$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft File: qNV21K-7ZARbsClWQbmUJ9f4ePI.mft (raw, json) Hash identifier: ElCAVE6/nEv5yb9FqQ5BZ7ATrxRTqORVOgDHqIPnuKM= Subject key identifier: 62:81:3F:DE:9A:1C:99:81:37:45:C9:EE:F3:F7:78:65:CE:2E:90:93 Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Certificate serial: 0752 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft Manifest number: 0710 Signing time: Sat 28 Jun 2025 21:39:10 +0000 Manifest this update: Sat 28 Jun 2025 21:39:09 +0000 Manifest next update: Sat 05 Jul 2025 21:39:09 +0000 Files and hashes: 1: qNV21K-7ZARbsClWQbmUJ9f4ePI.crl (hash: oJmlx83Bw4mpVsj2dI0DmYiMVFg2crsnd5I1W/6j5zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1874 (0x752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C1DC, serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Validity Not Before: Jun 28 21:39:09 2025 GMT Not After : Jul 5 21:39:09 2025 GMT Subject: CN=686060fe-faa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:cb:b8:fb:21:bc:7d:99:4f:32:5a:40:71: a4:39:20:fe:58:b3:22:7a:06:65:06:bf:6e:8a:4b: 18:f6:6d:18:de:d9:dd:04:36:15:36:58:9d:26:ce: a8:c3:ce:02:5e:b8:50:9d:f9:9e:44:e4:af:be:5f: 5b:fb:3f:8b:42:8d:08:9a:6c:2e:10:05:90:a6:d1: 9a:15:ef:79:0a:c9:0a:94:4e:a5:c0:4e:f1:a6:ad: b5:8e:80:82:34:fe:48:4a:5e:72:ce:d4:52:e2:aa: 76:f2:c1:e1:c5:f8:e1:f9:79:fc:e7:f4:b5:f2:fb: fb:2d:a0:25:d4:98:22:f9:2d:94:3e:f3:c9:0f:43: 7c:71:bb:16:92:a4:94:42:2b:ff:eb:72:6a:f7:55: 88:e8:fe:26:f1:cf:5a:0e:bd:de:37:83:5f:6a:e7: 4e:e9:f4:92:4d:cf:47:d1:84:5c:95:9b:20:ab:1c: a5:61:3a:8a:1e:6b:9c:da:dd:ac:23:e9:6b:db:f4: ea:ae:5b:e5:59:7f:69:a2:36:30:a9:95:7e:07:f6: 57:fb:06:f9:7a:26:3e:9c:60:9e:42:ea:3c:4f:88: 7f:2a:29:a6:1c:d5:68:a4:c6:95:9a:cc:19:4c:bd: ff:f1:49:dd:88:05:d3:8a:02:2b:46:07:a0:8a:da: 53:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:81:3F:DE:9A:1C:99:81:37:45:C9:EE:F3:F7:78:65:CE:2E:90:93 X509v3 Authority Key Identifier: keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:48:87:d9:8c:7e:ec:6f:39:65:28:94:30:85:8a:60:3e:80: a5:b2:64:d7:0d:4d:52:f2:ed:9a:29:8f:20:e4:e5:04:24:3b: 84:cb:fe:c0:01:d5:da:74:c4:08:8d:9b:6d:9b:d5:91:4d:94: 5e:8a:e8:44:e3:56:01:8c:0f:fb:27:0c:c9:89:d4:bd:06:82: 61:35:08:1a:12:9c:93:24:5d:fa:78:8c:24:e4:c7:9a:cb:7b: b6:90:e6:ca:d8:d9:d5:a8:46:66:d2:33:75:12:65:7a:13:34: 7e:b4:c4:31:50:43:13:c4:50:1d:4e:b7:0c:7a:b4:3e:c2:e0: c0:50:db:0f:14:60:f1:be:97:50:6f:c9:b5:4e:fc:0e:45:31: e1:5f:47:8c:b7:c2:24:40:dd:5a:ad:0d:2b:78:b0:9d:3b:23: 4d:43:28:6f:89:c5:22:0b:da:83:8e:8b:3e:61:4d:d3:7d:dc: ab:ec:1e:62:95:91:f9:25:03:86:b0:39:a0:64:0c:a7:a2:d4: 58:b0:36:9a:d7:74:9e:8f:a3:f7:7f:a0:17:3f:be:66:8f:64: 8a:49:04:e7:2b:06:24:62:24:7a:b6:b3:f6:0f:7a:e2:a7:83: f1:f6:06:fd:0f:f7:e9:c6:bd:f3:fd:ef:8c:5d:5b:73:3e:04: de:5c:fb:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxREMxMTAvBgNVBAUTKEE4RDU3NkQ0QUZCQjY0MDQ1QkIwMjk1NjQxQjk5NDI3 RDdGODc4RjIwHhcNMjUwNjI4MjEzOTA5WhcNMjUwNzA1MjEzOTA5WjAYMRYwFAYD VQQDEw02ODYwNjBmZS1mYWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkDLuPshvH2ZTzJaQHGkOSD+WLMiegZlBr9uiksY9m0Y3tndBDYVNlidJs6o w84CXrhQnfmeROSvvl9b+z+LQo0ImmwuEAWQptGaFe95CskKlE6lwE7xpq21joCC NP5ISl5yztRS4qp28sHhxfjh+Xn85/S18vv7LaAl1Jgi+S2UPvPJD0N8cbsWkqSU Qiv/63Jq91WI6P4m8c9aDr3eN4NfaudO6fSSTc9H0YRclZsgqxylYTqKHmuc2t2s I+lr2/TqrlvlWX9pojYwqZV+B/ZX+wb5eiY+nGCeQuo8T4h/KimmHNVopMaVmswZ TL3/8UndiAXTigIrRgegitpTIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKBP96a HJmBN0XJ7vP3eGXOLpCTMB8GA1UdIwQYMBaAFKjVdtSvu2QEW7ApVkG5lCfX+Hjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzFEQy9CMkQxREUyMDU5 NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pBUmJzQ2xXUWJtVUo5ZjRl UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FOVjIxSy03WkFSYnNDbFdRYm1VSjlmNGVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzFEQy9CMkQxREUyMDU5NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pB UmJzQ2xXUWJtVUo5ZjRlUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMSIfZjH7sbzllKJQwhYpgPoClsmTXDU1S8u2aKY8g5OUEJDuEy/7A AdXadMQIjZttm9WRTZReiuhE41YBjA/7JwzJidS9BoJhNQgaEpyTJF36eIwk5Mea y3u2kObK2NnVqEZm0jN1EmV6EzR+tMQxUEMTxFAdTrcMerQ+wuDAUNsPFGDxvpdQ b8m1TvwORTHhX0eMt8IkQN1arQ0reLCdOyNNQyhvicUiC9qDjos+YU3Tfdyr7B5i lZH5JQOGsDmgZAynotRYsDaa13Sej6P3f6AXP75mj2SKSQTnKwYkYiR6trP2D3ri p4Px9gb9D/fpxr3z/e+MXVtzPgTeXPvd -----END CERTIFICATE-----Generated at Mon Jun 30 23:38:24 2025 by rpki-client