$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft File: 34UAobIJAKu39Z62mwcBjfgEXF4.mft (raw, json) Hash identifier: 9YCTFO4TlXiUQ+LWlstSegvJmjntPVhvFqno6ZYd1tg= Subject key identifier: 6D:FE:96:D7:B4:BB:81:7C:A7:93:70:46:2A:A2:D2:E8:6A:A1:40:3E Authority key identifier: DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E Certificate issuer: /CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft Manifest number: 347E Signing time: Mon 12 May 2025 15:16:19 +0000 Manifest this update: Mon 12 May 2025 15:16:19 +0000 Manifest next update: Mon 19 May 2025 15:16:19 +0000 Files and hashes: 1: 34UAobIJAKu39Z62mwcBjfgEXF4.crl (hash: +P89gtakpSKWPLlny2i7K1/8CC/BD+0p35zLLgvqs9Y=) 2: B92D2816064311EAAFD3B416C4F9AE02.roa (hash: snskZTPzgdK1oFEckPC5HgyDQRzXftf0PJQ8L4j0QcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB73, serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E Validity Not Before: May 12 15:16:19 2025 GMT Not After : May 19 15:16:19 2025 GMT Subject: CN=682210c3-155c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:4a:50:f0:61:fd:2e:a3:d1:5b:07:a1:20: 41:f8:fc:ba:3c:95:b2:73:f9:82:c3:22:49:16:4d: 8a:ec:25:93:56:b3:72:84:3f:82:3d:c5:b8:18:ad: f3:bc:43:ec:bf:2e:62:35:06:99:c0:e7:08:a8:d5: e6:cf:15:4d:a1:a4:7a:db:16:0d:bc:4c:45:2a:e7: d9:88:53:61:26:b0:d0:a0:89:68:db:3a:e8:40:4f: e1:95:e6:7d:a4:f5:97:2b:75:80:45:2a:ef:1b:9e: e3:86:fc:35:91:71:5f:04:bb:d3:28:63:d7:d3:07: 40:0a:34:15:28:11:d5:c2:42:7c:69:0c:6e:96:90: e4:88:54:5b:8f:fb:94:88:67:8c:ac:38:dd:74:ff: 0d:77:df:38:9d:0b:1a:ee:3d:f0:48:fb:07:33:2d: 61:2a:41:71:15:79:90:24:68:71:55:fa:30:11:d9: a3:52:5e:f8:f4:8e:ce:47:9f:d1:76:ba:0b:6d:10: 56:a1:d2:b5:29:18:e2:40:47:d6:a8:82:02:12:64: e2:56:f3:51:4e:15:c4:53:a9:1d:1a:79:1a:20:fc: 68:4b:12:d3:a7:fb:f5:db:1a:9c:88:aa:3f:4d:97: f9:4a:2d:5c:2c:9c:ff:a8:8e:57:6f:dd:88:0c:03: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FE:96:D7:B4:BB:81:7C:A7:93:70:46:2A:A2:D2:E8:6A:A1:40:3E X509v3 Authority Key Identifier: keyid:DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:17:6f:f5:7e:45:84:ba:90:92:3e:bb:8e:d1:ad:a2:b3:ea: a5:69:0e:19:67:cb:4d:9b:ab:95:ce:06:7c:7d:5e:d0:4a:01: c3:09:50:f8:23:1d:fe:91:7f:47:15:46:83:76:cc:a6:cc:b5: a3:d4:fe:1a:6d:b3:ed:81:9b:f4:86:b2:79:74:c0:45:ba:c2: 92:b4:b1:6e:76:ea:e1:e2:65:7b:9d:4e:33:39:ee:2b:12:d7: 74:70:fd:ea:9f:33:29:c2:ed:72:41:81:d9:54:35:85:4d:0e: 2e:42:f0:c2:82:48:cc:a8:9e:86:96:17:e3:a1:31:e3:47:ee: aa:68:33:49:b1:9c:19:1b:3f:8f:8b:82:2f:2d:b3:40:4c:f7: 43:c4:73:8e:09:5b:7c:1c:45:f9:3b:37:a2:16:c5:3c:e4:bf: b4:aa:a0:bb:53:9c:c8:20:64:ec:5e:23:7f:4e:a3:59:fb:d1: 86:74:d7:e5:71:d1:4a:2f:35:cc:06:4a:85:4a:01:1e:99:d1: 18:85:c3:85:54:4d:38:6f:85:2b:5c:54:07:6c:18:07:d3:6e: 0c:39:34:bf:61:e0:12:17:f9:57:87:47:70:16:44:cd:e7:13: fa:cd:0f:b0:8f:c2:ee:51:2a:8a:02:83:93:97:64:7d:e7:b3: 9f:dc:8e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCNzMxMTAvBgNVBAUTKERGODUwMEExQjIwOTAwQUJCN0Y1OUVCNjlCMDcwMThE RjgwNDVDNUUwHhcNMjUwNTEyMTUxNjE5WhcNMjUwNTE5MTUxNjE5WjAYMRYwFAYD VQQDEw02ODIyMTBjMy0xNTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UBKUPBh/S6j0VsHoSBB+Py6PJWyc/mCwyJJFk2K7CWTVrNyhD+CPcW4GK3z vEPsvy5iNQaZwOcIqNXmzxVNoaR62xYNvExFKufZiFNhJrDQoIlo2zroQE/hleZ9 pPWXK3WARSrvG57jhvw1kXFfBLvTKGPX0wdACjQVKBHVwkJ8aQxulpDkiFRbj/uU iGeMrDjddP8Nd984nQsa7j3wSPsHMy1hKkFxFXmQJGhxVfowEdmjUl749I7OR5/R droLbRBWodK1KRjiQEfWqIICEmTiVvNRThXEU6kdGnkaIPxoSxLTp/v12xqciKo/ TZf5Si1cLJz/qI5Xb92IDAPSTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3+lte0 u4F8p5NwRiqi0uhqoUA+MB8GA1UdIwQYMBaAFN+FAKGyCQCrt/WetpsHAY34BFxe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI3My9CODhGREU4QzFE QUExMUUyQTVDODkwQTYwOEIwMkNEMi8zNFVBb2JJSkFLdTM5WjYybXdjQmpmZ0VY RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0VUFvYklKQUt1MzlaNjJtd2NCamZnRVhGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI3My9CODhGREU4QzFEQUExMUUyQTVDODkwQTYwOEIwMkNEMi8zNFVBb2JJSkFL dTM5WjYybXdjQmpmZ0VYRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqF2/1fkWEupCSPruO0a2is+qlaQ4ZZ8tNm6uVzgZ8fV7QSgHDCVD4 Ix3+kX9HFUaDdsymzLWj1P4abbPtgZv0hrJ5dMBFusKStLFudurh4mV7nU4zOe4r Etd0cP3qnzMpwu1yQYHZVDWFTQ4uQvDCgkjMqJ6GlhfjoTHjR+6qaDNJsZwZGz+P i4IvLbNATPdDxHOOCVt8HEX5OzeiFsU85L+0qqC7U5zIIGTsXiN/TqNZ+9GGdNfl cdFKLzXMBkqFSgEemdEYhcOFVE04b4UrXFQHbBgH024MOTS/YeASF/lXh0dwFkTN 5xP6zQ+wj8LuUSqKAoOTl2R957Of3I4d -----END CERTIFICATE-----Generated at Tue May 13 04:56:41 2025 by rpki-client