$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft File: zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json) Hash identifier: SFIoSSIhYlH8bniPZDa2NXBDLYhR/qhcEWBUXNat2O4= Subject key identifier: B3:D2:04:6A:1B:2F:A7:9E:A2:FD:97:EB:CD:1F:64:1C:99:3D:BE:C3 Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE Certificate issuer: /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft Manifest number: 348A Signing time: Sat 14 Jun 2025 14:39:18 +0000 Manifest this update: Sat 14 Jun 2025 14:39:17 +0000 Manifest next update: Sat 21 Jun 2025 14:39:17 +0000 Files and hashes: 1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: yC4VgC3/NuXEg04tT/8ir/7QV9Nm0miimByLi+4M/30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Validity Not Before: Jun 14 14:39:17 2025 GMT Not After : Jun 21 14:39:17 2025 GMT Subject: CN=684d8996-785d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:25:e7:18:3d:bb:59:69:89:33:23:46:c1: f7:27:e5:23:38:90:60:48:42:30:88:4f:1f:75:96: 9b:20:9b:d7:9c:ea:60:41:46:77:81:96:0f:cb:28: 8f:b1:10:c1:50:52:30:e4:17:85:05:d1:03:e5:16: 6c:b3:1e:80:e0:0b:9f:c7:38:bb:eb:1e:ec:38:1a: 7c:e4:9b:cd:ca:9d:57:11:c8:c6:31:65:6f:87:d3: 8f:7d:52:5b:ef:f6:37:01:c1:27:1a:d8:9c:dc:6c: 02:5c:33:3c:bd:ae:88:1b:98:3f:42:04:f6:c3:f7: 3a:91:46:12:3c:f3:fc:ee:e3:c3:ac:84:9e:bd:20: ce:77:92:59:75:a1:96:ab:9e:71:40:03:06:61:95: dd:a4:10:52:30:e5:65:43:41:30:40:bf:e2:a8:83: 22:04:00:46:9b:2d:b7:48:ea:c6:f0:0e:bb:5c:9b: 8a:b8:86:d3:73:67:48:30:69:69:74:6c:0c:f6:e5: 3d:65:71:40:a0:e7:b8:82:de:14:15:dc:70:16:16: 8a:97:ab:6c:8b:2e:36:65:c3:3e:03:02:9e:a0:30: d7:f4:74:23:15:71:97:da:2d:a3:45:28:35:08:e1: 00:f4:f0:08:f8:b2:fa:ab:e1:dc:69:41:8b:42:cb: 4b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D2:04:6A:1B:2F:A7:9E:A2:FD:97:EB:CD:1F:64:1C:99:3D:BE:C3 X509v3 Authority Key Identifier: keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1b:66:47:8b:16:d3:7a:d1:01:1a:09:60:8f:8f:b5:b9:0d: f7:65:82:99:4e:da:7f:a3:a4:c3:d8:61:d5:b5:7e:a9:e4:5b: 0e:74:28:6d:7c:86:ca:00:e9:67:6f:21:9f:03:24:83:e0:0b: a5:08:a9:7e:83:9f:f5:61:92:69:a2:59:a8:3d:9b:9d:6c:bc: b6:cc:7d:18:19:41:68:15:aa:1a:ee:18:37:56:ec:8a:1b:1e: ff:98:58:56:ba:18:9b:2b:f7:df:9c:6f:0e:72:bf:ca:b3:11: ab:8e:3e:ca:27:ea:6b:79:48:0e:4e:18:60:19:a9:51:3e:91: 1e:24:29:b6:4e:cc:ed:3c:8e:c2:1d:6d:b1:dc:d4:94:db:ed: b1:7a:56:4e:54:93:63:3f:45:12:5b:e5:16:4c:37:9b:09:c1: 17:e5:d9:bf:22:5b:d0:ec:b7:b2:ab:ea:b8:2f:bf:2f:1c:2b: 70:0b:52:15:15:1c:90:58:1f:25:4c:34:1e:94:68:c7:64:d4: c6:a0:1d:ac:37:f2:b8:97:14:aa:b7:47:40:88:7a:b8:ef:ba: f3:2c:99:39:df:eb:d4:6f:9d:d7:eb:df:a4:20:e4:8b:c0:33: fa:95:a4:29:c0:ae:7a:36:72:87:08:fc:15:ca:08:c3:20:f8: 2d:48:7e:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw RDNEQjZGQkUwHhcNMjUwNjE0MTQzOTE3WhcNMjUwNjIxMTQzOTE3WjAYMRYwFAYD VQQDEw02ODRkODk5Ni03ODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0c8l5xg9u1lpiTMjRsH3J+UjOJBgSEIwiE8fdZabIJvXnOpgQUZ3gZYPyyiP sRDBUFIw5BeFBdED5RZssx6A4Aufxzi76x7sOBp85JvNyp1XEcjGMWVvh9OPfVJb 7/Y3AcEnGtic3GwCXDM8va6IG5g/QgT2w/c6kUYSPPP87uPDrISevSDOd5JZdaGW q55xQAMGYZXdpBBSMOVlQ0EwQL/iqIMiBABGmy23SOrG8A67XJuKuIbTc2dIMGlp dGwM9uU9ZXFAoOe4gt4UFdxwFhaKl6tsiy42ZcM+AwKeoDDX9HQjFXGX2i2jRSg1 COEA9PAI+LL6q+HcaUGLQstLjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPSBGob L6eeov2X680fZByZPb7DMB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz YVVPWHAyRW0zRGdOUGJiNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPG2ZHixbTetEBGglgj4+1uQ33ZYKZTtp/o6TD2GHVtX6p5FsOdCht fIbKAOlnbyGfAySD4AulCKl+g5/1YZJpolmoPZudbLy2zH0YGUFoFaoa7hg3VuyK Gx7/mFhWuhibK/ffnG8Ocr/KsxGrjj7KJ+preUgOThhgGalRPpEeJCm2TsztPI7C HW2x3NSU2+2xelZOVJNjP0USW+UWTDebCcEX5dm/IlvQ7Leyq+q4L78vHCtwC1IV FRyQWB8lTDQelGjHZNTGoB2sN/K4lxSqt0dAiHq477rzLJk53+vUb53X69+kIOSL wDP6laQpwK56NnKHCPwVygjDIPgtSH7M -----END CERTIFICATE-----Generated at Sun Jun 15 05:58:56 2025 by rpki-client