$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft File: 34UAobIJAKu39Z62mwcBjfgEXF4.mft (raw, json) Hash identifier: CvvGiELFVh2/r0Jh5qUsVShmR2BQC1EiPzAlCdejwGo= Subject key identifier: 99:6C:7B:7D:DA:83:CE:9E:6F:05:9E:69:FD:6E:0A:4C:8D:34:9C:34 Authority key identifier: DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E Certificate issuer: /CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E Certificate serial: 3490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft Manifest number: 3488 Signing time: Sat 31 May 2025 15:17:47 +0000 Manifest this update: Sat 31 May 2025 15:17:46 +0000 Manifest next update: Sat 07 Jun 2025 15:17:46 +0000 Files and hashes: 1: 34UAobIJAKu39Z62mwcBjfgEXF4.crl (hash: B+HBgHPm2DL2pJdjXVfOQP1HWlIyUXNF7xQHPf+uBgk=) 2: B92D2816064311EAAFD3B416C4F9AE02.roa (hash: snskZTPzgdK1oFEckPC5HgyDQRzXftf0PJQ8L4j0QcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13456 (0x3490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB73, serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E Validity Not Before: May 31 15:17:46 2025 GMT Not After : Jun 7 15:17:46 2025 GMT Subject: CN=683b1d9b-9690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:53:32:43:2f:cc:5f:87:a4:58:08:95:16:ff: 40:8e:d5:ef:95:9b:5d:b7:b9:c7:8a:ab:54:84:bb: 06:aa:d1:e2:c2:a6:f5:77:3b:a3:62:48:92:cd:27: 86:b1:11:92:c4:27:4a:f1:ea:16:c4:38:f8:21:a9: dd:da:94:d8:63:9e:dc:65:16:46:0f:ec:52:48:1c: 46:f0:2f:e0:78:e1:f6:41:97:07:23:54:3e:2f:59: a2:f5:2b:b9:05:a0:01:5b:4d:14:80:b8:f0:6b:69: f3:d0:24:28:49:60:4e:8b:e6:cc:87:f7:6b:cd:81: f0:c7:a0:8c:23:f4:26:c8:f3:3a:77:51:1e:5a:be: 0f:b5:21:ea:8c:6c:2e:82:8b:dd:c3:a1:52:9d:c0: 42:ef:47:43:4d:57:3d:1e:23:ce:19:20:fd:25:e1: a7:ed:ef:80:62:93:de:e7:01:ef:eb:80:88:0b:01: ef:aa:5b:6f:81:f2:38:16:f2:b0:6a:cc:b4:32:be: 15:2e:8b:bb:7d:58:ea:47:e7:75:ed:a1:15:bc:56: 8c:e9:be:ad:23:ed:36:b8:ee:20:52:25:e1:a8:25: c3:ab:61:15:82:ac:c7:ea:03:62:93:c0:6a:31:99: bd:fd:0c:df:9b:51:e1:61:88:e3:50:ee:88:c1:80: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6C:7B:7D:DA:83:CE:9E:6F:05:9E:69:FD:6E:0A:4C:8D:34:9C:34 X509v3 Authority Key Identifier: keyid:DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:17:79:1b:5d:7d:e3:1c:fd:f4:9e:62:30:61:61:94:98:d1: fb:7f:e4:f6:50:15:39:a0:8c:a0:ec:8c:a5:0f:6a:09:e0:f3: 5c:b7:50:9f:eb:14:8c:66:9d:1c:6e:b5:4d:cd:1f:38:14:42: 65:2c:8e:2e:70:de:90:04:d3:e4:f8:75:36:04:5c:d3:ba:10: 6b:c4:31:8d:63:84:07:89:6c:81:93:a2:ae:b6:77:7e:64:8a: be:f8:0d:3d:e1:4b:a1:17:2a:86:e2:41:39:e6:af:fe:0d:9a: 16:02:63:69:64:be:59:c0:81:d6:cf:ca:59:02:94:79:66:19: 0f:75:21:63:10:af:71:2e:99:4b:cb:b0:12:b1:68:1c:e4:ed: b4:bb:1b:f3:fe:ba:43:4a:7b:94:18:c2:ce:f7:c0:0c:3a:13: a4:c3:f5:0a:90:c3:de:86:62:30:b9:d1:09:f6:cc:68:3b:10: 51:53:21:86:d9:85:fa:aa:39:fd:8e:89:a8:a2:bd:70:4c:7d: 65:06:cb:26:3e:15:d1:3c:49:51:f6:b2:37:fc:80:26:e2:99: 1f:f6:2c:c3:e5:51:ad:0f:e6:1f:27:30:7c:5b:18:b4:b7:4e: cc:d1:0a:1a:ca:b3:84:ae:b8:09:47:25:cb:24:93:03:31:c0: 9e:82:cd:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCNzMxMTAvBgNVBAUTKERGODUwMEExQjIwOTAwQUJCN0Y1OUVCNjlCMDcwMThE RjgwNDVDNUUwHhcNMjUwNTMxMTUxNzQ2WhcNMjUwNjA3MTUxNzQ2WjAYMRYwFAYD VQQDEw02ODNiMWQ5Yi05NjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VMyQy/MX4ekWAiVFv9AjtXvlZtdt7nHiqtUhLsGqtHiwqb1dzujYkiSzSeG sRGSxCdK8eoWxDj4Iand2pTYY57cZRZGD+xSSBxG8C/geOH2QZcHI1Q+L1mi9Su5 BaABW00UgLjwa2nz0CQoSWBOi+bMh/drzYHwx6CMI/QmyPM6d1EeWr4PtSHqjGwu govdw6FSncBC70dDTVc9HiPOGSD9JeGn7e+AYpPe5wHv64CICwHvqltvgfI4FvKw asy0Mr4VLou7fVjqR+d17aEVvFaM6b6tI+02uO4gUiXhqCXDq2EVgqzH6gNik8Bq MZm9/Qzfm1HhYYjjUO6IwYDo7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlse33a g86ebwWeaf1uCkyNNJw0MB8GA1UdIwQYMBaAFN+FAKGyCQCrt/WetpsHAY34BFxe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI3My9CODhGREU4QzFE QUExMUUyQTVDODkwQTYwOEIwMkNEMi8zNFVBb2JJSkFLdTM5WjYybXdjQmpmZ0VY RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0VUFvYklKQUt1MzlaNjJtd2NCamZnRVhGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI3My9CODhGREU4QzFEQUExMUUyQTVDODkwQTYwOEIwMkNEMi8zNFVBb2JJSkFL dTM5WjYybXdjQmpmZ0VYRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARF3kbXX3jHP30nmIwYWGUmNH7f+T2UBU5oIyg7IylD2oJ4PNct1Cf 6xSMZp0cbrVNzR84FEJlLI4ucN6QBNPk+HU2BFzTuhBrxDGNY4QHiWyBk6Kutnd+ ZIq++A094UuhFyqG4kE55q/+DZoWAmNpZL5ZwIHWz8pZApR5ZhkPdSFjEK9xLplL y7ASsWgc5O20uxvz/rpDSnuUGMLO98AMOhOkw/UKkMPehmIwudEJ9sxoOxBRUyGG 2YX6qjn9jomoor1wTH1lBssmPhXRPElR9rI3/IAm4pkf9izD5VGtD+YfJzB8Wxi0 t07M0QoayrOErrgJRyXLJJMDMcCegs23 -----END CERTIFICATE-----Generated at Sat May 31 17:00:24 2025 by rpki-client