$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft File: a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft (raw, json) Hash identifier: dnKw58e3UfNbCnRH2sxFqwHcjf5c9DlJCuapnQiVpx0= Subject key identifier: 4D:CF:32:E0:FA:00:08:A8:90:D5:80:27:D3:73:83:76:07:CB:E7:60 Authority key identifier: 6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D Certificate issuer: /CN=A9112804/serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D Certificate serial: 0CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft Manifest number: 1443 Signing time: Sun 20 Jul 2025 18:12:53 +0000 Manifest this update: Sun 20 Jul 2025 18:12:52 +0000 Manifest next update: Sun 27 Jul 2025 18:12:52 +0000 Files and hashes: 1: a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl (hash: tXPtYcA/mG7bn/C9I4sKQJsfHoJE+2qaItSGXF+UcBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112804, serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D Validity Not Before: Jul 20 18:12:52 2025 GMT Not After : Jul 27 18:12:52 2025 GMT Subject: CN=687d31a5-989a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:66:74:cd:67:f0:06:9d:df:65:c5:ec:a8:9f: 90:11:8b:63:05:1b:70:b8:ec:ae:05:44:50:99:7e: 84:27:68:4b:01:a0:53:92:c5:d8:c7:2d:6f:5a:78: 6c:d1:4f:61:72:03:09:c3:45:90:03:e3:41:dc:ed: 0c:cf:26:2c:a2:dc:c9:a3:9a:fa:a1:a5:f2:04:7d: 33:64:1b:17:ad:3a:ee:3e:fa:6b:9a:f7:0f:73:85: 0a:5d:58:c5:bc:74:4b:0f:b9:56:77:e8:7f:69:4b: ec:9b:9f:29:48:6c:4b:b5:7b:bb:cd:37:2c:db:6b: bd:92:4c:c7:05:3c:cb:bc:f6:43:cd:94:2f:66:19: 1a:1c:50:a1:fd:76:22:6b:0b:a3:4a:42:b4:e2:f2: e1:63:ed:0e:5e:72:fa:63:d8:42:65:5e:a9:fc:f1: 3f:1f:3d:62:f3:22:e2:ed:43:20:4d:fe:aa:45:c2: 7b:1f:29:7a:5f:12:43:54:5c:ff:74:95:93:b0:af: 8d:49:9a:fb:ee:24:b8:ac:1c:5d:b8:e3:7b:f4:a1: 5b:00:49:6e:b1:3a:16:81:42:9e:e4:17:55:d5:9b: 85:6d:eb:13:39:e3:4f:4b:1b:d9:e3:71:4e:ad:b9: 65:83:ae:ec:3a:1e:d9:26:80:65:c4:20:0b:a7:d1: 0e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CF:32:E0:FA:00:08:A8:90:D5:80:27:D3:73:83:76:07:CB:E7:60 X509v3 Authority Key Identifier: keyid:6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:01:13:33:56:79:74:f2:79:d7:1e:cd:3f:b9:2a:98:22:45: c9:bb:f1:99:27:a6:3c:0b:59:ba:ff:3b:77:6a:bf:65:75:89: 80:00:b4:30:46:78:be:19:62:94:dd:a9:19:79:ba:3c:ff:f3: 9a:ec:f2:93:12:26:fb:17:cf:62:3f:d4:a2:79:42:a0:bb:1d: 24:46:cb:87:a5:9e:36:31:93:f7:de:4f:77:42:af:d3:e3:ff: c5:48:b0:ae:7a:ea:bb:0b:50:cb:70:ba:90:57:5a:6c:6e:90: 3c:7a:eb:81:29:3d:dc:be:86:cd:21:39:cc:3e:d2:61:0b:dd: 92:ad:f3:e6:51:cb:ad:1d:0a:21:f2:df:72:5a:ff:cf:cf:5d: 74:34:7a:88:b5:8b:9f:dd:ad:2f:4d:eb:b1:b6:a3:c7:38:a3: 5e:22:fd:28:1b:66:f5:7e:28:73:ad:49:a2:12:b0:8f:50:75: 26:26:b5:3a:eb:6d:ff:0e:a3:c2:d3:a4:da:b9:ac:89:5a:a0: fe:c4:de:2a:76:b2:f3:1d:b0:58:1b:12:87:26:d5:f5:8b:9c: 80:22:9e:6a:b5:1f:0d:4c:de:47:bf:db:18:f4:b8:16:1f:df: 56:82:30:68:04:5b:de:23:ad:47:2b:23:af:de:0a:13:15:ce: 9a:ef:6e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4MDQxMTAvBgNVBAUTKDZCQTc5QUQ1NEE5MzgzQ0I1MjY3MzM5OTZCRTY2RTky QkY4RDM4NEQwHhcNMjUwNzIwMTgxMjUyWhcNMjUwNzI3MTgxMjUyWjAYMRYwFAYD VQQDEw02ODdkMzFhNS05ODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGZ0zWfwBp3fZcXsqJ+QEYtjBRtwuOyuBURQmX6EJ2hLAaBTksXYxy1vWnhs 0U9hcgMJw0WQA+NB3O0MzyYsotzJo5r6oaXyBH0zZBsXrTruPvprmvcPc4UKXVjF vHRLD7lWd+h/aUvsm58pSGxLtXu7zTcs22u9kkzHBTzLvPZDzZQvZhkaHFCh/XYi awujSkK04vLhY+0OXnL6Y9hCZV6p/PE/Hz1i8yLi7UMgTf6qRcJ7Hyl6XxJDVFz/ dJWTsK+NSZr77iS4rBxduON79KFbAElusToWgUKe5BdV1ZuFbesTOeNPSxvZ43FO rbllg67sOh7ZJoBlxCALp9EOlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3PMuD6 AAiokNWAJ9Nzg3YHy+dgMB8GA1UdIwQYMBaAFGunmtVKk4PLUmczmWvmbpK/jThN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0 RkExMUU5OTkxODQzM0RDNEY5QUUwMi9hNmVhMVVxVGc4dFNaek9aYS1adWtyLU5P RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2ZWExVXFUZzh0U1p6T1phLVp1a3ItTk9FMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9hNmVhMVVxVGc4 dFNaek9aYS1adWtyLU5PRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaARMzVnl08nnXHs0/uSqYIkXJu/GZJ6Y8C1m6/zt3ar9ldYmAALQw Rni+GWKU3akZebo8//Oa7PKTEib7F89iP9SieUKgux0kRsuHpZ42MZP33k93Qq/T 4//FSLCueuq7C1DLcLqQV1psbpA8euuBKT3cvobNITnMPtJhC92SrfPmUcutHQoh 8t9yWv/Pz110NHqItYuf3a0vTeuxtqPHOKNeIv0oG2b1fihzrUmiErCPUHUmJrU6 623/DqPC06TauayJWqD+xN4qdrLzHbBYGxKHJtX1i5yAIp5qtR8NTN5Hv9sY9LgW H99WgjBoBFveI61HKyOv3goTFc6a7254 -----END CERTIFICATE-----Generated at Tue Jul 22 05:10:30 2025 by rpki-client