$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: 6lLbDI0PtVX6zO207JjaMq2Wk06uYRmjC0c6o5o36E4= Subject key identifier: CC:9B:C7:24:78:4F:90:7D:A7:15:CB:E8:0F:A3:B4:D3:2C:5E:5A:B3 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 3539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 34D5 Signing time: Tue 16 Sep 2025 14:19:28 +0000 Manifest this update: Tue 16 Sep 2025 14:19:28 +0000 Manifest next update: Tue 23 Sep 2025 14:19:28 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: BeO6BBaCJn8yxyf0+Z+RkyEJnbv6TCLyXMYG7FhAH68=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 14:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13625 (0x3539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Sep 16 14:19:28 2025 GMT Not After : Sep 23 14:19:28 2025 GMT Subject: CN=68c971f0-dd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:50:e7:f1:0f:4a:55:d8:e7:0f:3b:28:3b: 9d:e0:94:5b:5c:d6:a9:92:b8:50:7a:82:be:3f:ef: 07:2f:42:7f:09:78:16:69:6a:8e:db:5a:3e:3a:39: 9f:9f:32:94:7e:b0:0e:3b:b9:10:51:fe:76:bc:1b: a4:b7:34:f0:66:52:d8:f5:69:5f:fb:a3:dd:20:1c: 7c:13:31:9a:6f:53:ed:55:36:f0:39:c8:f4:25:dd: 76:b0:7b:fd:00:b0:44:4c:7f:87:9e:79:76:f0:5a: 9d:96:ad:0a:65:8e:67:88:26:67:ba:f7:3e:9e:ab: c7:89:f9:d5:fd:18:9e:b8:4a:7e:4c:4d:91:67:ef: ef:1e:2d:c0:a1:ee:00:ce:fe:df:1a:68:cc:8d:f6: 29:44:4f:bb:a1:b1:61:89:14:e1:3f:fa:cd:8f:ed: 81:86:a5:50:fa:83:eb:24:10:64:17:7e:55:6f:ab: f9:5f:24:29:dc:fa:f7:c8:fd:56:55:d0:9e:90:c3: 97:17:b0:65:b5:13:37:0a:05:1e:56:98:ae:0c:e0: 93:0e:29:4c:08:57:b3:36:2f:ea:65:85:32:f3:c6: e1:c4:33:68:95:e2:c6:95:33:86:7c:97:78:16:e5: fa:c6:6d:90:ed:33:5c:51:16:ab:74:c8:53:4c:fe: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9B:C7:24:78:4F:90:7D:A7:15:CB:E8:0F:A3:B4:D3:2C:5E:5A:B3 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:65:1a:96:06:c2:d1:d3:e3:17:04:64:25:e1:e4:b9:b8:c1: 8c:9b:b5:25:f7:27:ea:0e:4d:70:65:52:e1:0f:cc:29:4c:40: 2a:86:f9:8a:9e:cf:1a:7a:1d:70:ae:66:32:7c:96:d8:1c:27: 9f:2c:5b:07:fb:a1:a2:98:c6:9d:d4:94:f6:09:2a:07:d0:9d: 67:ea:05:e1:ce:d3:3a:80:2d:46:6a:50:80:d8:8d:34:a0:13: 47:b3:14:e1:2f:d8:11:fe:9c:64:cc:5f:4b:d8:ad:b0:76:24: 56:b7:36:67:95:d2:63:63:9e:ae:6d:55:fe:8c:a0:65:4b:d4: a0:c4:45:d8:b9:40:3c:07:a8:55:23:1a:d5:b4:bd:75:66:09: ce:a8:dc:d2:50:5f:bf:1c:a9:92:16:60:4c:43:76:a0:19:4f: d0:77:ef:6c:ef:37:41:09:2f:ca:e3:ef:36:57:49:c7:46:58: 8c:ab:9e:a8:d9:e3:dc:3b:f4:34:eb:0c:a5:d0:42:01:de:a7: 13:8c:46:9e:3c:f4:c4:bf:b2:da:00:22:b6:99:a1:2f:24:80: 79:12:23:75:35:d6:bf:ed:bf:fb:75:b2:e9:80:12:3e:82:36: 8f:c6:51:99:b9:71:d1:51:c1:1a:13:7f:27:01:77:59:9c:df: ad:48:04:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUwOTE2MTQxOTI4WhcNMjUwOTIzMTQxOTI4WjAYMRYwFAYD VQQDEw02OGM5NzFmMC1kZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAripQ5/EPSlXY5w87KDud4JRbXNapkrhQeoK+P+8HL0J/CXgWaWqO21o+Ojmf nzKUfrAOO7kQUf52vBuktzTwZlLY9Wlf+6PdIBx8EzGab1PtVTbwOcj0Jd12sHv9 ALBETH+Hnnl28Fqdlq0KZY5niCZnuvc+nqvHifnV/RieuEp+TE2RZ+/vHi3Aoe4A zv7fGmjMjfYpRE+7obFhiRThP/rNj+2BhqVQ+oPrJBBkF35Vb6v5XyQp3Pr3yP1W VdCekMOXF7BltRM3CgUeVpiuDOCTDilMCFezNi/qZYUy88bhxDNoleLGlTOGfJd4 FuX6xm2Q7TNcURardMhTTP55owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMybxyR4 T5B9pxXL6A+jtNMsXlqzMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMZRqWBsLR0+MXBGQl4eS5uMGMm7Ul9yfqDk1wZVLhD8wpTEAqhvmK ns8aeh1wrmYyfJbYHCefLFsH+6GimMad1JT2CSoH0J1n6gXhztM6gC1GalCA2I00 oBNHsxThL9gR/pxkzF9L2K2wdiRWtzZnldJjY56ubVX+jKBlS9SgxEXYuUA8B6hV IxrVtL11ZgnOqNzSUF+/HKmSFmBMQ3agGU/Qd+9s7zdBCS/K4+82V0nHRliMq56o 2ePcO/Q06wyl0EIB3qcTjEaePPTEv7LaACK2maEvJIB5EiN1Nda/7b/7dbLpgBI+ gjaPxlGZuXHRUcEaE38nAXdZnN+tSASB -----END CERTIFICATE-----Generated at Tue Sep 16 19:16:13 2025 by rpki-client