$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json) Hash identifier: rzDkSD33FtSK5bhGU81eVdASRozlQL88yCzmaBgf6mk= Subject key identifier: AB:DD:E7:B5:D8:FE:E0:49:79:BC:5B:1D:0B:49:E8:DD:8A:0E:50:5C Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft Manifest number: 033B Signing time: Sat 19 Jul 2025 01:29:51 +0000 Manifest this update: Sat 19 Jul 2025 01:29:51 +0000 Manifest next update: Sat 26 Jul 2025 01:29:51 +0000 Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: 9JyR16owZukUgEDpT54202E/xCWMQTnmkny23mZzz9U=) 2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: uq2UtIcvHFOXxicW+V2m6gHu891OMQA/M+oL5jc7QTE=) 3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: 35hCo0g/r7FxI8+/jeqVhnAOkZ//we7adpPQGUSCnXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Validity Not Before: Jul 19 01:29:51 2025 GMT Not After : Jul 26 01:29:51 2025 GMT Subject: CN=687af50f-cbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:eb:9f:b7:da:26:dd:8f:6a:f5:b6:dc:a4: eb:50:37:54:44:fe:93:ed:c0:98:d8:cd:7a:f8:ec: bf:17:74:e1:12:9d:8e:1e:8e:1e:49:23:e1:84:65: 8a:bf:95:d6:e6:65:5d:bb:b0:b4:a9:da:a5:cb:18: 65:fe:d8:34:fd:49:77:2a:58:02:b9:c4:30:fe:1d: f8:3b:0f:22:73:16:76:77:d8:64:54:0d:dc:6d:79: fb:d9:f9:f1:6f:f2:ad:d1:df:58:35:96:86:14:39: 9f:dc:43:21:b2:2c:43:e0:1b:98:36:f6:f6:f7:46: b9:e7:47:98:7d:b1:bf:75:8b:c6:bb:82:30:ad:48: 8c:fb:03:87:e3:0d:9e:a7:81:5c:07:52:bf:9e:bf: 02:c9:2a:73:fc:0a:06:11:71:75:e4:1f:a7:ab:18: 97:b1:c3:b5:f7:82:78:ad:63:55:cf:7c:03:85:c3: d3:4a:76:ab:b5:03:7e:90:2a:95:16:df:4c:b0:43: 7c:c4:d3:d6:50:bc:2f:01:fe:95:73:52:48:7a:b8: ae:4b:f1:ce:de:56:23:c1:f8:84:03:da:01:34:6a: 2f:01:38:98:15:56:01:22:25:10:e9:2b:fc:7d:67: f7:89:72:74:cb:f1:de:d1:0e:2e:66:04:54:1b:3e: 2c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DD:E7:B5:D8:FE:E0:49:79:BC:5B:1D:0B:49:E8:DD:8A:0E:50:5C X509v3 Authority Key Identifier: keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:fd:b6:1f:cb:d1:91:bf:c6:f7:12:1e:3b:5e:71:d0:4f:4b: 2c:ab:2f:51:3e:6a:da:c4:56:39:4b:c0:b1:74:de:b2:f1:c8: 5a:e5:33:93:c7:16:53:bb:a4:f6:8b:f9:70:0a:b3:72:33:ab: 63:d9:83:51:b6:e4:d8:39:92:80:f8:bb:de:36:a7:b2:02:96: 62:e5:c5:7b:1a:fe:be:19:66:c1:5a:7c:08:62:55:7d:95:69: aa:6b:a8:3b:79:59:94:a1:1e:52:b8:55:b9:b6:fe:43:02:40: db:fe:3d:16:1e:f2:5c:a2:7a:12:73:db:61:18:5e:af:dd:66: b2:d6:7e:21:78:6e:4c:2e:bb:b9:a7:83:85:bf:2e:cc:5c:ee: 65:3a:a1:de:1e:06:1a:a9:84:ae:28:36:eb:ae:52:3c:da:43: 3e:5b:b1:a0:d8:47:1c:26:9b:4d:a4:41:70:5e:98:86:45:60: f5:c6:9c:c7:a6:11:49:1d:2e:59:36:d6:87:aa:f6:8a:da:00: 7d:fb:f6:16:bb:2d:1b:be:95:e1:ec:60:4f:21:23:b9:4a:55: 1f:d1:63:7a:1b:86:a0:45:7b:59:47:f2:11:ea:71:8a:fc:3c: 0f:5c:7d:08:04:d7:65:13:db:94:28:5e:23:57:9d:48:7f:c0: 70:d8:e7:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDcxMTAvBgNVBAUTKDY2NjkxODY1N0U0MTYzM0UxN0VBQzg2QzI2QjE4NERC QTNFODFFMkUwHhcNMjUwNzE5MDEyOTUxWhcNMjUwNzI2MDEyOTUxWjAYMRYwFAYD VQQDEw02ODdhZjUwZi1jYmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGTrn7faJt2PavW23KTrUDdURP6T7cCY2M16+Oy/F3ThEp2OHo4eSSPhhGWK v5XW5mVdu7C0qdqlyxhl/tg0/Ul3KlgCucQw/h34Ow8icxZ2d9hkVA3cbXn72fnx b/Kt0d9YNZaGFDmf3EMhsixD4BuYNvb290a550eYfbG/dYvGu4IwrUiM+wOH4w2e p4FcB1K/nr8CySpz/AoGEXF15B+nqxiXscO194J4rWNVz3wDhcPTSnartQN+kCqV Ft9MsEN8xNPWULwvAf6Vc1JIeriuS/HO3lYjwfiEA9oBNGovATiYFVYBIiUQ6Sv8 fWf3iXJ0y/He0Q4uZgRUGz4s6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvd57XY /uBJebxbHQtJ6N2KDlBcMB8GA1UdIwQYMBaAFGZpGGV+QWM+F+rIbCaxhNuj6B4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNy9GNzE0QkRDQUND MkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6NFg2c2hzSnJHRTI2UG9I aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pta1laWDVCWXo0WDZzaHNKckdFMjZQb0hpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNy9GNzE0QkRDQUNDMkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6 NFg2c2hzSnJHRTI2UG9IaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi/bYfy9GRv8b3Eh47XnHQT0ssqy9RPmraxFY5S8CxdN6y8cha5TOT xxZTu6T2i/lwCrNyM6tj2YNRtuTYOZKA+LveNqeyApZi5cV7Gv6+GWbBWnwIYlV9 lWmqa6g7eVmUoR5SuFW5tv5DAkDb/j0WHvJconoSc9thGF6v3Way1n4heG5MLru5 p4OFvy7MXO5lOqHeHgYaqYSuKDbrrlI82kM+W7Gg2EccJptNpEFwXpiGRWD1xpzH phFJHS5ZNtaHqvaK2gB9+/YWuy0bvpXh7GBPISO5SlUf0WN6G4agRXtZR/IR6nGK /DwPXH0IBNdlE9uUKF4jV51If8Bw2Oep -----END CERTIFICATE-----Generated at Sun Jul 20 06:51:49 2025 by rpki-client