9d:af:25:4c:5b:d6:04:ca:e8:93:0e:ce:f7:41:69: e1:75:9c:63:95:48:e3:27:64:d1:a9:84:e3:30:bf: 19:a4:2c:0c:1a:55:d1:e2:a8:b6:b2:07:d6:79:6b: 51:1c:2d:29:63:9c:64:7d:ba:ae:ef:3b:eb:c5:38: 51:83:21:1f:25:a9:c3:ab:db:82:bd:77:66:41:be: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:86:F3:A3:77:60:51:92:FA:F2:9A:68:FC:22:34:E3:25:0A:D3:2A X509v3 Authority Key Identifier: keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c8:dc:01:c9:b4:bd:29:3a:1e:79:f9:1f:3f:05:e9:c1:95: 3e:25:26:c0:a8:de:da:f3:2f:2a:79:b7:06:42:b7:7f:69:bd: e4:37:b0:1a:03:b4:54:f5:1f:09:67:fb:61:94:47:f2:cd:0e: 3c:ad:9c:b0:bb:56:25:73:0d:d7:8c:f5:75:46:59:cb:0e:87: 19:1c:25:e5:6c:3b:e7:cf:14:fa:e2:96:57:0e:bd:38:fb:6c: dd:1e:85:90:2c:f0:7f:02:3f:f3:a6:98:aa:39:32:26:29:5f: 9d:9a:23:1f:ed:18:00:7e:1f:83:2e:6e:29:52:5e:c3:63:b2: 27:ae:32:ae:c0:5d:01:7c:71:bc:8f:f8:50:77:e3:27:11:0b: 86:9b:9e:87:a4:b5:3c:06:e2:e2:6f:ef:16:06:4b:95:d6:e8: 4f:d8:6b:4a:92:44:d5:34:3b:61:3c:2a:44:1f:99:5c:ec:b9: f9:60:3c:08:f5:0b:1d:b7:02:be:8a:5b:bc:a1:05:3e:c3:94: 79:60:51:69:0c:b2:f2:14:6e:7a:7b:a4:61:24:d8:78:af:6f: 26:3d:62:93:48:38:c2:d3:59:5e:fe:de:ff:ad:4f:d1:7f:bb: e7:49:21:29:96:18:97:55:c9:c1:6c:be:0a:21:f4:c9:29:77: c8:66:6e:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD MkFGMkM2RjAwHhcNMjUwNzIwMTQ0MDU3WhcNMjUwNzI3MTQ0MDU3WjAYMRYwFAYD VQQDEw02ODdjZmZmOS02OTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaHpE7f+pSIUyuKTV+P0NSPJ/tOMTk3gkeZf615xcV5JmtdLwmEDGCCQfpkl kdCpyfLA6xdRQrtYImKxuewENjk6ah0Y4mJmDwZGhGtDESnD12cJ+hrJRzXu1Zj/ G68qJA8g5kXIoFyqQNgNmX7u3PMZM26QdnghCnrA3DnLgBSq0B+ChRK+1foPsJ7G JLD7vIXqHlAaX/sYTuYkZM+4uDozsTIvUpVWOIE44FzCx5WZGDWdryVMW9YEyuiT Ds73QWnhdZxjlUjjJ2TRqYTjML8ZpCwMGlXR4qi2sgfWeWtRHC0pY5xkfbqu7zvr xThRgyEfJanDq9uCvXdmQb4oswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyG86N3 YFGS+vKaaPwiNOMlCtMqMB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR YWRxNDczcFhhcUxDcnl4dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtyNwBybS9KToeefkfPwXpwZU+JSbAqN7a8y8qebcGQrd/ab3kN7Aa A7RU9R8JZ/thlEfyzQ48rZywu1Ylcw3XjPV1RlnLDocZHCXlbDvnzxT64pZXDr04 +2zdHoWQLPB/Aj/zppiqOTImKV+dmiMf7RgAfh+DLm4pUl7DY7InrjKuwF0BfHG8 j/hQd+MnEQuGm56HpLU8BuLib+8WBkuV1uhP2GtKkkTVNDthPCpEH5lc7Ln5YDwI 9QsdtwK+ilu8oQU+w5R5YFFpDLLyFG56e6RhJNh4r28mPWKTSDjC01le/t7/rU/R f7vnSSEplhiXVcnBbL4KIfTJKXfIZm5F -----END CERTIFICATE-----Generated at Sun Jul 20 19:20:35 2025 by rpki-client