$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: N85jHepb9yjaNrqN3FPZKBIyxLgNuQihqf1xxbmdC1U= Subject key identifier: 97:10:E6:6F:51:DE:08:19:6A:EC:93:F5:B2:A5:E7:30:DF:7B:6C:0A Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0C5B Signing time: Fri 18 Jul 2025 18:33:10 +0000 Manifest this update: Fri 18 Jul 2025 18:33:09 +0000 Manifest next update: Fri 25 Jul 2025 18:33:09 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: VyIsOV00Z7AK3WooHEjM3+/AO/LpDYOejRdH1LNvc9Q=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: dMPlbwZZJ9a9ifwF8f+1OVtKYmpgj8cV+d0a3+m/kqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: Jul 18 18:33:09 2025 GMT Not After : Jul 25 18:33:09 2025 GMT Subject: CN=687a9366-d2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:8b:5a:60:d7:d4:b6:b0:9a:97:7e:3a:7c: ef:fd:d0:a5:18:cb:7a:02:fc:93:54:36:1a:aa:a5: 71:34:60:d4:b4:2d:69:21:fb:4f:39:2a:1b:41:8b: 35:f2:d1:5c:5e:12:1c:d2:b0:e5:60:bf:ee:08:ba: 73:82:fc:55:b9:49:2f:7b:f7:84:f4:b5:99:08:9e: fb:38:2a:b2:96:b8:44:c9:6a:ff:63:59:17:47:af: 20:5b:c3:a3:dd:a4:65:9b:f6:a9:aa:42:61:e6:c0: 4d:cd:28:e1:ca:da:ca:c8:ff:e7:63:ae:a2:aa:82: 04:51:41:c0:eb:3a:ae:f4:d8:0b:5c:83:48:8c:46: bb:e6:bc:5d:56:ec:05:c0:36:6b:7e:ae:95:3b:9b: af:e1:94:70:91:94:b7:b2:5b:b9:50:39:e3:90:8e: b1:35:c3:1e:96:e7:0e:ec:26:a6:d6:8f:93:d6:c5: 51:42:6b:04:0d:da:80:3a:55:63:4c:31:e0:f4:27: b8:0c:48:35:1f:80:bd:00:4b:4a:5d:16:19:ac:6e: f0:29:02:52:39:03:53:39:7e:ff:a1:cc:0a:d1:10: 2b:d8:30:f7:35:69:d7:53:8c:9e:7e:42:cc:fd:d6: 58:0c:c4:18:2b:26:2e:17:4b:85:f6:39:3a:e8:e6: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:10:E6:6F:51:DE:08:19:6A:EC:93:F5:B2:A5:E7:30:DF:7B:6C:0A X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f6:39:a1:00:19:69:52:75:df:ba:10:d2:c2:98:11:76:3e: 4d:18:8b:a5:9f:7d:28:6c:ad:f6:38:d4:09:00:c5:f8:b2:8d: 5c:c3:c1:12:49:40:b1:0a:a6:fc:1f:b6:3d:55:81:f5:22:a6: 13:46:ce:f6:79:a0:47:6a:27:88:d5:78:39:79:8d:48:3c:71: 24:59:c3:84:53:73:7e:ed:4b:b2:2f:55:a7:9a:b0:4b:e8:e2: 6d:c4:8e:e4:db:27:3d:87:ca:dd:b6:12:a9:0c:25:be:7d:80: 17:c9:d4:54:fe:95:9b:14:5c:f3:38:43:55:19:e9:45:94:a3: 39:ee:7c:7c:b5:56:65:b7:e5:f1:f4:bb:f9:91:c0:bb:37:80: 1c:1a:d9:cb:ab:ac:2e:84:72:f8:90:bc:85:93:33:e9:7a:d9: 11:f6:c2:a0:12:9c:0f:0e:7b:dc:9b:a6:26:a6:e0:c9:79:0f: 3f:f6:49:4a:7b:af:e9:0a:0e:da:64:e6:2d:ef:4e:17:d8:a4: 0a:16:0d:6f:de:94:e4:42:c1:04:c8:4a:6c:40:f4:b1:6d:59: 7c:d5:6e:32:6e:4e:0f:91:04:87:ab:20:01:e3:ce:9f:57:a5: 9d:33:6a:75:8c:72:e4:52:41:05:a8:72:e1:7d:12:9e:21:5a: db:1c:36:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjUwNzE4MTgzMzA5WhcNMjUwNzI1MTgzMzA5WjAYMRYwFAYD VQQDEw02ODdhOTM2Ni1kMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiOLWmDX1Lawmpd+Onzv/dClGMt6AvyTVDYaqqVxNGDUtC1pIftPOSobQYs1 8tFcXhIc0rDlYL/uCLpzgvxVuUkve/eE9LWZCJ77OCqylrhEyWr/Y1kXR68gW8Oj 3aRlm/apqkJh5sBNzSjhytrKyP/nY66iqoIEUUHA6zqu9NgLXINIjEa75rxdVuwF wDZrfq6VO5uv4ZRwkZS3slu5UDnjkI6xNcMelucO7Cam1o+T1sVRQmsEDdqAOlVj TDHg9Ce4DEg1H4C9AEtKXRYZrG7wKQJSOQNTOX7/ocwK0RAr2DD3NWnXU4yefkLM /dZYDMQYKyYuF0uF9jk66OZS8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcQ5m9R 3ggZauyT9bKl5zDfe2wKMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB69jmhABlpUnXfuhDSwpgRdj5NGIuln30obK32ONQJAMX4so1cw8ES SUCxCqb8H7Y9VYH1IqYTRs72eaBHaieI1Xg5eY1IPHEkWcOEU3N+7UuyL1WnmrBL 6OJtxI7k2yc9h8rdthKpDCW+fYAXydRU/pWbFFzzOENVGelFlKM57nx8tVZlt+Xx 9Lv5kcC7N4AcGtnLq6wuhHL4kLyFkzPpetkR9sKgEpwPDnvcm6YmpuDJeQ8/9klK e6/pCg7aZOYt704X2KQKFg1v3pTkQsEEyEpsQPSxbVl81W4ybk4PkQSHqyAB486f V6WdM2p1jHLkUkEFqHLhfRKeIVrbHDZi -----END CERTIFICATE-----Generated at Sun Jul 20 10:29:18 2025 by rpki-client