$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: V76A3NDQMgP3xi6giL3XfRV+a0BcelNo0++zom9jJBs= Subject key identifier: C2:DF:F0:AB:78:16:85:7D:32:7B:E3:95:D1:D3:EE:E5:40:92:C8:B5 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0A0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 09EA Signing time: Fri 08 Aug 2025 20:16:48 +0000 Manifest this update: Fri 08 Aug 2025 20:16:48 +0000 Manifest next update: Fri 15 Aug 2025 20:16:48 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: hEEVnAKzYmMEshnsbEErL9akEYjnNp1r2axMoMaiCCI=) 2: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: 4oLW18xAlE3B8nPyqU3w32UG4L4+C+i7k1rNnlKSQ7s=) 3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: PcZXGp5zvO/A3lEsDn884MTZ2FtXJ7tXRCkkHLH+i5g=) 4: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: 7NNAaJL+KytCopmMwh7xFBD72cI0M9FvnIHrWbUqbbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2575 (0xa0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Aug 8 20:16:48 2025 GMT Not After : Aug 15 20:16:48 2025 GMT Subject: CN=68965b30-80d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:2a:ca:39:a3:c2:7d:90:72:7f:66:9c:5f: e9:6b:2a:de:e3:ce:75:f6:0e:6a:6a:5b:95:be:0e: 34:d8:ae:6d:ca:00:f6:04:b1:8f:3a:85:b3:1d:e2: c8:b2:cd:d7:4c:15:6f:34:aa:e6:ab:8d:9b:3a:86: 88:02:fe:de:86:5c:69:29:77:19:82:b2:61:a3:b1: d3:8f:17:d3:56:04:e4:bb:9b:08:ab:1a:84:30:a6: 66:b4:c3:0c:51:99:7c:51:d1:77:77:09:14:47:43: 16:d0:6a:6e:04:b2:75:19:29:da:d0:96:6c:7d:d2: b1:5b:17:10:72:f4:ce:11:45:62:81:f0:aa:41:52: e0:62:55:fe:ac:2d:61:56:35:99:7c:bf:90:28:a9: 95:2a:38:2c:f1:7d:99:20:36:7f:8e:40:6c:5a:9d: 28:2d:eb:f8:83:8e:ce:d6:30:30:4d:72:b9:d9:a9: aa:7e:fb:53:cf:45:9d:ee:11:f5:c9:2d:9f:78:c3: e0:0f:59:b8:5e:44:8d:cd:b5:2a:45:fd:de:47:5d: 92:59:3f:4b:82:b5:77:84:b4:64:ea:6f:3b:f2:2b: 00:a6:99:3c:cd:6e:61:d7:9e:fe:5c:27:70:5f:a0: d2:45:92:58:7a:10:54:7b:59:98:87:fb:5f:77:14: f3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DF:F0:AB:78:16:85:7D:32:7B:E3:95:D1:D3:EE:E5:40:92:C8:B5 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6e:29:60:38:85:dc:40:e6:e9:88:a0:d5:65:2c:1b:4e:56: 47:dc:45:27:b4:77:19:34:da:e9:d3:76:3e:8d:8b:b5:89:dd: 75:f6:10:dd:3d:95:00:ab:75:73:2b:df:03:12:61:ea:60:8b: 33:6e:e3:ab:df:bb:58:90:46:e3:5c:92:5e:99:8b:7a:9d:a6: f9:bc:c5:ad:31:a3:47:ec:fd:77:9b:10:3e:f0:8c:d5:c3:43: f7:f6:2a:86:33:88:5f:55:03:44:02:0a:8a:18:32:22:60:95: 5f:70:74:f4:3a:97:8c:81:6c:2b:91:bd:6d:e7:d9:fe:56:57: c6:d6:a1:43:0f:77:96:5b:e3:db:26:c0:e9:48:90:bb:5f:4e: 2d:a3:f5:8f:10:11:13:65:ad:b1:8b:45:63:ae:26:1d:56:64: 4e:82:b5:34:2b:c0:05:b2:24:e6:d8:d0:38:14:c2:60:1f:64: fc:db:50:7a:2e:3d:c9:da:b6:f6:80:e8:f6:39:d4:34:7f:41: a1:b1:ce:32:3d:99:68:31:69:d1:5d:0b:6c:7d:d6:65:ca:6a: 49:88:c0:98:c4:47:3e:b5:58:32:47:57:c7:1a:c6:b7:b4:25: bd:ae:60:57:d2:72:53:d5:5a:20:92:af:7c:7e:c1:82:c0:9d: b0:70:0a:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjUwODA4MjAxNjQ4WhcNMjUwODE1MjAxNjQ4WjAYMRYwFAYD VQQDEw02ODk2NWIzMC04MGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAst0qyjmjwn2Qcn9mnF/payre48519g5qaluVvg402K5tygD2BLGPOoWzHeLI ss3XTBVvNKrmq42bOoaIAv7ehlxpKXcZgrJho7HTjxfTVgTku5sIqxqEMKZmtMMM UZl8UdF3dwkUR0MW0GpuBLJ1GSna0JZsfdKxWxcQcvTOEUVigfCqQVLgYlX+rC1h VjWZfL+QKKmVKjgs8X2ZIDZ/jkBsWp0oLev4g47O1jAwTXK52amqfvtTz0Wd7hH1 yS2feMPgD1m4XkSNzbUqRf3eR12SWT9LgrV3hLRk6m878isAppk8zW5h157+XCdw X6DSRZJYehBUe1mYh/tfdxTzeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLf8Kt4 FoV9MnvjldHT7uVAksi1MB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCabilgOIXcQObpiKDVZSwbTlZH3EUntHcZNNrp03Y+jYu1id119hDd PZUAq3VzK98DEmHqYIszbuOr37tYkEbjXJJemYt6nab5vMWtMaNH7P13mxA+8IzV w0P39iqGM4hfVQNEAgqKGDIiYJVfcHT0OpeMgWwrkb1t59n+VlfG1qFDD3eWW+Pb JsDpSJC7X04to/WPEBETZa2xi0VjriYdVmROgrU0K8AFsiTm2NA4FMJgH2T821B6 Lj3J2rb2gOj2OdQ0f0Ghsc4yPZloMWnRXQtsfdZlympJiMCYxEc+tVgyR1fHGsa3 tCW9rmBX0nJT1Vogkq98fsGCwJ2wcArx -----END CERTIFICATE-----Generated at Sun Aug 10 21:18:43 2025 by rpki-client