$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: LvbuzijrwprEO6MA2yZsCJ/3MBH371mpENt1f8VECfg= Subject key identifier: 70:CC:BB:D4:07:2D:FB:61:2D:BC:CA:DD:02:31:31:16:CB:85:EC:00 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 3496 Signing time: Sat 14 Jun 2025 14:27:58 +0000 Manifest this update: Sat 14 Jun 2025 14:27:58 +0000 Manifest next update: Sat 21 Jun 2025 14:27:58 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: M3CSusKV9CFEu65su8jM2jjIl9RPdEEtVYnB9rq2+g0=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: t/ROOpg/IwC6W3DYUfJyZ4y/FXhn7ZuftkL+LfoKWRk=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: ea8eMteisHvIepMEhAjTnxYwI9xVzRVN61pc6MiuWHw=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: kZY0gEYojacBpy6Flxbc6cWYiWfgAwQSMnYX8MagWhA=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: wkkagOsbEtkABMZzn1UGFfhIBhIKqyHgBeARkv/JwZI=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: L8G18w6rwaHmMSrJokPAC0OZq/Tml3UVjCIQ2Q/Hgqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Jun 14 14:27:58 2025 GMT Not After : Jun 21 14:27:58 2025 GMT Subject: CN=684d86ee-5ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2b:9a:09:10:7d:f9:c4:2b:81:a2:5d:9c:c7: df:26:71:09:da:ac:14:54:b9:26:ef:7c:f0:38:ef: 8f:6a:b8:f2:cc:5f:4f:66:e8:b5:f5:61:5d:04:85: 64:c5:6e:2b:d9:4f:71:eb:a8:d2:b6:9d:35:a6:b0: 65:df:39:56:9a:b0:32:00:2c:cb:c5:ac:10:a9:db: db:a2:3c:20:f6:39:c7:3b:76:f1:79:0e:b2:9b:12: 88:98:bb:45:87:ce:14:1a:26:00:73:15:38:7a:da: 33:a8:68:ab:11:e4:67:d4:e5:e7:06:df:b6:bf:45: 87:bf:de:53:61:58:4d:12:e4:2e:21:05:86:de:2d: ae:82:a9:25:bf:2b:03:c6:17:17:31:8d:ca:4e:3b: 49:3d:35:a6:a3:38:e3:ff:03:05:0d:6e:55:7c:a3: d4:eb:f2:2b:ad:4d:b5:79:8b:50:71:58:5e:72:68: ad:ce:33:99:52:5f:cc:8e:be:c4:71:88:05:18:c6: 3c:d7:87:e3:e5:ac:bc:1f:98:ff:ab:22:8f:89:11: 7f:fd:0b:c2:91:30:05:67:1e:1b:7c:63:17:53:e3: b3:10:8b:41:95:b0:51:e3:60:c5:cd:42:da:64:21: 2f:8e:f2:b0:04:f7:49:6b:fb:a0:b7:0a:11:36:da: 46:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CC:BB:D4:07:2D:FB:61:2D:BC:CA:DD:02:31:31:16:CB:85:EC:00 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:a8:fb:9e:22:8b:ce:49:79:62:f7:f5:8a:bb:66:1f:50:79: 50:a8:17:2d:af:fe:c4:b9:89:2e:89:62:64:ff:de:dd:21:bf: 89:4a:e5:ca:8e:f9:f7:c7:76:02:8e:2d:1e:51:e1:80:4a:60: af:89:5c:9a:b8:8f:a1:3d:56:87:e1:a4:24:49:e2:9f:5c:4b: 8d:d7:81:d9:bd:ed:43:5a:be:de:ac:58:74:d5:3d:4f:86:17: d7:d4:1d:27:a5:17:3a:54:83:09:9f:a6:e6:d6:9f:55:a2:10: c1:cc:73:00:b4:f8:b8:69:fa:13:49:f0:40:59:93:d7:b1:ea: 95:ac:34:09:27:1f:c8:69:e7:ec:ca:8c:fb:af:af:09:22:57: 83:23:a4:4d:d6:d2:85:2a:ee:b5:cc:c2:89:25:ef:77:1d:95: f6:8c:72:f4:fc:3f:60:5d:bf:07:c8:3a:60:d9:a1:2e:ac:db: f7:0a:4f:e2:b8:36:5f:f0:84:93:27:cf:64:96:9a:23:77:b4: 5e:ad:a6:f2:6a:44:fd:c4:1f:7e:af:7d:f2:95:f4:11:2b:05: 9e:ea:e0:21:4a:3d:a1:ca:d1:6c:35:d1:5a:a8:c3:23:f0:77: 75:5f:19:77:31:48:48:86:5e:3d:8b:2e:d7:d5:a3:b1:81:4a: 4f:eb:87:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwNjE0MTQyNzU4WhcNMjUwNjIxMTQyNzU4WjAYMRYwFAYD VQQDEw02ODRkODZlZS01YWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SuaCRB9+cQrgaJdnMffJnEJ2qwUVLkm73zwOO+ParjyzF9PZui19WFdBIVk xW4r2U9x66jStp01prBl3zlWmrAyACzLxawQqdvbojwg9jnHO3bxeQ6ymxKImLtF h84UGiYAcxU4etozqGirEeRn1OXnBt+2v0WHv95TYVhNEuQuIQWG3i2ugqklvysD xhcXMY3KTjtJPTWmozjj/wMFDW5VfKPU6/IrrU21eYtQcVhecmitzjOZUl/Mjr7E cYgFGMY814fj5ay8H5j/qyKPiRF//QvCkTAFZx4bfGMXU+OzEItBlbBR42DFzULa ZCEvjvKwBPdJa/ugtwoRNtpGZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDMu9QH LfthLbzK3QIxMRbLhewAMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDqPueIovOSXli9/WKu2YfUHlQqBctr/7EuYkuiWJk/97dIb+JSuXK jvn3x3YCji0eUeGASmCviVyauI+hPVaH4aQkSeKfXEuN14HZve1DWr7erFh01T1P hhfX1B0npRc6VIMJn6bm1p9VohDBzHMAtPi4afoTSfBAWZPXseqVrDQJJx/Iaefs yoz7r68JIleDI6RN1tKFKu61zMKJJe93HZX2jHL0/D9gXb8HyDpg2aEurNv3Ck/i uDZf8ISTJ89klpojd7RerabyakT9xB9+r33ylfQRKwWe6uAhSj2hytFsNdFaqMMj 8Hd1Xxl3MUhIhl49iy7X1aOxgUpP64dn -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:18 2025 by rpki-client