$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft File: 34Jss7t6i7KhHuS64uCH6sOnIdI.mft (raw, json) Hash identifier: lRfShl9tHE3viNOOGYAg/lWCNYbrE5Xq+Myeu0fI7kA= Subject key identifier: 64:58:2A:33:F0:05:8E:4F:9E:43:8C:2A:06:AC:53:FD:46:87:7A:FA Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2 Certificate issuer: /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2 Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft Manifest number: 0296 Signing time: Thu 21 Aug 2025 01:49:22 +0000 Manifest this update: Thu 21 Aug 2025 01:49:21 +0000 Manifest next update: Thu 28 Aug 2025 01:49:21 +0000 Files and hashes: 1: 34Jss7t6i7KhHuS64uCH6sOnIdI.crl (hash: qvfCkmNqBV+q/rrOCmHPp259ExLDyFCh68T95M7GntU=) 2: 7C754058415411ED8133414DC4F9AE02.roa (hash: l47Gy8uLHHO9oyMWzHntqbTvL69ppWBGcq5K8U2N6Ws=) 3: C303879E415111EDBC3A1D19C4F9AE02.roa (hash: S+ycEkxlExSiIAk8iubLwdKE1ijDKJmAZke+yPsWDEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2 Validity Not Before: Aug 21 01:49:21 2025 GMT Not After : Aug 28 01:49:21 2025 GMT Subject: CN=68a67b22-745f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:61:f4:3d:20:39:f6:07:2e:65:93:59:16: ee:3f:c5:38:09:9c:bc:24:ea:c0:8b:b4:53:a7:c8: f5:af:ad:57:ea:95:f9:02:da:cc:88:54:ff:6b:d9: 78:9a:e8:be:e5:b8:c6:e9:c1:ef:3a:54:09:e0:23: a1:03:2b:63:46:8c:fb:53:0c:ae:38:a1:bb:e3:36: fe:8a:7e:3b:e3:c1:09:88:18:e5:ad:3f:59:25:cc: 9d:18:cc:dc:2b:70:ce:35:4f:14:75:5d:4b:7c:83: 9e:e7:af:3b:48:45:dc:2a:fe:4f:b7:5c:ab:07:c5: 6e:f5:8b:16:fc:86:fb:0a:60:09:02:62:a0:5c:f4: 37:23:9f:69:77:1c:74:4e:26:e4:7d:eb:92:38:64: 1a:f2:4f:2c:4c:ca:e5:ad:1c:b6:1e:e2:5b:cf:4b: 5a:f1:cf:79:78:1b:69:ce:81:80:f8:16:ee:56:3c: b2:cb:a5:94:24:f8:95:3c:e1:8b:3d:0e:4e:2f:39: d1:53:4e:17:4c:08:e4:bc:22:4b:e3:d5:b7:e2:1a: 3b:7f:90:fd:fe:3c:83:cb:17:b8:ad:74:f3:fd:cc: 66:b7:74:1c:5f:bd:b5:3c:70:f4:05:cc:e0:9f:56: 40:92:74:89:26:33:b2:64:5f:42:0c:14:da:cd:31: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:58:2A:33:F0:05:8E:4F:9E:43:8C:2A:06:AC:53:FD:46:87:7A:FA X509v3 Authority Key Identifier: keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:4a:4e:3b:12:a1:86:47:1f:7c:4e:db:a9:10:13:b8:03:73: 8c:ea:4b:87:e5:0a:ba:5d:4d:5c:c6:b2:bc:e8:f2:8c:2e:6f: 86:7d:63:05:97:78:62:d9:2d:e6:28:09:ef:d3:c1:f1:fd:7d: 90:d9:48:28:c3:14:02:98:dc:b1:e9:b9:85:5c:71:a5:99:7c: 27:8f:30:bd:19:f7:77:ca:3b:33:2f:0b:0b:f8:ae:89:32:2a: 45:c5:35:b4:ae:80:f3:dd:72:c2:c4:14:af:0f:a6:ff:25:3e: 06:ae:9f:6e:b6:3c:33:fc:01:90:76:61:3b:5b:43:50:9f:6b: ee:89:e1:c1:33:fb:72:22:39:7a:d3:95:7f:47:b7:fb:a4:11: 86:b2:89:c9:ca:0a:47:3a:db:45:4e:d0:a8:81:87:b5:ce:6e: 72:ac:d4:45:54:df:97:83:99:68:ff:d7:c3:5f:b0:8e:aa:af: 6d:b3:e6:4a:8a:42:f1:c8:8e:f8:1f:07:7d:24:86:0f:25:c1: 30:d9:ae:98:23:74:5c:e9:7b:6a:2b:2d:ba:25:f1:bb:17:5d: 2c:60:ee:f1:51:d9:cf:90:7a:3d:08:da:cc:25:42:d8:1e:f4: f1:60:fb:4e:a6:c0:3d:e9:4f:d6:40:2b:d5:f1:b0:fb:ec:7b: 73:19:ac:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYyREUxMTAvBgNVBAUTKERGODI2Q0IzQkI3QThCQjJBMTFFRTRCQUUyRTA4N0VB QzNBNzIxRDIwHhcNMjUwODIxMDE0OTIxWhcNMjUwODI4MDE0OTIxWjAYMRYwFAYD VQQDEw02OGE2N2IyMi03NDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKRh9D0gOfYHLmWTWRbuP8U4CZy8JOrAi7RTp8j1r61X6pX5AtrMiFT/a9l4 mui+5bjG6cHvOlQJ4COhAytjRoz7UwyuOKG74zb+in4748EJiBjlrT9ZJcydGMzc K3DONU8UdV1LfIOe5687SEXcKv5Pt1yrB8Vu9YsW/Ib7CmAJAmKgXPQ3I59pdxx0 TibkfeuSOGQa8k8sTMrlrRy2HuJbz0ta8c95eBtpzoGA+BbuVjyyy6WUJPiVPOGL PQ5OLznRU04XTAjkvCJL49W34ho7f5D9/jyDyxe4rXTz/cxmt3QcX721PHD0Bczg n1ZAknSJJjOyZF9CDBTazTF4dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRYKjPw BY5PnkOMKgasU/1Gh3r6MB8GA1UdIwQYMBaAFN+CbLO7eouyoR7kuuLgh+rDpyHS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjJERS8xNzY3OTRENDE1 NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3S2hIdVM2NHVDSDZzT25J ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0SnNzN3Q2aTdLaEh1UzY0dUNINnNPbklkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjJERS8xNzY3OTRENDE1NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3 S2hIdVM2NHVDSDZzT25JZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhSk47EqGGRx98TtupEBO4A3OM6kuH5Qq6XU1cxrK86PKMLm+GfWMF l3hi2S3mKAnv08Hx/X2Q2UgowxQCmNyx6bmFXHGlmXwnjzC9Gfd3yjszLwsL+K6J MipFxTW0roDz3XLCxBSvD6b/JT4Grp9utjwz/AGQdmE7W0NQn2vuieHBM/tyIjl6 05V/R7f7pBGGsonJygpHOttFTtCogYe1zm5yrNRFVN+Xg5lo/9fDX7COqq9ts+ZK ikLxyI74Hwd9JIYPJcEw2a6YI3Rc6XtqKy26JfG7F10sYO7xUdnPkHo9CNrMJULY HvTxYPtOpsA96U/WQCvV8bD77HtzGaxt -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:06 2025 by rpki-client