$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: rW4LdUP3N1F00SIIYdXX3aNtQW9+LpEx4vAq3IHOqKU= Subject key identifier: 3A:57:25:EF:B5:3F:A0:D3:02:6A:68:82:A8:93:BA:DE:02:3F:51:9A Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 35B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 353D Signing time: Mon 30 Jun 2025 14:25:12 +0000 Manifest this update: Mon 30 Jun 2025 14:25:11 +0000 Manifest next update: Mon 07 Jul 2025 14:25:11 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: x162eKqRx519YDu0CtJcx1oMcbdw0RqgY+DeTMJ4sJo=) 2: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: K1247atG6VcquFBVwBls5U4Yo0bOwGwF2rk8wL92RbY=) 3: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: agkjmUvruNWx97AQQ1tqZMJkgxJIavfnk0MQ7A0ZaCQ=) 4: 2073E864296811F0A6399A39C4F9AE02.roa (hash: 8ZB6VUHycNo0miBKXTxZR6/xauWgpCGzbheVrh5p91M=) 5: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: rAOd8xVKvANxmyBwOeyZF3qLA857c4wVbRSif1s6BJM=) 6: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: XHgWXPYofK0UqDGJyFt5vqak/B9drtR7oomIl0a3mgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13746 (0x35b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: Jun 30 14:25:11 2025 GMT Not After : Jul 7 14:25:11 2025 GMT Subject: CN=68629e47-0db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ca:17:36:f6:db:de:04:06:77:0c:05:99:d3: 8d:36:89:c0:15:ba:f3:82:89:ce:06:3a:48:9f:0d: 86:77:e0:c1:ef:bc:1b:c1:e0:fb:b0:fc:f8:58:dc: b3:44:59:35:d7:2e:38:f9:bb:2d:53:15:17:ff:82: 2a:fc:11:f5:a1:b2:32:d1:41:92:e3:92:1b:f5:bb: c5:c6:ff:d2:ec:d4:e8:96:0f:15:ba:a7:47:ca:13: 96:8c:e5:b4:5f:72:ca:a5:26:4d:1d:84:36:62:e5: c5:86:6a:db:0a:8b:8f:60:bd:b6:af:e1:d3:25:4a: 1c:81:cb:ba:6d:5b:7c:77:61:b4:b6:e2:bd:50:81: f6:09:16:d7:dc:6d:ba:c1:9a:21:7d:37:63:68:e9: d6:2e:97:c8:dc:ac:b7:41:5f:65:fb:c8:23:40:2a: 78:75:49:90:4b:46:7e:ef:f3:16:0c:96:37:7d:94: 8f:07:20:5c:4d:6e:6f:ab:7c:50:44:ee:4c:a0:a3: 71:d5:cb:70:d6:23:2a:8c:1a:e9:17:90:24:68:2a: d3:5a:c9:22:ab:ab:4a:ef:42:d4:54:bd:c9:e0:c4: 04:cd:d6:19:60:a2:39:3e:4a:72:ce:1e:d7:88:0d: 2b:26:9e:4a:d8:03:4b:b2:40:8a:61:66:fd:da:63: f9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:57:25:EF:B5:3F:A0:D3:02:6A:68:82:A8:93:BA:DE:02:3F:51:9A X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:c1:67:d9:6e:f5:4c:69:d1:a6:10:47:cd:01:59:a9:63:75: 3f:a0:24:92:76:79:5c:a6:6c:29:e7:8b:ca:34:d7:22:e8:6f: 8a:48:b5:cf:26:f2:26:ec:2e:df:4b:89:c7:d8:30:f4:21:f2: 8a:b2:87:8a:ae:0f:cc:5c:9d:2b:fc:b1:6f:86:90:1f:a3:bd: 77:5e:8d:8c:b4:d8:8f:6d:2e:d7:17:85:7a:81:c8:66:f4:99: 1c:65:90:fe:98:5f:fe:ec:5a:24:64:6d:28:6d:07:3b:58:b9: 34:ad:01:c4:48:50:91:83:20:65:fd:75:a0:03:3c:73:17:ca: 4f:40:11:75:d8:f1:94:cc:6d:5a:15:f8:a8:93:3d:77:fc:1c: dd:62:c6:55:62:1d:26:bd:b8:48:b2:3c:97:3c:8f:83:dc:f0: 54:71:d0:be:53:08:3b:e1:6b:39:50:4b:19:fe:f5:72:37:93: 56:36:5c:17:5b:7d:86:8b:ec:9c:f6:83:43:d7:ac:7e:8b:eb: 69:3a:6d:8f:24:b1:cf:ee:e8:f9:64:ce:c9:1b:c0:52:ab:01: d9:a8:d0:ef:cf:5e:e1:48:e1:7e:e4:7b:fd:31:56:d6:2b:cc: 68:b9:e4:1f:d3:1e:b2:91:ed:36:25:d6:5a:53:10:76:20:29: 21:d9:62:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjUwNjMwMTQyNTExWhcNMjUwNzA3MTQyNTExWjAYMRYwFAYD VQQDEw02ODYyOWU0Ny0wZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28oXNvbb3gQGdwwFmdONNonAFbrzgonOBjpInw2Gd+DB77wbweD7sPz4WNyz RFk11y44+bstUxUX/4Iq/BH1obIy0UGS45Ib9bvFxv/S7NTolg8VuqdHyhOWjOW0 X3LKpSZNHYQ2YuXFhmrbCouPYL22r+HTJUocgcu6bVt8d2G0tuK9UIH2CRbX3G26 wZohfTdjaOnWLpfI3Ky3QV9l+8gjQCp4dUmQS0Z+7/MWDJY3fZSPByBcTW5vq3xQ RO5MoKNx1ctw1iMqjBrpF5AkaCrTWskiq6tK70LUVL3J4MQEzdYZYKI5Pkpyzh7X iA0rJp5K2ANLskCKYWb92mP5DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpXJe+1 P6DTAmpogqiTut4CP1GaMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmwWfZbvVMadGmEEfNAVmpY3U/oCSSdnlcpmwp54vKNNci6G+KSLXP JvIm7C7fS4nH2DD0IfKKsoeKrg/MXJ0r/LFvhpAfo713Xo2MtNiPbS7XF4V6gchm 9JkcZZD+mF/+7FokZG0obQc7WLk0rQHESFCRgyBl/XWgAzxzF8pPQBF12PGUzG1a Ffiokz13/BzdYsZVYh0mvbhIsjyXPI+D3PBUcdC+Uwg74Ws5UEsZ/vVyN5NWNlwX W32Gi+yc9oND16x+i+tpOm2PJLHP7uj5ZM7JG8BSqwHZqNDvz17hSOF+5Hv9MVbW K8xoueQf0x6yke02JdZaUxB2ICkh2WL/ -----END CERTIFICATE-----Generated at Mon Jun 30 22:07:28 2025 by rpki-client