$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft File: s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json) Hash identifier: RL9pzC1n1Pr0tsXXtiV341VYqe2UodWAnqW3ub8BHc8= Subject key identifier: 4D:F4:16:8D:0D:D9:C5:D5:28:D8:0C:3B:49:51:8E:78:8E:AD:44:3E Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6 Certificate issuer: /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6 Certificate serial: 0B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft Manifest number: 1273 Signing time: Mon 30 Jun 2025 19:19:53 +0000 Manifest this update: Mon 30 Jun 2025 19:19:53 +0000 Manifest next update: Mon 07 Jul 2025 19:19:53 +0000 Files and hashes: 1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: 0uOqsdolK3Zetw6XrneQ2HK4LKw0AeDv/RbTwFnBruU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199231, serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6 Validity Not Before: Jun 30 19:19:53 2025 GMT Not After : Jul 7 19:19:53 2025 GMT Subject: CN=6862e359-9479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:13:4b:a1:f9:28:79:3a:93:91:b9:2c:19: e8:69:2e:a0:fd:7c:7f:49:1e:0d:7d:60:ff:00:93: a5:48:bf:59:57:a6:e1:4d:d8:b4:86:d0:8a:b4:32: 27:df:94:42:15:c5:b8:ef:ed:05:c4:b3:42:22:70: 98:af:b0:20:78:dc:06:1c:de:d0:bc:ea:03:f2:22: ad:6f:57:97:cf:54:9b:bd:dd:10:fa:e8:6a:b0:9e: 55:fa:ea:8d:29:2b:9c:3f:95:5c:ca:94:57:5d:d4: f6:c6:ec:7b:83:ad:8e:aa:1d:42:a3:25:a2:39:89: 57:c9:6e:38:c0:22:ae:09:da:28:1f:fb:2f:68:42: 54:68:42:4e:fd:86:cc:d0:a3:0f:42:7f:b0:a9:2b: 9c:05:d8:4b:75:02:df:9c:c5:d1:76:45:53:0a:bf: 8e:0e:d3:da:a2:ed:ba:96:38:79:81:24:1d:d4:a7: 7c:7d:eb:93:53:8c:e0:ae:f6:ba:fa:82:39:1a:bd: 35:35:0d:7f:d3:ff:20:ef:fd:66:ef:3d:3f:59:39: 63:2c:a3:e7:90:9c:53:f7:db:b5:ac:17:b1:0a:40: c7:3f:78:b3:79:9e:3f:63:23:ec:08:fc:eb:29:86: 91:88:f0:3e:f3:e7:26:f3:50:79:2d:08:a1:e4:de: d7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F4:16:8D:0D:D9:C5:D5:28:D8:0C:3B:49:51:8E:78:8E:AD:44:3E X509v3 Authority Key Identifier: keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:6e:b8:a9:ca:51:01:8b:b8:d7:dc:43:2d:a5:0a:c8:2c:3b: 3e:dd:f0:e5:ab:9a:79:30:e1:ff:90:39:1a:08:8a:16:21:33: 91:39:b0:59:c5:80:45:10:a1:6d:03:f8:f9:95:98:9a:8a:e0: 00:9d:ab:93:1f:18:f5:72:cd:de:12:75:d2:5d:e8:ad:ae:b4: 23:ca:db:84:42:df:28:60:bb:c7:7e:a3:1a:25:15:89:c0:42: a2:f9:e3:6c:6a:ef:ad:d2:0f:28:cc:8f:50:74:07:55:4f:67: 71:e0:9e:b5:49:7e:87:5b:ae:b6:d5:b8:6a:bb:84:49:75:52: b4:7b:46:87:21:c1:ab:5e:26:6b:ab:e0:24:2d:25:80:16:77: 57:5a:bd:69:3b:4c:94:d9:36:53:9a:ca:f0:29:0f:7a:29:23: 89:cd:b2:d6:87:4e:fc:47:0b:29:d3:a9:57:ce:f3:ca:ac:b2: 7e:52:15:6f:e5:f2:3d:3f:74:b6:e7:68:d4:1a:b1:53:9d:cb: 6a:97:c5:8e:ba:f3:19:2c:b4:e7:4b:86:95:78:8c:4e:37:4a: 69:c8:15:80:ba:1f:8c:f6:24:fe:fb:81:5f:19:d5:50:1d:b1: eb:e5:ca:64:2e:75:41:9c:76:bd:38:9c:ba:22:27:61:0b:7b: b5:6d:97:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyMzExMTAvBgNVBAUTKEIzRTQxNTdERDU4RDQzQTdBN0Q4MEZGMzA2RkJDNTQx NTQ0NTE2RTYwHhcNMjUwNjMwMTkxOTUzWhcNMjUwNzA3MTkxOTUzWjAYMRYwFAYD VQQDEw02ODYyZTM1OS05NDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz50TS6H5KHk6k5G5LBnoaS6g/Xx/SR4NfWD/AJOlSL9ZV6bhTdi0htCKtDIn 35RCFcW47+0FxLNCInCYr7AgeNwGHN7QvOoD8iKtb1eXz1Sbvd0Q+uhqsJ5V+uqN KSucP5VcypRXXdT2xux7g62Oqh1CoyWiOYlXyW44wCKuCdooH/svaEJUaEJO/YbM 0KMPQn+wqSucBdhLdQLfnMXRdkVTCr+ODtPaou26ljh5gSQd1Kd8feuTU4zgrva6 +oI5Gr01NQ1/0/8g7/1m7z0/WTljLKPnkJxT99u1rBexCkDHP3izeZ4/YyPsCPzr KYaRiPA+8+cm81B5LQih5N7XcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE30Fo0N 2cXVKNgMO0lRjniOrUQ+MB8GA1UdIwQYMBaAFLPkFX3VjUOnp9gP8wb7xUFURRbm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND ODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2ZW4yQV96QnZ2RlFWUkZG dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtUVZmZFdOUTZlbjJBX3pCdnZGUVZSRkZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2 ZW4yQV96QnZ2RlFWUkZGdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmbripylEBi7jX3EMtpQrILDs+3fDlq5p5MOH/kDkaCIoWITORObBZ xYBFEKFtA/j5lZiaiuAAnauTHxj1cs3eEnXSXeitrrQjytuEQt8oYLvHfqMaJRWJ wEKi+eNsau+t0g8ozI9QdAdVT2dx4J61SX6HW6621bhqu4RJdVK0e0aHIcGrXiZr q+AkLSWAFndXWr1pO0yU2TZTmsrwKQ96KSOJzbLWh078Rwsp06lXzvPKrLJ+UhVv 5fI9P3S252jUGrFTnctql8WOuvMZLLTnS4aVeIxON0ppyBWAuh+M9iT++4FfGdVQ HbHr5cpkLnVBnHa9OJy6IidhC3u1bZfy -----END CERTIFICATE-----Generated at Wed Jul 2 06:10:44 2025 by rpki-client