$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft File: QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json) Hash identifier: 3e6Npswxeu/GTSVIpq/2pWCmvtcp2n33xqVLrAm95Is= Subject key identifier: EB:EC:8F:F5:9B:13:03:6E:C1:24:F4:39:D8:E6:74:36:CB:60:DA:6E Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft Manifest number: 0110 Signing time: Sat 23 Aug 2025 05:04:51 +0000 Manifest this update: Sat 23 Aug 2025 05:04:50 +0000 Manifest next update: Sat 30 Aug 2025 05:04:50 +0000 Files and hashes: 1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: 0WU6H02uUAVWIfrK23atnCh4dMZIm0s4lUr/CJ/rc+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912968B, serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Validity Not Before: Aug 23 05:04:50 2025 GMT Not After : Aug 30 05:04:50 2025 GMT Subject: CN=68a94bf2-6c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:1a:13:7c:a5:6e:03:ae:90:d5:fa:d6:cb: 2f:c9:de:8b:21:cb:96:22:2f:18:8f:dd:fe:c5:e3: bf:10:53:cc:f7:d8:e9:c8:f9:f1:62:e6:4f:e3:27: 13:c4:bd:f6:9a:42:d4:d5:af:77:38:d4:32:08:83: a1:05:de:a7:2d:f9:a9:7c:c2:33:7e:0a:c9:0e:b4: 0a:d8:9c:f3:bd:b7:96:76:9b:98:03:ae:c2:b0:a4: 99:88:52:ac:40:91:0f:58:99:38:5c:d5:90:e0:3b: c5:3b:f9:5c:87:df:46:37:71:50:a1:6b:94:3c:2d: 0f:c1:d4:46:f4:3f:19:3c:11:e9:32:71:4d:88:c0: 06:45:9d:9f:cd:b8:27:5a:43:d7:40:0c:8d:ca:79: 96:91:3b:58:42:a7:7c:f1:17:e3:c6:78:f4:e8:95: be:6e:f5:30:a3:65:87:c2:06:4b:ce:d9:9f:ac:01: 1b:81:aa:11:d8:67:ff:50:be:fb:78:19:04:7c:21: b2:21:d1:da:86:f0:0a:a1:e3:27:7e:1f:27:e7:b6: da:76:9d:da:98:0e:e5:a1:4b:70:78:04:0d:af:43: 3a:cd:09:0f:a7:bc:56:69:54:27:d2:77:af:94:db: 7b:23:36:02:0e:c5:81:fc:6f:56:a8:14:8f:67:d2: b1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EC:8F:F5:9B:13:03:6E:C1:24:F4:39:D8:E6:74:36:CB:60:DA:6E X509v3 Authority Key Identifier: keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4a:c7:5a:fe:5a:75:3e:fd:b8:7a:cd:64:b2:18:25:ae:20: b1:2b:0a:4b:45:84:d6:4b:37:b4:dd:8c:d9:77:06:aa:99:14: 9f:a6:31:91:bb:cf:6f:cc:76:71:7c:77:60:86:a2:e9:bb:37: d8:41:f2:82:fb:2c:d3:f9:05:a6:49:96:24:d6:8a:89:3d:bf: 75:09:66:bb:2d:ed:54:a7:b8:f7:12:d2:fc:93:e2:21:f8:41: 1f:08:f8:30:d1:fc:0d:2e:22:13:f1:ba:f6:6e:da:00:6c:62: 55:c2:0c:b7:d3:1e:be:f7:bb:e2:76:fa:a7:3d:5e:e8:94:96: 43:ab:ec:89:59:29:1e:31:a6:e1:57:ef:24:aa:91:66:c4:0c: e2:30:80:3f:4a:f2:c4:a2:ad:28:66:05:f7:c6:4d:17:5f:72: 6d:b8:85:6a:77:f0:5f:9e:c6:7c:a1:cf:e9:0a:d7:f5:4e:30: a7:2c:24:e8:42:31:7d:88:f7:51:a0:24:86:c5:d1:42:e6:21: 67:15:da:58:25:9b:d6:d2:cf:2a:4f:f2:dc:6d:9f:da:21:81: 02:b5:50:ea:0f:7b:ea:f7:3f:ec:dd:ed:63:c7:b4:cb:87:9b: d0:f0:7c:68:1b:65:af:8b:42:44:f2:ea:4a:0a:1f:24:71:74: 4e:f1:fa:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2OEIxMTAvBgNVBAUTKDQyRTY2NUUxMTEwNEQ4Q0QwODNGQjE5RDNDNkYzNTVD NzYyOEM0NDUwHhcNMjUwODIzMDUwNDUwWhcNMjUwODMwMDUwNDUwWjAYMRYwFAYD VQQDEw02OGE5NGJmMi02Yzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKQaE3ylbgOukNX61ssvyd6LIcuWIi8Yj93+xeO/EFPM99jpyPnxYuZP4ycT xL32mkLU1a93ONQyCIOhBd6nLfmpfMIzfgrJDrQK2JzzvbeWdpuYA67CsKSZiFKs QJEPWJk4XNWQ4DvFO/lch99GN3FQoWuUPC0PwdRG9D8ZPBHpMnFNiMAGRZ2fzbgn WkPXQAyNynmWkTtYQqd88Rfjxnj06JW+bvUwo2WHwgZLztmfrAEbgaoR2Gf/UL77 eBkEfCGyIdHahvAKoeMnfh8n57badp3amA7loUtweAQNr0M6zQkPp7xWaVQn0nev lNt7IzYCDsWB/G9WqBSPZ9KxYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvsj/Wb EwNuwST0OdjmdDbLYNpuMB8GA1UdIwQYMBaAFELmZeERBNjNCD+xnTxvNVx2KMRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTY4Qi9GQzFEMjczNkUx MkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJNMElQN0dkUEc4MVhIWW94 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTY4Qi9GQzFEMjczNkUxMkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJN MElQN0dkUEc4MVhIWW94RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Ssda/lp1Pv24es1kshglriCxKwpLRYTWSze03YzZdwaqmRSfpjGR u89vzHZxfHdghqLpuzfYQfKC+yzT+QWmSZYk1oqJPb91CWa7Le1Up7j3EtL8k+Ih +EEfCPgw0fwNLiIT8br2btoAbGJVwgy30x6+97vidvqnPV7olJZDq+yJWSkeMabh V+8kqpFmxAziMIA/SvLEoq0oZgX3xk0XX3JtuIVqd/BfnsZ8oc/pCtf1TjCnLCTo QjF9iPdRoCSGxdFC5iFnFdpYJZvW0s8qT/LcbZ/aIYECtVDqD3vq9z/s3e1jx7TL h5vQ8HxoG2Wvi0JE8upKCh8kcXRO8fqu -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:24 2025 by rpki-client