$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: nRvadX7FvU+nnGR8I8NoyqNKzVvXMiBZc9O8Z0pMx5A= Subject key identifier: BF:C7:3E:B9:80:9E:40:1D:6D:3D:19:CF:4E:B3:35:2E:A5:D6:3E:14 Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 0724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 071D Signing time: Wed 20 Aug 2025 21:54:21 +0000 Manifest this update: Wed 20 Aug 2025 21:54:21 +0000 Manifest next update: Wed 27 Aug 2025 21:54:21 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: M0i9M2i5UpTTELaj1YkZ3ZL/+Geu04BX5iSaoRM4fhE=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: QxDHjOQ9h0AW1vKi1w4KSIHgeJrRV9wKcfKqmMmz5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828 (0x724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: Aug 20 21:54:21 2025 GMT Not After : Aug 27 21:54:21 2025 GMT Subject: CN=68a6440d-1e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bd:5b:64:c7:f7:37:c5:68:79:8d:89:7c:c0: c1:be:2f:03:04:04:20:71:56:3c:33:f6:1b:5a:62: 1f:45:06:1e:1c:6f:f6:fc:14:47:34:59:39:e3:cf: b6:da:e3:dd:dc:4e:0a:97:f6:2e:98:4d:b3:85:41: e6:5d:5c:12:41:c4:5c:0a:45:e2:15:0f:ed:81:cb: 85:4c:f3:41:da:69:cc:fc:ef:be:67:44:08:4a:3c: 6f:e3:76:c5:eb:92:72:43:a4:46:ca:7a:47:9f:9d: d7:5e:93:2e:c5:c9:db:54:ec:40:13:dc:c4:32:3d: 40:96:fe:01:b3:73:c7:99:4d:e7:a7:4e:cc:98:70: 44:69:8f:99:5c:e6:85:f1:4b:68:ce:40:bd:f7:ba: 6d:bd:3f:25:f5:2c:62:90:ce:c7:e1:3b:ac:2c:09: 73:34:7c:be:70:a8:c7:c9:72:1e:32:b5:67:ec:83: 77:06:5a:2e:42:6d:d5:1a:f9:a2:60:41:17:d2:ee: 27:ab:b4:22:94:53:5b:cb:5b:22:2f:71:1f:eb:3b: 94:19:26:4e:f6:69:aa:6f:f7:41:b3:78:85:c6:92: 4a:8e:61:35:82:f5:07:93:5d:6f:04:93:dc:39:24: 92:0e:51:0d:4d:81:88:4c:a5:3d:c9:5c:46:9d:38: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C7:3E:B9:80:9E:40:1D:6D:3D:19:CF:4E:B3:35:2E:A5:D6:3E:14 X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:87:88:a7:42:5c:df:68:81:d5:a6:94:12:a7:ca:17:bb:14: f4:e0:b2:cf:32:c9:74:cb:c9:ba:19:81:56:4b:36:8a:e0:44: 4a:86:8d:7a:13:78:d5:08:ee:69:78:27:cc:59:c3:92:31:bb: d3:f2:0d:68:84:5b:4c:22:b8:6a:51:31:00:93:66:c7:13:b3: 69:f2:3d:85:fe:71:7b:93:8a:15:e0:5a:31:8c:d8:bf:6d:3b: cb:1c:83:da:cc:09:bc:79:42:1c:9b:a7:24:b8:0d:69:d7:35: e4:4d:ac:6c:c7:80:93:e8:6b:14:df:4a:78:fd:f7:20:52:87: b1:17:5c:36:24:fa:ca:7d:a9:ea:28:d4:e2:39:27:34:b9:28: 1e:6d:89:2b:0e:49:a0:b0:82:11:ab:96:e7:42:59:8a:c3:ce: ab:74:9b:28:49:69:c4:26:6f:ca:6a:c7:6b:95:9c:62:2f:4a: 53:2c:d5:eb:00:1d:f4:f7:c6:58:b0:49:02:01:95:20:92:73: 19:f3:00:1e:8a:a8:d4:94:25:9b:a1:fe:c5:fb:10:ad:e1:5c: 85:e7:78:bd:d7:b1:8b:c1:ab:c0:d8:9f:27:fc:d3:70:b1:7c: bf:c7:3a:57:e3:33:f5:98:eb:dc:a2:6c:a9:1c:78:6c:b0:ea: 65:3f:6d:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjUwODIwMjE1NDIxWhcNMjUwODI3MjE1NDIxWjAYMRYwFAYD VQQDEw02OGE2NDQwZC0xZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2r1bZMf3N8VoeY2JfMDBvi8DBAQgcVY8M/YbWmIfRQYeHG/2/BRHNFk548+2 2uPd3E4Kl/YumE2zhUHmXVwSQcRcCkXiFQ/tgcuFTPNB2mnM/O++Z0QISjxv43bF 65JyQ6RGynpHn53XXpMuxcnbVOxAE9zEMj1Alv4Bs3PHmU3np07MmHBEaY+ZXOaF 8UtozkC997ptvT8l9SxikM7H4TusLAlzNHy+cKjHyXIeMrVn7IN3BlouQm3VGvmi YEEX0u4nq7QilFNby1siL3Ef6zuUGSZO9mmqb/dBs3iFxpJKjmE1gvUHk11vBJPc OSSSDlENTYGITKU9yVxGnThmdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/HPrmA nkAdbT0Zz06zNS6l1j4UMB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDch4inQlzfaIHVppQSp8oXuxT04LLPMsl0y8m6GYFWSzaK4ERKho16 E3jVCO5peCfMWcOSMbvT8g1ohFtMIrhqUTEAk2bHE7Np8j2F/nF7k4oV4FoxjNi/ bTvLHIPazAm8eUIcm6ckuA1p1zXkTaxsx4CT6GsU30p4/fcgUoexF1w2JPrKfanq KNTiOSc0uSgebYkrDkmgsIIRq5bnQlmKw86rdJsoSWnEJm/KasdrlZxiL0pTLNXr AB3098ZYsEkCAZUgknMZ8wAeiqjUlCWbof7F+xCt4VyF53i917GLwavA2J8n/NNw sXy/xzpX4zP1mOvcomypHHhssOplP20R -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:12 2025 by rpki-client