$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft File: QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json) Hash identifier: NWg+lN77lBT/YGZQF/hS3PiQm4roeWpE8f7hLcjE7II= Subject key identifier: 12:68:6C:B1:96:9F:70:FE:FF:F5:A3:85:3E:4B:51:7F:08:DF:B5:BE Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Certificate serial: 0884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft Manifest number: 0873 Signing time: Fri 22 Aug 2025 20:47:06 +0000 Manifest this update: Fri 22 Aug 2025 20:47:05 +0000 Manifest next update: Fri 29 Aug 2025 20:47:05 +0000 Files and hashes: 1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: jTbRmLDAthehqDh/68gIIXOFgceYmetpIcEJeXT9e4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Validity Not Before: Aug 22 20:47:05 2025 GMT Not After : Aug 29 20:47:05 2025 GMT Subject: CN=68a8d74a-94c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:2e:e1:a2:fe:f3:eb:f6:b9:c3:2d:af:8f: 7a:d8:1b:c6:e7:a0:d4:5d:e1:ae:fa:e8:8d:c8:29: 86:b8:f5:7b:bb:6b:55:94:f9:dd:8e:08:74:57:17: 62:f2:59:88:8e:ac:2c:a5:51:27:05:f3:a7:4c:db: 37:86:35:1b:0b:64:11:73:96:9e:4b:2e:e5:f9:fe: b7:ca:24:65:75:18:1f:0f:b3:c4:49:6d:b5:2a:b2: 1a:87:b6:28:b4:b1:4f:88:4a:2a:11:30:13:25:f2: f2:95:6b:5b:7c:b0:97:fb:22:87:9f:36:67:85:40: ee:f9:d9:09:2e:b7:bb:99:de:03:f3:c1:33:7f:c5: de:ea:3f:79:9d:2c:0b:af:b7:12:67:aa:28:80:5a: 42:e6:64:66:1c:ca:13:56:00:55:52:00:8c:93:a9: f7:b0:65:7b:11:24:5c:3a:1e:64:28:77:f3:5b:fc: e6:03:68:c2:50:7e:d9:eb:18:97:68:66:6e:d7:e3: 5b:a7:c1:11:da:6e:83:7d:67:76:34:2b:d4:7b:a8: 48:80:65:18:b0:cd:af:3d:21:39:f5:eb:d7:23:41: 46:1e:8e:d2:c7:2d:74:b4:5f:4a:f4:f2:90:49:27: 28:e8:97:43:e0:da:e9:cd:56:80:78:e3:ac:8a:21: 94:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:68:6C:B1:96:9F:70:FE:FF:F5:A3:85:3E:4B:51:7F:08:DF:B5:BE X509v3 Authority Key Identifier: keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e5:21:58:d6:94:c9:dd:18:73:d5:d5:2d:3f:96:0d:d6:9e: 2c:67:31:c5:61:7b:09:25:b2:01:62:6e:4d:3f:a6:20:57:fd: e2:75:70:b8:0b:f3:7b:ce:f9:07:7f:ed:c5:67:69:5d:cc:76: 1b:c7:d4:e8:57:cd:06:d9:ed:cb:52:1c:de:fc:b6:db:29:3d: 63:2f:b7:99:2c:6b:2b:ca:95:46:10:d0:3b:75:89:5f:76:da: d3:44:53:b7:8d:9c:24:23:f6:71:62:6b:52:d0:53:dc:c8:0b: 51:a5:2d:08:69:06:66:ed:50:9a:05:b3:1f:00:6a:ff:ac:6a: 26:29:ce:5c:03:ce:eb:5d:f4:14:96:18:ca:04:84:cc:1c:45: 80:80:49:87:d8:9a:13:26:a1:d6:4a:80:ab:70:c9:54:ce:38: 86:71:f6:1b:b2:17:e9:67:94:ac:56:89:1d:1e:8d:f4:1f:11: 96:96:59:a1:37:9d:4a:9c:b7:4c:95:82:be:75:f4:ae:db:ec: 01:a1:2a:e3:0f:f2:3b:9a:50:6c:08:2e:f4:78:4e:d1:4b:2b: 4c:30:fe:96:96:40:23:b0:28:39:d5:c8:fc:dc:45:38:47:b0: 8d:be:0f:19:2f:0f:b0:e1:d6:dd:8b:43:dd:dc:c0:27:0e:b4: d4:d2:ae:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0MEYxMTAvBgNVBAUTKDQxNUNERkMzRTZDRTY1MzMwNkVBOTVBRDE2N0QyRTg5 NzVDNUU0MDMwHhcNMjUwODIyMjA0NzA1WhcNMjUwODI5MjA0NzA1WjAYMRYwFAYD VQQDEw02OGE4ZDc0YS05NGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoD8u4aL+8+v2ucMtr4962BvG56DUXeGu+uiNyCmGuPV7u2tVlPndjgh0Vxdi 8lmIjqwspVEnBfOnTNs3hjUbC2QRc5aeSy7l+f63yiRldRgfD7PESW21KrIah7Yo tLFPiEoqETATJfLylWtbfLCX+yKHnzZnhUDu+dkJLre7md4D88Ezf8Xe6j95nSwL r7cSZ6oogFpC5mRmHMoTVgBVUgCMk6n3sGV7ESRcOh5kKHfzW/zmA2jCUH7Z6xiX aGZu1+Nbp8ER2m6DfWd2NCvUe6hIgGUYsM2vPSE59evXI0FGHo7Sxy10tF9K9PKQ SSco6JdD4NrpzVaAeOOsiiGUUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJobLGW n3D+//WjhT5LUX8I37W+MB8GA1UdIwQYMBaAFEFc38PmzmUzBuqVrRZ9Lol1xeQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQwRi80MTQyRDUwRUND OTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pUTUc2cFd0Rm4wdWlYWEY1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWemZ3LWJPWlRNRzZwV3RGbjB1aVhYRjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQwRi80MTQyRDUwRUNDOTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pU TUc2cFd0Rm4wdWlYWEY1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw5SFY1pTJ3Rhz1dUtP5YN1p4sZzHFYXsJJbIBYm5NP6YgV/3idXC4 C/N7zvkHf+3FZ2ldzHYbx9ToV80G2e3LUhze/LbbKT1jL7eZLGsrypVGENA7dYlf dtrTRFO3jZwkI/ZxYmtS0FPcyAtRpS0IaQZm7VCaBbMfAGr/rGomKc5cA87rXfQU lhjKBITMHEWAgEmH2JoTJqHWSoCrcMlUzjiGcfYbshfpZ5SsVokdHo30HxGWllmh N51KnLdMlYK+dfSu2+wBoSrjD/I7mlBsCC70eE7RSytMMP6WlkAjsCg51cj83EU4 R7CNvg8ZLw+w4dbdi0Pd3MAnDrTU0q58 -----END CERTIFICATE-----Generated at Sat Aug 23 22:40:17 2025 by rpki-client