$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft File: 34Jss7t6i7KhHuS64uCH6sOnIdI.mft (raw, json) Hash identifier: Y0NhZPt3QenV6p3c9Ej3TTrzbiAeDPY97HqfoqKqr5k= Subject key identifier: 8A:85:9E:66:22:54:F2:24:8F:C6:C3:02:75:D0:E1:47:1C:FD:0E:A2 Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2 Certificate issuer: /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft Manifest number: 02B0 Signing time: Tue 07 Oct 2025 01:46:30 +0000 Manifest this update: Tue 07 Oct 2025 01:46:30 +0000 Manifest next update: Tue 14 Oct 2025 01:46:30 +0000 Files and hashes: 1: 34Jss7t6i7KhHuS64uCH6sOnIdI.crl (hash: Pe5A4VLaXBbLkWICE05SE7RAbA+17apJnZVkU//HokI=) 2: 7C754058415411ED8133414DC4F9AE02.roa (hash: gLcQ/guwMKYVAXT6wLKnevx2zWGWLwzZoBVoVJPP2CI=) 3: C303879E415111EDBC3A1D19C4F9AE02.roa (hash: xW+yKhl4DzZnOJoS6Xn0l4WHvXiDoALnGTFCf25+bew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 01:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2 Validity Not Before: Oct 7 01:46:30 2025 GMT Not After : Oct 14 01:46:30 2025 GMT Subject: CN=68e470f6-ebad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:94:f0:52:c2:77:da:6e:94:ae:26:23:e0: a2:a5:1b:79:8a:ff:87:b2:45:6e:cb:b1:6e:50:3c: 9f:ce:ac:86:6e:be:04:ec:f3:4c:17:f8:23:d5:82: 65:f6:12:a1:9f:8a:b7:83:bc:b2:11:ca:1c:ed:7b: 9c:1c:c7:f3:9b:2f:61:d9:c6:74:59:e5:2d:53:ed: 81:c8:ec:3b:b5:b2:b2:f8:a5:59:19:58:b4:77:89: 22:ba:86:b9:36:36:77:7a:e2:00:cf:13:a1:d6:0c: b9:f8:5f:84:3e:a8:f6:16:3b:50:5e:d6:4f:b7:be: 7e:c6:f1:25:2c:89:25:33:17:50:a7:ef:0e:34:83: 9c:59:a9:e9:a5:f1:2d:97:a8:f1:4f:76:cf:75:4a: 71:9f:26:18:a9:db:2e:1f:0f:83:ce:27:a4:c1:e4: 31:14:65:ae:08:89:4d:72:96:80:31:d9:15:e1:0c: 34:58:ee:ba:ac:e6:7a:f1:ee:55:22:98:e5:92:bb: c8:09:36:32:f4:c8:8f:39:3c:9c:8c:1b:65:b5:bf: 5e:d5:29:1f:7c:91:54:75:f3:20:19:ac:fb:19:89: 3a:64:7b:f2:15:33:b0:aa:0f:ed:c9:60:ac:f2:85: b8:3a:e9:2d:14:55:31:b3:77:76:2e:0a:65:31:d6: de:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:85:9E:66:22:54:F2:24:8F:C6:C3:02:75:D0:E1:47:1C:FD:0E:A2 X509v3 Authority Key Identifier: keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:79:fb:19:55:96:90:c2:db:ee:41:6b:1d:0f:8c:d3:28:36: 44:01:90:e6:6a:9b:5f:2e:df:8f:bc:81:1d:91:13:c4:4a:4c: 19:50:3d:2a:64:d5:b8:31:70:72:76:7e:78:e3:e0:9e:07:a9: d7:be:53:f3:20:dc:f6:57:0b:77:38:0a:2f:86:d2:21:35:30: 19:37:b5:64:61:49:21:0e:ac:3d:fd:3c:08:ad:f5:8a:b1:3a: c8:d8:42:ea:fc:87:4a:b5:be:2a:e5:a8:15:a7:fd:f8:7e:82: 3a:08:91:9f:90:e4:a1:a9:23:cb:63:fe:e5:7b:76:55:aa:a1: d0:64:18:13:7a:b9:31:80:53:e4:b9:44:48:75:23:2e:40:7b: fc:f1:05:f2:00:b8:39:8f:77:68:81:64:67:ca:3a:63:f8:d7: 2b:18:93:18:8a:c1:1b:fe:3f:a4:d0:e6:e7:b6:93:ec:ec:3b: de:d2:d4:8e:06:93:c9:58:2d:5b:cf:4c:00:63:1b:23:cb:d7: 6a:1f:d7:40:1f:f4:25:d0:03:1a:db:8b:e5:8f:71:5f:9b:73: 7f:ae:2f:7c:e8:9f:c0:66:f4:66:d4:53:b6:5e:3a:56:90:56: 85:07:61:cd:80:33:4a:d8:fc:9a:a0:f6:39:be:40:24:e3:1a: f8:8f:e3:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYyREUxMTAvBgNVBAUTKERGODI2Q0IzQkI3QThCQjJBMTFFRTRCQUUyRTA4N0VB QzNBNzIxRDIwHhcNMjUxMDA3MDE0NjMwWhcNMjUxMDE0MDE0NjMwWjAYMRYwFAYD VQQDEw02OGU0NzBmNi1lYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZCU8FLCd9pulK4mI+CipRt5iv+HskVuy7FuUDyfzqyGbr4E7PNMF/gj1YJl 9hKhn4q3g7yyEcoc7XucHMfzmy9h2cZ0WeUtU+2ByOw7tbKy+KVZGVi0d4kiuoa5 NjZ3euIAzxOh1gy5+F+EPqj2FjtQXtZPt75+xvElLIklMxdQp+8ONIOcWanppfEt l6jxT3bPdUpxnyYYqdsuHw+DziekweQxFGWuCIlNcpaAMdkV4Qw0WO66rOZ68e5V IpjlkrvICTYy9MiPOTycjBtltb9e1SkffJFUdfMgGaz7GYk6ZHvyFTOwqg/tyWCs 8oW4OuktFFUxs3d2LgplMdbeJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqFnmYi VPIkj8bDAnXQ4Ucc/Q6iMB8GA1UdIwQYMBaAFN+CbLO7eouyoR7kuuLgh+rDpyHS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjJERS8xNzY3OTRENDE1 NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3S2hIdVM2NHVDSDZzT25J ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0SnNzN3Q2aTdLaEh1UzY0dUNINnNPbklkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjJERS8xNzY3OTRENDE1NUExMUVEQjBBMTI3MjBDNEY5QUUwMi8zNEpzczd0Nmk3 S2hIdVM2NHVDSDZzT25JZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYefsZVZaQwtvuQWsdD4zTKDZEAZDmaptfLt+PvIEdkRPESkwZUD0q ZNW4MXBydn544+CeB6nXvlPzINz2Vwt3OAovhtIhNTAZN7VkYUkhDqw9/TwIrfWK sTrI2ELq/IdKtb4q5agVp/34foI6CJGfkOShqSPLY/7le3ZVqqHQZBgTerkxgFPk uURIdSMuQHv88QXyALg5j3dogWRnyjpj+NcrGJMYisEb/j+k0ObntpPs7Dve0tSO BpPJWC1bz0wAYxsjy9dqH9dAH/Ql0AMa24vlj3Ffm3N/ri986J/AZvRm1FO2XjpW kFaFB2HNgDNK2PyaoPY5vkAk4xr4j+NF -----END CERTIFICATE-----Generated at Wed Oct 8 15:48:54 2025 by rpki-client