$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft File: zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json) Hash identifier: 7xBB0VdbkvQw7fl7/d3Esg+vDE8TMFzx+x/W//WUYB8= Subject key identifier: 4B:A5:D1:A3:E6:66:FD:AE:BA:67:F4:14:22:D2:78:8D:54:48:BD:34 Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE Certificate issuer: /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft Manifest number: 3492 Signing time: Mon 30 Jun 2025 14:44:27 +0000 Manifest this update: Mon 30 Jun 2025 14:44:26 +0000 Manifest next update: Mon 07 Jul 2025 14:44:26 +0000 Files and hashes: 1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: wr1qQ69hSUtBUBm8G8sw0G3IQVu+JQ6OPUUe9tK7FF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Validity Not Before: Jun 30 14:44:26 2025 GMT Not After : Jul 7 14:44:26 2025 GMT Subject: CN=6862a2cb-b8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:e2:75:94:10:4d:c5:05:eb:db:8d:cb:e9: 0a:02:03:b9:8d:b0:e1:91:8b:a7:f0:bb:e0:60:c8: 97:af:0d:b9:a4:73:80:2c:43:61:d6:83:50:bd:1c: 2f:93:3d:52:18:7a:ca:1b:c0:73:84:c7:a9:c0:54: a9:40:7e:d1:ad:64:fc:7a:69:ec:fc:a0:9f:16:f0: 04:28:db:6c:71:a9:c7:44:32:b1:77:f0:71:7e:ca: 70:a6:85:6c:d1:52:9f:88:3f:18:8d:86:22:20:f2: e0:f1:a8:eb:e1:d0:05:d7:a7:66:c5:00:95:4d:7b: 8d:fd:b3:e2:56:45:74:43:15:c1:8b:9e:1a:6e:bb: e7:1b:9b:bd:be:df:c5:e1:e5:c3:f7:7f:1c:4d:70: 49:34:ef:42:85:0b:13:e5:f5:0d:12:dd:75:14:f5: 0c:78:c1:c4:a3:4f:9c:5f:ae:c8:61:76:b3:26:d7: 83:68:ed:13:83:1f:8b:75:f3:a5:7b:81:a7:a2:be: ae:b4:80:1f:ba:c8:6f:f5:e0:3a:76:45:1e:f0:f7: b9:9d:a7:31:77:7b:19:98:da:e7:84:bc:21:01:6b: b2:96:59:4c:11:66:ed:42:75:f8:46:4f:b3:3e:69: 5a:6f:72:e7:a8:9e:b2:85:96:b3:33:f8:d4:75:04: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A5:D1:A3:E6:66:FD:AE:BA:67:F4:14:22:D2:78:8D:54:48:BD:34 X509v3 Authority Key Identifier: keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:36:22:96:8a:03:dd:53:dc:7b:0d:9c:1f:b5:93:9f:dc:ad: 0f:73:a1:1d:1e:43:fd:81:8f:ce:29:a9:cc:d3:ce:00:6b:81: b0:38:bd:1a:1c:c2:2b:93:5d:3c:09:d3:4e:ba:f8:52:de:e5: 8f:70:d3:9f:69:ca:c2:12:53:2d:30:7b:70:06:6b:b5:84:ec: 4b:1c:b9:e8:bd:e6:9a:8b:f4:47:bc:ce:45:4f:64:3d:d4:cc: bc:b9:ad:79:13:bb:71:de:a0:0f:16:02:fe:a9:2b:d2:98:86: 78:ee:c4:13:d3:4e:fe:3a:65:30:35:51:17:18:35:62:f0:b7: 58:b8:6f:84:e4:46:2f:76:78:57:88:e9:78:00:9a:96:e0:37: 6a:e6:20:bf:49:f3:f8:f4:a6:3a:eb:0f:7a:a2:47:b9:21:41: 71:f4:e8:61:75:67:03:2d:bb:5e:0f:b4:c9:87:1b:53:b5:6d: 25:90:c5:15:a2:5a:14:9e:2b:d4:a6:71:69:0f:05:de:b6:fa: de:a4:15:cc:c9:a1:b3:7b:66:37:0f:01:ee:3d:96:cf:96:cd: 4d:80:cb:ff:50:b8:57:74:79:b5:aa:87:ba:67:2d:2f:40:d8: c7:29:5c:84:81:a5:62:4b:e8:c0:6e:65:e6:86:55:b0:d0:a2: f2:7d:3e:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw RDNEQjZGQkUwHhcNMjUwNjMwMTQ0NDI2WhcNMjUwNzA3MTQ0NDI2WjAYMRYwFAYD VQQDEw02ODYyYTJjYi1iOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcjidZQQTcUF69uNy+kKAgO5jbDhkYun8LvgYMiXrw25pHOALENh1oNQvRwv kz1SGHrKG8BzhMepwFSpQH7RrWT8emns/KCfFvAEKNtscanHRDKxd/BxfspwpoVs 0VKfiD8YjYYiIPLg8ajr4dAF16dmxQCVTXuN/bPiVkV0QxXBi54abrvnG5u9vt/F 4eXD938cTXBJNO9ChQsT5fUNEt11FPUMeMHEo0+cX67IYXazJteDaO0Tgx+LdfOl e4Gnor6utIAfushv9eA6dkUe8Pe5nacxd3sZmNrnhLwhAWuylllMEWbtQnX4Rk+z Pmlab3LnqJ6yhZazM/jUdQT9nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEul0aPm Zv2uumf0FCLSeI1USL00MB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz YVVPWHAyRW0zRGdOUGJiNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByNiKWigPdU9x7DZwftZOf3K0Pc6EdHkP9gY/OKanM084Aa4GwOL0a HMIrk108CdNOuvhS3uWPcNOfacrCElMtMHtwBmu1hOxLHLnoveaai/RHvM5FT2Q9 1My8ua15E7tx3qAPFgL+qSvSmIZ47sQT007+OmUwNVEXGDVi8LdYuG+E5EYvdnhX iOl4AJqW4Ddq5iC/SfP49KY66w96oke5IUFx9OhhdWcDLbteD7TJhxtTtW0lkMUV oloUnivUpnFpDwXetvrepBXMyaGze2Y3DwHuPZbPls1NgMv/ULhXdHm1qoe6Zy0v QNjHKVyEgaViS+jAbmXmhlWw0KLyfT6u -----END CERTIFICATE-----Generated at Tue Jul 1 19:58:07 2025 by rpki-client