$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft File: 34UAobIJAKu39Z62mwcBjfgEXF4.mft (raw, json) Hash identifier: nytl7qncK2VxIcDDppwGwsOXpa6JI7fh8QssTeiJdvg= Subject key identifier: F0:81:A2:1D:88:EE:EA:60:86:26:93:FB:3E:0A:C8:F8:C8:30:D9:2D Authority key identifier: DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E Certificate issuer: /CN=A916EB73/serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E Certificate serial: 34A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft Manifest number: 3498 Signing time: Wed 02 Jul 2025 15:23:08 +0000 Manifest this update: Wed 02 Jul 2025 15:23:07 +0000 Manifest next update: Wed 09 Jul 2025 15:23:07 +0000 Files and hashes: 1: 34UAobIJAKu39Z62mwcBjfgEXF4.crl (hash: KbYj1RIoMOf8MiQPy9Fr3sFM6xtIcuTFjTWSXKrUuRM=) 2: B92D2816064311EAAFD3B416C4F9AE02.roa (hash: snskZTPzgdK1oFEckPC5HgyDQRzXftf0PJQ8L4j0QcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13472 (0x34a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB73, serialNumber=DF8500A1B20900ABB7F59EB69B07018DF8045C5E Validity Not Before: Jul 2 15:23:07 2025 GMT Not After : Jul 9 15:23:07 2025 GMT Subject: CN=68654edc-9974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2e:5d:02:5e:59:2d:10:2f:71:31:8c:d6:df: 9b:21:62:9f:b1:ff:8a:96:9d:27:21:95:95:ef:6e: dd:46:27:24:22:81:d9:1e:02:ef:4a:d0:ac:c4:b3: 0d:15:ca:04:ea:32:02:1d:49:16:fd:57:0b:21:28: b8:1d:78:56:91:be:8b:3e:a4:b3:85:ec:6c:89:dc: e7:20:f8:b9:88:55:f2:08:bf:35:28:96:61:ff:0d: 41:52:69:d4:cf:d4:62:1b:19:52:97:58:6f:aa:24: 5e:f8:0a:65:0e:99:d3:22:c0:1d:16:4b:fd:0a:fb: 92:6f:6a:51:5c:58:ec:90:88:04:e1:e4:ee:b6:84: d2:60:42:98:07:3e:14:21:e1:31:1a:b2:07:ff:c3: 3a:2e:d0:d7:c3:b2:ca:fb:bb:52:9a:d9:cf:31:e5: d8:2a:d7:d8:06:51:69:e7:09:8e:42:0d:0d:ea:b5: 07:e5:21:e6:81:f7:2f:65:ce:e7:bd:25:bc:e9:23: 53:57:87:d2:b3:9b:e5:f2:73:2d:7f:8d:4b:56:09: 9e:77:81:06:a9:f2:33:68:f2:58:be:71:56:d9:b2: 42:00:5c:4f:49:74:90:e2:3a:de:c9:83:6c:6d:00: 7c:eb:40:51:b1:79:36:60:a6:a8:de:90:68:18:76: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:81:A2:1D:88:EE:EA:60:86:26:93:FB:3E:0A:C8:F8:C8:30:D9:2D X509v3 Authority Key Identifier: keyid:DF:85:00:A1:B2:09:00:AB:B7:F5:9E:B6:9B:07:01:8D:F8:04:5C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34UAobIJAKu39Z62mwcBjfgEXF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB73/B88FDE8C1DAA11E2A5C890A608B02CD2/34UAobIJAKu39Z62mwcBjfgEXF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:59:c8:1b:33:18:b3:12:5b:a6:62:52:2e:98:5e:b8:e1:8c: 