$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json) Hash identifier: /k+YhkbGadHbioqn7shPay3ozy1raxwQuP+jB8tD65A= Subject key identifier: 96:5E:03:F8:A0:7F:5B:F9:B9:C2:51:04:44:17:F6:5D:53:1D:61:F1 Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Certificate serial: 11CD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft Manifest number: 11C2 Signing time: Tue 04 Nov 2025 14:49:47 +0000 Manifest this update: Tue 04 Nov 2025 14:49:46 +0000 Manifest next update: Tue 11 Nov 2025 14:49:46 +0000 Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: 6UEz4MGYX0jgIcTKibczSCKcpb5kQdpJuirAvRx9CqE=) 2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: F1C9gg2kIzcE7dZNTOK9MxUtKleWFfTF43eCI9Ja9n8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4557 (0x11cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Validity Not Before: Nov 4 14:49:46 2025 GMT Not After : Nov 11 14:49:46 2025 GMT Subject: CN=690a128b-8db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:26:55:c6:0f:c3:32:db:27:2c:df:15:9a: 92:c9:9b:a4:9e:51:94:8c:c0:93:e3:fb:35:ba:5a: f4:55:ec:2b:3e:23:8a:21:7b:51:1b:ef:47:43:f6: 83:c0:04:6a:66:07:0b:d0:02:9d:6e:d2:b0:e7:94: 08:8d:39:61:4d:b1:82:6f:67:dd:4e:77:73:31:4b: b4:9b:f5:3c:d2:42:98:8d:6f:43:79:41:f6:cb:8c: 29:99:dc:81:c8:f8:43:c2:e7:5c:44:a9:12:10:fb: 53:16:e1:c5:1e:f4:74:cc:37:6a:c4:69:0a:1e:96: cd:73:0b:5a:22:fc:d7:c9:73:d5:43:c9:06:70:20: 69:2f:f0:9b:ce:f5:fa:10:bf:93:47:2f:52:36:fb: 28:2a:57:a3:42:6c:aa:8c:9b:6b:dc:ee:8d:f0:e7: 17:1e:ea:9c:e8:a7:76:c9:8e:35:29:1f:5d:82:7e: 51:63:47:d6:e1:41:56:ee:96:cb:d1:cf:c3:aa:45: 55:74:d3:45:0e:2b:a5:1a:08:4b:b6:48:04:92:1b: 36:3a:4f:db:ee:25:bd:51:62:c3:d3:9d:24:ef:e4: c1:25:d6:02:17:30:10:ed:ec:c4:1a:3d:dc:a7:c8: 6f:ad:aa:aa:70:28:24:7f:38:f3:f8:b9:d8:7e:41: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5E:03:F8:A0:7F:5B:F9:B9:C2:51:04:44:17:F6:5D:53:1D:61:F1 X509v3 Authority Key Identifier: keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:5c:90:ea:4e:3b:93:b9:f2:75:3b:17:d0:14:30:71:84:4d: 95:ff:8b:6b:17:62:b7:2a:5a:5f:93:11:8f:a1:ca:7f:2f:aa: c8:c0:35:67:6b:03:32:1b:94:96:83:e6:cb:78:84:df:ee:77: 7e:12:04:94:40:ea:10:fc:19:47:c8:84:82:05:20:2d:f9:78: 5d:1f:9e:9f:e3:8d:d8:16:6c:04:09:93:31:3f:f2:55:9f:7f: df:d9:77:c8:c6:18:f1:ee:27:56:16:ea:9e:af:0f:cc:b4:e3: e8:d0:d7:41:33:73:95:cc:b3:a0:d4:8e:c8:44:8d:1f:a9:fc: 5b:3b:0a:e6:93:d0:79:52:1f:0a:04:3c:82:cd:47:94:67:b7: 9a:99:05:90:0f:57:f4:28:18:29:50:41:15:19:eb:d9:49:2c: e8:87:c1:5a:41:e0:0c:6a:65:bb:7e:a8:55:cd:33:e0:c5:58: 77:b2:e0:42:14:87:ca:d2:94:cb:ec:fe:a5:d0:fc:46:34:c4: 80:d0:ab:b3:18:63:08:3e:53:fa:90:82:c5:71:fa:19:9b:9f: b2:d0:c2:c1:ba:21:56:44:dd:20:ca:51:ce:91:df:f4:60:13: 05:d3:87:d3:26:bb:65:20:fa:81:28:2d:e2:5d:16:4f:0f:83: e2:da:aa:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx OTRBQ0ZBNTgwHhcNMjUxMTA0MTQ0OTQ2WhcNMjUxMTExMTQ0OTQ2WjAYMRYwFAYD VQQDEw02OTBhMTI4Yi04ZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3gmVcYPwzLbJyzfFZqSyZuknlGUjMCT4/s1ulr0VewrPiOKIXtRG+9HQ/aD wARqZgcL0AKdbtKw55QIjTlhTbGCb2fdTndzMUu0m/U80kKYjW9DeUH2y4wpmdyB yPhDwudcRKkSEPtTFuHFHvR0zDdqxGkKHpbNcwtaIvzXyXPVQ8kGcCBpL/CbzvX6 EL+TRy9SNvsoKlejQmyqjJtr3O6N8OcXHuqc6Kd2yY41KR9dgn5RY0fW4UFW7pbL 0c/DqkVVdNNFDiulGghLtkgEkhs2Ok/b7iW9UWLD050k7+TBJdYCFzAQ7ezEGj3c p8hvraqqcCgkfzjz+LnYfkH9uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZeA/ig f1v5ucJRBEQX9l1THWHxMB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0 MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT Qk9PdHd0N05iU29aU3MtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEXJDqTjuTufJ1OxfQFDBxhE2V/4trF2K3KlpfkxGPocp/L6rIwDVn awMyG5SWg+bLeITf7nd+EgSUQOoQ/BlHyISCBSAt+XhdH56f443YFmwECZMxP/JV n3/f2XfIxhjx7idWFuqerw/MtOPo0NdBM3OVzLOg1I7IRI0fqfxbOwrmk9B5Uh8K BDyCzUeUZ7eamQWQD1f0KBgpUEEVGevZSSzoh8FaQeAMamW7fqhVzTPgxVh3suBC FIfK0pTL7P6l0PxGNMSA0KuzGGMIPlP6kILFcfoZm5+y0MLBuiFWRN0gylHOkd/0 YBMF04fTJrtlIPqBKC3iXRZPD4Pi2qpT -----END CERTIFICATE-----Generated at Wed Nov 5 19:26:45 2025 by rpki-client