$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: fH4jyB/8qoFOOMn1LmJnWOVXViv3lQD1XaAf+W2E/is= Subject key identifier: C9:41:39:44:DF:93:07:28:5D:8D:BF:41:36:BF:FE:BC:21:DD:BC:B3 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 34C0 Signing time: Fri 22 Aug 2025 14:28:25 +0000 Manifest this update: Fri 22 Aug 2025 14:28:24 +0000 Manifest next update: Fri 29 Aug 2025 14:28:24 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: 37nT5Z7ulCGRix2nGOOK2BKhVdfRWIYK9XX1UacNvfg=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: Y+ojf+2jX3eowe65KYol38ex1Bpsq2OZibivyd0HsaA=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: coEzJmQszrLxu4ob4mQCm0s5FabKwMGZ0/yHnUumh2Q=) 4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: JZDrvt3y2uOvt6jcah8n1eAk+/ZZD32CSv6lmYScC9c=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: plCjgN7YWhsYH+MwAwVINYh2QSCUYoeRR3x33+0+qnE=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: nP3RcVP/gbGg6rx+o8wZqZToMdd4Sr+IoSCjwNOdYfA=) 7: F647E58E768A11F081B6114EC4F9AE02.roa (hash: 4tlTWNBTFbCbarJCMOHXFwX1zgwBjmDcHval7E7ErMY=) 8: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: jze2dZZOQnAGOKOQ6Rz+mOGJDCU7Q1dag2aXHfDHrUY=) 9: F550BA02768A11F081B6114EC4F9AE02.roa (hash: +Emh97G4a6MC22cwrisLR6hKm25TYhC5b4mYNP17m7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13535 (0x34df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 22 14:28:24 2025 GMT Not After : Aug 29 14:28:24 2025 GMT Subject: CN=68a87e88-f4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:67:e3:82:74:89:c8:de:ec:a9:54:f0:98: a4:63:10:8a:cd:39:aa:63:60:ff:f0:4d:0e:5d:6f: 9c:8f:8b:32:e1:fa:8e:9b:75:3f:04:36:a5:82:da: 48:95:c4:72:07:ad:97:1b:74:7e:9f:6c:fd:28:40: c5:85:08:a2:16:32:dc:f8:97:08:de:f4:f1:8f:45: d5:fd:89:ee:87:76:a1:ff:af:4b:df:a3:3c:6f:af: 23:de:2a:3d:90:a8:c8:2d:7b:f9:88:d3:c0:3b:4b: 3b:1c:c2:2b:df:ea:86:90:0d:c6:08:b5:20:1e:e7: 9e:3e:83:db:16:1d:5e:b3:ca:61:30:1f:b0:20:aa: bd:ce:ed:64:c9:35:1e:8b:b2:7b:65:62:8c:8a:64: 0c:57:fb:b5:87:19:ed:d8:9c:ca:c4:68:8d:28:ac: 2a:fc:55:2b:8e:1e:92:97:0d:77:46:7b:83:1e:ef: d0:05:c2:08:59:bb:6e:ab:c9:6d:52:a4:af:b7:30: 37:3e:74:37:db:a1:64:62:f1:d3:77:f7:fa:3d:e7: ca:9e:76:57:a1:81:6c:9c:ed:65:1c:51:21:eb:86: 01:86:6b:91:22:62:ec:05:1b:7e:a6:a7:ea:62:15: 8e:83:60:3c:7c:99:4c:8e:01:fa:df:bb:a8:4d:2d: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:41:39:44:DF:93:07:28:5D:8D:BF:41:36:BF:FE:BC:21:DD:BC:B3 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:48:6e:a6:6c:d6:26:9e:a4:57:cd:d2:d9:cd:8d:c7:30:ff: 3d:36:cf:ce:91:01:7b:d4:04:07:3f:c7:b9:de:61:29:8f:9a: b3:ee:db:0f:f6:fd:f5:73:ff:f9:1b:76:08:84:31:d8:7b:92: 97:19:d4:03:6f:5a:6b:b9:91:9f:0c:ba:e1:47:bb:da:30:3a: 3d:2d:5c:d9:e4:eb:eb:2b:06:54:ea:d8:ba:95:b4:a9:27:8c: 5a:68:e3:e0:34:4d:b5:01:b8:58:77:b3:06:d3:3c:0b:ed:3e: ac:8c:56:0c:3d:7d:8e:95:e6:2d:a4:04:b1:ff:9a:05:5b:78: 2d:89:26:cd:ef:9f:b5:13:c4:9a:29:c4:56:3d:e3:7a:91:c2: 3f:cd:46:1c:bc:7c:b3:16:69:c5:b9:39:72:14:87:91:c8:9d: df:8f:40:73:71:bc:82:bd:57:60:54:97:9f:36:dd:f5:4f:03: cc:79:a6:2e:4e:5f:f7:b7:92:5c:1c:ce:a2:89:db:c6:db:30: 94:f4:f6:6b:2a:f4:23:70:79:77:d5:68:38:1c:f0:ac:7f:17: c3:96:c1:68:73:a6:2f:03:cd:23:27:95:ac:3b:d2:9f:7f:91: 31:bc:a7:89:a5:92:cc:0b:74:c8:37:68:e0:fe:5f:0a:ec:c2: e9:51:f0:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwODIyMTQyODI0WhcNMjUwODI5MTQyODI0WjAYMRYwFAYD VQQDEw02OGE4N2U4OC1mNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp81n44J0icje7KlU8JikYxCKzTmqY2D/8E0OXW+cj4sy4fqOm3U/BDalgtpI lcRyB62XG3R+n2z9KEDFhQiiFjLc+JcI3vTxj0XV/Ynuh3ah/69L36M8b68j3io9 kKjILXv5iNPAO0s7HMIr3+qGkA3GCLUgHueePoPbFh1es8phMB+wIKq9zu1kyTUe i7J7ZWKMimQMV/u1hxnt2JzKxGiNKKwq/FUrjh6Slw13RnuDHu/QBcIIWbtuq8lt UqSvtzA3PnQ326FkYvHTd/f6PefKnnZXoYFsnO1lHFEh64YBhmuRImLsBRt+pqfq YhWOg2A8fJlMjgH637uoTS380QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlBOUTf kwcoXY2/QTa//rwh3byzMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFSG6mbNYmnqRXzdLZzY3HMP89Ns/OkQF71AQHP8e53mEpj5qz7tsP 9v31c//5G3YIhDHYe5KXGdQDb1pruZGfDLrhR7vaMDo9LVzZ5OvrKwZU6ti6lbSp J4xaaOPgNE21AbhYd7MG0zwL7T6sjFYMPX2OleYtpASx/5oFW3gtiSbN75+1E8Sa KcRWPeN6kcI/zUYcvHyzFmnFuTlyFIeRyJ3fj0BzcbyCvVdgVJefNt31TwPMeaYu Tl/3t5JcHM6iidvG2zCU9PZrKvQjcHl31Wg4HPCsfxfDlsFoc6YvA80jJ5WsO9Kf f5ExvKeJpZLMC3TIN2jg/l8K7MLpUfD3 -----END CERTIFICATE-----Generated at Sat Aug 23 10:26:07 2025 by rpki-client