$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json) Hash identifier: fW9u4gG3qEan3UNZ9RU20jekUaa1nwdSm4eRgJpskd0= Subject key identifier: F2:0C:F4:48:A5:CF:44:47:C5:EC:4D:A6:14:EA:59:0E:B2:16:E0:FB Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft Manifest number: 01A8 Signing time: Fri 13 Jun 2025 02:28:15 +0000 Manifest this update: Fri 13 Jun 2025 02:28:14 +0000 Manifest next update: Fri 20 Jun 2025 02:28:14 +0000 Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: dWIgZ0tdK8TSjaS4bjFKrz5pWK4MVpuKZZskH/W5VW8=) 2: 2048ADEADD5011EDA3ACE13CC4F9AE02.roa (hash: Ry5wENgivtIXCFgzf0QiO3bQmATycLuxi4WQf0WGYRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Validity Not Before: Jun 13 02:28:14 2025 GMT Not After : Jun 20 02:28:14 2025 GMT Subject: CN=684b8cbe-83e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:73:83:f3:59:9d:c1:ee:c4:1a:df:b9:1c: b9:69:e2:3f:c1:e7:e9:2d:08:87:86:e7:5f:e7:e8: 4a:97:48:da:e9:87:c0:19:9c:4c:e3:cf:99:be:41: 10:34:92:73:6a:08:e2:06:2b:61:19:7c:2f:76:7d: 4c:86:d1:ec:cb:ce:7b:bb:ab:f9:cd:a4:6d:a0:ee: 87:aa:06:19:09:2b:22:87:7f:70:b9:93:51:58:2b: c9:c7:6b:96:b3:4f:82:db:1c:af:49:ed:f0:52:7c: 5b:34:a7:6a:61:24:f5:59:bd:8f:fa:6a:3d:a6:e9: cf:38:02:20:ca:99:8c:82:6d:40:a3:de:67:16:0d: c5:f5:b5:66:cb:ed:6f:e1:39:1b:a3:dd:2a:49:b9: 45:21:40:45:30:ff:cd:b5:30:b1:e9:9c:47:0a:7f: 36:df:c7:fa:82:7e:cf:49:ee:47:b2:44:77:26:d2: ec:be:4f:db:e2:92:02:b3:cc:2c:03:e4:0d:42:85: 48:7f:a8:3a:20:d3:f9:83:03:6f:28:4f:05:b1:e4: fa:f8:e1:78:3d:55:76:9e:dd:36:85:c2:a1:bd:1b: 06:95:7c:9f:9b:1a:f0:67:3f:3f:52:d6:a7:c1:93: fa:9d:f6:d5:4c:ae:bf:70:7d:58:70:da:9d:55:13: 24:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0C:F4:48:A5:CF:44:47:C5:EC:4D:A6:14:EA:59:0E:B2:16:E0:FB X509v3 Authority Key Identifier: keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:7c:61:dd:2e:5b:2f:f8:9d:70:41:73:fe:cf:22:87:f0:bd: d0:4d:95:52:88:19:e4:52:07:0b:df:33:06:a2:b3:6d:7f:55: f6:cb:29:66:29:07:65:df:f1:fc:7a:1e:b5:58:ef:73:f0:f0: 07:06:ce:5d:db:5a:34:91:08:54:34:92:4e:9c:00:cd:0a:44: 2f:ca:fd:7d:47:12:7a:d1:8c:cc:13:c4:19:18:96:b5:e1:aa: aa:2d:29:a8:87:3b:21:86:c3:b0:76:35:4f:80:2b:b8:77:00: 42:19:d6:d0:8c:56:60:4e:73:3e:83:b2:9f:e0:83:e7:0f:87: de:a2:a8:44:87:bb:f0:c9:02:a5:b7:cc:6b:7b:db:6b:e4:03: bb:40:03:ab:64:aa:d3:26:4b:f9:4e:92:c2:30:35:72:78:25: 78:c0:3b:e7:9f:10:c2:91:70:98:b1:06:7d:07:54:39:d2:c5: 6f:74:cc:74:d2:d8:07:65:06:73:01:71:be:2b:d0:2b:1c:9d: be:e3:5e:8f:e4:c3:0d:ef:18:cf:a0:7e:e9:24:08:e9:16:40: f6:1d:63:bb:8e:b4:75:8d:c6:c1:e1:fe:ee:4d:75:20:31:55: b6:ae:13:a9:93:31:01:97:94:c5:65:08:c8:7c:2a:66:94:72: 4b:16:ef:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMkIxMTAvBgNVBAUTKEE5OTg1Q0REMzc5MzJFMUQzNjRDNEM2RDc1REJBNTAz QkY3MjY3N0MwHhcNMjUwNjEzMDIyODE0WhcNMjUwNjIwMDIyODE0WjAYMRYwFAYD VQQDEw02ODRiOGNiZS04M2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybdzg/NZncHuxBrfuRy5aeI/wefpLQiHhudf5+hKl0ja6YfAGZxM48+ZvkEQ NJJzagjiBithGXwvdn1MhtHsy857u6v5zaRtoO6HqgYZCSsih39wuZNRWCvJx2uW s0+C2xyvSe3wUnxbNKdqYST1Wb2P+mo9punPOAIgypmMgm1Ao95nFg3F9bVmy+1v 4Tkbo90qSblFIUBFMP/NtTCx6ZxHCn8238f6gn7PSe5HskR3JtLsvk/b4pICs8ws A+QNQoVIf6g6INP5gwNvKE8FseT6+OF4PVV2nt02hcKhvRsGlXyfmxrwZz8/Utan wZP6nfbVTK6/cH1YcNqdVRMkYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIM9Eil z0RHxexNphTqWQ6yFuD7MB8GA1UdIwQYMBaAFKmYXN03ky4dNkxMbXXbpQO/cmd8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjEyQi8wOEMyNzUzMkRC NjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExoMDJURXh0ZGR1bEE3OXla M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaaGMzVGVUTGgwMlRFeHRkZHVsQTc5eVozdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjEyQi8wOEMyNzUzMkRCNjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExo MDJURXh0ZGR1bEE3OXlaM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAfGHdLlsv+J1wQXP+zyKH8L3QTZVSiBnkUgcL3zMGorNtf1X2yylm KQdl3/H8eh61WO9z8PAHBs5d21o0kQhUNJJOnADNCkQvyv19RxJ60YzME8QZGJa1 4aqqLSmohzshhsOwdjVPgCu4dwBCGdbQjFZgTnM+g7Kf4IPnD4feoqhEh7vwyQKl t8xre9tr5AO7QAOrZKrTJkv5TpLCMDVyeCV4wDvnnxDCkXCYsQZ9B1Q50sVvdMx0 0tgHZQZzAXG+K9ArHJ2+416P5MMN7xjPoH7pJAjpFkD2HWO7jrR1jcbB4f7uTXUg MVW2rhOpkzEBl5TFZQjIfCpmlHJLFu9S -----END CERTIFICATE-----Generated at Sat Jun 14 17:25:39 2025 by rpki-client