$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: ralfRHWXSl59Hle2eB/r0gLtArP5lLosfgTDaMnORVk= Subject key identifier: 20:37:A7:6B:AF:21:59:37:66:AD:14:8C:8A:B5:50:10:8D:14:D4:8B Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 0719 Signing time: Tue 12 Aug 2025 22:11:55 +0000 Manifest this update: Tue 12 Aug 2025 22:11:55 +0000 Manifest next update: Tue 19 Aug 2025 22:11:55 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: s4I7zGQhvzSrxqFSA4X8OpDNxRVALuUTCVfqRkv3N1I=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: QxDHjOQ9h0AW1vKi1w4KSIHgeJrRV9wKcfKqmMmz5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: Aug 12 22:11:55 2025 GMT Not After : Aug 19 22:11:55 2025 GMT Subject: CN=689bbc2b-738d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:10:be:9b:cf:d2:4a:c3:42:10:ef:c5:84:11: fa:3c:66:c8:48:26:0c:77:40:13:6f:4a:84:76:cf: 7d:9b:18:98:14:f1:c9:ea:92:2a:e8:2d:a5:c8:bb: 5f:86:4e:a2:39:21:37:4d:6f:28:71:c8:25:ba:7e: 0b:1c:05:17:c0:70:1c:47:29:8d:9b:7c:38:12:1b: b9:50:18:4c:f0:c6:0e:f9:c7:15:8c:73:a1:76:7b: a7:c6:9d:72:64:6b:62:ed:e9:0e:07:f0:30:58:50: 55:42:3d:d0:f0:60:e3:e8:a4:1a:67:5c:03:e9:8f: 6e:fd:64:d6:cf:a1:63:91:7f:d7:d1:18:69:9c:fb: 18:9c:ca:be:2f:fa:d1:79:db:4e:1a:55:cf:f5:6e: 8b:14:48:2d:48:82:09:f5:56:41:aa:29:36:34:ec: ac:07:a1:65:88:28:e0:e5:b5:16:27:3a:4c:91:ee: 56:49:84:5a:32:7d:b7:cd:db:bb:5b:4d:35:83:ce: 80:50:0f:5b:86:02:02:9b:db:d3:5a:24:e6:ea:3f: c3:d9:df:a0:ad:ac:2e:64:6f:7f:84:b8:d7:84:e7: 9a:ac:c7:0c:d5:c8:ab:ad:8b:0f:62:00:6a:dc:08: a4:f0:c4:3c:39:70:2b:95:e1:62:3d:66:a5:9e:14: 4f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:37:A7:6B:AF:21:59:37:66:AD:14:8C:8A:B5:50:10:8D:14:D4:8B X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e8:62:88:ba:a0:bb:34:1e:17:b8:2b:a4:3c:37:96:cb:dd: ff:ee:79:f6:5e:77:6a:dc:c5:85:33:ec:93:6d:e6:9d:7b:a0: 7a:3a:17:67:40:fa:f4:55:ff:8c:08:b9:15:7f:aa:6f:5f:5a: b4:1a:38:0b:40:fb:97:d9:b1:2a:b9:8f:b5:e3:88:46:62:f3: c9:82:f2:f6:00:49:4f:d1:aa:5c:9a:ff:f0:6f:71:4d:01:6a: 94:1b:83:60:04:69:1a:95:6f:f3:0a:29:66:c5:c6:93:23:82: 53:3a:a7:96:e7:09:64:be:dc:bd:bd:8a:42:4a:e5:f5:0b:5f: 2f:d2:d3:4d:7d:96:ad:13:ea:87:00:0b:06:f5:aa:50:89:3c: a5:dd:d3:ec:af:26:b5:94:ac:d0:77:b3:0d:7a:c4:db:f5:0a: c6:19:b1:fc:0b:81:1a:6b:00:21:ba:07:98:2e:c5:5e:45:f3: 43:62:13:7c:6a:17:fe:d8:bb:c8:10:24:23:12:85:1c:c7:82: 8f:ce:ee:78:d9:a4:bf:49:72:98:8d:86:82:1c:20:56:70:d5: e4:8c:2a:e1:3c:4a:39:e0:60:95:cc:8d:3b:49:65:40:86:7b: a9:41:50:d6:ab:c9:a3:34:64:62:42:1f:11:9c:15:53:47:54: 7e:b7:8d:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjUwODEyMjIxMTU1WhcNMjUwODE5MjIxMTU1WjAYMRYwFAYD VQQDEw02ODliYmMyYi03MzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+RC+m8/SSsNCEO/FhBH6PGbISCYMd0ATb0qEds99mxiYFPHJ6pIq6C2lyLtf hk6iOSE3TW8occglun4LHAUXwHAcRymNm3w4Ehu5UBhM8MYO+ccVjHOhdnunxp1y ZGti7ekOB/AwWFBVQj3Q8GDj6KQaZ1wD6Y9u/WTWz6FjkX/X0RhpnPsYnMq+L/rR edtOGlXP9W6LFEgtSIIJ9VZBqik2NOysB6FliCjg5bUWJzpMke5WSYRaMn23zdu7 W001g86AUA9bhgICm9vTWiTm6j/D2d+grawuZG9/hLjXhOearMcM1cirrYsPYgBq 3Aik8MQ8OXArleFiPWalnhRPywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA3p2uv IVk3Zq0UjIq1UBCNFNSLMB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB06GKIuqC7NB4XuCukPDeWy93/7nn2Xndq3MWFM+yTbeade6B6Ohdn QPr0Vf+MCLkVf6pvX1q0GjgLQPuX2bEquY+144hGYvPJgvL2AElP0apcmv/wb3FN AWqUG4NgBGkalW/zCilmxcaTI4JTOqeW5wlkvty9vYpCSuX1C18v0tNNfZatE+qH AAsG9apQiTyl3dPsrya1lKzQd7MNesTb9QrGGbH8C4EaawAhugeYLsVeRfNDYhN8 ahf+2LvIECQjEoUcx4KPzu542aS/SXKYjYaCHCBWcNXkjCrhPEo54GCVzI07SWVA hnupQVDWq8mjNGRiQh8RnBVTR1R+t41R -----END CERTIFICATE-----Generated at Wed Aug 13 04:29:53 2025 by rpki-client