$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft File: QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json) Hash identifier: uP4VdxGc+c/JsUXClCf0Ro6D4yvxPthTq/grwiMg5qw= Subject key identifier: 37:8F:8A:8C:15:98:0D:78:34:49:D7:0C:08:59:68:CA:CA:86:16:C1 Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft Manifest number: F6 Signing time: Thu 03 Jul 2025 05:24:43 +0000 Manifest this update: Thu 03 Jul 2025 05:24:43 +0000 Manifest next update: Thu 10 Jul 2025 05:24:43 +0000 Files and hashes: 1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: xHH75O1q/JaYjV1WqegtWbC2T7fAcJ0+Typ6lXDXaJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912968B, serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Validity Not Before: Jul 3 05:24:43 2025 GMT Not After : Jul 10 05:24:43 2025 GMT Subject: CN=6866141b-8388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:19:ef:f1:35:8e:25:0f:e5:31:20:41:17: b6:07:50:b8:bd:40:7a:76:b8:b3:c5:e6:0d:4a:ef: 70:8b:60:e2:32:aa:60:c6:97:4d:17:b4:77:ad:87: 71:8a:b4:a6:fe:ee:c9:5d:34:fe:24:11:fa:69:72: 7b:38:b6:95:98:a2:5a:10:f8:ef:c4:94:ea:91:7e: c5:c8:1b:2d:1a:d4:94:89:92:03:f9:6f:8c:30:9f: 8e:ff:dd:ce:ef:44:9c:2b:08:41:1b:27:40:13:3b: 1f:67:81:76:fc:42:b2:52:43:2a:3b:49:90:9f:93: 3b:23:2a:6e:37:00:e5:fc:70:94:3d:8c:f9:88:c8: 61:f6:3b:ac:fa:3f:be:a9:83:bb:e1:78:28:93:7a: b0:6c:94:45:cf:3e:e0:cd:ae:e4:7e:11:50:4e:3b: 4f:fe:a3:c6:01:7d:5c:85:a0:b5:37:84:fd:16:20: e9:47:86:a3:43:bc:b0:a0:72:22:fc:38:cf:54:bc: 9c:69:70:cb:49:b5:64:ba:8f:a7:fa:0a:d2:b1:e1: 23:69:2c:24:c9:74:b7:85:93:dd:e1:bd:a0:7a:46: 38:22:69:40:46:57:90:1b:82:69:2b:ba:61:92:c1: f6:c6:00:e6:e6:b2:da:e3:a6:c4:13:ed:b1:e2:5a: b4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8F:8A:8C:15:98:0D:78:34:49:D7:0C:08:59:68:CA:CA:86:16:C1 X509v3 Authority Key Identifier: keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:61:2d:6e:9e:82:8a:44:07:da:b5:bb:20:e6:61:91:83:05: c0:66:61:78:7b:26:6d:d5:e3:6e:e6:53:b3:af:07:7f:07:8b: 56:4a:15:53:94:cd:2f:a3:1b:22:a7:41:e3:7c:30:6f:0e:1a: 53:f7:44:8f:2b:5a:3e:80:30:97:5d:2f:a1:29:e2:74:bf:1d: 34:8d:dc:f8:a2:81:e1:62:05:97:75:35:22:1a:37:9d:22:08: 39:7c:b8:c1:d9:cb:b0:b3:05:5d:59:27:20:fa:34:10:93:81: 05:93:e0:11:13:c1:36:d4:ec:0b:e5:97:d8:22:17:4d:2a:6d: 1d:81:76:0d:c9:40:29:85:98:37:96:66:0a:23:f2:ca:bb:d7: a6:a2:3c:aa:9e:53:c1:4d:0c:80:c0:be:e4:ff:49:b0:cb:09: bb:11:b2:ac:4e:41:bc:8f:e5:34:a3:0e:81:65:39:86:0c:83: 7e:e7:91:2b:34:83:90:37:fd:b6:c1:44:df:fa:c4:b2:09:6e: f0:82:d1:20:27:e5:d3:60:a6:20:06:1c:42:9f:fe:d2:2c:c9: 3e:cd:07:b5:62:c9:20:4f:7f:33:a9:e5:9f:2f:7b:86:da:d1: 31:6c:d8:da:cb:01:0a:13:f9:38:d6:27:b8:56:8a:7d:b2:17: a6:a9:2a:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2OEIxMTAvBgNVBAUTKDQyRTY2NUUxMTEwNEQ4Q0QwODNGQjE5RDNDNkYzNTVD NzYyOEM0NDUwHhcNMjUwNzAzMDUyNDQzWhcNMjUwNzEwMDUyNDQzWjAYMRYwFAYD VQQDEw02ODY2MTQxYi04Mzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0MZ7/E1jiUP5TEgQRe2B1C4vUB6drizxeYNSu9wi2DiMqpgxpdNF7R3rYdx irSm/u7JXTT+JBH6aXJ7OLaVmKJaEPjvxJTqkX7FyBstGtSUiZID+W+MMJ+O/93O 70ScKwhBGydAEzsfZ4F2/EKyUkMqO0mQn5M7IypuNwDl/HCUPYz5iMhh9jus+j++ qYO74Xgok3qwbJRFzz7gza7kfhFQTjtP/qPGAX1chaC1N4T9FiDpR4ajQ7ywoHIi /DjPVLycaXDLSbVkuo+n+grSseEjaSwkyXS3hZPd4b2gekY4ImlARleQG4JpK7ph ksH2xgDm5rLa46bEE+2x4lq0fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDePiowV mA14NEnXDAhZaMrKhhbBMB8GA1UdIwQYMBaAFELmZeERBNjNCD+xnTxvNVx2KMRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTY4Qi9GQzFEMjczNkUx MkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJNMElQN0dkUEc4MVhIWW94 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTY4Qi9GQzFEMjczNkUxMkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJN MElQN0dkUEc4MVhIWW94RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbYS1unoKKRAfatbsg5mGRgwXAZmF4eyZt1eNu5lOzrwd/B4tWShVT lM0voxsip0HjfDBvDhpT90SPK1o+gDCXXS+hKeJ0vx00jdz4ooHhYgWXdTUiGjed Igg5fLjB2cuwswVdWScg+jQQk4EFk+ARE8E21OwL5ZfYIhdNKm0dgXYNyUAphZg3 lmYKI/LKu9emojyqnlPBTQyAwL7k/0mwywm7EbKsTkG8j+U0ow6BZTmGDIN+55Er NIOQN/22wUTf+sSyCW7wgtEgJ+XTYKYgBhxCn/7SLMk+zQe1YskgT38zqeWfL3uG 2tExbNjaywEKE/k41ie4Vop9shemqSqH -----END CERTIFICATE-----Generated at Thu Jul 3 08:48:55 2025 by rpki-client