6d:2b:cb:08:30:da:2a:68:d4:94:d7:2c:f1:7c:38:3b:24:dc: 21:9a:15:2b:12:31:21:ed:f5:d0:c0:e1:e5:a7:0e:33:6d:35: 80:28:e4:10:bc:6c:ac:79:b7:68:41:b1:6e:5d:1f:4e:55:ef: 50:66:6e:67:05:ed:61:26:f4:34:82:81:42:58:cf:67:9a:ea: 71:22:68:24:af:3f:d5:49:60:0c:79:7e:c7:0a:a2:2c:a5:b0: 20:30:1d:d1:93:64:5b:d9:da:e6:d9:4c:f9:42:6f:21:79:7c: 8a:a0:c2:c5:70:9b:a5:11:85:82:2b:1d:b4:e1:35:18:25:3d: 9d:4e:b6:c9:1f:6f:df:51:b9:c4:2c:0b:7c:5f:18:d0:57:a5: e8:dc:12:78:90:7a:d7:81:73:f3:e0:08:24:72:97:15:f1:0d: ca:96:93:10:b6:67:76:fc:57:50:d6:c6:af:df:7f:d0:a9:82: b1:80:ce:ff:53:fe:53:61:4d:3b:5b:7f:9d:87:16:3d:d8:f8: 80:7e:12:4d:24:55:27:29:2b:60:df:54:80:d4:d4:97:21:6d: 80:ce:d3:13:a2:72:22:b4:4d:50:17:5f:ff:4e:b2:de:2b:1c: a9:42:ee:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCNzMxMTAvBgNVBAUTKERGODUwMEExQjIwOTAwQUJCN0Y1OUVCNjlCMDcwMThE RjgwNDVDNUUwHhcNMjUwNzAyMTUyMzA3WhcNMjUwNzA5MTUyMzA3WjAYMRYwFAYD VQQDEw02ODY1NGVkYy05OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4S5dAl5ZLRAvcTGM1t+bIWKfsf+Klp0nIZWV727dRickIoHZHgLvStCsxLMN FcoE6jICHUkW/VcLISi4HXhWkb6LPqSzhexsidznIPi5iFXyCL81KJZh/w1BUmnU z9RiGxlSl1hvqiRe+AplDpnTIsAdFkv9CvuSb2pRXFjskIgE4eTutoTSYEKYBz4U IeExGrIH/8M6LtDXw7LK+7tSmtnPMeXYKtfYBlFp5wmOQg0N6rUH5SHmgfcvZc7n vSW86SNTV4fSs5vl8nMtf41LVgmed4EGqfIzaPJYvnFW2bJCAFxPSXSQ4jreyYNs bQB860BRsXk2YKao3pBoGHYoewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCBoh2I 7upghiaT+z4KyPjIMNktMB8GA1UdIwQYMBaAFN+FAKGyCQCrt/WetpsHAY34BFxe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI3My9CODhGREU4QzFE QUExMUUyQTVDODkwQTYwOEIwMkNEMi8zNFVBb2JJSkFLdTM5WjYybXdjQmpmZ0VY RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0VUFvYklKQUt1MzlaNjJtd2NCamZnRVhGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI3My9CODhGREU4QzFEQUExMUUyQTVDODkwQTYwOEIwMkNEMi8zNFVBb2JJSkFL dTM5WjYybXdjQmpmZ0VYRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtWcgbMxizElumYlIumF644YxtK8sIMNoqaNSU1yzxfDg7JNwhmhUr EjEh7fXQwOHlpw4zbTWAKOQQvGysebdoQbFuXR9OVe9QZm5nBe1hJvQ0goFCWM9n mupxImgkrz/VSWAMeX7HCqIspbAgMB3Rk2Rb2drm2Uz5Qm8heXyKoMLFcJulEYWC Kx204TUYJT2dTrbJH2/fUbnELAt8XxjQV6Xo3BJ4kHrXgXPz4AgkcpcV8Q3KlpMQ tmd2/FdQ1sav33/QqYKxgM7/U/5TYU07W3+dhxY92PiAfhJNJFUnKStg31SA1NSX IW2AztMTonIitE1QF1//TrLeKxypQu5e -----END CERTIFICATE-----Generated at Fri Jul 4 06:48:08 2025 by rpki-client