$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft File: zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json) Hash identifier: 57Qk+X7pEiyb/1K2gIo4v0sqK688NpxKlIUj1ivJ894= Subject key identifier: 45:62:FB:4B:7C:0A:C8:FC:74:31:93:57:FF:4F:5F:12:3D:7F:00:9B Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE Certificate issuer: /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Certificate serial: 34A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft Manifest number: 34A6 Signing time: Wed 06 Aug 2025 14:41:13 +0000 Manifest this update: Wed 06 Aug 2025 14:41:13 +0000 Manifest next update: Wed 13 Aug 2025 14:41:13 +0000 Files and hashes: 1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: uhH9HE5WCYO2XVSC9HGzC94ie6JCrNQIi6GCLJQ0r5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 14:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13478 (0x34a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Validity Not Before: Aug 6 14:41:13 2025 GMT Not After : Aug 13 14:41:13 2025 GMT Subject: CN=68936989-39f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:de:eb:80:0c:b0:09:b0:4f:8b:f6:25:d6:06: 7b:f0:9a:e3:f0:71:8c:8a:60:f5:03:ab:0e:01:31: b4:38:85:22:e7:cb:3c:b4:b1:19:53:9a:93:0d:98: 85:c8:19:97:d0:e9:cb:f0:ee:6d:c4:23:ab:cf:45: 13:76:f0:52:2a:61:ce:e7:72:d8:5f:c8:86:0b:16: 77:0a:ee:0b:e1:e9:a6:22:52:2a:f9:39:e8:78:cd: 5f:05:cb:0e:48:c8:ea:7e:8f:be:44:76:0e:dd:57: c3:b0:63:fb:17:bb:72:ee:10:49:53:30:94:ac:51: a2:64:d8:36:a1:9d:5f:17:b4:34:dc:f6:c6:cd:70: 94:81:d9:1c:ac:88:8a:c0:48:b9:ea:73:75:e9:f4: 81:fc:50:d1:18:39:90:39:24:93:30:a5:3e:06:21: 12:6c:9d:de:58:2e:49:c1:5d:e2:62:f2:e6:f5:d4: d4:fe:d6:3c:13:16:b7:0f:ed:fb:7a:a2:ab:73:a7: 03:dc:12:54:15:43:f2:83:53:d0:0a:29:bd:8b:ff: 34:e4:8a:38:95:3e:3d:60:e7:e6:a3:c1:2d:69:5d: b1:a7:3d:0c:ea:53:95:08:5f:9b:94:7b:a5:83:f4: 0f:e9:29:45:7b:34:a2:2e:eb:12:bd:8d:c7:73:ad: 5e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:62:FB:4B:7C:0A:C8:FC:74:31:93:57:FF:4F:5F:12:3D:7F:00:9B X509v3 Authority Key Identifier: keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:8f:b0:a9:99:e8:95:9c:de:8b:a4:8f:a5:8a:10:1a:eb:c5: b9:7d:a9:b8:02:37:5c:a5:ca:44:f9:16:29:d3:87:bd:eb:8e: 99:7e:41:c0:dd:f5:27:d0:f3:69:dd:8a:e1:8e:e7:27:27:e9: 80:5e:87:f1:8d:63:ee:43:f6:1d:c1:20:fb:21:e2:59:65:71: 41:4a:36:78:03:42:1a:29:24:05:8a:71:9d:b6:b8:e7:4d:7c: a3:f6:ad:e4:8e:93:e6:a1:e4:53:f8:ab:51:e6:a7:e2:63:74: 15:24:99:52:f5:c4:44:69:05:38:b6:9e:5d:3c:41:69:fe:9c: ce:f4:c0:7b:65:71:09:cf:bf:b3:fa:17:27:58:1d:e1:9a:8c: 35:9e:64:cd:fa:0d:91:43:b5:96:c9:58:5c:6d:07:52:0e:52: 83:74:7b:60:9b:57:42:53:85:05:e6:29:ce:d6:68:73:e9:8a: f0:e9:9e:75:2c:60:1e:26:d8:9e:8d:1f:bf:7f:bd:d1:24:13: f8:25:ed:b8:b7:8e:3a:35:f8:f0:d6:0b:1c:78:e1:4a:37:9e: 12:0a:4f:52:0f:db:d0:33:44:a5:53:bf:c7:31:07:de:cf:62: 27:8a:53:a7:f3:87:dd:f2:81:f1:91:a9:11:44:a5:5a:39:9f: 31:cc:f3:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw RDNEQjZGQkUwHhcNMjUwODA2MTQ0MTEzWhcNMjUwODEzMTQ0MTEzWjAYMRYwFAYD VQQDEw02ODkzNjk4OS0zOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6t7rgAywCbBPi/Yl1gZ78Jrj8HGMimD1A6sOATG0OIUi58s8tLEZU5qTDZiF yBmX0OnL8O5txCOrz0UTdvBSKmHO53LYX8iGCxZ3Cu4L4emmIlIq+TnoeM1fBcsO SMjqfo++RHYO3VfDsGP7F7ty7hBJUzCUrFGiZNg2oZ1fF7Q03PbGzXCUgdkcrIiK wEi56nN16fSB/FDRGDmQOSSTMKU+BiESbJ3eWC5JwV3iYvLm9dTU/tY8Exa3D+37 eqKrc6cD3BJUFUPyg1PQCim9i/805Io4lT49YOfmo8EtaV2xpz0M6lOVCF+blHul g/QP6SlFezSiLusSvY3Hc61euQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVi+0t8 Csj8dDGTV/9PXxI9fwCbMB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz YVVPWHAyRW0zRGdOUGJiNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpj7CpmeiVnN6LpI+lihAa68W5fam4AjdcpcpE+RYp04e9646ZfkHA 3fUn0PNp3YrhjucnJ+mAXofxjWPuQ/YdwSD7IeJZZXFBSjZ4A0IaKSQFinGdtrjn TXyj9q3kjpPmoeRT+KtR5qfiY3QVJJlS9cREaQU4tp5dPEFp/pzO9MB7ZXEJz7+z +hcnWB3hmow1nmTN+g2RQ7WWyVhcbQdSDlKDdHtgm1dCU4UF5inO1mhz6Yrw6Z51 LGAeJtiejR+/f73RJBP4Je24t446Nfjw1gsceOFKN54SCk9SD9vQM0SlU7/HMQfe z2InilOn84fd8oHxkakRRKVaOZ8xzPMz -----END CERTIFICATE-----Generated at Fri Aug 8 10:21:42 2025 by rpki-client