$ rpki-client -vvf rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft File: mqzM8QlZesZbyPegUCo-pK4cXxk.mft (raw, json) Hash identifier: zBvbI6CuQvsaU9Shu1maPezNs7NCLnYWWmkNsONcD+E= Subject key identifier: CE:AD:A6:B5:28:3E:7F:77:6E:52:91:98:80:9F:D0:B7:BD:8C:CA:AA Authority key identifier: 9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 Certificate issuer: /CN=A91232CA/serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft Manifest number: 0D Signing time: Thu 03 Jul 2025 08:22:23 +0000 Manifest this update: Thu 03 Jul 2025 08:22:23 +0000 Manifest next update: Thu 10 Jul 2025 08:22:23 +0000 Files and hashes: 1: mqzM8QlZesZbyPegUCo-pK4cXxk.crl (hash: 0AOv/m6Ok6OP0n9z013O8GVxJBQ53nZnpCuWVVhaue4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91232CA, serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Validity Not Before: Jul 3 08:22:23 2025 GMT Not After : Jul 10 08:22:23 2025 GMT Subject: CN=68663dbf-795a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:73:1b:98:68:61:0b:d7:93:a7:5e:09:fa:1f: f7:b3:59:03:54:78:50:24:f2:40:33:3a:5f:18:cb: 69:15:d5:03:14:01:8d:a1:29:18:82:53:e9:b5:97: 5b:78:23:a3:2c:55:0c:45:e9:a4:c1:d2:5a:d0:ee: e2:30:7e:75:38:ae:f7:07:31:30:41:73:da:8c:d1: 2a:5e:f3:7d:97:72:98:17:3f:c2:5f:d8:fa:07:3e: fa:a5:bc:86:29:32:34:cf:3f:15:0f:06:81:aa:bb: 9b:cd:c5:fa:27:bc:b8:6a:ae:07:b1:ca:ce:b1:a0: e5:71:1b:b6:1c:cd:f8:46:2f:1c:57:2c:0e:b9:b8: 2d:51:ac:de:9a:3d:e8:42:42:07:47:eb:27:2b:91: ab:18:88:ee:ba:c5:f9:5d:cf:5a:43:9e:c1:5a:e1: 96:bd:77:c8:cc:b5:8e:15:86:de:07:8b:e6:42:9d: c9:8b:71:b7:2d:44:78:d7:ce:2e:9b:aa:f2:f5:aa: 8e:3d:7c:84:9a:1a:c2:e4:1a:e0:ff:7a:16:cf:10: 8d:c5:cd:3a:bf:df:fd:45:01:68:44:30:08:4e:5e: 65:d4:0e:cb:7e:63:20:18:a2:16:50:28:88:6b:69: 03:45:37:50:c7:f7:df:5c:63:b3:ad:81:04:a6:0a: 39:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AD:A6:B5:28:3E:7F:77:6E:52:91:98:80:9F:D0:B7:BD:8C:CA:AA X509v3 Authority Key Identifier: keyid:9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:3b:10:d1:3c:74:88:39:a5:25:51:ba:b5:a9:fa:f4:b8:73: 2b:fe:d6:30:b7:f6:a0:99:0a:dd:57:80:b9:c7:8a:88:b5:01: 43:41:9c:6b:eb:b6:d2:b1:55:91:c4:8d:df:48:b2:a6:40:3e: be:c6:93:48:11:cd:d4:69:05:ee:c5:82:79:8d:99:5f:e7:f0: 71:61:6e:7d:56:2d:e5:ba:c6:93:2f:89:c6:60:7b:df:86:70: 05:a0:7f:9e:f2:47:52:26:e7:f2:85:dc:62:eb:2a:34:dd:dd: 22:da:00:a9:ac:18:a1:20:dd:c6:66:e0:29:b2:a7:cf:d7:ac: 9b:73:a1:23:d8:a5:7e:aa:a7:f6:af:6a:5b:52:1b:ac:66:d2: ae:c7:28:bb:e9:46:5b:ee:2a:69:06:2f:1c:2e:83:cc:fd:b7: 1b:02:90:cd:b9:5b:16:2d:a8:69:8b:46:ab:85:29:52:26:7f: f9:5c:9b:41:ba:2e:17:38:45:97:1f:c3:2d:ba:67:cb:f3:71: 52:9c:b8:61:06:56:b8:08:f3:7b:aa:1f:ef:4b:35:f9:d4:05: 36:72:c3:9a:93:f7:2e:9c:03:8c:ae:71:32:2d:75:fc:ea:82: 82:a5:ae:62:9d:a3:27:d0:8c:0c:da:9e:ea:52:0a:f5:fe:36: 3a:04:30:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzJDQTExMC8GA1UEBRMoOUFBQ0NDRjEwOTU5N0FDNjVCQzhGN0EwNTAyQTNFQTRB RTFDNUYxOTAeFw0yNTA3MDMwODIyMjNaFw0yNTA3MTAwODIyMjNaMBgxFjAUBgNV BAMTDTY4NjYzZGJmLTc5NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTcxuYaGEL15OnXgn6H/ezWQNUeFAk8kAzOl8Yy2kV1QMUAY2hKRiCU+m1l1t4 I6MsVQxF6aTB0lrQ7uIwfnU4rvcHMTBBc9qM0Spe832XcpgXP8Jf2PoHPvqlvIYp MjTPPxUPBoGqu5vNxfonvLhqrgexys6xoOVxG7YczfhGLxxXLA65uC1RrN6aPehC QgdH6ycrkasYiO66xfldz1pDnsFa4Za9d8jMtY4Vht4Hi+ZCncmLcbctRHjXzi6b qvL1qo49fISaGsLkGuD/ehbPEI3FzTq/3/1FAWhEMAhOXmXUDst+YyAYohZQKIhr aQNFN1DH999cY7OtgQSmCjnJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzq2mtSg+ f3duUpGYgJ/Qt72MyqowHwYDVR0jBBgwFoAUmqzM8QlZesZbyPegUCo+pK4cXxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMkNBLzgxNThFRDJFNDY4 NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNaYnlQZWdVQ28tcEs0Y1h4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXF6TThRbFplc1pieVBlZ1VDby1wSzRjWHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MkNBLzgxNThFRDJFNDY4NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNa YnlQZWdVQ28tcEs0Y1h4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGc7ENE8dIg5pSVRurWp+vS4cyv+1jC39qCZCt1XgLnHioi1AUNBnGvr ttKxVZHEjd9IsqZAPr7Gk0gRzdRpBe7FgnmNmV/n8HFhbn1WLeW6xpMvicZge9+G cAWgf57yR1Im5/KF3GLrKjTd3SLaAKmsGKEg3cZm4Cmyp8/XrJtzoSPYpX6qp/av altSG6xm0q7HKLvpRlvuKmkGLxwug8z9txsCkM25WxYtqGmLRquFKVImf/lcm0G6 Lhc4RZcfwy26Z8vzcVKcuGEGVrgI83uqH+9LNfnUBTZyw5qT9y6cA4yucTItdfzq goKlrmKdoyfQjAzanupSCvX+NjoEMMQ= -----END CERTIFICATE-----Generated at Fri Jul 4 01:10:57 2025 by rpki-client