$ rpki-client -vvf rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft File: mqzM8QlZesZbyPegUCo-pK4cXxk.mft (raw, json) Hash identifier: sJTmsLLjYP+/qIBVPWWGjbGxOhVN49bksgx7uSdz0zc= Subject key identifier: D9:33:B9:2B:E0:D6:30:BA:76:CF:06:BF:14:F1:40:B2:A4:23:26:49 Authority key identifier: 9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 Certificate issuer: /CN=A91232CA/serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft Manifest number: 0C Signing time: Tue 01 Jul 2025 08:54:49 +0000 Manifest this update: Tue 01 Jul 2025 08:54:48 +0000 Manifest next update: Tue 08 Jul 2025 08:54:48 +0000 Files and hashes: 1: mqzM8QlZesZbyPegUCo-pK4cXxk.crl (hash: 3IRn0wPJnny1UbSCsiegE6FPXbMVhtzWELLXj2fovK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91232CA, serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Validity Not Before: Jul 1 08:54:48 2025 GMT Not After : Jul 8 08:54:48 2025 GMT Subject: CN=6863a258-8594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:9d:64:94:36:3d:6e:de:a7:72:a5:16:14: 1c:eb:a1:5b:17:90:40:46:98:5a:25:12:b7:f0:1b: 21:67:94:79:5a:8e:50:05:51:2f:81:23:d1:70:00: a3:29:01:15:be:ae:8d:79:61:78:27:ee:cc:2a:5e: 63:a2:d5:06:8d:65:82:10:04:e9:25:93:c1:d3:80: f4:2e:21:61:fd:c5:22:e8:69:0a:36:b6:47:d8:a3: 43:1e:c2:90:c2:30:4c:10:6b:0b:5b:e4:a0:73:99: e7:fd:29:75:00:45:f7:4d:2d:5b:1f:e6:38:cd:ad: 2a:0e:3c:23:14:4b:7e:61:f8:c8:b4:71:07:63:16: b9:4b:da:f4:e7:ce:b1:2a:69:55:f2:39:1e:22:ce: c8:07:8d:f7:7e:bb:66:fe:14:af:49:70:39:e5:aa: 42:cb:c1:70:84:36:1c:0d:7c:7f:09:77:7e:06:23: 4e:61:50:3a:1a:a2:ae:63:d1:96:a9:72:99:51:fd: b6:3e:bc:70:19:70:f4:75:ce:15:23:7e:eb:38:a9: 62:4a:93:c3:82:17:2a:a7:5d:f2:e5:3f:79:50:3c: 7c:e4:2e:73:3a:0c:b9:1d:bd:18:21:78:7e:93:df: 2e:94:2c:df:ab:68:45:c7:ef:d9:bb:bd:1d:43:51: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:33:B9:2B:E0:D6:30:BA:76:CF:06:BF:14:F1:40:B2:A4:23:26:49 X509v3 Authority Key Identifier: keyid:9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:67:69:bf:18:5a:3c:c5:5f:a3:1b:26:de:10:c3:59:37:c7: d6:f3:cf:77:3b:cb:08:92:a7:8a:19:2b:03:36:3b:21:d7:c5: a7:e6:2c:4a:8e:f6:07:68:ae:a3:94:a3:78:82:ca:ea:86:36: 18:48:6c:2d:cb:cf:57:41:be:1a:ce:db:5d:08:a9:40:94:32: 1e:04:93:8b:c7:57:1d:80:d7:86:d6:e4:f9:ed:6e:66:eb:59: a2:26:0e:a4:62:e3:26:43:46:aa:af:5b:29:e7:29:1d:28:8d: a5:ab:06:24:df:c6:18:8c:2e:d0:6f:36:3b:3d:4e:ff:29:50: 5a:93:1e:eb:a1:8f:cb:95:a2:79:0c:4e:5c:6b:1a:39:ff:25: fd:6c:e5:24:14:b2:89:c9:e7:aa:6a:b4:17:2c:8c:30:67:45: 7b:67:e3:ed:a2:f0:8b:6b:69:0e:a9:d6:4a:fd:ec:b5:a2:00: 46:6e:22:5a:81:fe:a2:d1:26:74:ee:18:76:f7:0a:b1:9c:a8: 32:fa:66:fa:85:99:ce:6c:02:eb:31:28:d5:da:79:45:1e:f1: 30:74:f3:6c:25:63:27:b0:d2:39:be:2e:19:c3:36:79:10:cc: 83:08:24:14:51:04:9a:8e:ec:75:cb:9c:c0:bd:6b:11:d5:ec: 95:56:77:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzJDQTExMC8GA1UEBRMoOUFBQ0NDRjEwOTU5N0FDNjVCQzhGN0EwNTAyQTNFQTRB RTFDNUYxOTAeFw0yNTA3MDEwODU0NDhaFw0yNTA3MDgwODU0NDhaMBgxFjAUBgNV BAMTDTY4NjNhMjU4LTg1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJRZ1klDY9bt6ncqUWFBzroVsXkEBGmFolErfwGyFnlHlajlAFUS+BI9FwAKMp ARW+ro15YXgn7swqXmOi1QaNZYIQBOklk8HTgPQuIWH9xSLoaQo2tkfYo0MewpDC MEwQawtb5KBzmef9KXUARfdNLVsf5jjNrSoOPCMUS35h+Mi0cQdjFrlL2vTnzrEq aVXyOR4izsgHjfd+u2b+FK9JcDnlqkLLwXCENhwNfH8Jd34GI05hUDoaoq5j0Zap cplR/bY+vHAZcPR1zhUjfus4qWJKk8OCFyqnXfLlP3lQPHzkLnM6DLkdvRgheH6T 3y6ULN+raEXH79m7vR1DUSOZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2TO5K+DW MLp2zwa/FPFAsqQjJkkwHwYDVR0jBBgwFoAUmqzM8QlZesZbyPegUCo+pK4cXxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMkNBLzgxNThFRDJFNDY4 NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNaYnlQZWdVQ28tcEs0Y1h4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXF6TThRbFplc1pieVBlZ1VDby1wSzRjWHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MkNBLzgxNThFRDJFNDY4NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNa YnlQZWdVQ28tcEs0Y1h4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABFnab8YWjzFX6MbJt4Qw1k3x9bzz3c7ywiSp4oZKwM2OyHXxafmLEqO 9gdorqOUo3iCyuqGNhhIbC3Lz1dBvhrO210IqUCUMh4Ek4vHVx2A14bW5Pntbmbr WaImDqRi4yZDRqqvWynnKR0ojaWrBiTfxhiMLtBvNjs9Tv8pUFqTHuuhj8uVonkM TlxrGjn/Jf1s5SQUsonJ56pqtBcsjDBnRXtn4+2i8ItraQ6p1kr97LWiAEZuIlqB /qLRJnTuGHb3CrGcqDL6ZvqFmc5sAusxKNXaeUUe8TB082wlYyew0jm+LhnDNnkQ zIMIJBRRBJqO7HXLnMC9axHV7JVWd5s= -----END CERTIFICATE-----Generated at Tue Jul 1 19:54:16 2025 by rpki-client