$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: SjqOEVdPjOYWzgJ0hZGUo0hCZIXo3U9GgoB50WBzCaw= Subject key identifier: 5B:9D:F0:E5:FC:1C:09:06:DF:14:66:61:47:4F:85:86:EB:3F:87:68 Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 349D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 349A Signing time: Fri 04 Jul 2025 14:58:28 +0000 Manifest this update: Fri 04 Jul 2025 14:58:27 +0000 Manifest next update: Fri 11 Jul 2025 14:58:27 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: HXYtgN3J9HX85FIzgaPxlxIxtXijdyws+ivklhPEcAY=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: 6tys2kBORt2e9LfTgwSygjIdDqVtnmqGXLJS1SjEsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13469 (0x349d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Jul 4 14:58:27 2025 GMT Not After : Jul 11 14:58:27 2025 GMT Subject: CN=6867ec13-cd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:97:8a:2e:17:cd:d2:56:e5:9e:da:62:7f:34: 91:1c:fc:24:02:84:81:ff:dd:9c:45:5d:9a:e3:ef: 28:f7:a5:9e:93:6c:cc:99:bf:cf:e8:68:80:02:18: b7:d2:c0:b5:1f:6f:f9:7a:bc:34:cb:5d:ab:64:8e: 53:98:de:1e:c0:92:fb:9b:3b:34:7b:e9:01:11:c7: 92:4a:45:4e:41:9b:39:c8:5b:6d:3b:79:e4:4a:b3: 6e:b4:1e:b2:ca:29:44:dd:c6:63:89:a0:28:b9:08: 92:62:05:d5:54:a6:6b:2d:9c:72:eb:aa:95:c3:04: 88:e4:b0:90:11:48:3b:ca:4c:4f:32:b1:a5:b9:a4: e5:bb:9d:03:b5:ea:0b:05:d3:a6:d0:69:19:10:62: 74:18:50:c3:79:17:f4:21:04:69:a3:8c:ec:eb:e6: 35:0e:cb:63:8d:d2:9d:08:07:85:91:fa:20:cc:ad: 0e:1a:28:c5:41:86:d6:25:9c:96:fb:2b:04:2d:14: f7:82:ae:67:ed:b2:3d:44:f2:73:b8:8d:ae:95:fc: 83:d7:22:a7:8a:bf:30:c2:3a:f1:f9:29:42:44:8c: ee:c7:64:8c:4d:46:7b:9a:c7:21:33:fe:73:53:36: 3e:a7:82:c7:b7:8c:39:1f:64:d6:4d:22:c8:b7:e1: ab:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9D:F0:E5:FC:1C:09:06:DF:14:66:61:47:4F:85:86:EB:3F:87:68 X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:36:26:35:1c:ef:d3:af:87:f3:d2:8a:4a:96:11:6e:d9:6b: ef:a9:3b:a2:35:b5:48:25:63:bd:e1:d7:e5:7c:d4:be:97:ad: 4b:e9:97:7d:1c:e6:f2:aa:7f:dc:e2:b8:0b:16:07:a2:4d:03: df:77:82:b8:7a:28:ee:67:59:0c:2e:91:ac:9c:35:17:4f:d6: 26:23:c8:a1:a5:72:8b:5a:45:f3:57:80:4e:15:62:7c:3e:66: 44:d5:42:63:2a:76:4e:dc:08:1f:88:81:dd:f7:d0:d7:1e:05: c8:b9:d6:1b:7c:91:85:b2:b4:f3:8c:f3:4b:29:6a:5e:8f:d3: e9:04:9f:82:d3:a6:dd:3d:76:e3:54:75:19:74:22:a1:db:d0: 8c:23:f2:76:c2:7e:60:fe:6f:95:cb:55:50:72:74:8e:15:a7: 61:72:dd:0c:3d:23:cb:d2:0f:67:65:c3:cc:cb:3e:ef:9b:56: 85:5b:0e:0f:01:52:db:dc:5a:ce:f5:ef:3c:ea:9e:b2:0a:eb: c3:6a:83:67:d2:40:8e:41:c3:ba:eb:cd:58:81:dd:b6:ae:9a: 7b:cf:d2:fa:05:1b:19:b6:ad:16:e1:3b:be:39:e2:7a:61:71: cb:0a:b8:db:d1:91:22:3a:64:96:72:a8:7e:ba:8e:d5:2d:a9: 04:a8:ab:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjUwNzA0MTQ1ODI3WhcNMjUwNzExMTQ1ODI3WjAYMRYwFAYD VQQDEw02ODY3ZWMxMy1jZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6peKLhfN0lblntpifzSRHPwkAoSB/92cRV2a4+8o96Wek2zMmb/P6GiAAhi3 0sC1H2/5erw0y12rZI5TmN4ewJL7mzs0e+kBEceSSkVOQZs5yFttO3nkSrNutB6y yilE3cZjiaAouQiSYgXVVKZrLZxy66qVwwSI5LCQEUg7ykxPMrGluaTlu50DteoL BdOm0GkZEGJ0GFDDeRf0IQRpo4zs6+Y1DstjjdKdCAeFkfogzK0OGijFQYbWJZyW +ysELRT3gq5n7bI9RPJzuI2ulfyD1yKnir8wwjrx+SlCRIzux2SMTUZ7mschM/5z UzY+p4LHt4w5H2TWTSLIt+GrrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFud8OX8 HAkG3xRmYUdPhYbrP4doMB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVNiY1HO/Tr4fz0opKlhFu2WvvqTuiNbVIJWO94dflfNS+l61L6Zd9 HObyqn/c4rgLFgeiTQPfd4K4eijuZ1kMLpGsnDUXT9YmI8ihpXKLWkXzV4BOFWJ8 PmZE1UJjKnZO3AgfiIHd99DXHgXIudYbfJGFsrTzjPNLKWpej9PpBJ+C06bdPXbj VHUZdCKh29CMI/J2wn5g/m+Vy1VQcnSOFadhct0MPSPL0g9nZcPMyz7vm1aFWw4P AVLb3FrO9e886p6yCuvDaoNn0kCOQcO6681Ygd22rpp7z9L6BRsZtq0W4Tu+OeJ6 YXHLCrjb0ZEiOmSWcqh+uo7VLakEqKsQ -----END CERTIFICATE-----Generated at Sat Jul 5 15:00:23 2025 by rpki-client