$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft File: pZqv2bOxSIduExDPGyR6mnybbJg.mft (raw, json) Hash identifier: OZptbyV8bQRuFatKFP95NbN1PmAWbyGk11wy9aNF2Uk= Subject key identifier: 50:54:D0:37:B2:87:90:6A:C5:FE:6A:1A:7D:E5:34:94:02:64:F7:91 Authority key identifier: A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98 Certificate issuer: /CN=A9169E54/serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft Manifest number: 1A Signing time: Sat 09 Aug 2025 08:26:42 +0000 Manifest this update: Sat 09 Aug 2025 08:26:41 +0000 Manifest next update: Sat 16 Aug 2025 08:26:41 +0000 Files and hashes: 1: pZqv2bOxSIduExDPGyR6mnybbJg.crl (hash: iEsshUClLIvrNOSsZAEDU5gE9agI12xxX6C3/SGvGmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E54, serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98 Validity Not Before: Aug 9 08:26:41 2025 GMT Not After : Aug 16 08:26:41 2025 GMT Subject: CN=68970641-95e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e2:b0:af:06:12:5d:cd:d1:c2:ba:5c:34:0c: b2:a8:20:de:cb:b1:1e:3e:3c:0d:89:17:ff:e9:2a: 2d:bc:34:84:e3:eb:76:d1:3a:58:42:a2:93:fb:bc: 40:01:47:db:e2:cf:45:5b:b8:aa:0a:50:92:5c:da: 8b:67:42:bf:9e:81:fd:45:1a:91:5e:20:19:95:1b: 2f:51:62:ac:ef:1a:6e:63:9d:a2:f7:d0:7f:7d:08: dd:fa:2d:9b:60:d4:b8:f5:78:75:22:08:db:9f:43: 7f:16:30:8b:8a:b6:70:e9:ba:e1:d7:23:92:06:df: f3:4c:6a:8b:df:f6:23:3d:5a:68:24:a9:04:34:32: 0a:7c:f4:27:9f:4a:65:70:ec:61:97:3a:2a:e3:08: 89:8a:51:03:13:a5:64:ed:19:30:7f:ca:19:c1:c6: 79:78:f9:52:d4:34:e3:48:a4:13:9d:0a:fb:2f:ae: 67:9f:d5:68:f4:df:0c:bf:75:cd:9d:c4:e4:a0:2a: 22:ea:56:a0:a3:1a:00:a9:fd:01:3e:e4:63:04:d1: e7:19:38:04:86:14:24:76:5b:65:1d:9a:98:73:4d: e2:0f:dd:35:c2:5b:15:3b:9a:4b:cb:9d:02:57:b9: 07:50:46:4b:d7:67:2a:d6:d2:12:09:3f:4a:0f:fc: 1d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:54:D0:37:B2:87:90:6A:C5:FE:6A:1A:7D:E5:34:94:02:64:F7:91 X509v3 Authority Key Identifier: keyid:A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ee:1a:90:0d:85:61:b6:aa:a6:10:dc:97:c6:3a:f1:d8:2b: 7f:dc:e5:aa:3f:ac:a3:4e:54:85:88:46:38:4f:c6:9e:8b:6f: 9d:93:a4:46:22:98:e3:59:be:44:84:d0:17:bd:87:ec:38:62: 44:b0:e1:95:ee:d8:d0:c2:11:8d:74:43:05:fa:7c:b4:9d:f3: b7:92:e7:49:cd:0c:bf:a9:0f:b5:10:5e:65:dd:8a:cb:44:c5: d9:4d:18:d0:5e:69:48:65:08:cc:bb:73:6f:46:55:ed:27:c5: 26:87:89:c7:70:80:ab:df:9e:48:41:fc:09:5e:48:37:e7:23: b7:ba:55:24:79:6e:bc:f0:a2:1a:4d:ef:77:99:1c:aa:91:0d: 69:a3:96:be:cc:89:04:d0:8f:ac:b3:5d:a5:6b:44:c9:fd:cb: bb:53:66:ac:82:d4:08:a4:e5:e8:8e:66:49:97:a0:0d:1b:4b: 87:39:e3:4c:2c:f3:9b:dd:77:7b:2b:e6:ef:03:7f:37:1e:df: d0:f2:9f:bc:ed:2e:e8:89:78:18:b9:8b:d1:1e:fa:b3:42:ab: 14:9b:c7:1a:dd:af:4d:2d:56:e5:af:93:07:46:0f:b2:7c:1f: 97:f6:51:d6:b1:1d:5a:5a:4b:91:fe:54:8d:96:53:d4:b0:8f: 52:00:79:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUU1NDExMC8GA1UEBRMoQTU5QUFGRDlCM0IxNDg4NzZFMTMxMENGMUIyNDdBOUE3 QzlCNkM5ODAeFw0yNTA4MDkwODI2NDFaFw0yNTA4MTYwODI2NDFaMBgxFjAUBgNV BAMTDTY4OTcwNjQxLTk1ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn4rCvBhJdzdHCulw0DLKoIN7LsR4+PA2JF//pKi28NITj63bROlhCopP7vEAB R9viz0VbuKoKUJJc2otnQr+egf1FGpFeIBmVGy9RYqzvGm5jnaL30H99CN36LZtg 1Lj1eHUiCNufQ38WMIuKtnDpuuHXI5IG3/NMaovf9iM9WmgkqQQ0Mgp89CefSmVw 7GGXOirjCImKUQMTpWTtGTB/yhnBxnl4+VLUNONIpBOdCvsvrmef1Wj03wy/dc2d xOSgKiLqVqCjGgCp/QE+5GME0ecZOASGFCR2W2UdmphzTeIP3TXCWxU7mkvLnQJX uQdQRkvXZyrW0hIJP0oP/B3BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUFTQN7KH kGrF/moafeU0lAJk95EwHwYDVR0jBBgwFoAUpZqv2bOxSIduExDPGyR6mnybbJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTU0L0UyODI5QzJBNEZG QjExRjBBQUVCMzg3N0M0RjlBRTAyL3BacXYyYk94U0lkdUV4RFBHeVI2bW55YmJK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFpxdjJiT3hTSWR1RXhEUEd5UjZtbnliYkpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RTU0L0UyODI5QzJBNEZGQjExRjBBQUVCMzg3N0M0RjlBRTAyL3BacXYyYk94U0lk dUV4RFBHeVI2bW55YmJKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEjuGpANhWG2qqYQ3JfGOvHYK3/c5ao/rKNOVIWIRjhPxp6Lb52TpEYi mONZvkSE0Be9h+w4YkSw4ZXu2NDCEY10QwX6fLSd87eS50nNDL+pD7UQXmXdistE xdlNGNBeaUhlCMy7c29GVe0nxSaHicdwgKvfnkhB/AleSDfnI7e6VSR5brzwohpN 73eZHKqRDWmjlr7MiQTQj6yzXaVrRMn9y7tTZqyC1Aik5eiOZkmXoA0bS4c540ws 85vdd3sr5u8Dfzce39Dyn7ztLuiJeBi5i9Ee+rNCqxSbxxrdr00tVuWvkwdGD7J8 H5f2UdaxHVpaS5H+VI2WU9Swj1IAeQ4= -----END CERTIFICATE-----Generated at Sat Aug 9 23:20:50 2025 by rpki-client