$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft File: pZqv2bOxSIduExDPGyR6mnybbJg.mft (raw, json) Hash identifier: 1gq/lx6VEfWrTYFKPEf/BrvCm4JxJfv6rAu1L3XrHSo= Subject key identifier: D6:6C:0D:4E:6A:26:BE:83:B3:29:B2:C9:F2:56:70:72:39:59:90:37 Authority key identifier: A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98 Certificate issuer: /CN=A9169E54/serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft Manifest number: 21 Signing time: Sat 23 Aug 2025 08:04:36 +0000 Manifest this update: Sat 23 Aug 2025 08:04:35 +0000 Manifest next update: Sat 30 Aug 2025 08:04:35 +0000 Files and hashes: 1: pZqv2bOxSIduExDPGyR6mnybbJg.crl (hash: 3888gAAxDkq8G27nFq97l0MvGPR56cfRrXXmq6q9Gi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E54, serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98 Validity Not Before: Aug 23 08:04:35 2025 GMT Not After : Aug 30 08:04:35 2025 GMT Subject: CN=68a97614-0ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5c:ea:bd:24:6d:3c:50:2f:94:94:71:e5:17: c3:8e:6f:c4:a2:e6:07:51:dd:17:af:47:8c:98:42: 96:f3:3b:23:04:f1:85:2d:9e:23:36:83:77:9c:44: 51:18:a1:ad:0d:de:ca:3d:0b:9d:59:7d:f3:c7:eb: 8e:98:95:18:42:ed:59:8c:c3:1f:3b:b2:93:cf:ac: a4:21:a9:b7:14:32:3e:58:e5:6c:d4:bf:13:11:00: 25:d9:a3:86:ff:3d:2a:a5:93:0a:3c:00:d3:47:b3: 79:37:3b:c2:f8:2f:db:4b:94:5a:aa:db:44:64:a2: fb:34:a1:a5:cb:a8:0a:2a:be:51:b6:1c:db:65:93: f6:a6:de:28:b4:44:b0:cb:c2:d4:86:03:55:b6:fd: c5:da:55:49:bb:47:17:c6:8e:49:8e:f9:70:ab:f5: 63:cf:17:b9:83:f9:3b:dc:20:6e:67:b4:ca:e7:78: 14:cc:35:2b:d1:18:ba:be:c5:ea:8b:a7:8a:74:77: 32:cc:93:4b:86:0b:04:e1:08:53:e5:89:64:97:fa: 35:09:74:b7:ff:99:8d:fb:89:48:21:6b:d0:5a:00: 00:cd:e2:fe:36:b9:f3:85:79:1c:c4:57:15:65:84: ed:f1:48:c0:d2:c8:a8:87:5a:32:8c:86:53:6f:5e: 6c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6C:0D:4E:6A:26:BE:83:B3:29:B2:C9:F2:56:70:72:39:59:90:37 X509v3 Authority Key Identifier: keyid:A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:89:75:0b:8b:c9:bb:47:fc:1b:f4:eb:8a:e7:ca:f8:a9:18: 0e:f6:f7:57:d9:92:6d:d8:d8:0f:62:9d:e7:3e:8c:f4:23:40: de:ef:5d:d3:9a:77:71:03:67:66:35:ed:cc:bf:9a:4d:31:86: 8a:a9:c0:8b:38:a5:9f:56:87:0c:d6:2c:d0:06:75:60:8c:cd: cc:b5:ec:e4:8a:2b:ba:5b:f5:a4:42:d8:77:5a:9b:e8:2a:23: 24:0a:75:a8:b5:a4:c1:58:27:8f:8d:9f:5a:9d:39:37:6f:4d: b1:0c:ee:40:f0:e0:f4:ee:23:e5:97:84:ec:c5:22:46:4c:c2: 2d:c2:4f:eb:38:ef:11:1c:a5:60:8e:79:f8:3d:2e:1b:f1:c6: 0e:5e:00:62:d3:5f:4f:90:93:1f:2d:53:50:b0:6c:2d:54:d2: 78:3f:20:5b:89:69:65:b8:ce:7d:94:d3:b6:f3:55:59:dc:d0: 5e:89:1d:45:d2:0a:d8:33:4c:86:36:c6:7a:fc:6e:68:32:cf: a9:26:ee:34:e1:43:5a:4b:64:60:c7:2a:51:8b:29:16:c4:13: 01:81:1e:55:c9:d1:6b:c1:06:70:a2:2e:cb:f0:c7:d0:44:dd: ad:50:bc:08:e7:1d:ba:79:32:00:19:e6:15:93:d6:da:48:09: c1:e4:d5:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUU1NDExMC8GA1UEBRMoQTU5QUFGRDlCM0IxNDg4NzZFMTMxMENGMUIyNDdBOUE3 QzlCNkM5ODAeFw0yNTA4MjMwODA0MzVaFw0yNTA4MzAwODA0MzVaMBgxFjAUBgNV BAMTDTY4YTk3NjE0LTBlYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtXOq9JG08UC+UlHHlF8OOb8Si5gdR3RevR4yYQpbzOyME8YUtniM2g3ecRFEY oa0N3so9C51ZffPH646YlRhC7VmMwx87spPPrKQhqbcUMj5Y5WzUvxMRACXZo4b/ PSqlkwo8ANNHs3k3O8L4L9tLlFqq20Rkovs0oaXLqAoqvlG2HNtlk/am3ii0RLDL wtSGA1W2/cXaVUm7RxfGjkmO+XCr9WPPF7mD+TvcIG5ntMrneBTMNSvRGLq+xeqL p4p0dzLMk0uGCwThCFPliWSX+jUJdLf/mY37iUgha9BaAADN4v42ufOFeRzEVxVl hO3xSMDSyKiHWjKMhlNvXmwzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1mwNTmom voOzKbLJ8lZwcjlZkDcwHwYDVR0jBBgwFoAUpZqv2bOxSIduExDPGyR6mnybbJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTU0L0UyODI5QzJBNEZG QjExRjBBQUVCMzg3N0M0RjlBRTAyL3BacXYyYk94U0lkdUV4RFBHeVI2bW55YmJK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFpxdjJiT3hTSWR1RXhEUEd5UjZtbnliYkpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RTU0L0UyODI5QzJBNEZGQjExRjBBQUVCMzg3N0M0RjlBRTAyL3BacXYyYk94U0lk dUV4RFBHeVI2bW55YmJKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJSJdQuLybtH/Bv064rnyvipGA7291fZkm3Y2A9inec+jPQjQN7vXdOa d3EDZ2Y17cy/mk0xhoqpwIs4pZ9WhwzWLNAGdWCMzcy17OSKK7pb9aRC2Hdam+gq IyQKdai1pMFYJ4+Nn1qdOTdvTbEM7kDw4PTuI+WXhOzFIkZMwi3CT+s47xEcpWCO efg9Lhvxxg5eAGLTX0+Qkx8tU1CwbC1U0ng/IFuJaWW4zn2U07bzVVnc0F6JHUXS CtgzTIY2xnr8bmgyz6km7jThQ1pLZGDHKlGLKRbEEwGBHlXJ0WvBBnCiLsvwx9BE 3a1QvAjnHbp5MgAZ5hWT1tpICcHk1Vo= -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:13 2025 by rpki-client