$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: 34FhYBwbNHrSTUyQjFLPNODk7iK7v6oboXoj0hQ5bao= Subject key identifier: 4D:23:8D:85:26:7F:5C:F7:91:16:3E:74:A1:BE:05:D8:D1:E6:57:FF Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 34E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 34B9 Signing time: Mon 30 Jun 2025 14:42:45 +0000 Manifest this update: Mon 30 Jun 2025 14:42:44 +0000 Manifest next update: Mon 07 Jul 2025 14:42:44 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: imt1zj73pOy5406J8Ocza0KtKvZNEtA1Kz5ydYQWPuA=) 2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: wvEIUxvlUFTH2qcHsopuAxq+KjN4ylNQUioBhK93yXg=) 3: 4A08F422F43211EBA188C86AC4F9AE02.roa (hash: 3Y7LHhfPoBb0WxabpgiKDHOJivLh/nfOe4OHRiwg/0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: Jun 30 14:42:44 2025 GMT Not After : Jul 7 14:42:44 2025 GMT Subject: CN=6862a264-db7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:65:45:f3:53:17:f2:4a:f0:ff:a7:40:ab: 63:ea:06:17:c2:55:0a:ef:34:99:4e:e8:67:0d:e1: ee:6d:2b:32:0a:33:17:b2:70:80:94:19:c3:00:2b: ae:7d:15:08:52:5d:25:f1:bf:08:03:26:fc:6f:c5: 99:35:35:40:44:5a:ef:e5:ba:c6:54:f9:c9:eb:4b: 5c:0d:0e:be:5f:78:36:9e:e4:9a:1c:99:cd:b4:d0: e0:6c:d8:f5:73:96:47:3c:5e:20:b1:9c:dc:f6:20: f1:89:41:2c:d9:a4:d7:62:99:56:15:9a:66:5f:fa: d7:26:a5:2a:b7:08:9c:c9:2f:22:cb:13:cb:4b:73: fe:a7:1e:dc:43:73:9f:dc:79:db:c5:33:45:55:fe: a9:10:47:62:53:0b:99:bf:d6:de:f3:d4:eb:8a:b2: b1:85:e6:c3:3f:15:8e:6e:d7:be:34:58:3c:76:26: ed:09:b9:b8:0c:34:60:d5:fa:46:fb:fd:c7:81:6e: 3b:08:4e:ec:6e:2a:c6:cf:2b:f4:9f:15:45:04:6a: 5b:9a:c4:e5:85:db:23:d3:d9:7c:cf:cf:73:fb:a4: ad:e9:3a:7d:5d:41:d4:e9:49:cc:ee:3b:9e:2a:0b: 1f:73:a2:99:8e:c3:f7:c1:ff:7a:9d:fd:e0:7e:dc: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:23:8D:85:26:7F:5C:F7:91:16:3E:74:A1:BE:05:D8:D1:E6:57:FF X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:bf:37:b8:88:7e:89:9c:78:ad:39:f7:64:43:33:a6:7c:0c: a1:51:51:6d:f6:59:c4:4f:b7:bd:76:27:83:52:bd:2f:2b:53: be:81:62:60:e4:ae:31:b3:3a:b2:4b:42:b4:5e:49:76:c3:28: aa:97:14:07:67:32:38:ea:7a:b1:13:7c:8a:2f:5f:7d:ec:1b: 71:bb:79:45:3c:88:47:8c:45:81:23:88:8b:f7:92:23:01:45: b7:bf:67:6b:af:88:90:8f:d3:e5:c4:49:12:27:48:58:11:1a: 40:fc:2b:de:c9:3d:29:57:ad:6d:97:18:7e:36:09:0a:c2:82: 5e:5e:e5:43:8d:34:5e:c5:bb:43:23:77:95:22:19:ce:20:ee: 3c:f2:97:0e:b0:c0:e1:56:a8:6e:d0:45:ff:a9:c2:56:86:9e: 2c:83:9b:cd:07:9f:c4:3d:32:4c:8d:83:7a:3b:b0:2d:56:70: ce:27:3a:49:94:34:77:fb:70:6f:bf:b3:43:08:f1:bf:ab:33: 51:30:4b:c1:b2:27:07:02:63:2a:12:25:97:42:3e:82:ed:77: 3f:c1:5d:6a:f0:8b:9f:52:0f:6f:ed:fe:86:df:f3:55:92:a6: 98:9f:bb:70:d4:4f:bb:9f:29:a9:aa:ab:5c:f2:fb:69:b2:7a: 2f:7e:2e:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjUwNjMwMTQ0MjQ0WhcNMjUwNzA3MTQ0MjQ0WjAYMRYwFAYD VQQDEw02ODYyYTI2NC1kYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aplRfNTF/JK8P+nQKtj6gYXwlUK7zSZTuhnDeHubSsyCjMXsnCAlBnDACuu fRUIUl0l8b8IAyb8b8WZNTVARFrv5brGVPnJ60tcDQ6+X3g2nuSaHJnNtNDgbNj1 c5ZHPF4gsZzc9iDxiUEs2aTXYplWFZpmX/rXJqUqtwicyS8iyxPLS3P+px7cQ3Of 3HnbxTNFVf6pEEdiUwuZv9be89TrirKxhebDPxWObte+NFg8dibtCbm4DDRg1fpG +/3HgW47CE7sbirGzyv0nxVFBGpbmsTlhdsj09l8z89z+6St6Tp9XUHU6UnM7jue Kgsfc6KZjsP3wf96nf3gftx5KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0jjYUm f1z3kRY+dKG+BdjR5lf/MB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2vze4iH6JnHitOfdkQzOmfAyhUVFt9lnET7e9dieDUr0vK1O+gWJg 5K4xszqyS0K0Xkl2wyiqlxQHZzI46nqxE3yKL1997Btxu3lFPIhHjEWBI4iL95Ij AUW3v2drr4iQj9PlxEkSJ0hYERpA/CveyT0pV61tlxh+NgkKwoJeXuVDjTRexbtD I3eVIhnOIO488pcOsMDhVqhu0EX/qcJWhp4sg5vNB5/EPTJMjYN6O7AtVnDOJzpJ lDR3+3Bvv7NDCPG/qzNRMEvBsicHAmMqEiWXQj6C7Xc/wV1q8IufUg9v7f6G3/NV kqaYn7tw1E+7nympqqtc8vtpsnovfi4K -----END CERTIFICATE-----Generated at Mon Jun 30 19:05:56 2025 by rpki-client