$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: 2GZ6fxARHtx0m1mzA9vZT2WzzT7HYUZdFBhZvejwkII= Subject key identifier: 0D:B6:4A:2F:9C:CD:64:57:7A:86:34:1A:E3:06:29:9F:6D:E0:A4:9E Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 348F Signing time: Sat 31 May 2025 14:28:01 +0000 Manifest this update: Sat 31 May 2025 14:28:00 +0000 Manifest next update: Sat 07 Jun 2025 14:28:00 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: WjUXGNbL0of9Cb+eRW2/tN8a4Z6Z9fou3Mnr2yzfB8U=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: t/ROOpg/IwC6W3DYUfJyZ4y/FXhn7ZuftkL+LfoKWRk=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: ea8eMteisHvIepMEhAjTnxYwI9xVzRVN61pc6MiuWHw=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: kZY0gEYojacBpy6Flxbc6cWYiWfgAwQSMnYX8MagWhA=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: wkkagOsbEtkABMZzn1UGFfhIBhIKqyHgBeARkv/JwZI=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: L8G18w6rwaHmMSrJokPAC0OZq/Tml3UVjCIQ2Q/Hgqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13476 (0x34a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: May 31 14:28:00 2025 GMT Not After : Jun 7 14:28:00 2025 GMT Subject: CN=683b11f0-c285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:76:fc:e4:d9:0b:fc:bc:c6:d9:c3:13:05: e2:c7:01:ce:a4:08:24:d9:1e:86:f0:f3:dd:90:d2: 8f:e7:e2:68:a1:85:f2:02:bb:49:db:9c:35:8e:97: e3:75:75:76:82:15:13:f0:c0:c2:ec:3c:db:d4:fc: a3:a6:37:20:bc:7e:7d:f7:50:7c:12:51:03:44:d7: 3c:0f:79:1c:bd:e7:db:8e:30:74:c5:71:ae:20:21: 0c:c5:e2:94:07:4f:0c:fb:7a:27:85:b2:48:61:25: 0f:da:81:a8:a8:9f:3f:c5:13:23:af:e4:c7:8e:3c: da:54:0a:04:c4:39:73:8d:a9:32:b6:f4:4c:85:6b: 22:31:d1:c9:78:19:cf:7d:16:5c:05:d6:89:9c:e7: d8:29:cf:04:c1:89:62:5e:c9:f1:69:f6:be:35:ba: 71:9d:d8:ca:56:87:cf:96:92:83:af:0d:2e:28:3b: 07:10:15:7d:98:ac:65:da:a6:59:93:b0:3b:a1:48: 8a:4e:c5:9e:3a:8c:e7:bf:84:28:41:6e:96:44:07: 08:52:81:b3:96:1c:5a:38:33:e5:48:1f:21:f4:d0: 9c:6c:43:1d:5d:95:c6:ac:6c:3f:4b:40:35:ce:02: e6:69:a4:53:3a:8e:5b:df:ed:d8:10:df:b8:d9:be: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B6:4A:2F:9C:CD:64:57:7A:86:34:1A:E3:06:29:9F:6D:E0:A4:9E X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:0c:1a:79:50:16:f5:8b:ea:c2:0d:f0:7a:15:77:04:e1:12: 98:05:36:e2:73:66:36:4d:67:bf:f8:72:ec:6a:3c:6c:39:42: b8:f8:48:ba:cd:c5:81:9e:90:e2:46:58:d0:af:1f:45:67:ed: d7:96:66:94:95:f2:a2:ba:d6:90:ac:77:59:20:64:f8:78:c7: 07:1b:0d:5d:26:9c:16:1c:24:cd:b5:7e:a8:28:6f:5b:6f:22: b8:91:8d:b3:f7:b5:0c:4a:27:81:f4:e5:36:41:b8:31:8b:d7: f7:cb:16:e1:06:ab:8c:1a:49:7a:93:61:ca:99:7f:cb:af:5f: ec:4f:98:37:0f:46:f1:74:d5:d0:82:3f:1e:8b:fa:2d:0a:73: 09:2f:8a:3a:98:f0:7a:df:a0:8d:13:44:c2:b9:cd:76:b2:2a: 0e:11:c2:f0:41:fa:58:be:54:8c:fd:97:7f:4f:7e:31:0b:d2: e5:e7:df:5b:04:4e:7e:80:62:69:05:34:3b:9b:13:0f:e1:24: 71:e4:ba:d2:0c:b8:bb:29:06:2c:83:7b:97:e8:3f:3c:4a:76: e7:4f:86:6c:85:6d:80:4c:23:7d:ae:6e:13:e1:08:71:76:ac: 50:e4:39:66:21:33:23:e0:77:f5:a5:a4:84:3c:0c:c3:48:96: b3:19:51:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwNTMxMTQyODAwWhcNMjUwNjA3MTQyODAwWjAYMRYwFAYD VQQDEw02ODNiMTFmMC1jMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjx2/OTZC/y8xtnDEwXixwHOpAgk2R6G8PPdkNKP5+JooYXyArtJ25w1jpfj dXV2ghUT8MDC7Dzb1PyjpjcgvH5991B8ElEDRNc8D3kcvefbjjB0xXGuICEMxeKU B08M+3onhbJIYSUP2oGoqJ8/xRMjr+THjjzaVAoExDlzjakytvRMhWsiMdHJeBnP fRZcBdaJnOfYKc8EwYliXsnxafa+NbpxndjKVofPlpKDrw0uKDsHEBV9mKxl2qZZ k7A7oUiKTsWeOoznv4QoQW6WRAcIUoGzlhxaODPlSB8h9NCcbEMdXZXGrGw/S0A1 zgLmaaRTOo5b3+3YEN+42b5+gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA22Si+c zWRXeoY0GuMGKZ9t4KSeMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgDBp5UBb1i+rCDfB6FXcE4RKYBTbic2Y2TWe/+HLsajxsOUK4+Ei6 zcWBnpDiRljQrx9FZ+3XlmaUlfKiutaQrHdZIGT4eMcHGw1dJpwWHCTNtX6oKG9b byK4kY2z97UMSieB9OU2Qbgxi9f3yxbhBquMGkl6k2HKmX/Lr1/sT5g3D0bxdNXQ gj8ei/otCnMJL4o6mPB636CNE0TCuc12sioOEcLwQfpYvlSM/Zd/T34xC9Ll599b BE5+gGJpBTQ7mxMP4SRx5LrSDLi7KQYsg3uX6D88SnbnT4ZshW2ATCN9rm4T4Qhx dqxQ5DlmITMj4Hf1paSEPAzDSJazGVFw -----END CERTIFICATE-----Generated at Sat May 31 16:35:03 2025 by rpki-client