$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json) Hash identifier: NYggoblpyVEzWdm9UwaAtKBEN5E1l1Rl/vtloVvIBjY= Subject key identifier: 7D:E5:39:B0:DA:C9:67:3E:BD:0C:48:1C:14:C0:47:18:47:D3:F9:F3 Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft Manifest number: 0431 Signing time: Thu 03 Jul 2025 00:42:08 +0000 Manifest this update: Thu 03 Jul 2025 00:42:08 +0000 Manifest next update: Thu 10 Jul 2025 00:42:08 +0000 Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: 4qSPDRggoP1XWazP01rjbQfZgslWUtya2ulxYfTbzR0=) 2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: m0D1A61qLoA//vf/I6KyJ5ofH8LCEJEjAffkeen66nM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38 Validity Not Before: Jul 3 00:42:08 2025 GMT Not After : Jul 10 00:42:08 2025 GMT Subject: CN=6865d1e0-f98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:85:01:f6:f7:0b:6c:f9:05:cc:56:06:63: 9a:d0:11:13:09:da:e6:5f:e2:37:e1:f8:b0:39:c5: 1c:f9:37:5d:05:03:fe:78:3f:75:4b:b2:82:1f:45: 31:10:49:c9:26:ff:2a:9b:74:23:5a:93:6f:83:2b: ad:a6:9b:fc:e7:9d:96:2b:b9:be:34:15:9c:b8:94: 39:fc:d9:3e:09:09:7d:70:23:38:da:c9:a1:f0:74: f4:47:4d:0b:4d:47:1a:ef:b4:6b:09:06:20:2e:80: e3:5e:a1:0d:04:c3:63:ac:f1:ab:95:c2:29:7e:7c: f8:c2:b2:c3:94:9c:2a:e7:2b:3c:1a:da:6b:3b:6b: 40:47:e8:3f:9d:45:2a:3d:63:93:1f:29:66:44:49: b6:5b:ff:1d:39:09:42:82:9b:f6:35:08:8e:ae:21: f6:a9:2c:ea:cf:cb:c4:94:61:42:ff:fb:fc:12:ff: 01:32:b0:b2:0f:d1:05:92:cc:34:4e:47:01:0f:2f: e6:01:42:5d:f5:ce:15:58:d1:4a:c0:2c:75:27:a4: a7:f5:17:27:2c:7e:27:b3:7d:a5:e1:9a:bf:06:91: ce:dd:2e:90:3d:88:3b:d5:54:89:58:73:3f:0c:7f: 4c:37:20:f2:4e:2b:66:1e:1f:f7:75:8f:01:bf:fd: 97:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E5:39:B0:DA:C9:67:3E:BD:0C:48:1C:14:C0:47:18:47:D3:F9:F3 X509v3 Authority Key Identifier: keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:82:cf:f0:5e:6a:3f:e2:3d:0a:09:f5:fc:5b:e5:35:e6:1a: 1f:04:79:2d:7b:18:31:83:d6:3b:63:3f:d9:dc:be:e6:0c:c2: d4:b3:99:d8:3e:a1:cd:da:01:9b:0b:3c:27:63:d3:ce:4e:e6: 77:d8:95:3b:9e:f2:75:72:68:4a:4e:79:68:12:ce:7c:3a:a4: 7c:09:7c:f4:d5:1e:61:70:3d:e5:96:bb:ce:0c:bc:74:52:f3: 26:a8:b6:32:9d:fb:07:e9:5b:73:49:8f:51:ac:d8:8b:0f:06: e1:b1:a3:f7:eb:c2:01:cd:3f:78:7a:94:d9:a6:25:af:7c:c7: 2b:50:0d:62:28:b8:3b:80:b1:6c:f5:a8:b6:27:09:a1:49:04: 5a:84:f3:b8:02:91:51:55:f3:02:23:b9:df:8f:aa:d3:f1:31: a5:31:68:87:be:30:76:66:c4:db:f2:9d:07:af:34:7b:92:34: 80:d1:ff:1f:00:9d:be:79:c8:13:7e:76:f9:49:18:7e:2f:b3: e1:0b:b2:8b:b1:65:37:26:80:f3:34:a0:25:48:95:93:e7:ae: dc:0a:92:f8:ca:0e:86:15:fd:ae:2e:94:be:28:3c:1d:39:ea: 81:7a:3c:70:9d:60:bb:9e:f7:04:77:0f:bf:2a:ca:63:54:c2: c2:fa:95:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx MkE1NTFDMzgwHhcNMjUwNzAzMDA0MjA4WhcNMjUwNzEwMDA0MjA4WjAYMRYwFAYD VQQDEw02ODY1ZDFlMC1mOThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OuFAfb3C2z5BcxWBmOa0BETCdrmX+I34fiwOcUc+TddBQP+eD91S7KCH0Ux EEnJJv8qm3QjWpNvgyutppv8552WK7m+NBWcuJQ5/Nk+CQl9cCM42smh8HT0R00L TUca77RrCQYgLoDjXqENBMNjrPGrlcIpfnz4wrLDlJwq5ys8GtprO2tAR+g/nUUq PWOTHylmREm2W/8dOQlCgpv2NQiOriH2qSzqz8vElGFC//v8Ev8BMrCyD9EFksw0 TkcBDy/mAUJd9c4VWNFKwCx1J6Sn9RcnLH4ns32l4Zq/BpHO3S6QPYg71VSJWHM/ DH9MNyDyTitmHh/3dY8Bv/2XKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3lObDa yWc+vQxIHBTARxhH0/nzMB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjA0Ny8zM0FEQjNFNjZFMDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhy bnFzd05HOWlTMk1TcFZIRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAgs/wXmo/4j0KCfX8W+U15hofBHktexgxg9Y7Yz/Z3L7mDMLUs5nY PqHN2gGbCzwnY9POTuZ32JU7nvJ1cmhKTnloEs58OqR8CXz01R5hcD3llrvODLx0 UvMmqLYynfsH6VtzSY9RrNiLDwbhsaP368IBzT94epTZpiWvfMcrUA1iKLg7gLFs 9ai2JwmhSQRahPO4ApFRVfMCI7nfj6rT8TGlMWiHvjB2ZsTb8p0HrzR7kjSA0f8f AJ2+ecgTfnb5SRh+L7PhC7KLsWU3JoDzNKAlSJWT567cCpL4yg6GFf2uLpS+KDwd OeqBejxwnWC7nvcEdw+/KspjVMLC+pV0 -----END CERTIFICATE-----Generated at Thu Jul 3 10:37:02 2025 by rpki-client