$ rpki-client -vvf rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft File: A0ZyQIbx848yyqFygmhZGcfIu28.mft (raw, json) Hash identifier: oflBx0zD/Lsg5R8E4H7y1y8R3DOOQoW/ntyoGl4rL2s= Subject key identifier: 4B:73:BB:EA:99:60:B5:DE:DA:F0:67:A3:02:BE:60:2C:BB:31:53:E0 Authority key identifier: 03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F Certificate issuer: /CN=A9173591/serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F Certificate serial: 0BD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft Manifest number: 0BD0 Signing time: Wed 02 Jul 2025 19:05:26 +0000 Manifest this update: Wed 02 Jul 2025 19:05:26 +0000 Manifest next update: Wed 09 Jul 2025 19:05:26 +0000 Files and hashes: 1: A0ZyQIbx848yyqFygmhZGcfIu28.crl (hash: xoJavtx2sqlQAQaokrulA/qFoVrGF8cQGFCL7xLDYuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3026 (0xbd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173591, serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F Validity Not Before: Jul 2 19:05:26 2025 GMT Not After : Jul 9 19:05:26 2025 GMT Subject: CN=686582f6-141f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:47:15:7a:a6:25:ee:11:4b:ab:2e:85:13: 24:dd:fa:9e:60:60:60:09:53:bf:2e:86:e2:3c:ba: ce:69:28:c9:8b:40:12:22:55:c1:ca:a8:ba:95:05: 2a:2d:e0:3b:14:3a:a5:3b:dc:da:9f:3e:c9:56:22: d7:d8:ee:89:35:0c:25:a3:d5:b6:e2:df:75:0f:d0: 9c:81:63:cc:2b:b7:fa:06:bb:9a:ca:26:5a:40:e2: a3:75:14:80:73:85:fa:5f:3c:c6:fe:16:51:65:f3: 7e:5f:c3:ef:34:b0:55:84:36:0d:60:a0:8a:e9:e0: ff:3d:63:4e:de:b2:c5:93:e1:5c:b3:5b:f8:95:1c: a7:48:0d:c1:f3:a1:54:35:ad:43:c2:16:03:b0:f1: e6:72:c2:f2:a4:dc:dd:11:78:c0:12:d2:73:80:0b: 43:5e:89:34:96:05:d7:2e:44:54:c6:a7:34:be:d5: 7a:c1:85:38:b5:e6:8c:c0:78:b9:6f:cc:84:c4:0d: fc:7d:e7:9e:15:25:ea:7c:db:f1:bc:78:4f:3f:9b: c3:ef:e0:dd:da:10:14:13:d6:1e:30:12:51:74:a8: 45:de:f8:8f:d2:84:f9:cf:a3:c3:8e:c9:de:c7:2f: e5:70:23:4e:07:14:a4:ba:f6:a5:e5:6e:2b:fa:a4: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:73:BB:EA:99:60:B5:DE:DA:F0:67:A3:02:BE:60:2C:BB:31:53:E0 X509v3 Authority Key Identifier: keyid:03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4d:5b:49:83:79:9f:83:f5:41:d4:6e:07:ca:81:f5:b7:2b: 7d:ac:71:15:e9:3f:fc:63:48:f0:36:38:10:60:00:c3:f9:24: 1e:be:d4:d9:19:55:e2:55:7a:33:70:49:11:26:38:8e:a6:bf: 8a:7f:e9:65:bf:38:0e:8d:cf:46:a9:08:56:a2:a7:97:d9:e0: 3f:4a:f4:e6:85:d7:09:54:a7:c1:ff:ac:88:69:7d:09:ba:89: 92:20:0d:cf:00:d8:62:8a:2a:e4:3c:25:29:47:2f:fd:cb:25: 90:38:ba:2f:07:6f:96:73:d3:82:25:80:8a:38:13:a4:23:b2: c4:3d:33:d6:24:51:c4:0d:3c:98:59:09:89:00:d9:1d:01:78: f6:d6:1c:7b:9d:22:57:80:3f:d8:46:db:96:a4:e2:12:d8:48: bc:89:86:f4:08:ec:8a:20:4e:a9:15:62:1c:17:aa:0e:38:f9: cf:48:e7:2d:ef:19:3e:63:00:71:52:95:38:f3:0e:a3:03:31: 87:29:b1:75:41:32:36:0d:42:a4:2f:53:56:b2:f0:1d:96:b8: 11:30:aa:13:8f:e7:8c:a7:54:2b:e6:33:d8:4f:4e:df:a5:d2: 89:e0:a3:c1:d3:12:28:1f:9c:4f:0b:3b:32:48:8a:35:39:44: 29:da:b9:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1OTExMTAvBgNVBAUTKDAzNDY3MjQwODZGMUYzOEYzMkNBQTE3MjgyNjg1OTE5 QzdDOEJCNkYwHhcNMjUwNzAyMTkwNTI2WhcNMjUwNzA5MTkwNTI2WjAYMRYwFAYD VQQDEw02ODY1ODJmNi0xNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUBHFXqmJe4RS6suhRMk3fqeYGBgCVO/LobiPLrOaSjJi0ASIlXByqi6lQUq LeA7FDqlO9zanz7JViLX2O6JNQwlo9W24t91D9CcgWPMK7f6BruayiZaQOKjdRSA c4X6XzzG/hZRZfN+X8PvNLBVhDYNYKCK6eD/PWNO3rLFk+Fcs1v4lRynSA3B86FU Na1DwhYDsPHmcsLypNzdEXjAEtJzgAtDXok0lgXXLkRUxqc0vtV6wYU4teaMwHi5 b8yExA38feeeFSXqfNvxvHhPP5vD7+Dd2hAUE9YeMBJRdKhF3viP0oT5z6PDjsne xy/lcCNOBxSkuval5W4r+qTwQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtzu+qZ YLXe2vBnowK+YCy7MVPgMB8GA1UdIwQYMBaAFANGckCG8fOPMsqhcoJoWRnHyLtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU5MS8yNzY4RkJBNjFE NkYxMUVBOUI1NkU3MjZDNEY5QUUwMi9BMFp5UUlieDg0OHl5cUZ5Z21oWkdjZkl1 MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EwWnlRSWJ4ODQ4eXlxRnlnbWhaR2NmSXUyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU5MS8yNzY4RkJBNjFENkYxMUVBOUI1NkU3MjZDNEY5QUUwMi9BMFp5UUlieDg0 OHl5cUZ5Z21oWkdjZkl1MjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9TVtJg3mfg/VB1G4HyoH1tyt9rHEV6T/8Y0jwNjgQYADD+SQevtTZ GVXiVXozcEkRJjiOpr+Kf+llvzgOjc9GqQhWoqeX2eA/SvTmhdcJVKfB/6yIaX0J uomSIA3PANhiiirkPCUpRy/9yyWQOLovB2+Wc9OCJYCKOBOkI7LEPTPWJFHEDTyY WQmJANkdAXj21hx7nSJXgD/YRtuWpOIS2Ei8iYb0COyKIE6pFWIcF6oOOPnPSOct 7xk+YwBxUpU48w6jAzGHKbF1QTI2DUKkL1NWsvAdlrgRMKoTj+eMp1Qr5jPYT07f pdKJ4KPB0xIoH5xPCzsySIo1OUQp2rlc -----END CERTIFICATE-----Generated at Thu Jul 3 01:59:27 2025 by rpki-client