$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: espjrb/FdFDmRIpu95WbmA9JPRwwpbvIc+2HVmMl5XQ= Subject key identifier: D5:83:21:A6:EB:9B:7E:0B:CA:C1:FD:1B:40:BE:DE:A0:6F:F2:B8:8D Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 34BE Signing time: Mon 18 Aug 2025 14:29:50 +0000 Manifest this update: Mon 18 Aug 2025 14:29:49 +0000 Manifest next update: Mon 25 Aug 2025 14:29:49 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: 53SZ1HOqgw38n4/H+1NRoUse4/6qf4qkTnC0vYJTnZM=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: Y+ojf+2jX3eowe65KYol38ex1Bpsq2OZibivyd0HsaA=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: coEzJmQszrLxu4ob4mQCm0s5FabKwMGZ0/yHnUumh2Q=) 4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: JZDrvt3y2uOvt6jcah8n1eAk+/ZZD32CSv6lmYScC9c=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: plCjgN7YWhsYH+MwAwVINYh2QSCUYoeRR3x33+0+qnE=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: nP3RcVP/gbGg6rx+o8wZqZToMdd4Sr+IoSCjwNOdYfA=) 7: F647E58E768A11F081B6114EC4F9AE02.roa (hash: 4tlTWNBTFbCbarJCMOHXFwX1zgwBjmDcHval7E7ErMY=) 8: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: jze2dZZOQnAGOKOQ6Rz+mOGJDCU7Q1dag2aXHfDHrUY=) 9: F550BA02768A11F081B6114EC4F9AE02.roa (hash: +Emh97G4a6MC22cwrisLR6hKm25TYhC5b4mYNP17m7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13533 (0x34dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 18 14:29:49 2025 GMT Not After : Aug 25 14:29:49 2025 GMT Subject: CN=68a338dd-3b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:5d:0a:23:e4:80:f1:06:60:2c:a6:e6:86: f0:ab:97:1f:20:f4:2f:e4:26:17:33:c4:27:2a:a2: 8e:d9:f1:45:cf:6d:fd:04:8c:67:43:7c:30:16:f6: cf:45:9b:be:90:52:96:d6:e1:30:10:ab:ef:1d:1c: 7d:bf:14:76:63:b2:fd:c6:fb:7f:c7:b4:9c:e3:b2: d6:c4:ab:96:12:7d:b6:1d:63:1f:4a:bc:5a:df:a3: 01:9a:ee:6c:2d:31:ef:f3:f0:b5:21:05:d3:3d:b2: 9a:b3:d6:15:16:d4:1d:01:de:28:ea:4f:c7:f1:0b: 96:d5:19:9e:a7:12:38:c6:2d:92:d5:80:93:69:11: 7a:fc:e7:a1:f3:1b:38:2e:07:f3:fe:a3:31:28:44: d7:60:df:cd:3f:a3:dc:e6:6b:9a:14:1f:ac:74:6d: 12:9f:5a:e1:44:85:42:25:ed:0a:a3:e9:47:c2:fe: d0:dd:7d:c4:b5:c3:07:53:5a:b4:9b:35:37:cb:97: 48:91:21:45:f4:71:ad:53:8b:9b:7c:5f:87:96:59: 64:d4:4f:36:0b:ae:cf:8e:a1:6e:2a:d0:4e:b8:5a: 45:a8:91:55:72:8e:71:14:ef:e1:7e:12:dd:cf:56: ae:60:66:21:ac:f0:71:53:6a:6d:1b:17:42:53:d9: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:83:21:A6:EB:9B:7E:0B:CA:C1:FD:1B:40:BE:DE:A0:6F:F2:B8:8D X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:c7:b4:b6:7c:5b:31:9d:4a:2b:04:18:f5:c2:8b:77:e8:cb: 5a:4b:52:81:99:95:40:05:c7:52:d4:ce:2d:27:8a:3f:bb:08: fc:3e:3f:9a:e6:d1:72:a3:1f:15:16:c3:e0:38:f1:03:10:b8: 0b:f6:8a:47:63:0e:c8:68:e4:4a:d2:b9:32:a4:ba:c2:70:04: 4d:fb:c6:f2:ca:47:da:e6:1c:da:24:32:ea:63:84:35:e7:4a: be:69:1a:75:2f:97:46:17:60:7d:15:71:43:d0:22:10:70:88: 3c:0e:84:45:5b:8f:cd:11:ad:48:11:48:8b:80:5f:3c:05:89: bf:45:06:bc:3c:c9:8c:fc:67:85:84:64:a4:80:3a:31:0b:c5: 24:f6:55:a2:08:9d:b8:05:16:4f:0c:44:d2:25:bf:ae:9c:77: c5:2a:ac:b1:46:a1:8d:43:77:b4:a5:a5:c6:55:d4:cc:94:1b: 0b:19:c7:7d:10:62:d1:fc:6f:bd:3f:1a:28:58:f0:e7:1a:45: d8:92:90:f5:11:a2:ba:2a:7e:c1:99:5e:6e:4e:a4:81:1a:81: 0c:81:a7:cf:ef:d7:7a:53:8d:13:b7:df:83:c7:46:12:6a:98: ea:85:ba:4c:62:b4:01:37:07:cf:1d:91:20:05:70:47:72:04: 02:ad:0d:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwODE4MTQyOTQ5WhcNMjUwODI1MTQyOTQ5WjAYMRYwFAYD VQQDEw02OGEzMzhkZC0zYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkRdCiPkgPEGYCym5obwq5cfIPQv5CYXM8QnKqKO2fFFz239BIxnQ3wwFvbP RZu+kFKW1uEwEKvvHRx9vxR2Y7L9xvt/x7Sc47LWxKuWEn22HWMfSrxa36MBmu5s LTHv8/C1IQXTPbKas9YVFtQdAd4o6k/H8QuW1RmepxI4xi2S1YCTaRF6/Oeh8xs4 Lgfz/qMxKETXYN/NP6Pc5muaFB+sdG0Sn1rhRIVCJe0Ko+lHwv7Q3X3EtcMHU1q0 mzU3y5dIkSFF9HGtU4ubfF+Hlllk1E82C67PjqFuKtBOuFpFqJFVco5xFO/hfhLd z1auYGYhrPBxU2ptGxdCU9lAoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWDIabr m34LysH9G0C+3qBv8riNMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEx7S2fFsxnUorBBj1wot36MtaS1KBmZVABcdS1M4tJ4o/uwj8Pj+a 5tFyox8VFsPgOPEDELgL9opHYw7IaORK0rkypLrCcARN+8byykfa5hzaJDLqY4Q1 50q+aRp1L5dGF2B9FXFD0CIQcIg8DoRFW4/NEa1IEUiLgF88BYm/RQa8PMmM/GeF hGSkgDoxC8Uk9lWiCJ24BRZPDETSJb+unHfFKqyxRqGNQ3e0paXGVdTMlBsLGcd9 EGLR/G+9PxooWPDnGkXYkpD1EaK6Kn7BmV5uTqSBGoEMgafP79d6U40Tt9+Dx0YS apjqhbpMYrQBNwfPHZEgBXBHcgQCrQ2M -----END CERTIFICATE-----Generated at Wed Aug 20 15:31:54 2025 by rpki-client