$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json) Hash identifier: TElODw8hU/TuXSnaUpPE+fgVFPWuaVvs464pz6oJf6M= Subject key identifier: 4E:A2:62:48:A8:1F:15:1B:A7:AF:BE:0F:26:94:32:72:37:B5:DF:28 Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft Manifest number: 4B Signing time: Thu 03 Jul 2025 07:34:18 +0000 Manifest this update: Thu 03 Jul 2025 07:34:18 +0000 Manifest next update: Thu 10 Jul 2025 07:34:18 +0000 Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: EDzK9u9O7TjaJI7knmKznFf0fFRlN47lphXAc0OHwhI=) 2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: ZmMACpx0tXblh0b0hKepgV++JlkkfQUXi26fcUJQ2dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Validity Not Before: Jul 3 07:34:18 2025 GMT Not After : Jul 10 07:34:18 2025 GMT Subject: CN=6866327a-e99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:3f:d7:64:ce:57:38:73:d3:95:b7:1b:e0: ca:f6:14:e5:c9:9b:81:69:2d:20:51:e1:7b:20:5d: 15:f5:94:cc:6a:2e:7d:58:59:1d:0c:a0:4d:d7:b2: a0:f5:6c:d9:79:5b:d4:42:01:35:48:dc:86:9e:54: 3f:c2:74:dc:63:f1:61:c3:f8:b0:7d:7e:ef:c3:1b: 06:6c:1d:9b:3a:ea:a7:82:8e:76:11:a3:f7:c5:35: 12:e8:cb:4d:de:7e:55:86:7a:b8:b0:f6:80:56:0a: ac:fe:7c:a8:b1:99:00:78:76:b8:0a:0d:bc:a1:8e: 8b:8d:b6:42:76:ec:88:0a:56:97:8a:f7:64:fc:58: 25:cd:9f:43:53:ef:4d:32:03:ca:90:13:90:96:3b: 4a:cd:df:f9:39:1c:85:91:29:3f:1e:e6:99:b0:89: 44:07:9b:cc:fd:0d:87:31:90:ad:af:ce:d1:9c:b3: 4a:44:7e:4f:f0:c3:19:df:f6:22:0f:a9:e2:b3:43: fb:b6:3c:6b:a5:4a:7c:40:40:7f:b1:e6:84:37:a2: b6:c0:be:3b:b8:ad:89:52:ce:30:e0:c4:93:66:de: 45:06:5a:76:80:5d:19:3f:62:b9:57:55:c2:6b:4a: 39:d3:46:31:02:30:05:a7:40:d9:c6:6a:1b:77:12: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A2:62:48:A8:1F:15:1B:A7:AF:BE:0F:26:94:32:72:37:B5:DF:28 X509v3 Authority Key Identifier: keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fc:cc:ab:8b:ba:ed:70:1d:59:32:8b:48:0c:ce:ea:6d:ab: 73:59:39:6b:87:33:45:5e:63:5b:fb:a4:bb:40:6a:19:79:9d: 49:14:eb:af:30:ba:bf:87:51:b6:b8:61:5b:84:f1:a3:69:d4: 7f:01:b0:12:e6:c0:9a:14:dc:6a:dc:2e:6c:8b:4e:f9:96:eb: 57:26:d2:3d:1f:c2:6e:95:49:f0:d6:b0:e9:7e:48:f7:02:44: d8:33:13:46:46:62:77:49:9d:5a:aa:a2:1c:f9:e0:a7:35:f4: e1:ee:5d:c0:76:ec:95:e7:05:ce:a7:75:49:10:37:eb:c5:4a: ed:3f:6c:b0:4b:f8:ad:2d:fb:67:e8:d6:0e:cc:3b:93:73:27: 94:3d:c6:c0:b6:e0:ab:6e:69:69:20:7e:15:01:22:57:cc:f3: 45:b7:5c:cf:4f:f7:aa:8c:27:49:30:6a:8f:92:85:5f:08:77: 63:20:b7:ac:98:cb:94:0c:89:29:ad:69:21:ba:5e:e5:35:20: 82:a5:97:c8:8a:8e:ba:bc:86:f9:75:6b:84:72:84:c2:40:84: d9:d0:3c:f6:3b:4c:4f:6e:7d:6f:44:e4:14:d7:85:ef:d3:25: 7b:b4:07:08:1c:64:82:63:30:a3:b7:bc:68:b7:cb:72:31:9f: ae:39:63:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzI3MzExMC8GA1UEBRMoMDkwNjc4ODJDREMwMjAzNDkxNjFFMDkzQkYzNDczMUIz RjgyMkJENzAeFw0yNTA3MDMwNzM0MThaFw0yNTA3MTAwNzM0MThaMBgxFjAUBgNV BAMTDTY4NjYzMjdhLWU5OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK+j/XZM5XOHPTlbcb4Mr2FOXJm4FpLSBR4XsgXRX1lMxqLn1YWR0MoE3XsqD1 bNl5W9RCATVI3IaeVD/CdNxj8WHD+LB9fu/DGwZsHZs66qeCjnYRo/fFNRLoy03e flWGeriw9oBWCqz+fKixmQB4drgKDbyhjouNtkJ27IgKVpeK92T8WCXNn0NT700y A8qQE5CWO0rN3/k5HIWRKT8e5pmwiUQHm8z9DYcxkK2vztGcs0pEfk/wwxnf9iIP qeKzQ/u2PGulSnxAQH+x5oQ3orbAvju4rYlSzjDgxJNm3kUGWnaAXRk/YrlXVcJr SjnTRjECMAWnQNnGaht3EgFVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTqJiSKgf FRunr74PJpQycje13ygwHwYDVR0jBBgwFoAUCQZ4gs3AIDSRYeCTvzRzGz+CK9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MjczL0YzRDIyQzJDRTc3 MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURTUlllQ1R2elJ6R3otQ0s5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1FaNGdzM0FJRFNSWWVDVHZ6UnpHei1DSzljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 MjczL0YzRDIyQzJDRTc3MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURT UlllQ1R2elJ6R3otQ0s5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA78zKuLuu1wHVkyi0gMzuptq3NZOWuHM0VeY1v7pLtAahl5nUkU668w ur+HUba4YVuE8aNp1H8BsBLmwJoU3GrcLmyLTvmW61cm0j0fwm6VSfDWsOl+SPcC RNgzE0ZGYndJnVqqohz54Kc19OHuXcB27JXnBc6ndUkQN+vFSu0/bLBL+K0t+2fo 1g7MO5NzJ5Q9xsC24KtuaWkgfhUBIlfM80W3XM9P96qMJ0kwao+ShV8Id2Mgt6yY y5QMiSmtaSG6XuU1IIKll8iKjrq8hvl1a4RyhMJAhNnQPPY7TE9ufW9E5BTXhe/T JXu0BwgcZIJjMKO3vGi3y3Ixn645Yx0= -----END CERTIFICATE-----Generated at Thu Jul 3 23:21:43 2025 by rpki-client