$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: tle1Qz/PK1c5Tn/6DVoQ8TR27sVXEy/JCjplSHmnyPA= Subject key identifier: 3B:42:ED:CB:41:A3:DB:02:7B:5A:32:41:BA:51:E9:38:A4:99:DE:E8 Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 10 Signing time: Mon 05 May 2025 06:53:16 +0000 Manifest this update: Mon 05 May 2025 06:53:16 +0000 Manifest next update: Mon 12 May 2025 06:53:16 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: HRK3DJn079KXG5IjHRyglgbFcDlfbaRsJ4OEwiNwHgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 06:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: May 5 06:53:16 2025 GMT Not After : May 12 06:53:16 2025 GMT Subject: CN=6818605c-4b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:8c:45:15:15:0c:c3:f2:f8:75:e0:e0:6c: 13:8c:e9:c9:3b:9e:c5:fb:cb:d3:0c:ad:89:28:2e: 46:0f:f9:90:98:15:b2:7c:93:e3:41:63:77:21:7d: 26:18:94:55:66:22:49:b2:5d:43:06:59:ac:60:0c: db:e3:c8:7c:a3:44:71:cd:1c:8a:a7:da:b0:ac:92: a1:90:4c:7a:72:3e:41:a0:fc:8a:4e:3d:f9:db:15: a6:9a:17:7f:4b:fe:a0:c5:ef:27:6e:f9:8d:67:a8: 54:74:96:40:4c:74:e0:51:be:92:57:8f:90:f8:38: 00:07:be:f0:db:5f:71:63:97:d2:3a:35:e8:47:2e: e6:d5:f4:1a:dc:42:9b:43:30:e1:d8:75:54:81:e3: 21:25:c8:d5:04:ef:b5:bf:55:e8:b2:4e:63:d8:e9: 20:6e:de:25:96:ff:39:28:f5:4b:2a:cc:87:ae:6c: f5:45:70:0e:52:93:81:a8:4f:d5:79:2d:bb:4d:68: a8:85:92:83:ad:b8:7f:a6:57:5d:42:91:95:b5:e5: 48:81:1c:bc:a3:2b:87:f5:53:96:bc:51:b1:62:97: ed:51:f1:b3:da:f4:a0:77:2a:90:34:4a:da:d8:7f: 6b:8d:da:25:75:59:e6:35:b5:e5:18:56:cf:79:e7: 4d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:42:ED:CB:41:A3:DB:02:7B:5A:32:41:BA:51:E9:38:A4:99:DE:E8 X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:5e:0d:c3:f5:6f:c5:2a:8d:dd:79:cf:a7:04:a5:a7:1d:5c: 11:6a:68:45:88:19:a1:fe:d2:20:58:08:5c:58:ad:c1:ad:88: 55:7b:3b:ce:c4:33:91:0d:a5:f9:b5:e3:d1:10:ce:93:9e:14: 64:03:63:9b:5a:ce:cd:35:3e:7b:27:e2:13:27:4c:98:80:a3: 2a:5b:c4:5b:c8:a6:8f:9d:2d:65:9c:82:ba:35:ef:c0:04:ac: ff:70:12:18:76:30:5e:c5:e9:c9:eb:af:dd:14:f0:b1:ce:1f: 1b:71:4f:68:c9:66:26:93:81:f1:ea:09:8e:ba:eb:90:26:3e: 84:d0:d5:df:37:fb:b2:bc:75:ba:ad:0a:e2:fa:75:55:83:85: 42:3f:e8:39:64:5e:00:41:84:99:86:ff:c6:31:68:3f:e7:27: 64:da:0d:51:3a:b7:d7:72:e3:15:82:3a:c7:b0:0a:cd:42:57: 75:2a:25:e3:72:7a:e5:68:1c:de:be:4e:f7:10:f0:33:f3:3f: ba:31:ba:a6:16:e3:9f:6e:8f:26:f6:8e:cc:47:18:00:fc:24: 53:14:a1:97:67:0e:c2:82:9c:a6:8f:9a:60:de:bd:c4:88:e0: 80:19:82:6d:3a:97:98:9d:83:8c:18:44:df:76:44:b8:f7:02: 74:17:58:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUJDQzExMC8GA1UEBRMoQ0U2RTkyRkNBMDAxN0Y3NUE2MkRGOTI4NUU4RDdDMjEw QjdBQkMwMjAeFw0yNTA1MDUwNjUzMTZaFw0yNTA1MTIwNjUzMTZaMBgxFjAUBgNV BAMTDTY4MTg2MDVjLTRiODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt1oxFFRUMw/L4deDgbBOM6ck7nsX7y9MMrYkoLkYP+ZCYFbJ8k+NBY3chfSYY lFVmIkmyXUMGWaxgDNvjyHyjRHHNHIqn2rCskqGQTHpyPkGg/IpOPfnbFaaaF39L /qDF7ydu+Y1nqFR0lkBMdOBRvpJXj5D4OAAHvvDbX3Fjl9I6NehHLubV9BrcQptD MOHYdVSB4yElyNUE77W/VeiyTmPY6SBu3iWW/zko9UsqzIeubPVFcA5Sk4GoT9V5 LbtNaKiFkoOtuH+mV11CkZW15UiBHLyjK4f1U5a8UbFil+1R8bPa9KB3KpA0StrY f2uN2iV1WeY1teUYVs95503XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO0Lty0Gj 2wJ7WjJBulHpOKSZ3ugwHwYDVR0jBBgwFoAUzm6S/KABf3WmLfkoXo18IQt6vAIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5QkNDL0Q4QkU5MkRDMTQw MjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZB SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem02U19LQUJmM1dtTGZrb1hvMThJUXQ2dkFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 QkNDL0Q4QkU5MkRDMTQwMjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNX bUxma29YbzE4SVF0NnZBSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADNeDcP1b8Uqjd15z6cEpacdXBFqaEWIGaH+0iBYCFxYrcGtiFV7O87E M5ENpfm149EQzpOeFGQDY5tazs01Pnsn4hMnTJiAoypbxFvIpo+dLWWcgro178AE rP9wEhh2MF7F6cnrr90U8LHOHxtxT2jJZiaTgfHqCY6665AmPoTQ1d83+7K8dbqt CuL6dVWDhUI/6DlkXgBBhJmG/8YxaD/nJ2TaDVE6t9dy4xWCOsewCs1CV3UqJeNy euVoHN6+TvcQ8DPzP7oxuqYW459ujyb2jsxHGAD8JFMUoZdnDsKCnKaPmmDevcSI 4IAZgm06l5idg4wYRN92RLj3AnQXWEg= -----END CERTIFICATE-----Generated at Tue May 6 03:05:37 2025 by rpki-client