$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft File: 34pOYRe8o2iUDWjphUeYuWZgndQ.mft (raw, json) Hash identifier: 3f81cwXb1oE6mDmyivVq0EDxJ17U1ookcx7qlnBJ2uc= Subject key identifier: 13:EC:F8:53:E0:88:3B:7A:D1:9C:42:BF:D0:E9:60:D0:22:25:3C:18 Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4 Certificate issuer: /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4 Certificate serial: 08E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft Manifest number: 08DF Signing time: Mon 30 Jun 2025 20:38:22 +0000 Manifest this update: Mon 30 Jun 2025 20:38:21 +0000 Manifest next update: Mon 07 Jul 2025 20:38:21 +0000 Files and hashes: 1: 34pOYRe8o2iUDWjphUeYuWZgndQ.crl (hash: NW300hsoekA4gh2lsJLKpElPd4NfE4jiyq0/3wSzZDU=) 2: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (hash: ASBYl23bkyFf4r9vJSPXkAo/YYzd1cAPrmJW3FNKskU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2279 (0x8e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8530, serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4 Validity Not Before: Jun 30 20:38:21 2025 GMT Not After : Jul 7 20:38:21 2025 GMT Subject: CN=6862f5be-6751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:ee:98:ad:a4:da:e0:a3:d4:ab:9f:e5:8c: a6:09:b1:12:a6:ab:45:29:49:66:36:e1:14:dc:d1: 95:5d:4e:c8:4f:81:5e:cd:64:cc:0e:54:60:98:3e: f9:2c:5f:28:d6:e8:f8:7f:60:59:58:b9:11:b2:a1: eb:27:35:90:46:67:af:38:4b:b0:62:ec:c5:90:9d: 0e:8e:da:a0:60:e2:89:81:51:0a:55:ab:27:69:ae: 20:c7:34:4f:25:a5:bb:2c:62:1e:69:15:72:22:da: b4:15:46:0e:98:ed:f9:aa:b0:15:18:5d:a7:8c:4e: 3a:b3:51:01:c4:97:36:09:ad:4a:fc:3f:35:d8:b8: a9:d4:25:ec:df:6c:fb:c8:a6:bc:af:ea:30:2c:fa: b2:72:cc:b8:3f:8c:26:be:03:b3:fa:28:20:61:36: 79:2f:27:79:bc:42:8e:6a:86:9f:2c:a3:b0:e5:57: e8:c4:d5:13:b4:c8:72:e8:ae:47:51:62:18:df:61: b6:73:36:8b:03:e3:0e:d5:97:5b:6e:27:d8:bf:3a: 77:46:3f:fc:0d:91:84:d4:3b:3d:00:37:10:6f:a2: 3d:d0:1f:e2:de:a4:5d:b5:37:64:4b:4e:dc:dc:ff: 30:60:27:cd:fa:60:65:4a:0f:1c:57:96:f5:17:10: 95:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EC:F8:53:E0:88:3B:7A:D1:9C:42:BF:D0:E9:60:D0:22:25:3C:18 X509v3 Authority Key Identifier: keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a4:bf:01:a4:9b:6f:91:d8:a3:1b:a2:ee:ea:e8:80:6a:cf: 62:ca:d5:47:08:b3:ab:0e:d1:86:72:c2:7e:40:6f:87:c2:70: 49:8c:47:bf:0a:6a:74:55:ba:8c:bd:ed:53:d0:e3:43:3f:53: 1c:e1:38:ff:8b:6c:a7:c1:87:39:f9:56:b3:89:d4:9e:b8:fa: dd:81:20:f3:34:58:91:b3:93:01:a0:96:c2:fc:62:b6:83:d9: d6:6a:ec:f6:4c:fb:93:34:57:f5:9e:3c:3d:23:57:9b:97:9f: 9e:19:83:22:a9:25:b1:b2:a2:9d:32:a9:45:ec:c2:d5:22:46: 14:4e:72:b7:39:29:32:30:0e:f3:b8:42:e3:03:d0:c7:fe:07: 78:6c:a7:14:eb:ce:4c:70:e6:ea:2a:64:47:79:5f:36:75:74: 0a:f3:a4:d1:e6:4c:75:dc:c7:39:eb:5d:4e:79:42:22:40:65: 15:51:39:e3:1c:90:c0:c8:e2:ca:57:e0:f1:17:31:dd:a0:b7: 85:99:26:09:e9:98:74:98:da:0a:72:ec:df:b2:e4:1b:0b:6c: 09:76:9d:4b:d1:ce:d9:30:b7:29:2f:1c:e0:e3:38:ce:6e:d4: 7b:55:8c:4c:4f:23:c0:a0:19:66:c0:89:8b:08:70:f9:e9:d4: 6e:96:6e:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1MzAxMTAvBgNVBAUTKERGOEE0RTYxMTdCQ0EzNjg5NDBENjhFOTg1NDc5OEI5 NjY2MDlERDQwHhcNMjUwNjMwMjAzODIxWhcNMjUwNzA3MjAzODIxWjAYMRYwFAYD VQQDEw02ODYyZjViZS02NzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAov/umK2k2uCj1Kuf5YymCbESpqtFKUlmNuEU3NGVXU7IT4FezWTMDlRgmD75 LF8o1uj4f2BZWLkRsqHrJzWQRmevOEuwYuzFkJ0OjtqgYOKJgVEKVasnaa4gxzRP JaW7LGIeaRVyItq0FUYOmO35qrAVGF2njE46s1EBxJc2Ca1K/D812Lip1CXs32z7 yKa8r+owLPqycsy4P4wmvgOz+iggYTZ5Lyd5vEKOaoafLKOw5VfoxNUTtMhy6K5H UWIY32G2czaLA+MO1ZdbbifYvzp3Rj/8DZGE1Ds9ADcQb6I90B/i3qRdtTdkS07c 3P8wYCfN+mBlSg8cV5b1FxCVVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPs+FPg iDt60ZxCv9DpYNAiJTwYMB8GA1UdIwQYMBaAFN+KTmEXvKNolA1o6YVHmLlmYJ3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODUzMC8xOEY2NkQ4NkIx RTYxMUVBQUE5MTMzNUFDNEY5QUUwMi8zNHBPWVJlOG8yaVVEV2pwaFVlWXVXWmdu ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0cE9ZUmU4bzJpVURXanBoVWVZdVdaZ25kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODUzMC8xOEY2NkQ4NkIxRTYxMUVBQUE5MTMzNUFDNEY5QUUwMi8zNHBPWVJlOG8y aVVEV2pwaFVlWXVXWmduZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOpL8BpJtvkdijG6Lu6uiAas9iytVHCLOrDtGGcsJ+QG+HwnBJjEe/ Cmp0VbqMve1T0ONDP1Mc4Tj/i2ynwYc5+VazidSeuPrdgSDzNFiRs5MBoJbC/GK2 g9nWauz2TPuTNFf1njw9I1ebl5+eGYMiqSWxsqKdMqlF7MLVIkYUTnK3OSkyMA7z uELjA9DH/gd4bKcU685McObqKmRHeV82dXQK86TR5kx13Mc5611OeUIiQGUVUTnj HJDAyOLKV+DxFzHdoLeFmSYJ6Zh0mNoKcuzfsuQbC2wJdp1L0c7ZMLcpLxzg4zjO btR7VYxMTyPAoBlmwImLCHD56dRulm4k -----END CERTIFICATE-----Generated at Wed Jul 2 20:14:32 2025 by rpki-client