$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: ovbSVtFr2FvScvz5CjwsKv0lFbN8MW65zkBPke3wI3o= Subject key identifier: 7B:5E:42:6A:AF:2D:C2:2B:F3:80:95:E3:E8:CF:CB:E0:58:7F:29:35 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 352C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 34C8 Signing time: Fri 22 Aug 2025 14:19:27 +0000 Manifest this update: Fri 22 Aug 2025 14:19:26 +0000 Manifest next update: Fri 29 Aug 2025 14:19:26 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: G1cpa4WUzb6v3WG0cQTinx2tkh9SGeacPMNHx4A8KeI=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13612 (0x352c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Aug 22 14:19:26 2025 GMT Not After : Aug 29 14:19:26 2025 GMT Subject: CN=68a87c6e-f8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2d:bc:6d:b7:36:86:d2:55:06:a3:a2:0b:5c: 55:d0:0f:a0:ab:9e:57:d4:c1:2b:cf:99:62:d6:2e: 2c:62:d0:e4:1e:6f:f1:0c:03:1e:ee:61:55:8a:7a: 0b:db:fc:91:9d:2b:58:36:61:25:1d:9d:ea:1c:a0: be:f1:a5:85:2e:62:d3:a0:29:c5:ca:51:50:44:cc: 7d:ca:e0:0f:c1:dd:93:82:53:19:91:1c:c2:42:0f: 43:13:24:00:cb:ef:af:ab:79:00:65:aa:48:d5:89: 3a:2c:13:d0:c2:da:fe:2d:be:3d:7b:20:14:2f:4f: 0d:49:d2:84:97:1f:77:64:87:5f:38:cf:30:00:4f: 84:6e:f9:6c:ba:55:46:98:76:ab:e9:f8:b4:d4:72: 98:eb:d0:5e:eb:fe:12:0a:88:bd:bf:dd:ef:89:0b: e2:40:e5:e9:ed:ac:82:a5:44:6a:89:f2:9f:07:63: 15:f5:39:7d:04:4b:2b:da:b5:bb:c7:bf:f2:99:b9: 42:c7:0e:6d:7f:d1:aa:27:5b:15:de:d2:91:a5:dc: e8:30:6a:d6:36:e2:82:57:37:71:72:0a:ba:71:81: 0f:88:3c:da:57:07:64:e7:f3:af:c1:ec:a3:38:e4: a1:85:76:4a:3a:12:19:1d:1f:64:90:37:1c:cb:c5: 21:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5E:42:6A:AF:2D:C2:2B:F3:80:95:E3:E8:CF:CB:E0:58:7F:29:35 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f3:c1:70:d5:42:07:51:86:11:df:1e:63:96:6f:eb:1f:87: 1c:fa:ef:07:e0:34:fb:b2:3d:c0:9b:66:5d:84:22:97:f5:61: 6f:86:ba:e4:84:17:6b:c1:1f:08:8e:8d:55:22:b8:94:3b:7a: df:ff:7e:f1:b2:ac:d2:3c:35:8d:a7:f0:97:bf:47:b7:be:c0: 96:cd:3f:c0:c5:84:94:24:c9:b3:a4:00:1c:fd:d1:f9:b7:61: 98:0b:3f:e6:e6:fa:30:96:7b:5e:1c:5b:d6:1d:43:56:01:12: e9:a8:b5:e9:90:c4:19:85:e9:b9:f0:4a:85:8b:60:13:79:bd: 30:7c:56:c2:4f:55:b2:a4:80:52:90:74:53:84:5a:55:ca:ad: b4:94:08:7a:a6:5c:14:40:68:e0:e8:65:76:95:e8:50:88:ae: 5a:f9:14:6b:72:f2:f2:a5:ec:17:6d:65:39:a0:33:00:e5:b2: 33:95:79:28:0d:bb:90:8a:f2:70:b4:b5:9b:68:12:c0:38:8f: 9f:3e:dd:46:6c:21:7d:da:37:4d:25:b2:06:25:54:0d:bd:40: f4:9a:90:20:b8:71:b4:9b:3a:1f:94:29:a4:ee:6b:dc:6b:48: c4:b2:71:7d:22:7b:db:ef:e1:fe:0a:5e:e3:ba:3a:6e:65:55: e1:8f:94:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUwODIyMTQxOTI2WhcNMjUwODI5MTQxOTI2WjAYMRYwFAYD VQQDEw02OGE4N2M2ZS1mOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y28bbc2htJVBqOiC1xV0A+gq55X1MErz5li1i4sYtDkHm/xDAMe7mFVinoL 2/yRnStYNmElHZ3qHKC+8aWFLmLToCnFylFQRMx9yuAPwd2TglMZkRzCQg9DEyQA y++vq3kAZapI1Yk6LBPQwtr+Lb49eyAUL08NSdKElx93ZIdfOM8wAE+EbvlsulVG mHar6fi01HKY69Be6/4SCoi9v93viQviQOXp7ayCpURqifKfB2MV9Tl9BEsr2rW7 x7/ymblCxw5tf9GqJ1sV3tKRpdzoMGrWNuKCVzdxcgq6cYEPiDzaVwdk5/Ovweyj OOShhXZKOhIZHR9kkDccy8UhWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHteQmqv LcIr84CV4+jPy+BYfyk1MB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq88Fw1UIHUYYR3x5jlm/rH4cc+u8H4DT7sj3Am2ZdhCKX9WFvhrrk hBdrwR8Ijo1VIriUO3rf/37xsqzSPDWNp/CXv0e3vsCWzT/AxYSUJMmzpAAc/dH5 t2GYCz/m5vowlnteHFvWHUNWARLpqLXpkMQZhem58EqFi2ATeb0wfFbCT1WypIBS kHRThFpVyq20lAh6plwUQGjg6GV2lehQiK5a+RRrcvLypewXbWU5oDMA5bIzlXko DbuQivJwtLWbaBLAOI+fPt1GbCF92jdNJbIGJVQNvUD0mpAguHG0mzoflCmk7mvc a0jEsnF9Invb7+H+Cl7jujpuZVXhj5SN -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:55 2025 by rpki-client