$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft File: QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json) Hash identifier: YsTgI5m8uNHcE7+fwPbjk+Ug6eE5bFsgKh7IAV54dUY= Subject key identifier: 9D:02:E2:A0:00:E7:DA:75:9B:61:13:0A:9B:85:BE:08:13:5E:F4:63 Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft Manifest number: 085A Signing time: Fri 04 Jul 2025 21:04:18 +0000 Manifest this update: Fri 04 Jul 2025 21:04:18 +0000 Manifest next update: Fri 11 Jul 2025 21:04:18 +0000 Files and hashes: 1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: NsU+N9Xi2m+nfkZ44FYkUeLlDOhzc5LKy98aSR36Jxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Validity Not Before: Jul 4 21:04:18 2025 GMT Not After : Jul 11 21:04:18 2025 GMT Subject: CN=686841d2-ec6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:9b:43:63:cd:e6:cc:b8:62:03:9c:ee:5b: 31:6e:86:32:fc:6e:15:3d:16:cb:df:33:0a:5d:29: ce:91:b9:17:1f:a6:cd:b5:67:b1:3c:a5:94:da:33: 09:2c:2e:e9:f7:a8:d5:47:a1:c4:77:1d:82:8b:d6: 66:c8:62:fc:0d:37:14:97:b0:17:13:a0:e4:c9:26: 79:8a:15:39:af:d7:88:ff:53:9b:92:15:98:1d:ae: 03:34:d5:f6:a2:82:31:3a:58:6d:e7:de:22:9b:da: 15:c1:d7:9a:af:2e:af:44:ee:47:51:c5:0c:fa:d2: 57:74:e0:a7:c0:ba:e9:77:8d:13:04:08:4f:76:6e: eb:f1:a7:45:87:e7:40:a5:dc:06:31:91:58:82:83: 4a:8e:bf:d5:71:da:8c:6c:41:28:a7:0c:cf:01:24: 87:d3:34:3f:ac:1d:07:36:42:0c:5a:21:51:fb:6f: d8:2a:45:4b:aa:72:db:15:f0:bc:ac:dc:14:16:9d: 7a:e3:e2:a5:6f:ab:a4:76:5e:f8:c3:a0:f0:76:a7: 88:76:0a:4a:0b:ac:c0:83:0f:6b:e5:b7:3d:fd:0c: d1:63:1f:62:9a:e2:b4:00:33:b8:33:9b:8c:72:72: 61:64:25:d4:e6:14:a6:72:b2:8e:e5:2f:3a:f9:98: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:02:E2:A0:00:E7:DA:75:9B:61:13:0A:9B:85:BE:08:13:5E:F4:63 X509v3 Authority Key Identifier: keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:52:6c:0c:d2:91:02:b1:50:86:dd:e1:9c:f3:3f:ae:58:4d: 1d:61:c5:cd:38:d1:60:a7:11:99:49:1a:b1:20:90:5b:ce:29: bf:71:55:47:cd:22:ac:a8:3c:92:39:c4:9c:e7:dc:40:0d:9d: e5:86:e1:ca:5a:c1:e3:1e:b1:f1:7f:fb:5f:7f:2e:91:57:da: c4:e6:31:14:dc:ef:f0:35:05:09:49:3f:3e:eb:2e:e4:3d:4b: 2f:2e:59:65:50:2a:33:8b:fa:03:4d:b1:fa:3a:05:54:d6:be: d0:c0:6b:73:ea:ce:e4:66:7e:fd:f0:7a:92:28:21:df:42:fb: eb:88:b4:0b:31:9b:cb:59:ee:36:93:ac:cd:0f:ea:d4:d3:13: 40:e0:2b:d8:22:37:be:25:b7:56:63:68:eb:6f:15:5a:58:ce: 32:05:56:2c:79:bb:07:ef:9c:55:66:5f:2d:dd:77:10:87:e5: b0:d7:d6:bf:fe:29:f7:3c:4c:74:da:c9:d9:98:c3:77:a8:0d: 80:5f:29:71:a4:09:5d:46:ca:9f:f8:94:5f:bb:ec:e8:e3:a3: ff:7e:e4:17:5d:c4:cc:d5:c8:b1:5f:2d:66:c6:45:99:d8:0d: ab:58:5a:40:52:e4:fe:63:c4:7b:60:31:74:55:f0:b8:80:94: b1:f4:16:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0MEYxMTAvBgNVBAUTKDQxNUNERkMzRTZDRTY1MzMwNkVBOTVBRDE2N0QyRTg5 NzVDNUU0MDMwHhcNMjUwNzA0MjEwNDE4WhcNMjUwNzExMjEwNDE4WjAYMRYwFAYD VQQDEw02ODY4NDFkMi1lYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMmbQ2PN5sy4YgOc7lsxboYy/G4VPRbL3zMKXSnOkbkXH6bNtWexPKWU2jMJ LC7p96jVR6HEdx2Ci9ZmyGL8DTcUl7AXE6DkySZ5ihU5r9eI/1ObkhWYHa4DNNX2 ooIxOlht594im9oVwdeary6vRO5HUcUM+tJXdOCnwLrpd40TBAhPdm7r8adFh+dA pdwGMZFYgoNKjr/VcdqMbEEopwzPASSH0zQ/rB0HNkIMWiFR+2/YKkVLqnLbFfC8 rNwUFp164+Klb6ukdl74w6DwdqeIdgpKC6zAgw9r5bc9/QzRYx9imuK0ADO4M5uM cnJhZCXU5hSmcrKO5S86+ZjjMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0C4qAA 59p1m2ETCpuFvggTXvRjMB8GA1UdIwQYMBaAFEFc38PmzmUzBuqVrRZ9Lol1xeQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQwRi80MTQyRDUwRUND OTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pUTUc2cFd0Rm4wdWlYWEY1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWemZ3LWJPWlRNRzZwV3RGbjB1aVhYRjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQwRi80MTQyRDUwRUNDOTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pU TUc2cFd0Rm4wdWlYWEY1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyUmwM0pECsVCG3eGc8z+uWE0dYcXNONFgpxGZSRqxIJBbzim/cVVH zSKsqDySOcSc59xADZ3lhuHKWsHjHrHxf/tffy6RV9rE5jEU3O/wNQUJST8+6y7k PUsvLlllUCozi/oDTbH6OgVU1r7QwGtz6s7kZn798HqSKCHfQvvriLQLMZvLWe42 k6zND+rU0xNA4CvYIje+JbdWY2jrbxVaWM4yBVYsebsH75xVZl8t3XcQh+Ww19a/ /in3PEx02snZmMN3qA2AXylxpAldRsqf+JRfu+zo46P/fuQXXcTM1cixXy1mxkWZ 2A2rWFpAUuT+Y8R7YDF0VfC4gJSx9BaH -----END CERTIFICATE-----Generated at Sun Jul 6 01:03:38 2025 by rpki-client