$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: SyM7H5IEAhnjo4Feuzmf2GEgMbCpBlrDekGZScD17oI= Subject key identifier: 42:11:9C:E0:4A:4F:4F:1D:4E:B8:A4:C8:9E:C5:C5:8A:CD:54:CB:58 Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 06E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 06E2 Signing time: Thu 24 Apr 2025 21:49:08 +0000 Manifest this update: Thu 24 Apr 2025 21:49:07 +0000 Manifest next update: Thu 01 May 2025 21:49:07 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: CByeZ47VjChZcl6xX4/kgnafYSRTqAMfsLDQD+2cUcE=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: QxDHjOQ9h0AW1vKi1w4KSIHgeJrRV9wKcfKqmMmz5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1769 (0x6e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: Apr 24 21:49:07 2025 GMT Not After : May 1 21:49:07 2025 GMT Subject: CN=680ab1d4-c05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:9d:04:39:ed:dd:e7:7a:66:bc:02:64:61: 66:99:31:61:1e:fc:39:71:df:f1:8a:82:85:be:6a: bd:a1:82:8f:e4:c2:96:87:ae:fd:65:0f:f1:61:06: 48:76:01:c8:02:3c:46:3a:6e:ae:11:1a:13:6a:3f: 7e:09:44:75:4a:5e:14:c0:65:e5:27:04:c2:76:aa: 25:f7:89:62:3e:66:9e:d5:c6:ca:96:8a:7f:80:6b: 68:0e:2c:66:bd:cd:66:ed:18:3b:f1:31:34:13:07: 8d:65:88:f0:13:8c:bc:e6:c8:a6:3d:45:4a:3e:a9: 20:26:0b:67:1e:97:53:38:90:61:11:50:84:06:01: 36:9d:05:bf:30:3b:60:b1:20:13:d9:2c:0a:45:c4: 97:d2:e5:29:92:00:12:0f:35:5e:68:c1:fe:ee:8d: da:3e:74:61:88:60:34:cb:5d:ef:47:77:2c:24:96: 41:6b:70:a1:fb:71:69:0e:e4:7d:63:9b:c5:90:84: 70:1d:8d:ae:e1:71:02:45:b9:1f:81:8f:53:9d:21: 54:a8:70:c9:02:e4:2e:df:15:45:93:9f:6c:75:fa: e4:ca:a0:70:97:51:fd:e3:bf:d7:d8:2d:37:af:d9: 78:80:6d:3e:2a:48:ef:7d:04:12:75:80:5a:c7:c2: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:11:9C:E0:4A:4F:4F:1D:4E:B8:A4:C8:9E:C5:C5:8A:CD:54:CB:58 X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b1:88:58:d9:b8:20:29:4f:fa:0d:3a:1b:1b:46:04:cd:bc: 57:21:28:db:46:94:af:f2:1d:61:22:60:1d:df:cc:c8:d1:39: e1:1a:4e:54:5b:c6:1c:64:e3:65:29:c4:ad:9e:fa:f4:d2:6b: 7d:77:19:b1:ea:30:f9:88:27:85:6c:f2:c4:98:f0:6a:d8:92: c4:c2:c1:84:d8:fc:1c:ff:b7:23:b7:f8:9b:28:7b:0f:6b:02: bd:9f:6b:dd:29:18:23:23:05:b3:56:0e:6a:f2:f8:3e:51:7e: 8d:90:0b:6f:94:21:23:63:39:a4:eb:c7:09:fc:9e:3d:35:3b: 22:4d:e8:9d:71:8a:6e:93:bc:96:31:4e:98:d0:e4:19:32:f1: 5f:5f:d7:0d:03:d6:36:4a:4e:5e:df:11:9c:bf:d0:f0:1d:40: a2:46:8d:07:e8:3a:32:20:22:98:e2:c3:65:fb:f9:40:29:fe: 8b:c8:67:55:91:a3:ae:67:8d:16:a3:47:86:79:43:2d:b2:f2: c0:5c:12:04:4b:a9:96:38:a8:51:45:d7:13:a8:49:97:7a:53: 9a:86:44:10:01:20:f5:91:7e:ce:58:be:93:40:ef:10:e8:30: 83:bf:15:1a:69:c6:d6:cb:e7:bc:21:d4:fc:50:9c:73:3d:8f: ce:bb:30:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjUwNDI0MjE0OTA3WhcNMjUwNTAxMjE0OTA3WjAYMRYwFAYD VQQDEw02ODBhYjFkNC1jMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF+dBDnt3ed6ZrwCZGFmmTFhHvw5cd/xioKFvmq9oYKP5MKWh679ZQ/xYQZI dgHIAjxGOm6uERoTaj9+CUR1Sl4UwGXlJwTCdqol94liPmae1cbKlop/gGtoDixm vc1m7Rg78TE0EweNZYjwE4y85simPUVKPqkgJgtnHpdTOJBhEVCEBgE2nQW/MDtg sSAT2SwKRcSX0uUpkgASDzVeaMH+7o3aPnRhiGA0y13vR3csJJZBa3Ch+3FpDuR9 Y5vFkIRwHY2u4XECRbkfgY9TnSFUqHDJAuQu3xVFk59sdfrkyqBwl1H947/X2C03 r9l4gG0+KkjvfQQSdYBax8IeAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIRnOBK T08dTrikyJ7FxYrNVMtYMB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQsYhY2bggKU/6DTobG0YEzbxXISjbRpSv8h1hImAd38zI0TnhGk5U W8YcZONlKcStnvr00mt9dxmx6jD5iCeFbPLEmPBq2JLEwsGE2Pwc/7cjt/ibKHsP awK9n2vdKRgjIwWzVg5q8vg+UX6NkAtvlCEjYzmk68cJ/J49NTsiTeidcYpuk7yW MU6Y0OQZMvFfX9cNA9Y2Sk5e3xGcv9DwHUCiRo0H6DoyICKY4sNl+/lAKf6LyGdV kaOuZ40Wo0eGeUMtsvLAXBIES6mWOKhRRdcTqEmXelOahkQQASD1kX7OWL6TQO8Q 6DCDvxUaacbWy+e8IdT8UJxzPY/OuzBp -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:55 2025 by rpki-client