$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft File: 34Jss7t6i7KhHuS64uCH6sOnIdI.mft (raw, json) Hash identifier: osXwMHweLq+UWeTnaY9la+5FbumWYlnL/NzhYyAO3Y8= Subject key identifier: 4A:EE:BC:79:F8:BB:42:00:F2:E4:F7:38:FE:8C:CA:78:E5:88:97:31 Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2 Certificate issuer: /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2 Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft Manifest number: 026C Signing time: Sat 31 May 2025 01:57:38 +0000 Manifest this update: Sat 31 May 2025 01:57:37 +0000 Manifest next update: Sat 07 Jun 2025 01:57:37 +0000 Files and hashes: 1: 34Jss7t6i7KhHuS64uCH6sOnIdI.crl (hash: KgL/BsZKH78WjIYEC/p6dIvwSxG/+IEbGHUy7ztrDuo=) 2: 7C754058415411ED8133414DC4F9AE02.roa (hash: l47Gy8uLHHO9oyMWzHntqbTvL69ppWBGcq5K8U2N6Ws=) 3: C303879E415111EDBC3A1D19C4F9AE02.roa (hash: S+ycEkxlExSiIAk8iubLwdKE1ijDKJmAZke+yPsWDEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2 Validity Not Before: May 31 01:57:37 2025 GMT Not After : Jun 7 01:57:37 2025 GMT Subject: CN=683a6212-62aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:b6:e8:09:a4:ed:13:28:8b:a1:cf:d2:58: 94:ce:4d:ba:35:76:e0:32:95:49:ef:1e:65:77:cd: 08:bb:23:67:73:2d:20:4f:87:4d:e3:a5:77:6f:22: ac:20:71:fb:57:42:a5:f5:ba:8a:65:a4:b8:1e:2b: a8:2e:aa:e0:b6:d0:7e:e5:4e:df:03:82:88:9f:da: 83:9d:e5:56:9a:dc:50:98:58:26:1e:c8:8b:3b:fb: 82:6c:b7:a7:ad:09:d1:80:2f:a5:65:ce:f5:6b:47: 42:12:72:54:7d:c1:24:38:5c:26:9a:05:3a:5a:ef: 87:59:86:69:53:e1:19:4c:a2:63:d0:d6:7c:07:8f: 0a:b1:48:6c:b3:b1:95:5b:1a:be:50:5e:fc:9d:a6: 16:0b:a4:4f:b9:77:0a:59:20:c2:2a:4b:ec:1e:d9: 97:9e:e1:6d:03:f1:f1:65:16:fa:8f:03:f1:bf:ac: b3:b3:3f:b7:ae:92:e3:c3:15:b7:86:61:78:da:c4: 65:88:03:8a:ee:b7:b0:bf:a2:70:75:0b:7d:01:88: 51:75:d2:50:5e:8a:12:56:e5:c1:a0:f2:b1:cf:c8: df:68:da:90:a3:d7:dc:5a:ac:94:44:08:86:5d:88: 21:eb:4b:69:f7:95:0b:bd:0e:1e:c0:44:b8:2f:81: e0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EE:BC:79:F8:BB:42:00:F2:E4:F7:38:FE:8C:CA:78:E5:88:97:31 X509v3 Authority Key Identifier: keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d8:e1:70:a7:d3:64:e0:4f:33:5a:a8:f8:d7:93:f1:f5:8f: 67:99:86:23:c7:98:8d:ef:23:a9:0f:69:bf:12:3c:c8:b6:44: 8b:6c:9d:e5:6b:14:00:4d:b9:2b:dd:0f:68:76:cb:f4:c1:70: 6c:90:ce:69:52:e8:73:46:cf:a0:7a:9c:2d:07:0a:d9:d7:66: d9:92:83:cd:26:29:5d:0e:7f:0e:40:71:d8:34:a3:06:bd:78: af:be:70:9b:e3:5a:77:2d:4c:fa:95:1a:ba:0c:cd:d4:65:7d: cc:4a:bc:3a:e1:e9:64:1a:f3:51:c4:e8:d7:ba:52:1d:c2:34: 28:36:12:ca:1d:3a:3d:e0:c8:d4:3e:75:d3:d0:3a:b5:23:8c: 4f:d7:b5:d4:93:58:ee:ff:4b:c0:c6:99:5a:3e:ec:02:eb:20: e5:90:a5:ef:f2:d5:54:da:b2:a1:b7:a5:13:d2:ad:c0:31:0a: 3d:1e:ad:66:b1:5f:cb:df:dd:68:66:de:b3:28:93:e3:79:43: da:05:91:2f:37:4a:74:ac:39:33:c3:e2:11:05:19:4a:74:86: a1:54:c8:7d:c8:35:11:f5:8b:f7:21:c3:a2:46:9d:3d:c9:31: ca:52:e3:cd:8f:ba:d8:16:b6:b0:30:44:90:61:33:4c:6a:3f: 81:59:b4:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYyREUxMTAvBgNVBAUTKERGODI2Q0IzQkI3QThCQjJBMTFFRTRCQUUyRTA4N0VB QzNBNzIxRDIwHhcNMjUwNTMxMDE1NzM3WhcNMjUwNjA3MDE1NzM3WjAYMRYwFAYD VQQDEw02ODNhNjIxMi02MmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0G26Amk7RMoi6HP0liUzk26NXbgMpVJ7x5ld80IuyNncy0gT4dN46V3byKs IHH7V0Kl9bqKZaS4HiuoLqrgttB+5U7fA4KIn9qDneVWmtxQmFgmHsiLO/uCbLen rQnRgC+lZc71a0dCEnJUfcEkOFwmmgU6Wu+HWYZpU+EZTKJj0NZ8B48KsUhss7GV Wxq+UF78naYWC6RPuXcKWSDCKkvsHtmXnuFtA/HxZRb6jwPxv6yzsz+3rpLjwxW3 hmF42sRliAOK7rewv6JwdQt9AYhRddJQXooSVuXBoPKxz8jfaNqQo9fcWqyURAiG XYgh60tp95ULvQ4ewES4L4HgAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEruvHn4 u0IA8uT3OP6MynjliJcxMB8GA1UdIwQYMBaAFN+CbLO7eouyoR7kuuLgh+rDpyHS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjJERS8xNzY3OTRENDE1 NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3S2hIdVM2NHVDSDZzT25J ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0SnNzN3Q2aTdLaEh1UzY0dUNINnNPbklkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjJERS8xNzY3OTRENDE1NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3 S2hIdVM2NHVDSDZzT25JZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp2OFwp9Nk4E8zWqj415Px9Y9nmYYjx5iN7yOpD2m/EjzItkSLbJ3l axQATbkr3Q9odsv0wXBskM5pUuhzRs+gepwtBwrZ12bZkoPNJildDn8OQHHYNKMG vXivvnCb41p3LUz6lRq6DM3UZX3MSrw64elkGvNRxOjXulIdwjQoNhLKHTo94MjU PnXT0Dq1I4xP17XUk1ju/0vAxplaPuwC6yDlkKXv8tVU2rKht6UT0q3AMQo9Hq1m sV/L391oZt6zKJPjeUPaBZEvN0p0rDkzw+IRBRlKdIahVMh9yDUR9Yv3IcOiRp09 yTHKUuPNj7rYFrawMESQYTNMaj+BWbRK -----END CERTIFICATE-----Generated at Sat May 31 17:57:43 2025 by rpki-client