$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft File: QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json) Hash identifier: rKxda1jVjmPbo57H0phA7oyZX/wK7UNVf5sD/Gcbnug= Subject key identifier: 20:18:C1:CE:D2:96:59:11:56:C2:C5:41:03:35:C0:F8:C6:08:68:20 Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft Manifest number: 0109 Signing time: Sat 09 Aug 2025 05:25:16 +0000 Manifest this update: Sat 09 Aug 2025 05:25:15 +0000 Manifest next update: Sat 16 Aug 2025 05:25:15 +0000 Files and hashes: 1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: rUwyq4NJXNHKC8nzSblPUnpBm6k7aD1A8qNLJEf5IcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912968B, serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Validity Not Before: Aug 9 05:25:15 2025 GMT Not After : Aug 16 05:25:15 2025 GMT Subject: CN=6896dbbb-b766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:fe:bb:85:25:6e:b4:2f:be:8d:de:91:5c: 32:6a:81:4c:52:b2:a3:bc:a1:dc:d2:51:21:b0:ee: bd:1a:b0:ee:c7:9d:e9:e2:bf:0b:33:7a:07:16:74: 5f:e8:5e:47:f4:54:ff:0e:41:95:c7:02:fc:1c:d0: 5f:43:32:9c:5a:fb:29:d5:09:72:fd:62:18:cb:95: ec:44:f9:4e:16:a5:83:e7:a4:c1:51:8e:aa:5a:0e: 3b:cc:58:ce:94:4e:48:5d:77:56:b0:da:e4:f9:4a: a6:99:c6:c5:52:14:fd:f9:63:7c:f7:b7:8a:fc:5b: 3b:e4:28:19:00:40:46:cf:9d:2f:ab:4a:03:0d:3a: 32:19:bc:5f:7e:3b:68:fb:ba:52:af:e0:b3:98:67: 32:cf:36:0e:9b:0f:15:f5:29:67:0b:fe:70:3e:17: 47:57:b8:f1:6f:09:7c:86:56:42:56:11:01:67:d4: 35:bd:e5:eb:19:b2:b0:70:0e:a1:a1:2b:cc:24:a9: b8:1b:5a:c9:35:52:0b:e4:16:26:ca:32:64:25:7e: d5:07:3d:40:24:cd:6c:4d:cd:6b:b7:63:3b:82:be: 1c:00:22:97:37:09:2e:ef:4c:71:91:1c:46:ff:0f: 9f:3c:2e:71:6d:c9:4e:35:40:5e:ef:84:64:34:44: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:18:C1:CE:D2:96:59:11:56:C2:C5:41:03:35:C0:F8:C6:08:68:20 X509v3 Authority Key Identifier: keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b2:3c:1e:fb:38:14:72:13:e5:1d:71:d5:60:c8:6d:c6:31: 5e:24:38:31:43:7c:f9:97:e9:ad:08:eb:24:c0:a6:15:0a:38: fa:f3:c7:4e:cb:52:b6:68:55:27:97:dd:6b:21:4a:73:96:4a: 75:4b:a8:2a:2d:04:22:64:28:24:7f:29:25:d3:b6:fb:f9:c8: 3e:c2:d7:26:f1:63:b5:0e:a3:1e:fe:11:4a:4e:96:19:d6:85: a9:a6:35:1b:9a:ee:2b:3e:e4:3f:96:05:ae:b1:72:d7:b7:24: 32:fc:4c:0c:61:54:a5:e1:e5:5d:62:d3:c9:f1:f4:79:9a:ef: 88:d6:b3:88:91:19:89:bc:23:ed:58:d3:1c:e4:97:d0:89:fb: 92:31:b2:83:5c:e9:03:da:b8:29:79:13:46:45:07:0f:bd:97: 4f:3f:f5:0f:01:6f:80:a2:e4:cb:ad:01:34:ae:43:e6:ec:c5: 4e:18:6c:fe:ec:57:b9:10:dc:a4:c9:95:0c:d1:79:78:eb:f5: 59:f5:a8:06:10:d6:6c:d1:fa:ad:4e:f9:2c:46:1c:a2:d9:d7: de:5b:d5:93:f9:88:87:d8:3c:cd:9b:b9:6c:06:ab:02:02:88: f5:35:83:46:a8:77:5d:02:95:0b:3c:d3:24:63:ab:53:4b:60: 56:2d:67:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2OEIxMTAvBgNVBAUTKDQyRTY2NUUxMTEwNEQ4Q0QwODNGQjE5RDNDNkYzNTVD NzYyOEM0NDUwHhcNMjUwODA5MDUyNTE1WhcNMjUwODE2MDUyNTE1WjAYMRYwFAYD VQQDEw02ODk2ZGJiYi1iNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhf+u4UlbrQvvo3ekVwyaoFMUrKjvKHc0lEhsO69GrDux53p4r8LM3oHFnRf 6F5H9FT/DkGVxwL8HNBfQzKcWvsp1Qly/WIYy5XsRPlOFqWD56TBUY6qWg47zFjO lE5IXXdWsNrk+UqmmcbFUhT9+WN897eK/Fs75CgZAEBGz50vq0oDDToyGbxffjto +7pSr+CzmGcyzzYOmw8V9SlnC/5wPhdHV7jxbwl8hlZCVhEBZ9Q1veXrGbKwcA6h oSvMJKm4G1rJNVIL5BYmyjJkJX7VBz1AJM1sTc1rt2M7gr4cACKXNwku70xxkRxG /w+fPC5xbclONUBe74RkNERg4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAYwc7S llkRVsLFQQM1wPjGCGggMB8GA1UdIwQYMBaAFELmZeERBNjNCD+xnTxvNVx2KMRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTY4Qi9GQzFEMjczNkUx MkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJNMElQN0dkUEc4MVhIWW94 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTY4Qi9GQzFEMjczNkUxMkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJN MElQN0dkUEc4MVhIWW94RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQsjwe+zgUchPlHXHVYMhtxjFeJDgxQ3z5l+mtCOskwKYVCjj688dO y1K2aFUnl91rIUpzlkp1S6gqLQQiZCgkfykl07b7+cg+wtcm8WO1DqMe/hFKTpYZ 1oWppjUbmu4rPuQ/lgWusXLXtyQy/EwMYVSl4eVdYtPJ8fR5mu+I1rOIkRmJvCPt WNMc5JfQifuSMbKDXOkD2rgpeRNGRQcPvZdPP/UPAW+AouTLrQE0rkPm7MVOGGz+ 7Fe5ENykyZUM0Xl46/VZ9agGENZs0fqtTvksRhyi2dfeW9WT+YiH2DzNm7lsBqsC Aoj1NYNGqHddApULPNMkY6tTS2BWLWea -----END CERTIFICATE-----Generated at Sun Aug 10 21:18:07 2025 by rpki-client