$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: jvNd8joj5W3k2NqM6ck/DIhWFx5iLIKKlMtMaB+qt1A= Subject key identifier: C0:AC:EA:F3:0E:AB:B3:46:F1:CF:2C:58:A1:04:9F:AA:33:76:41:43 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 350A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 34A6 Signing time: Mon 16 Jun 2025 14:19:14 +0000 Manifest this update: Mon 16 Jun 2025 14:19:14 +0000 Manifest next update: Mon 23 Jun 2025 14:19:14 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: G+4B+prUdFgtXSJ1LKsusHJ00tncq3ABtT3JCV+AKqk=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 14:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13578 (0x350a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Jun 16 14:19:14 2025 GMT Not After : Jun 23 14:19:14 2025 GMT Subject: CN=685027e2-6024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:34:31:a6:ca:54:2a:40:9d:e2:73:97:58:76: da:a6:d9:15:de:69:23:09:54:6a:09:d0:8d:62:3e: 78:aa:1e:f6:37:da:79:30:1b:6b:99:8f:82:38:34: 8f:24:cc:ee:91:6b:b6:18:76:bf:40:58:ce:46:4f: f1:16:8a:1b:c8:f9:e9:d8:bd:46:d8:fa:e3:b3:0e: a9:02:7d:fe:a8:90:a5:32:33:f3:7c:bd:39:57:5c: eb:4d:29:df:af:6a:71:e2:14:c8:bd:73:ea:04:2d: 05:3d:10:8a:2f:1e:8e:28:5b:97:c7:7c:5e:61:2e: 85:fc:16:c8:f7:a7:91:c3:e5:a7:6c:25:66:d7:63: 46:ce:e0:7a:22:e6:2b:c1:c9:35:72:15:73:ed:eb: fd:a8:11:23:81:81:22:65:80:b9:b4:1b:61:e2:3d: d5:bb:c4:7b:72:b9:8f:a9:e9:bf:a0:16:61:d5:7f: db:3e:f4:50:f6:4c:ea:19:db:9c:bd:91:da:4e:e3: 69:d7:cf:80:26:45:0d:b7:b6:99:42:9d:cf:7d:e8: 5f:bc:e2:44:02:bd:25:4d:f4:d0:3d:b0:23:95:1a: 8c:87:e1:fc:12:62:e8:75:8c:75:80:8f:58:e8:bc: c6:81:42:b7:eb:5a:b2:ce:20:50:21:f3:91:f3:99: 10:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AC:EA:F3:0E:AB:B3:46:F1:CF:2C:58:A1:04:9F:AA:33:76:41:43 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:2e:79:bd:32:e6:f7:fe:14:a7:8b:3c:32:87:af:f9:ab:9c: ea:53:f8:b0:a8:9e:87:5d:5c:07:9d:45:05:5e:86:2d:aa:26: e9:f8:9b:00:26:ed:8f:96:a2:47:35:85:fc:b2:c7:9f:a7:c7: bf:64:d8:3f:9c:96:7d:f2:b1:66:cd:b2:d6:ce:7a:6d:53:6b: d4:42:48:61:3a:dd:7b:0c:e2:90:58:66:24:d1:da:51:c6:20: db:ec:93:38:d9:44:7a:4a:ac:3e:8e:0b:3c:a1:d2:b9:86:b9: ee:38:74:d4:de:6f:b1:f2:cc:cd:71:12:3e:70:75:a9:7d:e9: 2c:57:2c:6a:ed:b5:2d:7d:85:82:ee:8f:2e:dc:0e:cc:b2:c4: 34:6c:12:74:80:b6:45:89:02:d0:a7:dc:0a:98:fb:07:1f:d9: 4d:52:28:6c:d4:28:10:65:f1:8d:d9:14:58:5b:3b:ca:62:34: 19:06:3c:b3:41:35:d7:c2:9c:e2:86:ee:c6:d4:e5:bb:34:da: c1:e5:44:df:ca:9e:dc:3e:c1:24:db:07:9e:86:08:39:4c:fd: 85:b1:aa:e1:f7:f1:29:95:15:62:5b:f5:d0:a9:8a:a0:cc:5c: b1:9b:60:2c:a0:79:af:f8:ba:bd:e1:e7:b0:da:4b:c6:25:32: 1d:b4:19:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUwNjE2MTQxOTE0WhcNMjUwNjIzMTQxOTE0WjAYMRYwFAYD VQQDEw02ODUwMjdlMi02MDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jQxpspUKkCd4nOXWHbaptkV3mkjCVRqCdCNYj54qh72N9p5MBtrmY+CODSP JMzukWu2GHa/QFjORk/xFoobyPnp2L1G2Prjsw6pAn3+qJClMjPzfL05V1zrTSnf r2px4hTIvXPqBC0FPRCKLx6OKFuXx3xeYS6F/BbI96eRw+WnbCVm12NGzuB6IuYr wck1chVz7ev9qBEjgYEiZYC5tBth4j3Vu8R7crmPqem/oBZh1X/bPvRQ9kzqGduc vZHaTuNp18+AJkUNt7aZQp3PfehfvOJEAr0lTfTQPbAjlRqMh+H8EmLodYx1gI9Y 6LzGgUK361qyziBQIfOR85kQtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCs6vMO q7NG8c8sWKEEn6ozdkFDMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFLnm9Mub3/hSnizwyh6/5q5zqU/iwqJ6HXVwHnUUFXoYtqibp+JsA Ju2PlqJHNYX8ssefp8e/ZNg/nJZ98rFmzbLWznptU2vUQkhhOt17DOKQWGYk0dpR xiDb7JM42UR6Sqw+jgs8odK5hrnuOHTU3m+x8szNcRI+cHWpfeksVyxq7bUtfYWC 7o8u3A7MssQ0bBJ0gLZFiQLQp9wKmPsHH9lNUihs1CgQZfGN2RRYWzvKYjQZBjyz QTXXwpzihu7G1OW7NNrB5UTfyp7cPsEk2weehgg5TP2Fsarh9/EplRViW/XQqYqg zFyxm2AsoHmv+Lq94eew2kvGJTIdtBnR -----END CERTIFICATE-----Generated at Wed Jun 18 04:37:00 2025 by rpki-client