$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json) Hash identifier: y9Xm4sohDdrzgVN3vKrKkX2gaJs4hWUYKyKP/qmK8ow= Subject key identifier: B8:9D:51:B8:31:6E:4B:27:1C:A9:A7:36:10:D5:EE:ED:AA:56:DE:BF Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft Manifest number: 01B0 Signing time: Sun 29 Jun 2025 02:29:33 +0000 Manifest this update: Sun 29 Jun 2025 02:29:32 +0000 Manifest next update: Sun 06 Jul 2025 02:29:32 +0000 Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: MbRfBDFJjcXXqmXE9dKgWP4L/q055xduOZIgxNNLwIw=) 2: 2048ADEADD5011EDA3ACE13CC4F9AE02.roa (hash: Ry5wENgivtIXCFgzf0QiO3bQmATycLuxi4WQf0WGYRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Validity Not Before: Jun 29 02:29:32 2025 GMT Not After : Jul 6 02:29:32 2025 GMT Subject: CN=6860a50d-63d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:59:aa:8a:31:75:30:90:62:5a:32:fb:54: 9a:3c:55:af:66:8e:8e:2d:37:09:38:b5:b8:fd:a6: 4b:60:20:08:b9:03:08:0e:53:2f:7f:8e:ba:d6:be: a4:1d:06:7d:21:e7:8c:1b:08:5d:db:b0:b0:59:1e: ad:13:33:2c:01:25:61:4d:ad:8e:0c:6b:83:76:30: be:57:58:01:55:76:3e:ac:41:f8:17:1d:7b:49:3c: ca:b8:ce:e1:e7:c7:1e:b3:e0:56:55:07:87:5e:dd: ed:8f:1d:01:d8:a1:55:29:ba:86:e3:b9:2e:f7:04: 72:28:1f:83:8c:8d:c2:e2:39:81:bb:8b:b1:9b:64: 0d:9b:4f:c9:49:0a:3a:66:aa:c3:94:db:14:c2:e1: 6c:e0:c5:09:f1:86:60:2d:01:66:49:38:af:b3:e7: 62:8c:fb:33:30:1f:a1:ac:ea:e1:7a:54:51:7d:db: 88:93:0c:41:40:72:c2:3f:42:ce:bc:29:91:26:16: c7:d7:89:53:bf:4d:a8:04:b6:da:75:6e:01:04:92: 5f:a6:fe:82:ff:fd:3f:8a:7e:24:df:89:18:fa:8e: 7e:0e:cd:14:47:bf:07:5f:71:3f:6a:04:ec:81:36: 09:5b:cf:36:f1:26:ec:18:e5:36:89:33:4e:cb:f8: 16:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9D:51:B8:31:6E:4B:27:1C:A9:A7:36:10:D5:EE:ED:AA:56:DE:BF X509v3 Authority Key Identifier: keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:96:6a:1c:7b:fb:1f:3c:99:4a:ec:ac:97:81:7d:70:f7:f8: cb:48:06:01:16:61:1c:2a:06:b7:34:cc:1b:27:d9:c0:0d:ae: d3:c4:27:0d:99:bc:8b:96:05:5c:16:53:4c:7b:38:4a:71:5d: 12:a9:a9:95:6c:be:da:94:78:73:c6:50:2b:c3:eb:41:27:0e: bc:66:cd:fb:ea:35:df:d5:60:90:09:33:ac:2a:18:e7:86:23: 26:df:93:02:2d:c4:51:d9:e1:38:ba:1b:b6:a4:88:58:09:0b: 81:31:d4:7a:43:06:02:f3:0b:17:58:21:9c:45:bc:2a:33:ad: 55:af:4e:51:83:ca:c8:d8:b4:ff:09:12:7c:ff:50:9e:92:74: 66:11:5f:7a:63:b1:b4:05:9e:ac:b3:7e:d0:87:c8:07:75:b3: 1b:65:20:f0:fc:ac:6c:e1:65:75:fb:07:cc:49:f2:d9:b3:ab: 7f:0e:f5:a2:7b:76:a8:d6:02:4f:e1:9c:71:45:0f:9c:1d:df: 72:fc:91:45:c5:4a:8e:c3:aa:90:63:4c:69:b1:41:bb:8d:7a: 21:02:8a:8b:6f:a4:63:e8:bf:20:8b:72:a6:71:17:3b:69:73: c8:31:88:93:20:9d:5b:be:c0:2f:f3:97:e4:73:ff:2c:0d:7a: a0:29:a8:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMkIxMTAvBgNVBAUTKEE5OTg1Q0REMzc5MzJFMUQzNjRDNEM2RDc1REJBNTAz QkY3MjY3N0MwHhcNMjUwNjI5MDIyOTMyWhcNMjUwNzA2MDIyOTMyWjAYMRYwFAYD VQQDEw02ODYwYTUwZC02M2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUpZqooxdTCQYloy+1SaPFWvZo6OLTcJOLW4/aZLYCAIuQMIDlMvf4661r6k HQZ9IeeMGwhd27CwWR6tEzMsASVhTa2ODGuDdjC+V1gBVXY+rEH4Fx17STzKuM7h 58ces+BWVQeHXt3tjx0B2KFVKbqG47ku9wRyKB+DjI3C4jmBu4uxm2QNm0/JSQo6 ZqrDlNsUwuFs4MUJ8YZgLQFmSTivs+dijPszMB+hrOrhelRRfduIkwxBQHLCP0LO vCmRJhbH14lTv02oBLbadW4BBJJfpv6C//0/in4k34kY+o5+Ds0UR78HX3E/agTs gTYJW8828SbsGOU2iTNOy/gWkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLidUbgx bksnHKmnNhDV7u2qVt6/MB8GA1UdIwQYMBaAFKmYXN03ky4dNkxMbXXbpQO/cmd8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjEyQi8wOEMyNzUzMkRC NjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExoMDJURXh0ZGR1bEE3OXla M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaaGMzVGVUTGgwMlRFeHRkZHVsQTc5eVozdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjEyQi8wOEMyNzUzMkRCNjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExo MDJURXh0ZGR1bEE3OXlaM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQlmoce/sfPJlK7KyXgX1w9/jLSAYBFmEcKga3NMwbJ9nADa7TxCcN mbyLlgVcFlNMezhKcV0SqamVbL7alHhzxlArw+tBJw68Zs376jXf1WCQCTOsKhjn hiMm35MCLcRR2eE4uhu2pIhYCQuBMdR6QwYC8wsXWCGcRbwqM61Vr05Rg8rI2LT/ CRJ8/1CeknRmEV96Y7G0BZ6ss37Qh8gHdbMbZSDw/Kxs4WV1+wfMSfLZs6t/DvWi e3ao1gJP4ZxxRQ+cHd9y/JFFxUqOw6qQY0xpsUG7jXohAoqLb6Rj6L8gi3KmcRc7 aXPIMYiTIJ1bvsAv85fkc/8sDXqgKahR -----END CERTIFICATE-----Generated at Mon Jun 30 03:37:12 2025 by rpki-client