$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json) Hash identifier: FLnhxST3U5rZ6CpcWM+1cfkw7wSsOdxqRevDOXnEu6E= Subject key identifier: 72:A2:48:96:C8:F3:9F:9D:D7:B2:F0:8A:F6:E2:58:53:1C:C3:DD:5D Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft Manifest number: AC Signing time: Tue 17 Jun 2025 05:03:17 +0000 Manifest this update: Tue 17 Jun 2025 05:03:16 +0000 Manifest next update: Tue 24 Jun 2025 05:03:16 +0000 Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: ecYUcfv2qg+HNQ/TvBCXk/TetufSYUdeW4M2yJOHy1U=) 2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: 6KE/6WiXMHutimLQnkuyk/FwzPL7cpRiOFuQR2vWv2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Validity Not Before: Jun 17 05:03:16 2025 GMT Not After : Jun 24 05:03:16 2025 GMT Subject: CN=6850f714-4f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:b3:48:77:ed:86:a2:16:77:11:f6:ba:68: e3:e5:6b:50:9e:db:e5:06:16:cf:52:0b:a0:ef:32: 3a:8f:92:23:9d:8b:ac:e1:d1:c0:7d:7c:cf:32:1d: 9e:58:5c:04:83:7b:b0:d1:90:ad:ed:2e:38:8c:95: 68:d8:27:97:f4:fe:46:3a:88:ed:0f:72:5b:dd:9f: c5:6a:35:0c:f5:15:fc:8d:08:e8:78:65:55:8a:25: 14:51:1f:7e:8f:e8:50:5c:3a:b3:c4:11:14:8a:c8: b6:d9:8d:de:6a:9b:6a:5b:0c:1b:73:22:a5:0d:f7: 5b:99:0e:9f:49:b5:6e:78:e2:91:fa:c6:3e:b8:59: d4:ea:5d:fc:b9:d6:a4:e3:ed:e2:d7:2e:64:eb:a8: 54:26:73:89:7e:f2:42:8a:77:a1:eb:28:ae:0b:08: 31:00:fa:bc:e0:17:93:ee:d2:bc:91:75:55:46:40: 5f:30:af:2c:fb:bc:20:0b:1d:0b:d0:54:82:eb:a6: 7d:21:45:fa:f0:7a:70:9f:b7:1a:61:81:c8:96:62: 48:fe:5a:1d:42:a8:db:3e:a0:d4:45:f7:8b:e4:d1: a3:75:2f:ce:e4:75:65:8c:12:af:18:1a:b6:9c:ce: 84:4e:fa:e7:ca:a8:78:2a:48:2d:ac:c1:ff:74:0f: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A2:48:96:C8:F3:9F:9D:D7:B2:F0:8A:F6:E2:58:53:1C:C3:DD:5D X509v3 Authority Key Identifier: keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:78:38:3e:a9:8a:5c:e0:7b:fe:57:f8:24:5d:54:22:42:52: 1a:bc:3e:70:b4:ba:75:80:34:55:21:4a:da:e9:b5:b0:81:71: 6c:1f:e7:34:3a:48:92:cf:ba:42:85:72:1b:91:80:0c:3f:ee: 75:67:38:b6:c5:66:47:5d:9a:fe:3d:22:12:d2:d9:b6:10:4b: ef:85:05:6c:b0:85:dd:d5:f7:88:e1:f0:1d:bb:a3:5f:df:79: ca:3d:19:1d:9c:5b:8f:bb:50:f9:fd:96:72:14:6d:2a:62:7a: 3a:82:63:42:bf:b9:ff:2b:04:ed:3b:ae:a5:6a:4f:a8:eb:ce: f1:58:fb:b0:d0:4c:9d:cc:4d:44:ee:21:6a:7f:24:23:65:93: e3:ce:06:de:62:48:a9:20:64:61:78:9a:70:58:6f:77:dc:f0: 58:69:47:d4:cb:e5:75:dc:b7:01:5c:3e:a2:6b:2a:54:6a:ae: d6:cb:b6:ad:fa:d8:7b:84:f5:04:d2:e0:65:ab:09:e1:78:0b: dc:99:e9:ff:1d:56:7c:a4:5c:14:e1:17:65:bf:68:c8:32:ed: 95:6c:5b:fd:6c:a4:c1:65:40:5a:cf:a9:41:a2:a5:30:8b:da: f5:3e:0f:04:00:f5:ff:66:51:42:01:fd:91:7e:0d:35:76:dc: 81:00:05:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDNGMzZEMEM4MDc2RTdBQ0ZBODNEMDRCNzIzMDcxNzJB ODgyOUQ1QjMwHhcNMjUwNjE3MDUwMzE2WhcNMjUwNjI0MDUwMzE2WjAYMRYwFAYD VQQDEw02ODUwZjcxNC00ZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmqzSHfthqIWdxH2umjj5WtQntvlBhbPUgug7zI6j5IjnYus4dHAfXzPMh2e WFwEg3uw0ZCt7S44jJVo2CeX9P5GOojtD3Jb3Z/FajUM9RX8jQjoeGVViiUUUR9+ j+hQXDqzxBEUisi22Y3eaptqWwwbcyKlDfdbmQ6fSbVueOKR+sY+uFnU6l38udak 4+3i1y5k66hUJnOJfvJCineh6yiuCwgxAPq84BeT7tK8kXVVRkBfMK8s+7wgCx0L 0FSC66Z9IUX68Hpwn7caYYHIlmJI/lodQqjbPqDURfeL5NGjdS/O5HVljBKvGBq2 nM6ETvrnyqh4KkgtrMH/dA9tSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKiSJbI 85+d17LwivbiWFMcw91dMB8GA1UdIwQYMBaAFD820MgHbnrPqD0EtyMHFyqIKdWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wMTVGNkRFRTQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVzLW9QUVMzSXdjWEtvZ3Ax Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wMTVGNkRFRTQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVz LW9QUVMzSXdjWEtvZ3AxYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBneDg+qYpc4Hv+V/gkXVQiQlIavD5wtLp1gDRVIUra6bWwgXFsH+c0 OkiSz7pChXIbkYAMP+51Zzi2xWZHXZr+PSIS0tm2EEvvhQVssIXd1feI4fAdu6Nf 33nKPRkdnFuPu1D5/ZZyFG0qYno6gmNCv7n/KwTtO66lak+o687xWPuw0EydzE1E 7iFqfyQjZZPjzgbeYkipIGRheJpwWG933PBYaUfUy+V13LcBXD6iaypUaq7Wy7at +th7hPUE0uBlqwnheAvcmen/HVZ8pFwU4Rdlv2jIMu2VbFv9bKTBZUBaz6lBoqUw i9r1Pg8EAPX/ZlFCAf2Rfg01dtyBAAVM -----END CERTIFICATE-----Generated at Wed Jun 18 21:40:20 2025 by rpki-client