$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: a/A223CDE6UWN8Z8enf7+SdkD/DKGDr+uq3LkUQeTzw= Subject key identifier: 41:72:5D:5B:5E:F7:8A:11:3A:FC:CE:52:01:95:BD:FD:48:55:B9:BA Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 351A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 34B6 Signing time: Fri 18 Jul 2025 14:19:34 +0000 Manifest this update: Fri 18 Jul 2025 14:19:33 +0000 Manifest next update: Fri 25 Jul 2025 14:19:33 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: lnPbiwrXOEgJu9fcwTVPWfwf5Oqy3lOPeK4bxkeWCHI=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13594 (0x351a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Jul 18 14:19:33 2025 GMT Not After : Jul 25 14:19:33 2025 GMT Subject: CN=687a57f6-00e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cc:0f:56:11:02:5e:96:c9:3f:a9:c8:aa:c1: e0:8e:4b:ff:cc:47:03:73:ed:73:77:ed:7b:dc:17: 95:44:3f:4b:3a:27:e4:3b:31:8d:97:d0:5d:fa:2b: 1f:37:65:44:36:e7:73:d5:01:d0:7a:bb:45:bd:84: 6c:67:08:af:8c:09:15:75:3b:46:36:53:f7:2f:02: 94:67:6d:d7:7e:fc:8c:97:dc:bb:38:c5:06:81:34: 07:19:b3:c3:36:0d:c7:4e:4a:d8:46:6c:c6:9e:28: 1b:51:c4:8e:05:52:ac:8b:2a:f2:bb:9e:70:94:41: fc:f7:c2:a7:cd:b4:59:c6:cc:68:5a:17:cd:2a:89: 22:20:34:01:05:cd:95:d4:69:55:92:58:56:7a:73: 53:7a:f6:40:c5:0a:4b:f3:46:b0:a8:2d:c0:59:a3: cb:eb:5a:60:91:e7:f2:6d:ac:62:57:7f:9b:ad:c3: b9:58:fd:ef:bf:f7:9c:ef:07:3d:7b:d0:1b:c1:03: 5e:da:c3:87:db:dc:56:08:58:3a:a1:f7:62:ff:85: 8b:b8:a0:c2:a1:e5:84:9e:24:0c:4e:62:7a:3d:3c: e3:49:64:2b:b2:9f:bf:b6:4c:3d:47:73:10:8b:a0: 8a:9b:8a:fd:f7:39:40:78:94:0f:3a:72:ce:5e:aa: 25:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:72:5D:5B:5E:F7:8A:11:3A:FC:CE:52:01:95:BD:FD:48:55:B9:BA X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e7:5d:03:50:0e:47:0f:91:59:da:84:00:93:54:9c:c5:10: 40:60:0c:64:d8:70:78:33:62:c8:ae:65:ab:04:51:89:e3:ca: 08:d4:7a:6d:fb:b2:f9:ba:fd:d0:30:43:91:b8:8d:34:02:e5: d9:3f:61:7f:7c:03:ae:ed:df:e5:bb:28:a3:f1:7b:6a:e4:1e: e7:be:19:f8:ad:3b:49:75:e8:e4:29:a0:6a:06:5d:21:88:b4: 4d:ed:3d:48:4f:47:02:75:4c:7a:ae:a0:c6:8b:24:31:d1:7c: d6:25:bd:8d:d8:b6:d1:77:3b:43:c6:43:29:ba:cc:9e:b9:ef: b9:3c:9b:99:70:d4:f3:74:5f:ca:41:53:47:0b:c5:1f:1e:a9: 79:2c:c1:ff:34:3b:77:22:67:c0:61:77:69:9e:f1:0c:20:8e: 84:cd:c7:ff:e9:dc:85:6f:bb:97:0a:82:10:21:19:c3:9e:6a: c9:ca:b8:cc:de:fa:2b:bb:fd:a2:7e:0f:cc:6c:06:b8:9e:70: c3:42:2e:8e:e2:f1:3f:58:c1:69:97:12:3e:fe:96:2e:4c:f7: 29:15:ab:e1:ad:08:35:fe:d8:36:3e:a5:9c:29:49:3d:89:cf: be:d5:56:5f:d1:18:e4:69:cc:7d:f6:09:28:b5:9f:c5:c2:9d: f1:db:cf:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUwNzE4MTQxOTMzWhcNMjUwNzI1MTQxOTMzWjAYMRYwFAYD VQQDEw02ODdhNTdmNi0wMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcwPVhECXpbJP6nIqsHgjkv/zEcDc+1zd+173BeVRD9LOifkOzGNl9Bd+isf N2VENudz1QHQertFvYRsZwivjAkVdTtGNlP3LwKUZ23XfvyMl9y7OMUGgTQHGbPD Ng3HTkrYRmzGnigbUcSOBVKsiyryu55wlEH898KnzbRZxsxoWhfNKokiIDQBBc2V 1GlVklhWenNTevZAxQpL80awqC3AWaPL61pgkefybaxiV3+brcO5WP3vv/ec7wc9 e9AbwQNe2sOH29xWCFg6ofdi/4WLuKDCoeWEniQMTmJ6PTzjSWQrsp+/tkw9R3MQ i6CKm4r99zlAeJQPOnLOXqolCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFyXVte 94oROvzOUgGVvf1IVbm6MB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK510DUA5HD5FZ2oQAk1ScxRBAYAxk2HB4M2LIrmWrBFGJ48oI1Hpt +7L5uv3QMEORuI00AuXZP2F/fAOu7d/luyij8Xtq5B7nvhn4rTtJdejkKaBqBl0h iLRN7T1IT0cCdUx6rqDGiyQx0XzWJb2N2LbRdztDxkMpusyeue+5PJuZcNTzdF/K QVNHC8UfHql5LMH/NDt3ImfAYXdpnvEMII6Ezcf/6dyFb7uXCoIQIRnDnmrJyrjM 3voru/2ifg/MbAa4nnDDQi6O4vE/WMFplxI+/pYuTPcpFavhrQg1/tg2PqWcKUk9 ic++1VZf0Rjkacx99gkotZ/Fwp3x28/O -----END CERTIFICATE-----Generated at Sun Jul 20 15:20:58 2025 by rpki-client