$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: QtdWKo8KhVIhGXGmfG2k96rqvnwzGaJgDglazfa5YRQ= Subject key identifier: 42:1C:86:7E:86:1F:3C:71:C3:EF:FB:91:26:E7:C0:37:71:6D:4E:EE Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 3525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 34C1 Signing time: Fri 08 Aug 2025 14:19:20 +0000 Manifest this update: Fri 08 Aug 2025 14:19:19 +0000 Manifest next update: Fri 15 Aug 2025 14:19:19 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: 3C2YBR33ZJzzc5ur86sRITL4isDorVOzxUqKOOyBJW8=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13605 (0x3525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Aug 8 14:19:19 2025 GMT Not After : Aug 15 14:19:19 2025 GMT Subject: CN=68960767-fe09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:35:01:7f:6f:2b:44:ec:87:3c:1c:1b:cc: a0:9d:cb:58:dd:95:b4:63:c7:2a:41:6b:f6:bd:9e: 92:2f:ae:45:46:1d:81:8f:2c:de:84:48:dd:51:69: 25:3d:86:14:19:9c:cc:09:08:b1:af:dc:e7:fc:59: 4d:ad:7f:04:75:3c:b4:bb:80:cd:ba:b2:38:89:20: 29:4f:e7:bb:a4:77:9a:83:2c:ba:dc:37:46:b9:fc: af:a9:bf:d8:24:e6:33:61:a0:65:3d:73:70:92:7b: 64:9f:5c:e6:8d:7b:52:87:ad:5d:ce:74:35:b3:e7: 29:2f:e4:5b:18:b8:95:0c:4f:31:1c:f8:8b:c5:dd: db:6b:f8:ed:8b:58:30:50:e1:1a:0a:00:72:be:84: 25:ab:c6:49:ce:9c:cd:8d:94:71:e3:42:84:e4:c7: 77:d5:b9:8d:e9:16:29:1b:38:89:15:2c:f4:66:17: b0:c1:5e:96:a5:1a:c0:c8:ff:50:de:cf:93:57:cd: ab:d0:b7:d3:e5:b3:21:be:a4:07:39:4d:be:1d:82: dd:58:c6:a7:ec:06:45:86:40:d0:11:10:55:64:2d: e5:98:98:7b:40:62:c3:9d:39:73:88:66:13:34:0c: fe:9a:56:bd:77:1f:0c:ad:c4:60:b4:b9:ef:85:d3: 71:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1C:86:7E:86:1F:3C:71:C3:EF:FB:91:26:E7:C0:37:71:6D:4E:EE X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b5:33:e3:e7:37:57:64:6f:ee:d8:ec:77:83:25:89:9d:02: a5:0f:eb:49:13:b5:04:9a:fd:79:29:48:43:bd:2a:5b:da:29: 2b:f9:db:ad:3d:59:20:a6:94:c7:fc:b0:43:ae:86:3e:03:76: 1d:ad:84:c2:72:e1:14:70:3b:42:87:17:35:30:6f:e6:7f:b2: c5:82:d6:b8:1c:11:03:c7:f5:4e:4b:b1:91:b4:89:d8:76:84: b1:fa:12:2b:e4:b8:6e:10:34:03:b8:e2:e3:ed:03:03:e1:99: af:4d:01:cd:ec:8a:2f:43:1f:a4:2b:d8:a7:65:51:fe:c8:8a: 43:e7:71:3f:42:53:75:81:ab:64:2a:1e:58:87:f3:97:d8:58: 23:c2:1f:db:7b:bc:4d:33:38:87:ae:d4:2e:c1:46:86:95:bf: 3f:c0:33:44:92:fb:7b:77:8d:b6:5d:63:13:32:2d:64:73:65: 45:5c:88:06:c0:4c:2a:ca:74:93:86:97:21:09:7e:61:ae:ba: 8d:04:bb:f0:28:4b:af:e1:fe:f4:2e:c0:a1:bb:31:c5:2f:e4: e3:9a:23:bb:62:69:04:d0:06:a4:7f:3d:fa:6e:fd:f2:61:7d: 82:e8:16:8e:d7:72:5a:31:8f:9b:c5:e2:dc:20:46:3c:f9:ed: c6:81:08:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUwODA4MTQxOTE5WhcNMjUwODE1MTQxOTE5WjAYMRYwFAYD VQQDEw02ODk2MDc2Ny1mZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIs1AX9vK0TshzwcG8ygnctY3ZW0Y8cqQWv2vZ6SL65FRh2BjyzehEjdUWkl PYYUGZzMCQixr9zn/FlNrX8EdTy0u4DNurI4iSApT+e7pHeagyy63DdGufyvqb/Y JOYzYaBlPXNwkntkn1zmjXtSh61dznQ1s+cpL+RbGLiVDE8xHPiLxd3ba/jti1gw UOEaCgByvoQlq8ZJzpzNjZRx40KE5Md31bmN6RYpGziJFSz0ZhewwV6WpRrAyP9Q 3s+TV82r0LfT5bMhvqQHOU2+HYLdWMan7AZFhkDQERBVZC3lmJh7QGLDnTlziGYT NAz+mla9dx8MrcRgtLnvhdNxdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIchn6G Hzxxw+/7kSbnwDdxbU7uMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAktTPj5zdXZG/u2Ox3gyWJnQKlD+tJE7UEmv15KUhDvSpb2ikr+dut PVkgppTH/LBDroY+A3YdrYTCcuEUcDtChxc1MG/mf7LFgta4HBEDx/VOS7GRtInY doSx+hIr5LhuEDQDuOLj7QMD4ZmvTQHN7IovQx+kK9inZVH+yIpD53E/QlN1gatk Kh5Yh/OX2Fgjwh/be7xNMziHrtQuwUaGlb8/wDNEkvt7d422XWMTMi1kc2VFXIgG wEwqynSThpchCX5hrrqNBLvwKEuv4f70LsChuzHFL+TjmiO7YmkE0Aakfz36bv3y YX2C6BaO13JaMY+bxeLcIEY8+e3GgQid -----END CERTIFICATE-----Generated at Sat Aug 9 10:38:14 2025 by rpki-client