$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json) Hash identifier: Kq/bWOwqtO59nkB0AoJijyl4vcTG9047cYwyk9tvVFQ= Subject key identifier: 1F:38:F1:F2:29:F8:74:8E:CE:5F:67:58:E3:92:19:F1:E6:4D:FB:7C Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Certificate serial: 11A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft Manifest number: 119A Signing time: Fri 22 Aug 2025 14:47:18 +0000 Manifest this update: Fri 22 Aug 2025 14:47:18 +0000 Manifest next update: Fri 29 Aug 2025 14:47:18 +0000 Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: grXbY80K3nmNCl9+j7Po7Xfs2I1ah2j58DYMi54Hr8k=) 2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: XN60w0eRqVpxeIfX7b6c8hnme3sk6Z9ebx38NO7BFYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4516 (0x11a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Validity Not Before: Aug 22 14:47:18 2025 GMT Not After : Aug 29 14:47:18 2025 GMT Subject: CN=68a882f6-136a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:40:4e:62:36:92:65:ec:90:b5:78:89:4e: 68:bc:94:1e:63:a4:d7:fa:33:d7:90:5d:e2:61:e1: 17:a2:f9:d9:69:bd:c7:03:0d:8f:80:1b:60:81:36: 4f:ca:cb:fc:4d:28:f9:3b:b7:82:74:ff:6b:7f:eb: 9b:3e:ba:a0:18:42:87:50:f9:61:d2:ba:c9:c0:09: 40:50:4c:97:b4:35:47:f7:ed:fb:3f:b5:f5:a0:d8: d1:df:67:bc:e5:c1:98:f3:12:c4:fb:c9:68:a9:e8: e3:65:7c:55:de:61:19:75:20:5b:03:b2:3a:93:cf: c9:f1:96:15:5d:b0:cb:f9:79:a4:ae:01:58:e0:0f: df:a3:9e:8d:c9:1d:21:2b:b3:ad:30:fb:fc:f6:e2: ad:78:1b:6a:0f:ee:c2:84:09:c1:61:56:1a:cf:5f: a2:c2:36:6f:1a:26:99:f6:ec:47:a8:55:9e:bd:84: 96:5e:71:0d:6b:6d:55:2b:5e:d9:bb:c1:26:df:93: d7:ce:65:41:b3:ee:1b:4b:47:51:1d:ed:d5:1f:c8: 93:cc:38:0c:a9:0c:8d:6b:2d:b5:bb:9a:09:07:c9: c4:80:76:5c:8d:d2:b2:84:5c:08:bd:78:59:b4:6b: c9:3d:6d:6b:7c:90:37:a2:b3:f5:93:d0:8a:bf:3b: 6a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:38:F1:F2:29:F8:74:8E:CE:5F:67:58:E3:92:19:F1:E6:4D:FB:7C X509v3 Authority Key Identifier: keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:ac:dd:a2:85:b8:15:35:6c:19:f6:8d:f2:34:2f:00:ad:c8: e8:b5:9f:58:6b:67:70:ba:a0:70:1d:cc:9f:c8:73:17:d6:f2: f1:5f:30:85:a5:43:06:26:61:24:94:6b:5e:d9:db:7b:11:80: 6d:14:4f:3a:e7:17:18:9d:12:38:e2:59:e1:f8:44:96:59:34: 7b:92:c2:c5:68:e3:4d:61:52:d4:29:55:5c:cf:a2:f7:d3:fd: 9a:26:65:f3:68:64:dd:88:ce:f9:cb:5e:95:80:75:43:4d:d7: 45:2d:59:d8:01:d7:82:71:df:c9:7a:f9:01:06:4e:7b:7d:7f: 8f:05:71:b0:b1:c0:9c:d8:52:5d:be:23:64:ae:d3:55:cb:08: ad:79:6b:54:64:68:b8:f8:50:c8:25:e7:d8:b5:4e:e6:c0:f2: 42:5e:75:b7:0f:20:9d:d1:34:46:08:02:d2:43:ba:46:af:ab: 36:d3:2b:7c:e0:21:88:d9:f3:ee:6d:99:10:b3:ca:aa:d0:46: 30:15:7f:20:7a:17:48:a9:04:55:d3:17:2f:be:14:61:9f:f5: 86:64:58:0a:ad:d3:e4:27:b5:00:b1:1e:df:f3:aa:8d:80:dd: 3e:fc:10:78:92:36:30:fb:60:96:39:17:95:c1:34:50:4a:5a: 42:d2:1b:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx OTRBQ0ZBNTgwHhcNMjUwODIyMTQ0NzE4WhcNMjUwODI5MTQ0NzE4WjAYMRYwFAYD VQQDEw02OGE4ODJmNi0xMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1VATmI2kmXskLV4iU5ovJQeY6TX+jPXkF3iYeEXovnZab3HAw2PgBtggTZP ysv8TSj5O7eCdP9rf+ubPrqgGEKHUPlh0rrJwAlAUEyXtDVH9+37P7X1oNjR32e8 5cGY8xLE+8loqejjZXxV3mEZdSBbA7I6k8/J8ZYVXbDL+XmkrgFY4A/fo56NyR0h K7OtMPv89uKteBtqD+7ChAnBYVYaz1+iwjZvGiaZ9uxHqFWevYSWXnENa21VK17Z u8Em35PXzmVBs+4bS0dRHe3VH8iTzDgMqQyNay21u5oJB8nEgHZcjdKyhFwIvXhZ tGvJPW1rfJA3orP1k9CKvztq4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB848fIp +HSOzl9nWOOSGfHmTft8MB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0 MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT Qk9PdHd0N05iU29aU3MtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUrN2ihbgVNWwZ9o3yNC8ArcjotZ9Ya2dwuqBwHcyfyHMX1vLxXzCF pUMGJmEklGte2dt7EYBtFE865xcYnRI44lnh+ESWWTR7ksLFaONNYVLUKVVcz6L3 0/2aJmXzaGTdiM75y16VgHVDTddFLVnYAdeCcd/JevkBBk57fX+PBXGwscCc2FJd viNkrtNVywiteWtUZGi4+FDIJefYtU7mwPJCXnW3DyCd0TRGCALSQ7pGr6s20yt8 4CGI2fPubZkQs8qq0EYwFX8gehdIqQRV0xcvvhRhn/WGZFgKrdPkJ7UAsR7f86qN gN0+/BB4kjYw+2CWOReVwTRQSlpC0hs5 -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:56 2025 by rpki-client