$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json) Hash identifier: 9PfJhiQEcapef1fE4Qooh2J+A34wErhf/a9kN+bbyj0= Subject key identifier: 3D:30:EF:8E:02:36:42:03:67:A4:03:74:5B:1E:3F:A9:24:17:55:8E Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Certificate serial: 118A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft Manifest number: 1180 Signing time: Wed 02 Jul 2025 14:48:42 +0000 Manifest this update: Wed 02 Jul 2025 14:48:41 +0000 Manifest next update: Wed 09 Jul 2025 14:48:41 +0000 Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: GfyPnY8hv+lypWJGAWSDs9am/Ahiyn2Ufu6i1c6ZOJg=) 2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: XN60w0eRqVpxeIfX7b6c8hnme3sk6Z9ebx38NO7BFYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4490 (0x118a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Validity Not Before: Jul 2 14:48:41 2025 GMT Not After : Jul 9 14:48:41 2025 GMT Subject: CN=686546ca-d308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:81:d7:40:48:23:6a:1d:02:3c:81:3f:c2: 76:c4:9a:c1:b5:47:a5:40:b3:ae:de:33:99:69:fb: 21:dc:f5:fd:35:d5:08:2b:78:ce:be:f7:6e:f7:51: 7c:75:40:9b:cf:d5:94:61:dc:40:2e:91:41:5a:f1: 55:d0:6d:eb:4e:03:55:3b:3a:87:45:54:f8:e4:0d: 5b:14:e1:5c:63:f7:55:d9:94:e7:b4:1f:1b:5b:d6: 1e:be:9e:8e:8f:d3:a4:63:71:4b:fc:e5:61:f9:12: 60:42:93:ae:78:27:67:3a:e5:55:0d:d8:46:8b:c1: fd:4f:8a:ff:79:15:ac:87:66:e3:78:02:bb:4c:ae: 69:46:cb:85:a3:9c:e5:b4:ce:e0:ce:39:10:f1:f7: 05:72:84:aa:21:cd:f7:e6:8f:60:fd:3a:b3:4e:94: 0d:d6:bf:96:8c:f9:7d:4d:37:2b:8d:49:0d:8b:6b: 01:69:f3:99:6c:23:54:a6:23:c1:d8:f7:53:43:97: 13:9f:92:cc:7b:fe:d3:aa:5b:00:99:b4:d9:e7:d9: d4:77:56:2f:8b:d8:7d:d5:dd:c3:a1:42:3c:f5:3c: 83:d5:08:86:83:82:85:7c:dc:45:d8:31:a8:e6:08: 6f:b7:78:97:96:b5:c8:0f:51:66:5d:be:c9:d8:6b: db:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:30:EF:8E:02:36:42:03:67:A4:03:74:5B:1E:3F:A9:24:17:55:8E X509v3 Authority Key Identifier: keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a6:f1:31:64:3a:3b:1e:14:5f:52:50:e2:de:11:10:24:9c: 7f:3f:da:7a:ba:7d:11:cf:40:5c:54:2c:a1:24:35:b6:56:c8: ad:a7:d7:c2:52:21:a9:ce:ad:c1:5f:89:22:91:d7:24:1f:2f: 21:fe:e0:2b:45:e8:90:5c:d0:59:e3:f7:8a:28:19:1f:0c:a1: cd:71:58:cb:af:59:46:d1:d1:48:ec:86:23:a8:00:f9:06:67: 41:5d:e1:0b:a3:f8:dc:c9:93:51:ce:04:0a:1b:39:b9:9d:ee: 70:35:fb:b4:39:5d:ad:b5:b7:89:1e:71:7d:e0:86:b5:e7:1e: 20:7f:8c:78:72:20:63:70:8a:b6:60:67:80:2c:39:d0:6f:cf: f1:31:ac:fc:28:b0:51:79:33:94:ad:c7:39:7f:db:9b:36:71: e8:67:b0:a2:d2:8c:00:41:47:85:81:34:5d:d1:35:64:80:7e: 32:0a:57:94:77:53:8c:68:57:77:01:0b:a6:06:ee:c6:d1:d7: b8:ad:1e:7f:8d:e3:4f:c8:3f:76:67:cb:18:3f:1a:a7:92:3d: 50:bc:a2:97:80:b6:8f:36:4c:e3:88:3b:c2:7b:4e:7c:3e:92: 27:8b:18:5b:35:ff:7e:23:29:78:be:b0:99:d7:ce:5a:f7:af: f1:e8:21:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx OTRBQ0ZBNTgwHhcNMjUwNzAyMTQ0ODQxWhcNMjUwNzA5MTQ0ODQxWjAYMRYwFAYD VQQDEw02ODY1NDZjYS1kMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGaB10BII2odAjyBP8J2xJrBtUelQLOu3jOZafsh3PX9NdUIK3jOvvdu91F8 dUCbz9WUYdxALpFBWvFV0G3rTgNVOzqHRVT45A1bFOFcY/dV2ZTntB8bW9Yevp6O j9OkY3FL/OVh+RJgQpOueCdnOuVVDdhGi8H9T4r/eRWsh2bjeAK7TK5pRsuFo5zl tM7gzjkQ8fcFcoSqIc335o9g/TqzTpQN1r+WjPl9TTcrjUkNi2sBafOZbCNUpiPB 2PdTQ5cTn5LMe/7TqlsAmbTZ59nUd1Yvi9h91d3DoUI89TyD1QiGg4KFfNxF2DGo 5ghvt3iXlrXID1FmXb7J2GvbIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0w744C NkIDZ6QDdFseP6kkF1WOMB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0 MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT Qk9PdHd0N05iU29aU3MtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKpvExZDo7HhRfUlDi3hEQJJx/P9p6un0Rz0BcVCyhJDW2Vsitp9fC UiGpzq3BX4kikdckHy8h/uArReiQXNBZ4/eKKBkfDKHNcVjLr1lG0dFI7IYjqAD5 BmdBXeELo/jcyZNRzgQKGzm5ne5wNfu0OV2ttbeJHnF94Ia15x4gf4x4ciBjcIq2 YGeALDnQb8/xMaz8KLBReTOUrcc5f9ubNnHoZ7Ci0owAQUeFgTRd0TVkgH4yCleU d1OMaFd3AQumBu7G0de4rR5/jeNPyD92Z8sYPxqnkj1QvKKXgLaPNkzjiDvCe058 PpInixhbNf9+Iyl4vrCZ185a96/x6CGY -----END CERTIFICATE-----Generated at Fri Jul 4 08:06:16 2025 by rpki-client