$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft File: qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json) Hash identifier: s0GBMXcoRr/Jvi4szbgQBO8sTXjJRSNdotkw0eh3mto= Subject key identifier: 66:96:72:B4:89:73:71:F6:4A:AD:58:CE:F2:2C:55:58:F0:C3:05:CE Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Certificate serial: 1C71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft Manifest number: 1C4D Signing time: Fri 20 Jun 2025 16:14:27 +0000 Manifest this update: Fri 20 Jun 2025 16:14:26 +0000 Manifest next update: Fri 27 Jun 2025 16:14:26 +0000 Files and hashes: 1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: sVs/UzgAoB5HS4VL+X6+EYe3gIlVS4NxS85WUiclaLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 16:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7281 (0x1c71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B978, serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Validity Not Before: Jun 20 16:14:26 2025 GMT Not After : Jun 27 16:14:26 2025 GMT Subject: CN=685588e3-be2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:2a:ac:d3:40:e3:0e:c9:13:ed:56:17:16: 58:fc:9d:d5:7f:f5:f6:ad:1b:91:a9:22:2f:58:fd: c3:80:5f:f4:c0:1f:79:8f:82:64:22:13:99:fb:0e: 2e:6f:7a:11:a8:54:08:9a:06:8c:f9:08:4a:9e:9e: fe:3a:f8:24:92:00:f0:3e:97:c1:b1:fe:bf:70:ed: 0b:b4:74:07:fc:ec:96:32:74:da:77:77:81:82:f7: 91:f9:82:32:57:55:4a:64:e7:1e:9c:04:a8:9c:54: f5:00:ec:d0:a7:6e:f9:c0:b0:d3:2f:a3:f4:ad:5a: 25:29:d8:63:e4:8c:e6:0c:7b:e2:b2:a6:e1:61:6d: ca:e7:1f:82:6f:3e:4a:0d:e2:48:9e:ff:25:1f:f3: 32:74:c2:a7:b0:c5:ea:b5:19:e4:ce:48:90:6e:2c: 5a:50:b2:01:3a:01:c7:da:25:8a:c1:08:4d:18:a5: fe:20:cb:a3:e4:b0:05:ac:88:fb:72:5d:ea:05:84: 8a:f3:f2:6c:63:df:51:b7:60:31:d5:48:3b:59:6a: 67:25:ed:18:41:20:54:6c:46:54:42:c8:b9:b1:02: 24:de:c8:dd:5f:6e:28:c0:2e:e2:f2:20:2c:76:7c: b4:af:51:ab:84:0c:a2:0f:11:31:ea:57:90:46:40: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:96:72:B4:89:73:71:F6:4A:AD:58:CE:F2:2C:55:58:F0:C3:05:CE X509v3 Authority Key Identifier: keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e9:78:73:59:16:6a:22:7f:86:7e:41:a5:9b:a5:61:ab:b4: 41:9e:40:11:be:77:6a:7f:cc:5c:41:c5:2e:59:93:a8:8a:87: 40:b0:ae:c0:db:f8:8f:61:4c:17:39:c0:c6:2c:79:c7:6f:f0: 9d:67:78:e0:77:14:30:22:32:90:b2:2f:98:68:1d:09:db:c8: 03:a4:7c:5a:a2:72:28:bb:93:48:8f:dd:ba:70:04:01:87:a9: fe:6b:5c:43:8f:0d:d1:e8:73:ff:99:4f:84:76:8d:41:52:f1: 84:6a:31:c0:12:0f:c5:cf:c4:23:eb:21:58:be:49:c3:f0:7d: 95:21:72:cd:96:c9:91:3c:82:c0:f2:86:51:fe:1a:d3:09:59: 13:82:5c:a2:a3:63:bf:1c:d2:0f:06:aa:f4:08:c7:b8:45:6e: a1:24:92:5d:c3:2a:7c:52:9c:de:9f:6d:48:7e:49:13:14:d5: ab:fc:3c:90:97:c4:7b:b4:a1:fb:7c:18:e0:5b:65:7a:1b:b6: 5a:a7:47:f9:2d:3a:c0:98:1b:96:64:d3:d0:c4:e8:db:2a:a8: da:74:f8:f8:00:b8:40:02:81:ca:57:39:44:28:a5:30:48:cb: 7e:74:15:fc:5c:af:bf:5e:60:a0:5c:a4:f8:fa:03:08:43:a8: 72:77:41:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI5NzgxMTAvBgNVBAUTKEE4M0IwMUM5NkU3OTRERThDRjhGMUM5RkE4NjQyMTI5 NkRBODcxQzQwHhcNMjUwNjIwMTYxNDI2WhcNMjUwNjI3MTYxNDI2WjAYMRYwFAYD VQQDEw02ODU1ODhlMy1iZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/oqrNNA4w7JE+1WFxZY/J3Vf/X2rRuRqSIvWP3DgF/0wB95j4JkIhOZ+w4u b3oRqFQImgaM+QhKnp7+OvgkkgDwPpfBsf6/cO0LtHQH/OyWMnTad3eBgveR+YIy V1VKZOcenASonFT1AOzQp275wLDTL6P0rVolKdhj5IzmDHvisqbhYW3K5x+Cbz5K DeJInv8lH/MydMKnsMXqtRnkzkiQbixaULIBOgHH2iWKwQhNGKX+IMuj5LAFrIj7 cl3qBYSK8/JsY99Rt2Ax1Ug7WWpnJe0YQSBUbEZUQsi5sQIk3sjdX24owC7i8iAs dny0r1GrhAyiDxEx6leQRkDSowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaWcrSJ c3H2Sq1YzvIsVVjwwwXOMB8GA1UdIwQYMBaAFKg7AclueU3oz48cn6hkISltqHHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjk3OC9GQzRBMkEyMEU5 MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRlalBqeHlmcUdRaEtXMm9j Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEc0J5VzU1VGVqUGp4eWZxR1FoS1cyb2NjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjk3OC9GQzRBMkEyMEU5MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRl alBqeHlmcUdRaEtXMm9jY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA36XhzWRZqIn+GfkGlm6Vhq7RBnkARvndqf8xcQcUuWZOoiodAsK7A 2/iPYUwXOcDGLHnHb/CdZ3jgdxQwIjKQsi+YaB0J28gDpHxaonIou5NIj926cAQB h6n+a1xDjw3R6HP/mU+Edo1BUvGEajHAEg/Fz8Qj6yFYvknD8H2VIXLNlsmRPILA 8oZR/hrTCVkTglyio2O/HNIPBqr0CMe4RW6hJJJdwyp8Upzen21IfkkTFNWr/DyQ l8R7tKH7fBjgW2V6G7Zap0f5LTrAmBuWZNPQxOjbKqjadPj4ALhAAoHKVzlEKKUw SMt+dBX8XK+/XmCgXKT4+gMIQ6hyd0Gm -----END CERTIFICATE-----Generated at Sat Jun 21 14:16:28 2025 by rpki-client