$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json) Hash identifier: QVhIeLkgCVg1S3WLSWJAvNbCVIUrYSo0ip+fN4BfWLQ= Subject key identifier: 73:1A:C4:D5:37:31:5A:38:14:09:A4:6E:C9:3F:57:70:8F:B2:A3:E0 Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Certificate serial: 031A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft Manifest number: 030F Signing time: Thu 03 Jul 2025 01:38:20 +0000 Manifest this update: Thu 03 Jul 2025 01:38:20 +0000 Manifest next update: Thu 10 Jul 2025 01:38:20 +0000 Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: YcUiBJg3XBq7uFuxK9ZXEAt5I2S/jaFTfTAqA7GqVU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 794 (0x31a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Validity Not Before: Jul 3 01:38:20 2025 GMT Not After : Jul 10 01:38:20 2025 GMT Subject: CN=6865df0c-4901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:4f:c4:8b:70:ce:6f:56:c7:09:a7:35:5a: a1:8a:ee:f0:c3:cb:7c:8e:46:91:41:1b:15:41:15: 7b:78:63:d0:4f:09:e2:9e:24:35:19:5b:b3:23:c6: a7:3c:21:87:8a:c3:9f:2e:5f:fc:4b:b5:15:b0:7c: 74:d4:f8:c7:bc:78:73:f3:20:43:d5:ea:c2:c0:fc: 0e:a2:5f:81:03:25:6c:e7:09:15:59:af:ac:ac:2c: 41:cd:57:b0:df:e6:7e:b4:9a:0f:e7:9a:15:d8:01: fc:08:f4:d9:69:96:da:3e:07:3e:cd:05:8b:71:ae: cd:44:f9:3e:8c:87:0a:7a:32:ac:e6:5a:8f:03:dd: 9a:ed:ca:e8:27:d6:c1:68:7e:cc:42:fc:5c:7c:1c: 43:42:4f:f4:c8:8b:aa:0f:f3:e9:76:45:a6:33:1f: 72:ac:a4:a1:95:3d:1f:dc:ad:82:60:77:40:fa:bf: 94:b0:1d:21:97:4b:67:96:05:13:ef:09:75:cd:e7: e8:e5:cf:4f:32:bb:b8:49:f7:3d:c2:f6:c2:05:3b: 3e:4c:75:53:e5:21:c5:c2:a4:fc:ae:f8:03:b1:3f: 70:4a:e5:26:c4:9c:fb:20:98:a8:4b:4c:2d:0f:ea: ed:77:9a:af:ce:89:7d:c1:36:97:d8:49:f3:92:4e: b4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1A:C4:D5:37:31:5A:38:14:09:A4:6E:C9:3F:57:70:8F:B2:A3:E0 X509v3 Authority Key Identifier: keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4c:73:4b:1e:bf:77:11:4b:57:2e:08:e1:7b:48:6a:86:14: e5:ba:9d:3f:90:92:bf:44:9a:3b:de:db:ba:01:33:6e:3f:39: 88:a7:1a:f5:52:66:16:4f:7b:e5:6d:a9:92:7d:7e:57:ef:49: 1f:08:2b:c2:3e:f7:48:b7:2f:26:9b:f4:c6:7a:86:b7:96:4c: db:1c:96:ae:0c:d6:bc:fb:57:87:dd:28:c0:20:55:a9:82:a2: 3c:2d:1c:32:61:a6:f8:fd:fa:51:45:ae:c1:4f:18:4e:6a:79: 28:f8:f3:fd:0b:1f:19:d2:3b:5d:1c:5a:1a:c6:b1:b5:53:4f: d0:82:cd:fc:a2:6f:56:c7:27:09:6e:a6:2b:78:df:6f:e6:4c: 94:19:60:c4:04:9e:8a:16:58:48:69:08:25:f9:78:1f:54:8d: ca:9f:04:7a:ee:be:18:28:fe:83:7c:8d:07:d1:2b:0b:3c:e3: 00:ec:6e:23:30:6d:50:bd:a9:d5:5f:37:23:3f:e0:93:3f:68: c1:ef:10:4e:db:23:63:90:8c:38:55:c6:41:42:f1:34:96:28: d5:b8:27:62:99:f0:95:df:52:87:3f:4f:32:92:34:2b:0a:e8: 2c:4c:20:9a:48:a6:bb:98:45:ab:e1:8f:6f:4e:6d:92:5e:66: 5d:c0:20:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNDkxMTAvBgNVBAUTKENEMENBQzBFN0U4NEUzRTgxRTQ4NzYxNzRFMkMyMTQw ODUwOTQyNjkwHhcNMjUwNzAzMDEzODIwWhcNMjUwNzEwMDEzODIwWjAYMRYwFAYD VQQDEw02ODY1ZGYwYy00OTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpxPxItwzm9WxwmnNVqhiu7ww8t8jkaRQRsVQRV7eGPQTwniniQ1GVuzI8an PCGHisOfLl/8S7UVsHx01PjHvHhz8yBD1erCwPwOol+BAyVs5wkVWa+srCxBzVew 3+Z+tJoP55oV2AH8CPTZaZbaPgc+zQWLca7NRPk+jIcKejKs5lqPA92a7croJ9bB aH7MQvxcfBxDQk/0yIuqD/PpdkWmMx9yrKShlT0f3K2CYHdA+r+UsB0hl0tnlgUT 7wl1zefo5c9PMru4Sfc9wvbCBTs+THVT5SHFwqT8rvgDsT9wSuUmxJz7IJioS0wt D+rtd5qvzol9wTaX2Enzkk604wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMaxNU3 MVo4FAmkbsk/V3CPsqPgMB8GA1UdIwQYMBaAFM0MrA5+hOPoHkh2F04sIUCFCUJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI0OS83NkNFODQ1NkUw MjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQtZ2VTSFlYVGl3aFFJVUpR bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pReXNEbjZFNC1nZVNIWVhUaXdoUUlVSlFtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI0OS83NkNFODQ1NkUwMjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQt Z2VTSFlYVGl3aFFJVUpRbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+THNLHr93EUtXLgjhe0hqhhTlup0/kJK/RJo73tu6ATNuPzmIpxr1 UmYWT3vlbamSfX5X70kfCCvCPvdIty8mm/TGeoa3lkzbHJauDNa8+1eH3SjAIFWp gqI8LRwyYab4/fpRRa7BTxhOanko+PP9Cx8Z0jtdHFoaxrG1U0/Qgs38om9WxycJ bqYreN9v5kyUGWDEBJ6KFlhIaQgl+XgfVI3KnwR67r4YKP6DfI0H0SsLPOMA7G4j MG1QvanVXzcjP+CTP2jB7xBO2yNjkIw4VcZBQvE0lijVuCdimfCV31KHP08ykjQr CugsTCCaSKa7mEWr4Y9vTm2SXmZdwCBZ -----END CERTIFICATE-----Generated at Thu Jul 3 09:24:12 2025 by rpki-client