$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft File: 34UAobIJAKu39Z62mwcBjfgEXF4.mft (raw, json) Hash identifier: 2tZflPjEsRO6be+TCjHFYp2ve+Ub6qA0KGuIpYaM87E= Subject key identifier: CD:E3:29:88:FD:6C:06:82:04:05:89:0C:BA:4F:B0:D8:86:00:C8:4B Authority key identifier: DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E Certificate issuer: /CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E Certificate serial: 34C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft Manifest number: 34B8 Signing time: Sun 24 Aug 2025 15:17:20 +0000 Manifest this update: Sun 24 Aug 2025 15:17:20 +0000 Manifest next update: Sun 31 Aug 2025 15:17:20 +0000 Files and hashes: 1: 34UAobIJAKu39Z62mwcBjfgEXF4.crl (hash: cQ/6Bd4Da98fmjwL1lABmKq+oq/XiE/Yen2VW6FpntU=) 2: 4D36B644773111F09CF2AB51C4F9AE02.roa (hash: fN6Y1adkepDSZLBzzQ/XxNfXOiTSrpHSSzg0P1LOtkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13506 (0x34c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB73, serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E Validity Not Before: Aug 24 15:17:20 2025 GMT Not After : Aug 31 15:17:20 2025 GMT Subject: CN=68ab2d00-13ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:61:9d:a9:e5:aa:4a:d5:79:0c:a4:f3:1e:85: c0:23:64:60:47:c6:cb:b5:1d:00:fe:61:e5:7c:93: e0:9a:2e:3d:68:46:1b:9f:eb:90:26:bf:50:fe:88: 83:2f:7a:00:bf:f9:7a:2d:5e:42:4c:63:c4:12:cc: d0:5f:3b:12:de:f7:3f:51:eb:08:41:a0:d9:36:d4: 17:35:07:4e:90:9e:db:3f:aa:9b:a9:8c:13:66:a2: d5:bb:7d:b3:41:74:c0:fe:f8:40:60:37:3d:d3:0b: 14:f6:4d:43:0e:48:87:a5:84:b8:8d:86:06:53:77: 3e:9f:fb:5c:db:09:a4:cf:80:de:c2:c6:fb:e4:22: 61:90:50:04:d3:fa:65:0f:8e:be:2e:e1:02:e3:70: 9e:90:db:ea:1f:6f:fe:ec:7d:9e:b2:ca:6c:d7:cf: a9:db:2b:53:6a:74:6d:f2:94:10:10:14:18:7e:9f: 57:e0:9e:bc:58:97:ea:95:c3:77:a9:9c:b4:35:56: f1:15:a0:b1:59:c1:c9:35:70:a6:01:c5:1e:dc:b6: 8c:8c:e7:41:11:26:78:3a:5c:bf:cc:bf:18:f7:01: 00:08:c3:8d:31:46:5c:33:0c:d6:2c:bb:87:41:dd: dd:2b:58:30:ae:cd:96:bc:e3:95:fb:0a:f4:46:f1: 25:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E3:29:88:FD:6C:06:82:04:05:89:0C:BA:4F:B0:D8:86:00:C8:4B X509v3 Authority Key Identifier: keyid:DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7a:af:73:87:28:12:74:15:6a:98:22:37:a2:8d:9c:d3:3e: d3:6b:87:f6:8d:ed:fc:38:4f:2b:08:a3:32:96:f3:b5:05:63: 5c:0d:32:4a:3e:f6:fc:fa:b3:74:8a:36:16:95:25:fa:31:04: db:4e:69:f8:d7:5b:bc:f1:d3:a9:b5:e5:41:6d:00:e1:d0:a0: 15:5a:de:dd:3b:d5:0d:61:a4:2b:d5:ac:36:ea:3f:66:36:0c: 26:99:0f:29:88:ee:10:c1:44:d4:60:f9:7e:4b:ce:a9:1a:fc: a6:37:13:8e:30:a9:7b:4a:d8:0a:9f:5a:b8:c7:55:d5:7b:f5: f1:6c:68:22:9a:6e:02:56:c1:9d:5f:23:f4:50:17:89:3e:e3: 99:d8:84:ef:7c:14:6d:44:73:84:33:b3:f9:55:a7:b0:af:94: f5:c1:db:33:f8:4b:80:e6:74:02:44:27:8a:3d:3e:a8:d0:c9: f2:0e:97:ba:15:5b:5a:19:80:b5:3b:0a:bc:98:5a:88:8c:d3: 90:c6:d1:61:56:f6:84:ab:76:a3:8a:d3:b8:f7:31:07:fc:24: 44:3e:c2:9a:a8:8e:45:e6:78:f9:7c:ad:47:3d:0b:ef:39:28: 7f:dc:ca:26:55:a0:d0:be:fb:05:72:31:43:5e:35:e8:9c:47: 52:d6:aa:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCNzMxMTAvBgNVBAUTKERGODUwMEExQjIwOTAwQUJCN0Y1OUVCNjlCMDcwMThE RjgwNDVDNUUwHhcNMjUwODI0MTUxNzIwWhcNMjUwODMxMTUxNzIwWjAYMRYwFAYD VQQDEw02OGFiMmQwMC0xM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GGdqeWqStV5DKTzHoXAI2RgR8bLtR0A/mHlfJPgmi49aEYbn+uQJr9Q/oiD L3oAv/l6LV5CTGPEEszQXzsS3vc/UesIQaDZNtQXNQdOkJ7bP6qbqYwTZqLVu32z QXTA/vhAYDc90wsU9k1DDkiHpYS4jYYGU3c+n/tc2wmkz4Dewsb75CJhkFAE0/pl D46+LuEC43CekNvqH2/+7H2essps18+p2ytTanRt8pQQEBQYfp9X4J68WJfqlcN3 qZy0NVbxFaCxWcHJNXCmAcUe3LaMjOdBESZ4Oly/zL8Y9wEACMONMUZcMwzWLLuH Qd3dK1gwrs2WvOOV+wr0RvElhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3jKYj9 bAaCBAWJDLpPsNiGAMhLMB8GA1UdIwQYMBaAFN+FAKGyCQCrt/WetpsHAY34BFxe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI3My9CODhGREU4QzFE QUExMUUyQTVDODkwQTYwOEIwMkNEMi8zNFVBb2JJSkFLdTM5WjYybXdjQmpmZ0VY RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0VUFvYklKQUt1MzlaNjJtd2NCamZnRVhGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI3My9CODhGREU4QzFEQUExMUUyQTVDODkwQTYwOEIwMkNEMi8zNFVBb2JJSkFL dTM5WjYybXdjQmpmZ0VYRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeeq9zhygSdBVqmCI3oo2c0z7Ta4f2je38OE8rCKMylvO1BWNcDTJK Pvb8+rN0ijYWlSX6MQTbTmn411u88dOpteVBbQDh0KAVWt7dO9UNYaQr1aw26j9m NgwmmQ8piO4QwUTUYPl+S86pGvymNxOOMKl7StgKn1q4x1XVe/XxbGgimm4CVsGd XyP0UBeJPuOZ2ITvfBRtRHOEM7P5Vaewr5T1wdsz+EuA5nQCRCeKPT6o0MnyDpe6 FVtaGYC1Owq8mFqIjNOQxtFhVvaEq3ajitO49zEH/CREPsKaqI5F5nj5fK1HPQvv OSh/3MomVaDQvvsFcjFDXjXonEdS1qot -----END CERTIFICATE-----Generated at Sun Aug 24 21:46:26 2025 by rpki-client