$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: XJCHjF7gsV2fXdNHJ+/3xwqFMQb3uTS+yroaOtFWlSw= Subject key identifier: 95:40:57:51:95:77:71:19:27:FB:41:F3:C5:42:E6:00:4C:DE:C7:2C Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 34CD Signing time: Tue 16 Sep 2025 14:28:33 +0000 Manifest this update: Tue 16 Sep 2025 14:28:32 +0000 Manifest next update: Tue 23 Sep 2025 14:28:32 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: YkKQZHaIIzjC2sX7frHCq8cpIY4+R8HsZ2PYxRU69JA=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: Y+ojf+2jX3eowe65KYol38ex1Bpsq2OZibivyd0HsaA=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: coEzJmQszrLxu4ob4mQCm0s5FabKwMGZ0/yHnUumh2Q=) 4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: JZDrvt3y2uOvt6jcah8n1eAk+/ZZD32CSv6lmYScC9c=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: plCjgN7YWhsYH+MwAwVINYh2QSCUYoeRR3x33+0+qnE=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: nP3RcVP/gbGg6rx+o8wZqZToMdd4Sr+IoSCjwNOdYfA=) 7: F647E58E768A11F081B6114EC4F9AE02.roa (hash: 4tlTWNBTFbCbarJCMOHXFwX1zgwBjmDcHval7E7ErMY=) 8: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: jze2dZZOQnAGOKOQ6Rz+mOGJDCU7Q1dag2aXHfDHrUY=) 9: F550BA02768A11F081B6114EC4F9AE02.roa (hash: +Emh97G4a6MC22cwrisLR6hKm25TYhC5b4mYNP17m7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 14:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13548 (0x34ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Sep 16 14:28:32 2025 GMT Not After : Sep 23 14:28:32 2025 GMT Subject: CN=68c97411-f88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:95:71:e6:88:f4:e2:6d:3d:e9:08:76:5f:c6: 5f:52:86:14:dd:a8:55:47:d6:76:9a:cb:91:83:ef: 3f:40:15:b7:90:5e:99:7e:48:96:f9:a7:23:e7:18: 02:06:81:95:69:d2:df:11:20:f2:60:ac:6d:c1:59: ff:14:51:5c:79:a9:80:01:85:bd:16:77:eb:de:5d: 88:00:dd:17:0d:f5:03:0d:16:39:af:e4:db:fb:4d: d4:f0:d8:ac:cd:35:8a:6e:34:59:a5:b8:f9:e7:4c: 6c:3a:95:83:6a:f6:16:15:dc:33:3c:9a:2f:30:da: aa:36:cb:1c:c9:67:76:65:45:d0:2f:71:1b:af:bf: 0c:e5:ae:81:58:8a:6b:0a:10:22:70:88:d7:12:70: 4a:84:f7:ae:53:45:57:c8:4c:fd:e0:46:66:9a:17: 71:81:42:3f:29:98:a4:ef:69:33:9c:ed:75:0b:e6: 96:ab:76:7c:fa:c7:d2:49:5f:e5:2d:1c:77:66:27: f5:5f:64:98:d0:d4:64:cc:f7:be:a5:c0:59:86:ca: bc:ba:3e:db:f3:a7:02:53:7c:b1:df:e4:1d:4c:00: eb:4d:22:71:e4:c6:a3:09:b8:ca:79:5b:c7:58:f3: 63:3c:61:61:14:74:c3:99:f7:96:be:9b:cd:5c:bf: e0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:40:57:51:95:77:71:19:27:FB:41:F3:C5:42:E6:00:4C:DE:C7:2C X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:3f:c4:1a:8f:44:29:4d:a1:79:cb:d3:49:05:79:9e:5d:c2: dc:19:06:73:ee:01:7d:38:a9:2d:af:13:a4:d4:1f:d1:f7:c7: d7:41:8f:d7:5a:bd:02:15:42:2c:aa:a3:01:f7:6a:8a:57:c6: 4e:5e:4c:17:e3:b7:43:b9:f9:6c:11:a9:17:4b:d1:73:3a:e2: 8d:6a:f6:94:80:50:96:36:12:f0:69:b5:b8:77:f9:29:ab:2f: d0:f1:b6:5a:62:3c:df:e4:04:dd:19:6c:bf:64:91:9b:4c:b2: 41:52:10:61:ef:a6:6c:93:5f:bf:51:db:ae:e8:3a:4e:67:13: 95:5a:fa:09:c6:29:cd:ab:a5:ae:eb:e7:22:7e:96:3e:ae:02: 7b:7f:00:33:4a:9e:8c:8c:04:64:c0:8a:11:a6:ac:26:70:9f: b1:41:a3:52:3f:31:23:c1:f9:fd:28:fe:1d:7e:86:55:43:b6: e4:c4:96:93:28:f9:e4:2b:9e:0c:b2:34:bb:54:73:e2:dd:d4: 5d:7e:32:1a:b4:60:4b:81:47:51:59:81:55:12:45:59:60:cd: bc:b9:2d:4d:78:fc:8a:9d:1a:b5:a9:c1:b4:6a:84:e4:ae:6a: 04:12:22:74:b5:ab:23:e2:b8:40:61:65:1e:9c:62:60:e5:03: 59:a8:ab:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwOTE2MTQyODMyWhcNMjUwOTIzMTQyODMyWjAYMRYwFAYD VQQDEw02OGM5NzQxMS1mODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pVx5oj04m096Qh2X8ZfUoYU3ahVR9Z2msuRg+8/QBW3kF6ZfkiW+acj5xgC BoGVadLfESDyYKxtwVn/FFFceamAAYW9Fnfr3l2IAN0XDfUDDRY5r+Tb+03U8Nis zTWKbjRZpbj550xsOpWDavYWFdwzPJovMNqqNsscyWd2ZUXQL3Ebr78M5a6BWIpr ChAicIjXEnBKhPeuU0VXyEz94EZmmhdxgUI/KZik72kznO11C+aWq3Z8+sfSSV/l LRx3Zif1X2SY0NRkzPe+pcBZhsq8uj7b86cCU3yx3+QdTADrTSJx5MajCbjKeVvH WPNjPGFhFHTDmfeWvpvNXL/gMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVAV1GV d3EZJ/tB88VC5gBM3scsMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUP8Qaj0QpTaF5y9NJBXmeXcLcGQZz7gF9OKktrxOk1B/R98fXQY/X Wr0CFUIsqqMB92qKV8ZOXkwX47dDuflsEakXS9FzOuKNavaUgFCWNhLwabW4d/kp qy/Q8bZaYjzf5ATdGWy/ZJGbTLJBUhBh76Zsk1+/Uduu6DpOZxOVWvoJxinNq6Wu 6+cifpY+rgJ7fwAzSp6MjARkwIoRpqwmcJ+xQaNSPzEjwfn9KP4dfoZVQ7bkxJaT KPnkK54MsjS7VHPi3dRdfjIatGBLgUdRWYFVEkVZYM28uS1NePyKnRq1qcG0aoTk rmoEEiJ0tasj4rhAYWUenGJg5QNZqKuX -----END CERTIFICATE-----Generated at Tue Sep 16 17:17:54 2025 by rpki-client