$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: g6NmpP4ArzS8uvaH62enwg6GFNFrlaMm6vE1yOeAZOU= Subject key identifier: 67:3D:16:2D:9C:B8:39:FD:F4:12:5B:E0:6C:E0:B0:FE:09:70:EB:A3 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 34F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 3493 Signing time: Sat 10 May 2025 14:19:12 +0000 Manifest this update: Sat 10 May 2025 14:19:11 +0000 Manifest next update: Sat 17 May 2025 14:19:11 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: EcoAxeY7+ycWURrpkO6lSaOkP86VNPbEwcR3Kw+kvZs=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13559 (0x34f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: May 10 14:19:11 2025 GMT Not After : May 17 14:19:11 2025 GMT Subject: CN=681f6060-6870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:c9:9a:73:23:d9:ee:f0:0f:a5:ff:c2:61: 50:30:b3:22:53:af:ba:d8:fe:a0:c3:41:cc:6e:a1: 65:eb:41:a3:45:8f:51:a2:57:db:a7:98:ae:fd:83: 89:b7:30:e4:8d:98:9c:91:70:71:a6:f0:51:50:d8: 98:ea:f3:cc:dd:1c:e3:64:2a:f1:06:c9:66:65:b4: fc:45:a0:c4:60:18:45:76:6b:df:b9:9c:46:a1:71: 44:c4:22:f6:ef:03:80:49:c6:2b:26:ed:5c:f1:54: fc:f8:25:7c:d8:bb:1c:38:ae:a2:8c:ad:6c:06:44: 5f:fa:62:6f:35:87:78:27:6c:b2:77:1f:8a:c7:b8: 7a:48:d3:66:de:c0:4f:52:4b:53:a9:d3:56:bf:08: 9b:da:37:07:20:65:0f:37:d1:ad:b4:d1:83:eb:09: 3d:eb:f8:8d:c6:96:56:b0:27:ed:57:5f:4f:fc:2e: d0:40:1c:8b:60:41:1b:23:02:6d:1d:94:f6:ed:6e: e0:4a:fd:40:46:71:c1:3b:d6:f8:d1:1e:80:6e:29: ba:bf:3c:72:40:17:2c:f9:f9:87:ea:ab:f0:b4:e6: 0f:a1:4d:ca:36:da:b8:99:91:89:39:6b:05:02:b7: 50:1d:b7:d6:31:8b:99:8d:3a:ac:08:d7:1f:9d:fe: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3D:16:2D:9C:B8:39:FD:F4:12:5B:E0:6C:E0:B0:FE:09:70:EB:A3 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:e9:e3:0d:11:17:62:b9:5d:65:ed:63:ec:3f:05:26:13:bd: 27:3b:1a:5e:c1:a9:fb:06:87:1a:f4:9c:6a:21:a3:1b:07:64: 3f:42:a6:0c:cf:30:ca:3d:57:8e:01:c9:4e:b5:7b:8f:93:70: e3:c2:fa:74:35:22:81:d0:ad:96:ca:a5:e1:b7:4d:1f:cc:95: ff:5a:39:5b:ad:a0:71:f8:42:27:e0:30:f6:3e:6b:27:6a:d1: a5:15:7a:9a:68:38:a9:fe:fa:09:77:30:16:2e:25:c9:eb:e3: 71:bc:b7:34:f6:df:e4:92:79:aa:b7:af:06:17:4e:85:06:b8: ec:ab:ce:52:b9:65:55:4f:48:fd:87:7c:4c:b0:33:bc:a7:b2: 18:50:59:ab:ea:14:e3:c9:86:26:82:f5:6b:da:83:d9:f9:53: 95:13:ce:87:d8:c4:bd:b4:63:14:97:2f:b8:d4:3e:4c:4c:9f: fa:da:d4:fb:49:60:92:95:f4:01:e8:ba:11:37:36:5d:67:50: ef:f6:bb:16:2b:79:8d:62:c2:48:6a:41:57:40:74:74:98:24: 87:ae:e8:9a:b4:f9:d4:db:9c:78:a7:72:84:2a:0d:e0:a9:88: 01:7f:70:f7:83:4c:82:d8:cf:8b:87:09:e7:30:6a:dd:37:ac: 36:a8:22:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUwNTEwMTQxOTExWhcNMjUwNTE3MTQxOTExWjAYMRYwFAYD VQQDEw02ODFmNjA2MC02ODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuvJmnMj2e7wD6X/wmFQMLMiU6+62P6gw0HMbqFl60GjRY9Rolfbp5iu/YOJ tzDkjZickXBxpvBRUNiY6vPM3RzjZCrxBslmZbT8RaDEYBhFdmvfuZxGoXFExCL2 7wOAScYrJu1c8VT8+CV82LscOK6ijK1sBkRf+mJvNYd4J2yydx+Kx7h6SNNm3sBP UktTqdNWvwib2jcHIGUPN9GttNGD6wk96/iNxpZWsCftV19P/C7QQByLYEEbIwJt HZT27W7gSv1ARnHBO9b40R6Abim6vzxyQBcs+fmH6qvwtOYPoU3KNtq4mZGJOWsF ArdQHbfWMYuZjTqsCNcfnf54DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGc9Fi2c uDn99BJb4GzgsP4JcOujMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA06eMNERdiuV1l7WPsPwUmE70nOxpewan7Boca9JxqIaMbB2Q/QqYM zzDKPVeOAclOtXuPk3Djwvp0NSKB0K2WyqXht00fzJX/WjlbraBx+EIn4DD2Pmsn atGlFXqaaDip/voJdzAWLiXJ6+NxvLc09t/kknmqt68GF06FBrjsq85SuWVVT0j9 h3xMsDO8p7IYUFmr6hTjyYYmgvVr2oPZ+VOVE86H2MS9tGMUly+41D5MTJ/62tT7 SWCSlfQB6LoRNzZdZ1Dv9rsWK3mNYsJIakFXQHR0mCSHruiatPnU25x4p3KEKg3g qYgBf3D3g0yC2M+LhwnnMGrdN6w2qCK7 -----END CERTIFICATE-----Generated at Mon May 12 12:53:18 2025 by rpki-client