$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json) Hash identifier: X9oAcaqGbAV6UHtylAKA+hNspvqYZeqNRFA5E0Vx+Js= Subject key identifier: 22:FF:0F:2F:22:E0:71:9E:69:99:6D:70:13:BF:57:90:23:5B:76:DA Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Certificate serial: 0314 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft Manifest number: 0309 Signing time: Sat 21 Jun 2025 00:58:23 +0000 Manifest this update: Sat 21 Jun 2025 00:58:23 +0000 Manifest next update: Sat 28 Jun 2025 00:58:23 +0000 Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: 18UhHN2pmyHhgFeziYx+3qACl7T+9Jpe8pH39BzEsD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 00:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 788 (0x314) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Validity Not Before: Jun 21 00:58:23 2025 GMT Not After : Jun 28 00:58:23 2025 GMT Subject: CN=685603af-cd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:49:fc:9d:28:cc:01:86:a6:1f:3b:bf:49: 1a:69:2e:ab:1c:ec:14:bb:5c:06:7e:82:07:d3:f2: 99:58:dc:92:31:5e:48:7c:d6:ae:2e:42:72:a5:c7: e5:80:9b:31:8d:74:c7:be:63:2c:22:92:07:de:4f: 95:36:e4:70:1e:45:66:a0:99:a5:cc:cf:fe:4f:2c: 03:07:e9:5e:c4:c5:56:df:b2:09:ba:76:9b:af:1a: ae:37:9d:67:6f:a7:b0:fa:d0:e7:d5:45:f5:7b:d9: d8:a1:53:9c:09:86:ae:ec:02:68:2d:fe:6e:47:48: 8d:18:a6:1e:67:a6:df:96:4d:af:72:18:c7:bd:0f: ef:a0:02:d1:35:f5:7d:4e:7d:5c:19:63:e6:f7:1d: e4:18:09:86:27:97:47:22:ee:3a:7a:4c:f3:dc:3a: e9:33:89:7b:6f:32:81:9c:38:86:35:21:3f:4a:27: 13:74:a9:aa:5c:01:c2:9e:b0:b3:8a:09:13:de:95: 2f:21:58:b5:82:13:17:4d:47:80:c2:f6:83:9e:87: 09:14:e4:83:6f:7c:93:dd:ac:3a:8f:77:55:6b:26: 5f:0b:ae:29:81:44:4c:5d:96:f9:c3:9b:8f:67:19: 76:f4:c2:14:53:93:95:82:85:df:a3:9e:6b:6f:6f: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FF:0F:2F:22:E0:71:9E:69:99:6D:70:13:BF:57:90:23:5B:76:DA X509v3 Authority Key Identifier: keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:8a:82:23:69:d9:3d:62:37:06:05:f7:94:b0:81:47:30:90: c7:e0:b7:4a:24:8c:82:89:25:77:8f:66:71:39:f9:63:4c:9c: 06:4a:f0:55:4d:a8:66:70:db:78:c7:fe:60:72:23:75:d1:a5: c6:e1:58:c6:a5:64:72:c2:9e:ea:ee:25:f2:67:1b:f6:5d:8a: 1e:83:9a:d7:01:50:43:9e:6c:ce:e4:df:f2:ad:6e:c5:20:a8: 43:a9:ba:ac:e8:a4:31:5d:73:c4:bd:03:29:47:83:4c:b8:08: d5:47:20:58:cb:dc:a9:58:23:8f:1e:77:83:68:c4:9f:48:f1: 7d:3a:b2:5a:44:3b:43:e8:53:23:5e:3d:79:54:c6:38:22:84: 18:7f:62:fb:e6:23:eb:34:8c:1e:c3:87:28:0b:3a:02:13:1b: db:75:4e:fa:ed:23:34:07:66:8a:da:7f:78:2d:12:62:89:03: 8a:56:0e:b1:06:3c:c6:2c:2a:05:b0:47:81:c8:64:8d:36:8a: f5:2d:71:77:9f:c7:cd:5c:20:52:63:1a:0f:3d:67:68:67:d9: b4:e9:cb:9c:21:72:3d:dc:56:62:e3:7a:a8:69:c8:2c:d0:e8: 7b:d6:ff:e4:55:a9:cc:dd:89:d1:5a:d2:9e:ec:88:cd:78:ff: 3e:43:fc:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNDkxMTAvBgNVBAUTKENEMENBQzBFN0U4NEUzRTgxRTQ4NzYxNzRFMkMyMTQw ODUwOTQyNjkwHhcNMjUwNjIxMDA1ODIzWhcNMjUwNjI4MDA1ODIzWjAYMRYwFAYD VQQDEw02ODU2MDNhZi1jZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyRJ/J0ozAGGph87v0kaaS6rHOwUu1wGfoIH0/KZWNySMV5IfNauLkJypcfl gJsxjXTHvmMsIpIH3k+VNuRwHkVmoJmlzM/+TywDB+lexMVW37IJunabrxquN51n b6ew+tDn1UX1e9nYoVOcCYau7AJoLf5uR0iNGKYeZ6bflk2vchjHvQ/voALRNfV9 Tn1cGWPm9x3kGAmGJ5dHIu46ekzz3DrpM4l7bzKBnDiGNSE/SicTdKmqXAHCnrCz igkT3pUvIVi1ghMXTUeAwvaDnocJFOSDb3yT3aw6j3dVayZfC64pgURMXZb5w5uP Zxl29MIUU5OVgoXfo55rb282aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL/Dy8i 4HGeaZltcBO/V5AjW3baMB8GA1UdIwQYMBaAFM0MrA5+hOPoHkh2F04sIUCFCUJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI0OS83NkNFODQ1NkUw MjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQtZ2VTSFlYVGl3aFFJVUpR bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pReXNEbjZFNC1nZVNIWVhUaXdoUUlVSlFtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI0OS83NkNFODQ1NkUwMjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQt Z2VTSFlYVGl3aFFJVUpRbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGioIjadk9YjcGBfeUsIFHMJDH4LdKJIyCiSV3j2ZxOfljTJwGSvBV TahmcNt4x/5gciN10aXG4VjGpWRywp7q7iXyZxv2XYoeg5rXAVBDnmzO5N/yrW7F IKhDqbqs6KQxXXPEvQMpR4NMuAjVRyBYy9ypWCOPHneDaMSfSPF9OrJaRDtD6FMj Xj15VMY4IoQYf2L75iPrNIwew4coCzoCExvbdU767SM0B2aK2n94LRJiiQOKVg6x BjzGLCoFsEeByGSNNor1LXF3n8fNXCBSYxoPPWdoZ9m06cucIXI93FZi43qoacgs 0Oh71v/kVanM3YnRWtKe7IjNeP8+Q/ww -----END CERTIFICATE-----Generated at Sun Jun 22 01:33:24 2025 by rpki-client