$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft File: zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json) Hash identifier: 9xMOfqzIosJMcwXj2AgVCi44yYbZHm33bxMNJRKV6Hg= Subject key identifier: F6:EC:9A:2B:17:C3:9C:A6:C2:1E:08:1F:59:33:5D:F3:13:BF:37:7B Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE Certificate issuer: /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft Manifest number: 34AE Signing time: Fri 22 Aug 2025 14:39:45 +0000 Manifest this update: Fri 22 Aug 2025 14:39:44 +0000 Manifest next update: Fri 29 Aug 2025 14:39:44 +0000 Files and hashes: 1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: hTnnHTfdtiIzVh+llCAgBAVSoBB7y3ptApIIBmu054I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Validity Not Before: Aug 22 14:39:44 2025 GMT Not After : Aug 29 14:39:44 2025 GMT Subject: CN=68a88131-f690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:75:a5:f9:1e:87:01:23:20:58:58:81:48: 72:02:4f:a8:a3:c9:03:1f:58:7f:4e:f9:07:37:b9: c9:76:04:86:56:04:b3:f4:70:1a:4f:61:8a:6e:f3: 31:7c:aa:74:e7:9b:cf:52:db:3a:eb:81:7b:43:da: 89:5c:cb:6a:3d:14:de:d1:6a:2f:97:b1:5c:c0:95: 1a:d4:36:b0:e7:91:4c:12:b1:b7:28:7e:e8:7e:ae: e0:c4:9d:38:74:d4:a0:1f:0b:0c:f0:15:3e:eb:49: da:f4:ca:53:3f:2c:5f:30:ce:53:44:80:8e:43:e7: aa:16:a7:1e:eb:a1:6a:ed:7a:8d:17:8c:49:4d:0b: 6f:bd:3a:cd:11:dc:73:81:be:ea:ab:00:be:61:5a: 91:c7:7b:2b:29:05:99:d9:1e:bc:0d:31:d0:79:ee: 88:b9:f3:e7:66:14:8a:0e:d0:b1:b2:77:5a:ec:0c: 81:28:bd:e8:0e:a2:8c:cf:3d:11:21:ab:1c:1b:c7: 4b:71:43:e4:87:de:e0:05:36:cd:04:d4:2d:44:0b: fd:2d:d9:96:8f:fd:33:f5:89:ec:50:c9:72:86:bf: cd:8e:b9:90:9a:8a:bc:ed:74:4f:db:c7:8b:c8:2b: 1b:4c:23:b8:8e:51:12:4e:2a:f0:7a:b0:25:2e:84: ef:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EC:9A:2B:17:C3:9C:A6:C2:1E:08:1F:59:33:5D:F3:13:BF:37:7B X509v3 Authority Key Identifier: keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0f:da:7f:0a:ef:5f:f0:bc:9b:82:71:e4:cc:fb:b3:d8:ed: ff:8f:f9:29:df:25:47:03:b1:7a:3d:e7:79:40:34:b2:79:d8: 7a:f5:57:27:2e:10:a5:b6:80:16:68:6a:25:f2:7d:d6:1d:cd: b2:c5:36:df:67:4d:5c:5b:e5:35:cd:99:2f:d2:ac:bd:92:5c: b9:4e:98:15:01:dd:28:b8:01:fa:62:de:23:58:79:16:de:51: f5:12:e6:f3:6a:21:3a:3c:21:10:48:24:3b:1d:05:00:6c:8d: 32:b3:f2:7e:92:1a:64:ed:8c:f5:9b:7f:f3:e7:9b:e1:2b:3c: 3b:b8:32:a7:f5:0b:ee:89:35:4b:4a:86:b0:ac:d4:e0:1c:7b: 21:bc:2e:f2:13:a2:41:76:0c:9e:ad:84:c4:31:c5:0e:b3:b1: d7:20:94:b9:c4:9e:d9:9a:72:5a:ea:24:16:53:ba:bc:98:ce: 01:d5:59:17:a6:d1:54:43:29:92:de:d5:39:df:fb:50:49:89: 1e:d1:3a:21:e5:e8:4b:1a:87:e8:75:18:dd:56:b8:33:0f:84: 6b:25:b2:96:87:fa:8f:3a:2e:eb:4b:62:38:0e:51:e5:ae:ab: f5:d0:71:bd:bf:ea:d7:58:9c:49:86:34:7b:1e:2e:c9:cd:d4: cc:c8:d8:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw RDNEQjZGQkUwHhcNMjUwODIyMTQzOTQ0WhcNMjUwODI5MTQzOTQ0WjAYMRYwFAYD VQQDEw02OGE4ODEzMS1mNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKF1pfkehwEjIFhYgUhyAk+oo8kDH1h/TvkHN7nJdgSGVgSz9HAaT2GKbvMx fKp055vPUts664F7Q9qJXMtqPRTe0Wovl7FcwJUa1Daw55FMErG3KH7ofq7gxJ04 dNSgHwsM8BU+60na9MpTPyxfMM5TRICOQ+eqFqce66Fq7XqNF4xJTQtvvTrNEdxz gb7qqwC+YVqRx3srKQWZ2R68DTHQee6IufPnZhSKDtCxsnda7AyBKL3oDqKMzz0R IascG8dLcUPkh97gBTbNBNQtRAv9LdmWj/0z9YnsUMlyhr/NjrmQmoq87XRP28eL yCsbTCO4jlESTirwerAlLoTvzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbsmisX w5ymwh4IH1kzXfMTvzd7MB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz YVVPWHAyRW0zRGdOUGJiNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRD9p/Cu9f8LybgnHkzPuz2O3/j/kp3yVHA7F6Ped5QDSyedh69Vcn LhCltoAWaGol8n3WHc2yxTbfZ01cW+U1zZkv0qy9kly5TpgVAd0ouAH6Yt4jWHkW 3lH1EubzaiE6PCEQSCQ7HQUAbI0ys/J+khpk7Yz1m3/z55vhKzw7uDKn9QvuiTVL SoawrNTgHHshvC7yE6JBdgyerYTEMcUOs7HXIJS5xJ7ZmnJa6iQWU7q8mM4B1VkX ptFUQymS3tU53/tQSYke0Toh5ehLGofodRjdVrgzD4RrJbKWh/qPOi7rS2I4DlHl rqv10HG9v+rXWJxJhjR7Hi7JzdTMyNgC -----END CERTIFICATE-----Generated at Sat Aug 23 18:52:42 2025 by rpki-client