$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: dU1f5U3hiNP/lZi4uvVwyen9PNyiwNdLR9lBeIUwYwU= Subject key identifier: 56:B7:5B:8F:86:DB:AF:95:9C:5A:8B:81:63:01:9D:BE:16:6D:A0:6F Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 024C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 0247 Signing time: Fri 13 Jun 2025 01:21:19 +0000 Manifest this update: Fri 13 Jun 2025 01:21:18 +0000 Manifest next update: Fri 20 Jun 2025 01:21:18 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: tPg55v2w5SSgQZq7e7axTz5VbrP9X5wbYhciMLa8p8A=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Jun 13 01:21:18 2025 GMT Not After : Jun 20 01:21:18 2025 GMT Subject: CN=684b7d0e-4cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:ad:69:65:3f:54:c6:64:cb:31:0a:1f:2b: cd:6a:65:04:d8:0e:40:9e:b8:92:7c:05:8f:0b:e3: ca:88:59:f2:6d:31:b4:a2:fd:ea:15:cf:79:81:b7: 8d:f2:c9:1d:ca:38:e9:90:20:d0:88:6d:2f:1f:ef: c8:b1:8b:e2:c0:4a:22:c0:4e:4c:12:1d:58:06:c9: 2a:28:15:58:d2:c9:c4:15:c8:d2:a8:2c:15:2f:40: 64:1e:b5:b3:3f:86:96:57:a3:c7:f0:d1:f1:9b:6f: 19:51:b5:6b:fd:3a:ff:c8:08:a2:54:4b:2e:ed:95: bc:67:f9:45:cb:5f:85:9f:86:8d:77:30:0a:8f:85: fd:ac:d4:a1:55:3b:24:91:c4:d9:ed:0e:fa:16:b3: 04:95:c1:23:3f:49:2d:93:ac:d7:9d:58:f4:3d:d5: c9:85:c0:18:9c:61:96:18:d4:74:f7:af:c5:4d:52: 4e:7c:09:2c:d0:ac:81:a7:5a:35:40:95:cf:8d:f7: 85:54:53:9a:bf:51:1a:06:e5:38:64:e0:79:35:11: 1c:28:81:f3:32:d9:21:c4:98:ad:ff:9c:6b:9b:7f: 1e:90:03:f8:de:c2:e7:d0:cb:55:9a:46:21:24:d9: e5:fa:f9:ff:03:a6:58:f5:54:1c:1d:c5:4e:26:51: af:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B7:5B:8F:86:DB:AF:95:9C:5A:8B:81:63:01:9D:BE:16:6D:A0:6F X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:3b:53:80:4c:aa:33:1d:2d:40:60:bf:9d:bc:4b:a7:34:53: 46:47:e3:9c:f4:2e:6c:6a:64:64:47:83:35:40:8a:a4:87:9d: e3:dd:e6:dd:46:95:ee:2f:97:a6:82:60:be:d6:57:88:17:e5: f8:98:27:45:74:7a:ad:71:27:e6:73:92:5c:87:95:31:94:db: 27:38:c3:ce:a4:0a:0a:8c:18:32:0d:14:46:44:a3:85:e5:34: 96:76:a7:3d:ce:96:b7:d1:c2:55:d5:d1:02:3c:cd:22:fb:51: 87:80:81:c9:65:6a:04:4f:cc:c7:14:4c:ac:d5:0a:36:d2:f6: 4d:b7:09:08:3f:73:87:a5:d9:bd:f0:75:86:52:71:a5:62:90: 05:84:c6:36:e3:c8:7d:32:55:9b:13:cc:3d:9a:21:ce:47:7e: 5a:13:bb:1d:33:fb:93:20:e3:c7:0b:8d:c7:20:dd:45:e1:95: 97:43:5d:b1:69:61:79:68:7f:da:ea:44:a3:f7:23:ef:a4:fb: 3e:11:aa:64:65:e6:ed:88:30:09:ad:d8:db:8a:5f:cf:99:06: 06:59:1f:52:e7:a6:5b:12:14:ec:11:82:eb:48:17:d4:d9:84: 75:58:61:6d:35:c0:9b:81:ae:22:62:b1:49:25:f8:a8:2d:df: 02:fd:5a:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjUwNjEzMDEyMTE4WhcNMjUwNjIwMDEyMTE4WjAYMRYwFAYD VQQDEw02ODRiN2QwZS00Y2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaKtaWU/VMZkyzEKHyvNamUE2A5AnriSfAWPC+PKiFnybTG0ov3qFc95gbeN 8skdyjjpkCDQiG0vH+/IsYviwEoiwE5MEh1YBskqKBVY0snEFcjSqCwVL0BkHrWz P4aWV6PH8NHxm28ZUbVr/Tr/yAiiVEsu7ZW8Z/lFy1+Fn4aNdzAKj4X9rNShVTsk kcTZ7Q76FrMElcEjP0ktk6zXnVj0PdXJhcAYnGGWGNR096/FTVJOfAks0KyBp1o1 QJXPjfeFVFOav1EaBuU4ZOB5NREcKIHzMtkhxJit/5xrm38ekAP43sLn0MtVmkYh JNnl+vn/A6ZY9VQcHcVOJlGv0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFa3W4+G 26+VnFqLgWMBnb4WbaBvMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBO1OATKozHS1AYL+dvEunNFNGR+Oc9C5samRkR4M1QIqkh53j3ebd RpXuL5emgmC+1leIF+X4mCdFdHqtcSfmc5Jch5UxlNsnOMPOpAoKjBgyDRRGRKOF 5TSWdqc9zpa30cJV1dECPM0i+1GHgIHJZWoET8zHFEys1Qo20vZNtwkIP3OHpdm9 8HWGUnGlYpAFhMY248h9MlWbE8w9miHOR35aE7sdM/uTIOPHC43HIN1F4ZWXQ12x aWF5aH/a6kSj9yPvpPs+EapkZebtiDAJrdjbil/PmQYGWR9S56ZbEhTsEYLrSBfU 2YR1WGFtNcCbga4iYrFJJfioLd8C/Vp2 -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:59 2025 by rpki-client