$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: K5FC4+2+hGTNUjqSaCSX6g09rirBDDFmPZpzfoJ4gak= Subject key identifier: 67:FB:54:80:85:86:C0:C3:BC:97:E0:16:A6:9A:8E:CF:6B:14:33:3B Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 0259 Signing time: Sat 19 Jul 2025 02:14:15 +0000 Manifest this update: Sat 19 Jul 2025 02:14:14 +0000 Manifest next update: Sat 26 Jul 2025 02:14:14 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: AUyviQUIvFQ4PL0wGqgcZMhV9cMg8UHK770mdMuVQ3k=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Jul 19 02:14:14 2025 GMT Not After : Jul 26 02:14:14 2025 GMT Subject: CN=687aff77-c707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:94:b3:58:23:7f:e0:7e:cc:a4:76:b6:55:8e: 81:3c:a2:b8:72:9c:94:49:ba:54:49:40:ac:f6:ee: 56:fe:e7:1d:ee:9a:2f:94:94:c7:14:ef:b7:d2:e0: 20:bc:e8:b1:a1:f8:05:15:e7:12:82:0a:2c:f1:03: db:0a:56:d2:56:b5:42:41:42:9a:b6:76:ca:7a:62: 21:f4:9a:4c:09:d6:8c:a9:02:a5:81:1d:a9:bb:d0: 7a:a9:93:d7:ad:bc:86:71:5d:ee:1b:91:cb:9d:f4: 83:bd:f1:43:a9:c2:af:f0:3d:c7:56:74:b4:dc:f8: 5c:6a:ed:21:ae:a7:9f:e3:e4:9a:df:1b:8c:0b:ea: 94:46:03:7b:8c:3b:be:32:bc:f2:81:20:ad:3a:01: 19:f5:c9:78:4a:89:64:13:67:59:78:d8:bc:b1:a1: 78:35:3e:a0:c6:fd:a3:b9:69:4b:74:83:c6:83:b0: ba:62:ae:55:2a:90:c8:02:42:23:9f:93:ba:22:37: 17:8a:7f:35:1b:74:40:24:1a:f8:76:64:3a:d4:0a: 2a:26:ca:7b:52:54:b3:00:d6:62:fc:9f:14:39:64: 2a:7f:76:c4:ee:de:fd:a1:67:13:81:f8:c8:d7:4c: bb:ed:d0:63:17:9c:3f:e8:48:ee:25:e1:de:0c:61: 2b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FB:54:80:85:86:C0:C3:BC:97:E0:16:A6:9A:8E:CF:6B:14:33:3B X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:77:6b:4f:91:7c:84:8c:5b:60:6b:e5:34:c1:a6:e6:a8:30: 7a:35:d2:1c:d2:d5:07:30:de:92:06:ce:92:1a:d8:ba:20:7b: 9d:47:6f:65:b9:8d:a7:0f:11:c9:86:59:1b:f6:30:64:33:b2: 1c:a7:03:84:9f:11:5d:ca:ef:0e:3d:58:9a:1b:36:2b:5a:82: 47:d7:73:cf:7c:ed:82:a1:24:41:e5:1a:4d:44:91:2e:a3:cb: 71:d5:f6:05:ee:db:80:9b:da:f1:15:59:28:df:40:a1:8a:ab: b8:14:5c:39:0c:6d:6c:71:ff:41:f0:6d:8c:df:0e:ee:e5:b9: 51:bc:56:70:eb:09:5f:bf:0f:00:f8:c8:10:19:38:4d:00:20: 22:8b:53:b3:14:57:8c:41:dd:fa:d1:7b:95:6f:20:47:0e:fd: 72:38:ca:b2:56:25:33:d2:88:1e:60:1d:2a:ae:46:44:54:3a: 90:aa:61:67:5d:ee:d2:6c:21:85:9c:76:81:08:9b:2f:bf:53: 4e:f5:02:ee:99:59:20:fc:c6:94:63:c0:0d:ea:b4:6b:cc:dd: e1:23:53:f8:f7:e8:aa:9b:d7:26:53:9f:23:3e:b7:3c:81:0c: af:31:1b:62:50:40:e5:0c:be:f2:9b:a8:c0:95:1f:ee:b8:69: 06:01:a9:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjUwNzE5MDIxNDE0WhcNMjUwNzI2MDIxNDE0WjAYMRYwFAYD VQQDEw02ODdhZmY3Ny1jNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZSzWCN/4H7MpHa2VY6BPKK4cpyUSbpUSUCs9u5W/ucd7povlJTHFO+30uAg vOixofgFFecSggos8QPbClbSVrVCQUKatnbKemIh9JpMCdaMqQKlgR2pu9B6qZPX rbyGcV3uG5HLnfSDvfFDqcKv8D3HVnS03Phcau0hrqef4+Sa3xuMC+qURgN7jDu+ MrzygSCtOgEZ9cl4SolkE2dZeNi8saF4NT6gxv2juWlLdIPGg7C6Yq5VKpDIAkIj n5O6IjcXin81G3RAJBr4dmQ61AoqJsp7UlSzANZi/J8UOWQqf3bE7t79oWcTgfjI 10y77dBjF5w/6EjuJeHeDGErkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf7VICF hsDDvJfgFqaajs9rFDM7MB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVd2tPkXyEjFtga+U0wabmqDB6NdIc0tUHMN6SBs6SGti6IHudR29l uY2nDxHJhlkb9jBkM7IcpwOEnxFdyu8OPViaGzYrWoJH13PPfO2CoSRB5RpNRJEu o8tx1fYF7tuAm9rxFVko30Chiqu4FFw5DG1scf9B8G2M3w7u5blRvFZw6wlfvw8A +MgQGThNACAii1OzFFeMQd360XuVbyBHDv1yOMqyViUz0ogeYB0qrkZEVDqQqmFn Xe7SbCGFnHaBCJsvv1NO9QLumVkg/MaUY8AN6rRrzN3hI1P49+iqm9cmU58jPrc8 gQyvMRtiUEDlDL7ym6jAlR/uuGkGAako -----END CERTIFICATE-----Generated at Sun Jul 20 08:03:01 2025 by rpki-client