$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: dbioQyLitm/AzG+gKGRSksj7s46A4NKG4E8Eh5JFfek= Subject key identifier: F5:B4:F5:B7:4F:6B:A6:0E:2F:55:8D:B1:9C:8A:8A:A5:05:D8:5C:12 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 09CF Signing time: Fri 20 Jun 2025 19:55:17 +0000 Manifest this update: Fri 20 Jun 2025 19:55:16 +0000 Manifest next update: Fri 27 Jun 2025 19:55:16 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: O7mOkJndSY2/zq8//7KfBcb0NbIkp/2c/dMExQOv6HM=) 2: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: cv1XOQDllKYXcpEWN6EDo+84rWYyoCQRLW84g8KQ5ZA=) 3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: 19peW13UIPklgma9IsoYtyIgEi8rvSKuXv+9ezxIut4=) 4: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: VqWzdPFCvuqUEShaf6/toPwLspmfOG4EJ7lP9CUoJW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 19:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Jun 20 19:55:16 2025 GMT Not After : Jun 27 19:55:16 2025 GMT Subject: CN=6855bca5-a7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:cf:2c:71:ea:48:82:a0:d3:f3:54:d1:5e: a3:cc:ad:4a:0f:35:6c:a2:f0:e7:70:1c:5b:34:a1: c0:7c:97:bc:8e:b8:91:18:9b:c3:a6:44:46:58:06: a9:75:aa:1c:d9:e5:a6:8a:e9:ce:72:ec:42:35:a0: 1c:ff:dd:f0:6c:9d:6a:95:62:4e:39:b1:39:50:31: ab:ad:df:b9:a8:ec:87:8d:d8:05:8b:08:94:c0:cf: 32:f5:de:ed:59:2f:9b:5f:1d:61:a2:c9:1c:01:ab: cc:b2:6c:e7:04:0e:e8:5a:88:18:ad:2a:f6:7d:25: 23:71:6d:21:7b:1a:f6:29:88:ce:97:d3:7f:81:3f: d8:11:4f:34:bc:92:c5:91:17:b3:50:63:33:4c:61: cd:ff:37:e8:af:a0:03:f0:85:7f:44:7e:41:55:3b: b0:07:8f:e3:f7:a6:80:9e:89:1d:5a:9c:37:a9:bf: 3f:04:dd:5a:f4:90:ae:ef:18:e2:0e:97:c7:47:bb: 05:8b:45:f5:3a:2a:9c:f5:f1:fe:41:3c:9d:2b:7c: 18:a8:54:a2:bd:22:8d:cb:01:3d:cc:da:ca:f3:9a: 11:72:53:0c:f0:13:56:84:26:62:67:02:db:2e:74: b3:01:e8:da:24:55:a2:bf:37:2e:53:f7:85:48:cd: 74:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B4:F5:B7:4F:6B:A6:0E:2F:55:8D:B1:9C:8A:8A:A5:05:D8:5C:12 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:fb:43:2a:e8:77:2a:68:79:2f:b4:48:9d:55:53:fa:0d:70: af:5d:93:ec:3f:2e:c4:b8:1d:a7:dd:f8:46:f3:a7:d4:a9:21: d2:eb:ec:ee:1e:ee:d1:67:26:fb:2d:a1:e6:11:30:88:d6:40: 62:f9:32:0d:d8:d0:60:76:8f:5d:cf:f0:90:20:3d:96:ed:51: bc:5e:dc:76:1c:0c:a7:1f:6c:4c:59:59:ad:74:10:3e:fb:29: 1d:49:f9:52:1a:20:ad:07:e8:50:88:f4:f2:fb:0b:8f:95:c8: e5:12:9e:f2:6a:24:7d:e3:48:57:45:34:33:2f:06:db:02:9d: f8:50:e6:bb:19:80:7b:37:6c:ba:7a:25:de:58:1c:15:5d:3a: f5:a5:bb:4c:1d:df:72:0d:8f:89:67:24:e5:3d:32:44:67:6a: 02:57:63:04:80:9c:31:0f:cb:e8:e7:32:fb:e9:69:63:da:7b: 97:c3:ce:44:d2:13:54:4f:82:de:49:e4:e1:56:2d:51:1d:66: 47:20:7a:4d:1a:e1:f3:d9:c8:64:a8:97:6e:7f:d5:f8:ba:1b: 7e:76:8a:b8:85:ad:42:3a:ef:be:20:a6:f3:af:57:21:fa:93: 71:e5:fb:df:8f:e2:25:ee:7c:3a:0d:f8:74:45:9f:57:b8:fa: af:bf:50:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjUwNjIwMTk1NTE2WhcNMjUwNjI3MTk1NTE2WjAYMRYwFAYD VQQDEw02ODU1YmNhNS1hN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9DPLHHqSIKg0/NU0V6jzK1KDzVsovDncBxbNKHAfJe8jriRGJvDpkRGWAap daoc2eWmiunOcuxCNaAc/93wbJ1qlWJOObE5UDGrrd+5qOyHjdgFiwiUwM8y9d7t WS+bXx1hoskcAavMsmznBA7oWogYrSr2fSUjcW0hexr2KYjOl9N/gT/YEU80vJLF kRezUGMzTGHN/zfor6AD8IV/RH5BVTuwB4/j96aAnokdWpw3qb8/BN1a9JCu7xji DpfHR7sFi0X1Oiqc9fH+QTydK3wYqFSivSKNywE9zNrK85oRclMM8BNWhCZiZwLb LnSzAejaJFWivzcuU/eFSM10xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPW09bdP a6YOL1WNsZyKiqUF2FwSMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH+0Mq6HcqaHkvtEidVVP6DXCvXZPsPy7EuB2n3fhG86fUqSHS6+zu Hu7RZyb7LaHmETCI1kBi+TIN2NBgdo9dz/CQID2W7VG8Xtx2HAynH2xMWVmtdBA+ +ykdSflSGiCtB+hQiPTy+wuPlcjlEp7yaiR940hXRTQzLwbbAp34UOa7GYB7N2y6 eiXeWBwVXTr1pbtMHd9yDY+JZyTlPTJEZ2oCV2MEgJwxD8vo5zL76Wlj2nuXw85E 0hNUT4LeSeThVi1RHWZHIHpNGuHz2chkqJduf9X4uht+doq4ha1COu++IKbzr1ch +pNx5fvfj+Il7nw6Dfh0RZ9XuPqvv1DP -----END CERTIFICATE-----Generated at Sat Jun 21 20:47:31 2025 by rpki-client