$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft File: qNV21K-7ZARbsClWQbmUJ9f4ePI.mft (raw, json) Hash identifier: 3YJq7ivpxboI7Q9FjenHd/MkwhI8e+SpWTlYuzzSqws= Subject key identifier: 86:95:69:58:62:DC:77:3D:E2:BD:00:D6:9A:02:43:81:57:7E:F6:A2 Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Certificate serial: 074A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft Manifest number: 0708 Signing time: Thu 12 Jun 2025 21:42:54 +0000 Manifest this update: Thu 12 Jun 2025 21:42:54 +0000 Manifest next update: Thu 19 Jun 2025 21:42:54 +0000 Files and hashes: 1: qNV21K-7ZARbsClWQbmUJ9f4ePI.crl (hash: hhMU2pBvM/YTU3zY/0wolqS6GkVRzSMm/4W2PmoG0yQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C1DC, serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Validity Not Before: Jun 12 21:42:54 2025 GMT Not After : Jun 19 21:42:54 2025 GMT Subject: CN=684b49de-244a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:50:fb:8e:cc:3b:7e:02:68:bd:28:28:45: 34:7a:09:fb:a3:ef:f6:24:0e:53:f2:c1:9a:5e:33: c3:aa:5b:97:67:8b:b0:e0:e0:b7:9b:98:c7:43:e6: 9b:2b:29:22:a0:51:7b:da:17:aa:57:45:bc:77:b9: 90:88:74:4c:be:d0:ae:98:e3:8c:f5:40:a5:d2:2f: a6:b4:65:47:79:41:5a:c3:4e:4e:e7:bf:81:b4:04: 9a:7d:5b:a1:4f:27:4e:98:93:ae:88:cd:74:ca:09: 1d:ae:37:00:8b:b1:19:14:9c:42:9f:e4:4d:b1:9a: 76:c7:90:73:08:89:8b:d5:5c:73:2f:1c:3c:f8:58: d1:7a:51:52:c3:7f:74:5f:d9:25:b3:83:25:a3:48: 3a:4b:4f:a1:29:bc:81:ea:4c:c2:28:6f:e9:51:4e: 1f:89:0e:2e:d6:27:e6:8e:e0:ad:5f:0b:6d:93:ed: 93:ae:a3:a8:fd:b0:0b:ab:fd:7f:2c:4f:42:65:3c: ea:15:29:50:95:24:a9:14:f8:1b:99:53:43:c7:d0: c0:7e:47:8f:e7:55:fe:3f:40:f0:73:a1:ed:4f:49: 6c:58:c9:4e:61:3e:2e:b7:42:15:16:dd:f1:8e:f8: d6:a2:e9:b2:61:55:04:d0:fd:97:9c:90:a5:e0:59: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:95:69:58:62:DC:77:3D:E2:BD:00:D6:9A:02:43:81:57:7E:F6:A2 X509v3 Authority Key Identifier: keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:fe:33:3a:99:16:69:9b:67:cd:c9:46:cd:b8:d2:9f:ed:97: 79:7d:03:c3:e7:78:b1:87:7e:5a:72:93:8d:84:0f:fb:cb:98: a9:13:5b:aa:5a:72:c6:37:a5:f7:6c:b3:cc:93:c8:61:49:e3: 69:a3:bb:1f:19:a0:99:01:44:92:c2:73:ab:f4:ed:87:be:09: 05:fd:5a:15:d6:7a:3e:f7:c9:b9:40:22:d7:84:85:f6:e0:71: 57:ff:d5:b4:11:db:65:55:1b:56:f2:23:4c:0b:33:b6:37:9b: 05:08:44:7e:c4:7c:d9:86:2a:38:a8:d5:bc:74:00:8a:e5:36: 4a:5c:13:da:6a:9a:10:24:67:7a:13:95:76:15:ad:5d:b8:58: 34:e3:1c:90:23:5f:07:c7:f9:f4:73:cb:b1:71:00:f3:e5:34: 96:bb:c6:60:27:c2:53:53:84:a0:19:ca:de:5e:6d:a5:67:26: 81:47:f4:39:6e:75:d0:b5:00:4e:8b:a0:90:f8:61:fe:f7:f3: 3c:8d:08:47:83:17:63:de:d0:3a:3a:f5:66:c9:ee:d0:31:77: 3d:ce:18:71:75:51:de:b8:dd:b4:0c:d4:7a:26:4a:8a:c6:4d: 5c:d7:5b:3d:09:48:67:e7:d1:6a:d8:db:ef:cc:08:88:5b:6b: 06:41:0c:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxREMxMTAvBgNVBAUTKEE4RDU3NkQ0QUZCQjY0MDQ1QkIwMjk1NjQxQjk5NDI3 RDdGODc4RjIwHhcNMjUwNjEyMjE0MjU0WhcNMjUwNjE5MjE0MjU0WjAYMRYwFAYD VQQDEw02ODRiNDlkZS0yNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXxQ+47MO34CaL0oKEU0egn7o+/2JA5T8sGaXjPDqluXZ4uw4OC3m5jHQ+ab KykioFF72heqV0W8d7mQiHRMvtCumOOM9UCl0i+mtGVHeUFaw05O57+BtASafVuh TydOmJOuiM10ygkdrjcAi7EZFJxCn+RNsZp2x5BzCImL1VxzLxw8+FjRelFSw390 X9kls4Mlo0g6S0+hKbyB6kzCKG/pUU4fiQ4u1ifmjuCtXwttk+2TrqOo/bALq/1/ LE9CZTzqFSlQlSSpFPgbmVNDx9DAfkeP51X+P0Dwc6HtT0lsWMlOYT4ut0IVFt3x jvjWoumyYVUE0P2XnJCl4Flz2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaVaVhi 3Hc94r0A1poCQ4FXfvaiMB8GA1UdIwQYMBaAFKjVdtSvu2QEW7ApVkG5lCfX+Hjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzFEQy9CMkQxREUyMDU5 NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pBUmJzQ2xXUWJtVUo5ZjRl UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FOVjIxSy03WkFSYnNDbFdRYm1VSjlmNGVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzFEQy9CMkQxREUyMDU5NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pB UmJzQ2xXUWJtVUo5ZjRlUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu/jM6mRZpm2fNyUbNuNKf7Zd5fQPD53ixh35acpONhA/7y5ipE1uq WnLGN6X3bLPMk8hhSeNpo7sfGaCZAUSSwnOr9O2HvgkF/VoV1no+98m5QCLXhIX2 4HFX/9W0EdtlVRtW8iNMCzO2N5sFCER+xHzZhio4qNW8dACK5TZKXBPaapoQJGd6 E5V2Fa1duFg04xyQI18Hx/n0c8uxcQDz5TSWu8ZgJ8JTU4SgGcreXm2lZyaBR/Q5 bnXQtQBOi6CQ+GH+9/M8jQhHgxdj3tA6OvVmye7QMXc9zhhxdVHeuN20DNR6JkqK xk1c11s9CUhn59Fq2NvvzAiIW2sGQQwb -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:18 2025 by rpki-client