$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft File: zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json) Hash identifier: YCbTnF2labj41qvPJatPGgCFZm2U3j06uJ6/8PnkwGE= Subject key identifier: A3:4C:B1:4A:2D:C1:B6:EC:4A:76:1C:27:E1:6B:DC:DE:C7:60:E7:A8 Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE Certificate issuer: /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Certificate serial: 3478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft Manifest number: 3478 Signing time: Sat 10 May 2025 14:38:52 +0000 Manifest this update: Sat 10 May 2025 14:38:51 +0000 Manifest next update: Sat 17 May 2025 14:38:51 +0000 Files and hashes: 1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: l6KMO0FAoyArWLO4vku/HEudQ5SxjXZ/qnCY5OEgxk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Validity Not Before: May 10 14:38:51 2025 GMT Not After : May 17 14:38:51 2025 GMT Subject: CN=681f64fc-b9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:75:03:87:c8:d3:a7:a3:8f:27:a1:fb:e6:4c: b3:8f:37:8e:44:ed:47:44:d8:a3:1d:26:c6:ec:c0: 44:43:52:11:22:83:b4:ae:8d:29:22:6b:3f:ed:1d: 8e:db:39:ad:ec:32:b8:3f:2c:aa:e5:e9:66:a7:e6: be:8b:44:dd:dd:0f:83:62:f5:d8:cd:fd:3d:34:f4: 7b:86:b9:15:6f:de:31:ee:e9:86:c6:de:99:24:93: d9:48:5d:9b:7b:16:7e:26:80:0f:ab:7c:7c:fc:2c: 4a:81:2e:ad:b8:6e:22:38:1c:4a:d5:a5:0c:df:f7: c4:8e:af:e7:28:70:e9:d0:6f:58:d9:a2:cb:73:e9: 02:77:7a:5b:ee:ec:e3:3d:cc:19:29:60:71:41:4f: e3:29:a5:82:a3:4e:4c:8e:76:2c:bb:89:d5:60:86: 7f:0c:a1:a2:78:8d:f9:b6:85:c7:c4:e4:a4:64:71: 2a:51:5f:73:6e:af:67:37:c6:76:87:1a:1b:43:20: 2d:0e:59:14:ef:25:0c:b2:5f:d5:40:93:72:3b:4d: 50:b9:59:99:c4:5f:2b:d1:47:d2:03:ca:8e:a3:c2: ca:8a:02:83:bf:13:df:f6:6f:bd:e3:8b:0e:e4:46: 78:27:6f:dc:74:68:ae:9a:f1:d1:01:ab:f4:00:ff: a9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4C:B1:4A:2D:C1:B6:EC:4A:76:1C:27:E1:6B:DC:DE:C7:60:E7:A8 X509v3 Authority Key Identifier: keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:cb:3e:a8:eb:f9:80:94:d9:3d:3b:c5:3b:83:7f:01:51:6d: 2b:fd:86:75:e3:89:04:57:b3:ad:1e:43:51:0c:ea:53:3f:32: dc:84:f5:4a:c0:f9:3e:89:b6:18:f7:ec:5b:0a:bd:2d:f0:03: 67:ba:17:54:b3:ef:23:ee:df:21:32:29:f1:a1:85:9a:29:31: 5d:02:07:ef:02:ce:e4:06:32:98:02:44:e5:51:3e:e1:80:87: ac:b2:f2:7f:57:f2:86:46:6c:cd:d0:6a:cd:e8:55:9f:49:5d: b5:82:24:2a:8a:15:aa:1b:3f:58:f9:58:53:4a:81:b4:bd:cc: 3e:ed:33:02:f9:0b:95:af:9c:3f:29:44:e6:91:97:6e:31:42: 4f:15:6a:59:cd:6c:37:52:9e:eb:ed:13:0c:bd:83:bf:b3:93: 30:c0:c4:b7:3e:51:cf:74:86:c3:a3:5d:1d:1b:05:21:3f:aa: ba:90:02:76:72:ec:0d:69:c6:f5:ae:7b:2d:bc:ed:8d:50:bf: 3c:1e:9e:44:cd:fb:3e:32:31:d6:9f:d9:4b:7e:a1:09:1a:04: bc:d7:72:4f:de:ce:73:61:10:35:cc:5b:69:90:4c:66:ca:57: d8:0c:1b:76:c4:58:c8:da:71:88:e4:8a:f1:3a:a0:da:ac:c0: 8f:c1:d6:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw RDNEQjZGQkUwHhcNMjUwNTEwMTQzODUxWhcNMjUwNTE3MTQzODUxWjAYMRYwFAYD VQQDEw02ODFmNjRmYy1iOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3UDh8jTp6OPJ6H75kyzjzeORO1HRNijHSbG7MBEQ1IRIoO0ro0pIms/7R2O 2zmt7DK4Pyyq5elmp+a+i0Td3Q+DYvXYzf09NPR7hrkVb94x7umGxt6ZJJPZSF2b exZ+JoAPq3x8/CxKgS6tuG4iOBxK1aUM3/fEjq/nKHDp0G9Y2aLLc+kCd3pb7uzj PcwZKWBxQU/jKaWCo05MjnYsu4nVYIZ/DKGieI35toXHxOSkZHEqUV9zbq9nN8Z2 hxobQyAtDlkU7yUMsl/VQJNyO01QuVmZxF8r0UfSA8qOo8LKigKDvxPf9m+944sO 5EZ4J2/cdGiumvHRAav0AP+pDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNMsUot wbbsSnYcJ+Fr3N7HYOeoMB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz YVVPWHAyRW0zRGdOUGJiNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQyz6o6/mAlNk9O8U7g38BUW0r/YZ144kEV7OtHkNRDOpTPzLchPVK wPk+ibYY9+xbCr0t8ANnuhdUs+8j7t8hMinxoYWaKTFdAgfvAs7kBjKYAkTlUT7h gIessvJ/V/KGRmzN0GrN6FWfSV21giQqihWqGz9Y+VhTSoG0vcw+7TMC+QuVr5w/ KUTmkZduMUJPFWpZzWw3Up7r7RMMvYO/s5MwwMS3PlHPdIbDo10dGwUhP6q6kAJ2 cuwNacb1rnstvO2NUL88Hp5Ezfs+MjHWn9lLfqEJGgS813JP3s5zYRA1zFtpkExm ylfYDBt2xFjI2nGI5IrxOqDarMCPwdbA -----END CERTIFICATE-----Generated at Sun May 11 21:28:12 2025 by rpki-client