$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: 81xARvZbP+F1so9sZ0LrJk8mee6CdPYZSffbIvP9Q70= Subject key identifier: 04:9C:ED:C4:FC:68:93:4A:55:D1:14:18:C8:FA:1A:31:59:D0:1D:58 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 3502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 349E Signing time: Sat 31 May 2025 14:19:16 +0000 Manifest this update: Sat 31 May 2025 14:19:15 +0000 Manifest next update: Sat 07 Jun 2025 14:19:15 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: PKxSOnS3Aq44QnHaiaL2NsmhhFLMgBj4AdZnjcll81s=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13570 (0x3502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: May 31 14:19:15 2025 GMT Not After : Jun 7 14:19:15 2025 GMT Subject: CN=683b0fe4-192d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:cd:5e:05:e1:aa:67:a9:b9:0b:ea:ad:f9: 20:da:e9:47:18:8c:dc:2b:eb:03:3e:f9:b9:5c:be: f1:83:38:1e:82:28:08:a6:06:43:0e:9c:91:19:78: 16:69:bb:f6:c6:4c:e4:40:e1:96:c4:77:85:c4:1e: 65:7e:50:14:cf:30:b1:c9:18:1a:4c:15:11:34:46: 27:8a:a8:bb:a8:81:17:a7:f0:f4:5d:42:22:00:68: f8:e2:53:8a:e4:74:ca:ac:7f:a1:6f:41:cd:c3:b8: cd:36:89:69:c9:67:da:d6:b9:b5:c0:7c:1a:28:05: ae:d8:ca:87:87:a5:1b:7e:8e:62:12:c7:54:53:a1: 3b:82:39:22:b7:7e:7d:0b:93:08:3c:13:b7:87:f0: 46:44:e4:34:c9:a5:45:85:9c:3e:ca:bb:70:7a:99: 7d:49:30:77:ad:cd:36:32:f2:8b:51:20:2c:8e:6d: 97:b8:1f:c9:a0:f9:fc:93:9b:32:90:a4:c1:b3:07: 03:fb:14:50:fc:79:49:4b:70:bc:78:05:c5:09:82: 8d:e1:1f:8c:c2:51:e4:04:f3:f1:76:e2:f3:8e:75: 1e:aa:4e:3d:04:c0:5c:93:2a:e5:1b:dc:11:9e:76: 0a:38:d4:52:d9:85:ef:39:ed:83:59:9b:96:48:fb: ac:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9C:ED:C4:FC:68:93:4A:55:D1:14:18:C8:FA:1A:31:59:D0:1D:58 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:4f:fc:84:6c:e1:db:8a:55:31:85:6d:2a:68:41:cf:9d:63: ac:61:49:a3:ca:ff:65:f9:97:7b:1d:b8:31:5b:b2:98:d4:6e: 5a:63:24:3c:c3:63:64:0c:b0:e3:41:d6:c4:a0:c0:d1:e4:30: f7:b2:af:b2:a9:25:d9:b6:63:1c:23:b5:d3:63:1c:db:10:c7: c5:6a:32:81:7b:d0:e2:f1:97:57:ad:f0:6e:de:0d:b4:0f:b4: e1:07:d3:e5:11:f4:40:e2:51:9b:21:60:e3:40:32:fd:64:47: 6c:e9:b4:6d:9e:9e:d8:4d:c8:9b:d7:f7:12:d2:36:63:fc:c1: c1:45:c0:10:8c:88:8f:ac:b2:a8:ff:01:5b:74:4b:f1:57:90: 80:cc:93:5b:97:f2:ab:76:e7:8e:a0:13:7a:70:04:42:f6:9b: fe:13:b6:bb:58:bb:a4:21:5b:b9:21:bc:51:a9:66:37:ce:25: 33:c9:c9:9e:30:67:21:52:84:fa:fc:db:07:0f:b2:29:28:4a: 12:72:ef:c9:f5:7b:2e:be:f5:b0:0b:7f:61:c8:34:13:5f:d2: c4:49:04:cb:00:6a:45:75:04:dd:b6:d2:e4:c7:9b:e7:f4:ec: 13:02:46:51:c2:ac:e6:22:99:80:af:3e:1b:7f:06:6d:bf:73: 55:26:df:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUwNTMxMTQxOTE1WhcNMjUwNjA3MTQxOTE1WjAYMRYwFAYD VQQDEw02ODNiMGZlNC0xOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhHNXgXhqmepuQvqrfkg2ulHGIzcK+sDPvm5XL7xgzgegigIpgZDDpyRGXgW abv2xkzkQOGWxHeFxB5lflAUzzCxyRgaTBURNEYniqi7qIEXp/D0XUIiAGj44lOK 5HTKrH+hb0HNw7jNNolpyWfa1rm1wHwaKAWu2MqHh6Ubfo5iEsdUU6E7gjkit359 C5MIPBO3h/BGROQ0yaVFhZw+yrtwepl9STB3rc02MvKLUSAsjm2XuB/JoPn8k5sy kKTBswcD+xRQ/HlJS3C8eAXFCYKN4R+MwlHkBPPxduLzjnUeqk49BMBckyrlG9wR nnYKONRS2YXvOe2DWZuWSPusRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASc7cT8 aJNKVdEUGMj6GjFZ0B1YMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUT/yEbOHbilUxhW0qaEHPnWOsYUmjyv9l+Zd7HbgxW7KY1G5aYyQ8 w2NkDLDjQdbEoMDR5DD3sq+yqSXZtmMcI7XTYxzbEMfFajKBe9Di8ZdXrfBu3g20 D7ThB9PlEfRA4lGbIWDjQDL9ZEds6bRtnp7YTcib1/cS0jZj/MHBRcAQjIiPrLKo /wFbdEvxV5CAzJNbl/KrdueOoBN6cARC9pv+E7a7WLukIVu5IbxRqWY3ziUzycme MGchUoT6/NsHD7IpKEoScu/J9XsuvvWwC39hyDQTX9LESQTLAGpFdQTdttLkx5vn 9OwTAkZRwqzmIpmArz4bfwZtv3NVJt8W -----END CERTIFICATE-----Generated at Sat May 31 16:52:18 2025 by rpki-client