$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: RlzAXOb1ysrWpsazyUHaSjyV9eAb/w/gsPMW9om8adQ= Subject key identifier: 05:01:3E:BB:BA:4F:02:F9:C8:1C:F6:5A:51:05:EC:9B:25:4F:E7:E6 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 351F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 34BB Signing time: Mon 28 Jul 2025 14:19:26 +0000 Manifest this update: Mon 28 Jul 2025 14:19:25 +0000 Manifest next update: Mon 04 Aug 2025 14:19:25 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: G/G/t5aehkM0iMLJhscXjVGiW05tqz+2UDCwtXwuDqA=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Aug 2025 14:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13599 (0x351f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Jul 28 14:19:25 2025 GMT Not After : Aug 4 14:19:25 2025 GMT Subject: CN=688786ed-8d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:62:f5:e9:b7:66:8f:c0:c0:06:e8:a4:45: b7:b8:8e:bd:09:7d:54:59:1b:98:c9:c6:fc:37:91: fd:fe:3b:1f:35:6a:d2:f9:fe:be:2e:1a:84:b8:90: ce:9c:c7:18:a0:b5:5c:ad:8e:fe:67:93:e3:18:41: 88:b7:75:a6:c8:1b:5e:30:bd:35:3e:9b:21:42:81: b7:a6:fe:ee:ea:57:f0:74:ef:77:94:a3:de:8b:bc: 7b:83:7b:ab:9e:c1:9c:c8:fc:76:1d:d7:85:44:bd: e3:c3:dc:8e:0f:77:f9:18:d2:9d:a4:16:db:a4:26: 64:a3:eb:92:51:15:70:ef:3f:f5:8a:b1:df:5a:45: d6:25:5b:74:01:e2:2e:ee:d0:8a:fc:75:3f:5b:ad: 0f:35:8f:fc:7f:04:49:6b:e1:45:34:35:49:a9:a1: 53:26:36:e4:db:33:4e:3b:e2:0f:ec:6f:33:0f:47: 03:c2:b7:88:ad:6d:47:d3:7d:b1:14:25:a9:37:36: 01:f2:76:9c:01:3d:a6:21:5a:18:59:29:b5:23:5a: 17:58:ab:37:c4:c3:ca:9b:bc:08:e8:cb:c4:d3:e8: 25:f9:8a:92:22:b8:70:f0:dd:3a:70:37:22:be:18: 42:e0:10:13:bc:34:3c:91:a0:8c:58:60:90:15:e8: 9a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:01:3E:BB:BA:4F:02:F9:C8:1C:F6:5A:51:05:EC:9B:25:4F:E7:E6 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f5:d2:98:40:9f:84:d7:71:dd:f7:77:9b:b7:b3:dd:ba:ca: 46:75:8c:1e:89:11:bd:50:32:a8:30:1f:1a:e1:69:a1:d9:b2: 02:3b:ae:e9:33:bc:92:50:9b:bc:f3:8e:8a:08:55:7e:45:ac: 7e:46:1e:8b:49:e7:38:0e:7d:85:20:e9:f3:dc:57:55:07:ea: b8:8c:1a:8a:ff:75:8d:7a:a7:ae:a8:87:34:2d:92:d0:d8:fb: 5d:21:20:dc:6a:71:86:09:75:e7:b4:5c:c8:6e:f1:78:96:3b: 4c:4b:d6:0b:ad:e0:a7:e8:6d:b7:7e:1d:b3:79:8d:15:98:3f: 75:cc:e5:0c:39:e4:d2:1e:73:a9:97:ad:01:58:e1:a6:e5:0a: e5:73:cc:c4:82:10:b2:7b:9f:a3:25:08:0a:1a:2b:f9:f1:2d: 2f:26:5c:8b:32:a4:5a:4d:58:0a:5b:76:0f:1c:2d:bd:16:1b: a5:de:6b:df:99:cf:a6:57:14:39:1f:06:ea:40:5c:7a:7e:e3: cd:da:98:5b:e9:aa:7e:5a:53:78:3b:26:db:4b:cb:a2:7a:9b: 45:bc:94:ef:d7:1d:d1:33:d6:7a:4e:e8:dd:38:af:9b:71:1d: d6:f7:b7:3a:f8:d9:8d:6f:98:72:6c:f8:7c:f1:c3:4a:f8:fd: db:54:1d:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUwNzI4MTQxOTI1WhcNMjUwODA0MTQxOTI1WjAYMRYwFAYD VQQDEw02ODg3ODZlZC04ZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhxi9em3Zo/AwAbopEW3uI69CX1UWRuYycb8N5H9/jsfNWrS+f6+LhqEuJDO nMcYoLVcrY7+Z5PjGEGIt3WmyBteML01PpshQoG3pv7u6lfwdO93lKPei7x7g3ur nsGcyPx2HdeFRL3jw9yOD3f5GNKdpBbbpCZko+uSURVw7z/1irHfWkXWJVt0AeIu 7tCK/HU/W60PNY/8fwRJa+FFNDVJqaFTJjbk2zNOO+IP7G8zD0cDwreIrW1H032x FCWpNzYB8nacAT2mIVoYWSm1I1oXWKs3xMPKm7wI6MvE0+gl+YqSIrhw8N06cDci vhhC4BATvDQ8kaCMWGCQFeiaswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUBPru6 TwL5yBz2WlEF7JslT+fmMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb9dKYQJ+E13Hd93ebt7PduspGdYweiRG9UDKoMB8a4Wmh2bICO67p M7ySUJu8846KCFV+Rax+Rh6LSec4Dn2FIOnz3FdVB+q4jBqK/3WNeqeuqIc0LZLQ 2PtdISDcanGGCXXntFzIbvF4ljtMS9YLreCn6G23fh2zeY0VmD91zOUMOeTSHnOp l60BWOGm5Qrlc8zEghCye5+jJQgKGiv58S0vJlyLMqRaTVgKW3YPHC29Fhul3mvf mc+mVxQ5HwbqQFx6fuPN2phb6ap+WlN4OybbS8uieptFvJTv1x3RM9Z6TujdOK+b cR3W97c6+NmNb5hybPh88cNK+P3bVB1r -----END CERTIFICATE-----Generated at Tue Jul 29 00:15:26 2025 by rpki-client