$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: ZPVhx9r8GQygauziZjaPWqtQ9CKSc50A3KEk8EfdIms= Subject key identifier: 5B:77:9B:57:5C:F4:57:2D:16:7B:77:12:60:2A:7F:E0:FC:0B:A8:A0 Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 35AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 3535 Signing time: Sat 14 Jun 2025 14:22:50 +0000 Manifest this update: Sat 14 Jun 2025 14:22:49 +0000 Manifest next update: Sat 21 Jun 2025 14:22:49 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: Mjtr2UH4+F/1LlnkAaBreaOm2ZQqlBJFILrRnZbtOc8=) 2: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: K1247atG6VcquFBVwBls5U4Yo0bOwGwF2rk8wL92RbY=) 3: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: agkjmUvruNWx97AQQ1tqZMJkgxJIavfnk0MQ7A0ZaCQ=) 4: 2073E864296811F0A6399A39C4F9AE02.roa (hash: 8ZB6VUHycNo0miBKXTxZR6/xauWgpCGzbheVrh5p91M=) 5: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: rAOd8xVKvANxmyBwOeyZF3qLA857c4wVbRSif1s6BJM=) 6: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: XHgWXPYofK0UqDGJyFt5vqak/B9drtR7oomIl0a3mgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13738 (0x35aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: Jun 14 14:22:49 2025 GMT Not After : Jun 21 14:22:49 2025 GMT Subject: CN=684d85ba-dada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:60:fc:6d:47:90:25:7c:4f:32:e2:e1:fc: bd:43:7a:f4:67:19:51:9a:47:19:75:13:90:53:c1: cb:54:26:29:c5:57:bf:36:08:44:8d:45:fd:09:98: 0d:33:f5:d3:1e:29:d9:eb:f7:58:36:b9:4f:77:94: 0f:e6:68:31:b1:41:33:55:49:f2:71:51:ae:0d:02: da:f3:5c:f1:8c:f9:ba:35:bc:cc:33:dd:d2:ec:e6: 97:78:98:a6:a8:0a:15:65:1c:95:8e:80:2a:7a:62: 9e:57:35:42:f8:66:44:b8:a8:dc:55:c5:85:bc:da: ca:1d:d7:27:a7:1f:40:80:dc:b4:04:06:5a:c9:0c: 00:d7:2b:49:85:ff:b6:28:9a:f0:70:a0:9e:a9:38: 70:72:3a:96:63:60:75:ab:01:45:e4:a8:7d:c0:24: b5:8e:96:66:e5:42:f2:68:5b:e0:ac:ce:b4:2b:ea: aa:d5:13:de:80:4f:25:c8:d0:33:4d:80:2f:d1:a2: 2d:8d:cc:f0:75:48:40:f5:8e:9b:f6:dc:69:91:3b: 56:1e:39:be:ce:16:8a:be:ad:ed:d9:9d:38:f8:65: 82:01:8c:78:8d:7a:4f:ed:66:42:53:bb:a8:42:5e: bc:10:8b:e4:20:c9:d7:dd:2d:fb:04:76:43:be:96: d2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:77:9B:57:5C:F4:57:2D:16:7B:77:12:60:2A:7F:E0:FC:0B:A8:A0 X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:64:37:7f:7b:22:e6:d4:2e:a8:5e:30:f2:a0:c6:ee:dd:7f: 93:42:99:47:b9:86:78:65:4c:fb:44:56:5e:13:5a:89:98:c2: 0f:36:88:35:a6:d2:db:c7:bb:76:37:2d:dc:26:91:f2:59:bc: 6b:92:71:92:bf:13:b0:cd:89:c9:e9:02:47:92:27:13:51:80: 15:5e:9f:30:a7:75:af:6b:91:50:de:14:17:0c:e4:79:6b:ef: 7a:cc:c2:82:6d:8f:e0:0a:b7:23:92:2f:dd:90:c8:dd:9d:af: 69:96:ef:81:bf:18:6e:60:64:0f:43:90:da:46:08:ff:2b:e9: 02:b8:90:a6:f1:71:ba:33:a1:3e:35:f7:d3:eb:6e:12:73:42: 8b:d9:f8:74:ef:25:53:69:bb:fd:43:0f:db:3b:bd:b1:b3:1f: c1:43:f9:95:bf:e5:e7:b0:2f:cb:8e:a0:b5:5f:f6:97:fd:04: aa:97:91:0d:ac:fa:86:3e:c3:0c:9e:10:17:ce:3b:42:f3:98: c1:61:c1:d3:4f:19:72:44:3d:21:c4:03:bb:6a:18:91:ac:31: 5c:a6:8a:03:4a:4d:ba:b4:e8:f7:1e:05:5d:d2:d5:50:68:a3: 49:04:f5:68:ba:25:14:5d:95:fb:7f:d4:ef:a3:a6:b4:90:b1: 22:73:70:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjUwNjE0MTQyMjQ5WhcNMjUwNjIxMTQyMjQ5WjAYMRYwFAYD VQQDEw02ODRkODViYS1kYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumdg/G1HkCV8TzLi4fy9Q3r0ZxlRmkcZdROQU8HLVCYpxVe/NghEjUX9CZgN M/XTHinZ6/dYNrlPd5QP5mgxsUEzVUnycVGuDQLa81zxjPm6NbzMM93S7OaXeJim qAoVZRyVjoAqemKeVzVC+GZEuKjcVcWFvNrKHdcnpx9AgNy0BAZayQwA1ytJhf+2 KJrwcKCeqThwcjqWY2B1qwFF5Kh9wCS1jpZm5ULyaFvgrM60K+qq1RPegE8lyNAz TYAv0aItjczwdUhA9Y6b9txpkTtWHjm+zhaKvq3t2Z04+GWCAYx4jXpP7WZCU7uo Ql68EIvkIMnX3S37BHZDvpbSawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt3m1dc 9FctFnt3EmAqf+D8C6igMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFZDd/eyLm1C6oXjDyoMbu3X+TQplHuYZ4ZUz7RFZeE1qJmMIPNog1 ptLbx7t2Ny3cJpHyWbxrknGSvxOwzYnJ6QJHkicTUYAVXp8wp3Wva5FQ3hQXDOR5 a+96zMKCbY/gCrcjki/dkMjdna9plu+BvxhuYGQPQ5DaRgj/K+kCuJCm8XG6M6E+ NffT624Sc0KL2fh07yVTabv9Qw/bO72xsx/BQ/mVv+XnsC/LjqC1X/aX/QSql5EN rPqGPsMMnhAXzjtC85jBYcHTTxlyRD0hxAO7ahiRrDFcpooDSk26tOj3HgVd0tVQ aKNJBPVouiUUXZX7f9Tvo6a0kLEic3DS -----END CERTIFICATE-----Generated at Sun Jun 15 04:50:11 2025 by rpki-client