$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: ZUL/bCxuD/da0N6kazAVPm7lxxKgdM0Xmu0GFyjcAdE= Subject key identifier: DE:72:23:7C:AC:26:1C:CE:B1:88:56:95:CE:E3:95:5C:2E:99:B7:75 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 349E Signing time: Mon 30 Jun 2025 14:32:12 +0000 Manifest this update: Mon 30 Jun 2025 14:32:11 +0000 Manifest next update: Mon 07 Jul 2025 14:32:11 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: b9a/yasK+7V7zjxaUMH6uG28HkjJrHr6ZYBHBuddLFI=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: t/ROOpg/IwC6W3DYUfJyZ4y/FXhn7ZuftkL+LfoKWRk=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: ea8eMteisHvIepMEhAjTnxYwI9xVzRVN61pc6MiuWHw=) 4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: kZY0gEYojacBpy6Flxbc6cWYiWfgAwQSMnYX8MagWhA=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: wkkagOsbEtkABMZzn1UGFfhIBhIKqyHgBeARkv/JwZI=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: L8G18w6rwaHmMSrJokPAC0OZq/Tml3UVjCIQ2Q/Hgqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13491 (0x34b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Jun 30 14:32:11 2025 GMT Not After : Jul 7 14:32:11 2025 GMT Subject: CN=68629feb-d897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:b4:97:cb:fd:c1:11:cf:d5:aa:76:99:c9: bc:47:24:5c:d1:ec:44:46:c8:dd:d4:c8:4d:5a:e8: 45:ba:af:1c:3b:cc:d6:28:6f:6b:43:86:5a:2f:de: 85:c8:33:29:b2:d5:95:06:c5:b4:ec:a9:07:d4:d3: 55:b1:3e:0f:05:9f:f4:c8:e2:d9:1b:79:a1:07:d2: 33:27:f7:68:e9:f4:64:2e:10:ed:2a:74:3c:db:a2: 89:53:c1:68:71:5d:a7:d2:97:35:51:0e:cb:76:21: 8f:76:50:d5:6d:e0:c2:cd:c4:85:b5:85:29:76:e8: 36:1c:43:f2:f3:dc:30:6a:39:d3:b9:06:62:41:e3: fc:fb:e2:79:6c:e7:19:fa:81:f5:1e:33:57:48:a7: 6d:7d:f5:6d:41:ec:41:e8:85:51:1d:ef:cd:00:43: 7d:08:08:e8:09:46:6a:c6:59:f7:57:a9:62:c6:aa: b8:f6:ef:05:a1:0f:e0:b5:2b:0a:7f:b0:10:94:26: a6:d2:3c:4e:b3:e1:39:bb:67:be:3f:a3:a5:c2:81: be:9e:75:50:60:fc:95:ad:47:21:3b:ac:f4:b3:6e: 53:f0:42:83:d8:02:5d:d1:7e:64:5d:f7:b1:58:27: 83:0a:65:09:3a:7f:ce:ff:8c:94:37:5c:13:a7:b0: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:72:23:7C:AC:26:1C:CE:B1:88:56:95:CE:E3:95:5C:2E:99:B7:75 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:3a:39:e4:61:b0:12:4d:02:b4:4c:35:d5:8d:ec:e4:d2:d4: 14:29:bb:61:72:69:02:ef:26:43:c0:2b:fe:c5:5b:06:91:88: b2:b4:d3:30:1c:08:c6:d8:34:8a:3a:13:1f:99:a1:2e:76:ab: 28:d2:68:17:f3:a8:29:9b:0b:b7:79:04:99:de:0a:98:d0:1c: 5d:1b:44:95:36:95:7d:dd:92:82:12:57:be:fa:81:06:5e:ff: 76:ee:b6:03:5e:21:62:94:fb:27:01:8b:f3:44:46:b0:11:c7: ec:9e:f9:16:23:76:3b:31:b2:04:cb:98:bd:21:dc:c4:fc:92: af:50:1a:35:64:bd:d5:d4:f3:69:dc:96:26:b9:78:e8:bd:e7: 76:5e:f4:16:9c:c9:cf:20:45:a7:87:76:7a:96:ba:f1:9e:9c: fa:9c:48:76:4f:07:a4:2e:4e:70:2b:4a:74:46:e8:01:fa:94: 64:40:48:23:74:17:36:b8:2b:4b:ed:97:90:ec:4c:7b:4a:fe: ab:e8:e2:36:b1:44:cf:10:1e:d9:06:39:e1:43:95:f6:ec:97: a4:74:80:40:c2:de:97:78:76:ab:71:fa:20:a5:ad:aa:87:07: 7b:e1:a0:0e:89:0f:d0:5a:62:7b:a9:2d:86:02:57:a9:e7:ae: f2:90:34:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwNjMwMTQzMjExWhcNMjUwNzA3MTQzMjExWjAYMRYwFAYD VQQDEw02ODYyOWZlYi1kODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn60l8v9wRHP1ap2mcm8RyRc0exERsjd1MhNWuhFuq8cO8zWKG9rQ4ZaL96F yDMpstWVBsW07KkH1NNVsT4PBZ/0yOLZG3mhB9IzJ/do6fRkLhDtKnQ826KJU8Fo cV2n0pc1UQ7LdiGPdlDVbeDCzcSFtYUpdug2HEPy89wwajnTuQZiQeP8++J5bOcZ +oH1HjNXSKdtffVtQexB6IVRHe/NAEN9CAjoCUZqxln3V6lixqq49u8FoQ/gtSsK f7AQlCam0jxOs+E5u2e+P6OlwoG+nnVQYPyVrUchO6z0s25T8EKD2AJd0X5kXfex WCeDCmUJOn/O/4yUN1wTp7DQvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5yI3ys JhzOsYhWlc7jlVwumbd1MB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkOjnkYbASTQK0TDXVjezk0tQUKbthcmkC7yZDwCv+xVsGkYiytNMw HAjG2DSKOhMfmaEudqso0mgX86gpmwu3eQSZ3gqY0BxdG0SVNpV93ZKCEle++oEG Xv927rYDXiFilPsnAYvzREawEcfsnvkWI3Y7MbIEy5i9IdzE/JKvUBo1ZL3V1PNp 3JYmuXjoved2XvQWnMnPIEWnh3Z6lrrxnpz6nEh2TwekLk5wK0p0RugB+pRkQEgj dBc2uCtL7ZeQ7Ex7Sv6r6OI2sUTPEB7ZBjnhQ5X27JekdIBAwt6XeHarcfogpa2q hwd74aAOiQ/QWmJ7qS2GAlep567ykDQi -----END CERTIFICATE-----Generated at Wed Jul 2 14:53:59 2025 by rpki-client