$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: gpKLfT3XVKubx5KRM/rssh5DD9+NhjbeIwOSf0mNIqA= Subject key identifier: 87:E4:34:B0:76:B3:AD:66:CD:F6:9E:9F:C6:42:41:46:52:37:3C:56 Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 06FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 06F6 Signing time: Wed 04 Jun 2025 21:49:34 +0000 Manifest this update: Wed 04 Jun 2025 21:49:34 +0000 Manifest next update: Wed 11 Jun 2025 21:49:34 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: 0KrbGer1FeKEZjbEV1X6EaYf5FOjntoKNKGpQKCWRsI=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: QxDHjOQ9h0AW1vKi1w4KSIHgeJrRV9wKcfKqmMmz5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 21:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1789 (0x6fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: Jun 4 21:49:34 2025 GMT Not After : Jun 11 21:49:34 2025 GMT Subject: CN=6840bf6e-8e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:90:3c:c2:85:0a:0e:c9:c3:67:34:ec:df:c5: 21:19:a3:dc:ad:ba:c6:49:a3:fa:59:dd:da:9a:37: 1a:4a:32:79:6e:ad:10:fd:86:90:43:14:9e:9f:d3: 52:49:f3:49:09:3a:5b:8b:30:ad:ab:90:b8:b7:75: f7:33:5c:fb:a0:85:86:16:77:1a:8f:e5:cd:08:4e: 7f:75:11:cf:dc:4a:dc:63:a4:95:f2:76:3a:3f:53: ab:f4:6e:77:66:9b:37:21:15:5b:4c:79:4a:0c:59: 20:60:b0:b4:0d:e4:ee:a7:a8:45:48:33:b7:40:2a: 70:e9:72:32:c2:74:45:17:c4:a3:da:9e:ff:9e:e8: 91:26:db:a0:a5:c6:91:49:81:43:a5:c1:78:8e:6e: db:e5:96:d7:06:80:52:f3:61:f5:ca:90:5a:c9:fc: 99:32:24:d3:52:f0:b2:06:54:61:4b:b3:4b:63:53: fe:81:5a:a5:a6:76:01:c7:98:b6:77:5b:fe:8e:2a: 2a:da:5c:bf:12:5b:a7:45:7d:10:09:31:8c:47:6e: 50:76:21:6b:f7:e7:a5:1c:2b:5b:69:48:c5:5c:73: bb:53:f7:a4:e8:ed:6c:95:56:0b:a6:9b:89:0b:71: 3b:15:b7:64:06:f2:83:be:d9:72:35:32:10:18:06: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E4:34:B0:76:B3:AD:66:CD:F6:9E:9F:C6:42:41:46:52:37:3C:56 X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f0:5d:68:6d:c2:18:f6:8b:ad:36:09:63:9f:8b:83:03:25: 0b:a0:28:7f:83:8a:06:b3:12:c9:3e:90:56:91:84:9a:72:2b: 07:e5:0b:dc:24:59:5e:fb:8b:71:54:63:c8:23:a6:36:25:6e: 85:c9:1e:4c:d4:b8:8e:7a:62:4f:00:d3:d4:af:c1:a4:fc:44: e0:7c:21:cb:60:dd:6a:f7:d8:34:07:c5:32:c3:38:9b:2a:5f: 97:fe:0f:b7:97:a6:57:d0:26:ad:82:1f:7c:cc:f3:6b:9c:4f: 66:2d:68:f0:0a:98:fc:69:10:46:e4:4d:23:44:8a:e6:df:0b: 4a:81:d2:f5:68:72:bf:0b:c4:95:5d:80:34:97:04:51:0b:17: cc:b1:15:03:be:66:9c:f7:cc:d2:e9:94:83:c2:06:97:de:2a: 79:6c:6b:f7:a5:34:a2:4e:d8:ee:4c:eb:b7:92:12:f5:72:6c: 09:eb:86:88:47:7f:35:f6:85:e8:1b:cd:75:6d:25:10:f7:96: 05:36:25:47:fa:5d:c5:8d:67:d9:a3:26:67:ad:91:05:6b:db: 27:93:42:3b:95:8e:81:0a:7e:86:0b:ba:e5:67:36:2e:0e:14: 7f:c0:45:b1:c0:26:11:f7:5c:24:9a:74:2f:09:ad:92:9c:77: d6:e9:f7:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjUwNjA0MjE0OTM0WhcNMjUwNjExMjE0OTM0WjAYMRYwFAYD VQQDEw02ODQwYmY2ZS04ZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JA8woUKDsnDZzTs38UhGaPcrbrGSaP6Wd3amjcaSjJ5bq0Q/YaQQxSen9NS SfNJCTpbizCtq5C4t3X3M1z7oIWGFncaj+XNCE5/dRHP3ErcY6SV8nY6P1Or9G53 Zps3IRVbTHlKDFkgYLC0DeTup6hFSDO3QCpw6XIywnRFF8Sj2p7/nuiRJtugpcaR SYFDpcF4jm7b5ZbXBoBS82H1ypBayfyZMiTTUvCyBlRhS7NLY1P+gVqlpnYBx5i2 d1v+jioq2ly/ElunRX0QCTGMR25QdiFr9+elHCtbaUjFXHO7U/ek6O1slVYLppuJ C3E7FbdkBvKDvtlyNTIQGAZe0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfkNLB2 s61mzfaen8ZCQUZSNzxWMB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf8F1obcIY9outNgljn4uDAyULoCh/g4oGsxLJPpBWkYSacisH5Qvc JFle+4txVGPII6Y2JW6FyR5M1LiOemJPANPUr8Gk/ETgfCHLYN1q99g0B8Uywzib Kl+X/g+3l6ZX0Catgh98zPNrnE9mLWjwCpj8aRBG5E0jRIrm3wtKgdL1aHK/C8SV XYA0lwRRCxfMsRUDvmac98zS6ZSDwgaX3ip5bGv3pTSiTtjuTOu3khL1cmwJ64aI R3819oXoG811bSUQ95YFNiVH+l3FjWfZoyZnrZEFa9snk0I7lY6BCn6GC7rlZzYu DhR/wEWxwCYR91wkmnQvCa2SnHfW6fcl -----END CERTIFICATE-----Generated at Thu Jun 5 20:08:05 2025 by rpki-client