$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: y24wpfFR1nIugRknbvIGW/3vfjM1ZiMVv9Ji9Cv6xKY= Subject key identifier: 1D:59:A5:1B:36:3C:C9:CC:48:9E:9C:29:9C:8F:42:FF:DF:1D:EF:41 Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 2441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 2423 Signing time: Sat 31 May 2025 15:46:33 +0000 Manifest this update: Sat 31 May 2025 15:46:33 +0000 Manifest next update: Sat 07 Jun 2025 15:46:33 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: BH5Udo/dFrZ1H7Otq8DxtFGotMpuAbO1aADJBaQ0qP0=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: crjIi9A4daWBIMavWgwdrvqfs6rboASaaFeiLlhaj3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9281 (0x2441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: May 31 15:46:33 2025 GMT Not After : Jun 7 15:46:33 2025 GMT Subject: CN=683b2459-0850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:29:8d:a0:29:29:7e:cd:52:f8:64:e9:54: b4:c0:53:f9:12:b4:26:a1:e8:55:23:33:d9:53:38: ad:a5:13:14:e0:ab:85:d8:4b:3a:00:a3:35:d2:64: 2e:f9:d9:51:43:09:74:3c:c4:5d:34:38:c9:3d:a2: 0c:43:b5:7a:ba:29:72:01:9f:51:b6:f8:83:23:6a: 5c:3e:76:bb:49:bb:f4:fd:da:a7:ce:b1:8e:38:51: 12:df:49:39:8d:a9:50:eb:18:f7:60:03:dc:09:68: 21:bc:bc:18:b8:3f:07:7b:19:24:41:25:1d:96:7a: 49:76:ee:7b:60:46:0d:63:01:a6:5f:c1:11:55:71: f6:b3:37:53:12:ff:5a:37:6d:d5:f9:8e:5f:90:81: ee:27:af:6a:91:f9:99:92:42:3d:e2:6b:29:68:eb: f1:2d:8b:66:72:29:3d:9b:c7:85:8c:77:f7:89:25: 43:ad:a3:c3:12:7a:57:e2:4c:a0:12:e4:57:de:c3: 3a:26:03:8c:a4:2a:39:33:de:c1:2f:6e:c1:e7:72: b0:0d:44:80:cd:e8:84:c3:78:2b:1b:e8:2a:3b:29: 1d:f1:36:33:dd:3b:d9:8c:85:63:e4:68:d9:95:9c: d1:95:1f:d6:39:52:df:81:8f:77:93:7f:2c:1d:e5: d6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:59:A5:1B:36:3C:C9:CC:48:9E:9C:29:9C:8F:42:FF:DF:1D:EF:41 X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:c7:6a:18:a3:a1:7f:eb:c2:9e:86:4a:5f:2a:2d:8c:1a:c4: b3:fb:18:b0:d9:b1:44:c4:dc:2c:39:6e:cf:ba:e3:67:cc:c4: 0b:7c:1b:8c:57:0a:5c:dd:9b:25:af:82:1b:7e:a0:67:34:a7: 80:0f:2f:4f:f3:cf:d2:38:c5:f8:6c:29:23:04:21:e4:ef:9d: 0a:ac:03:6b:79:08:0c:04:9e:6c:db:28:50:07:e9:8a:d9:b0: ad:c0:14:ca:92:72:f2:ba:bf:df:62:6b:df:e0:94:0f:44:96: f6:a3:ee:0f:e6:db:6c:0d:f7:8c:36:71:be:4c:bf:a8:5b:28: 2d:32:55:fb:ce:b0:e1:19:ec:a4:09:b5:23:ee:61:c5:b4:41: 37:81:e6:a3:98:99:18:dc:d7:a7:b9:f0:55:12:c8:88:cc:84: c2:ef:2c:48:c2:58:53:b5:f0:46:14:09:b4:25:07:35:a4:5d: fb:61:21:5b:c5:9b:fd:84:52:1a:a6:51:38:47:ad:7c:c4:fb: 2b:2b:76:69:a4:a1:6a:03:db:8f:ee:cd:c0:2a:35:c7:e9:92: fe:0f:1d:80:b7:c2:84:2c:10:3d:19:49:82:be:86:82:aa:33: 73:8b:3b:19:b9:05:25:e7:10:43:08:5d:59:09:52:df:7a:9d: c1:e4:53:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjUwNTMxMTU0NjMzWhcNMjUwNjA3MTU0NjMzWjAYMRYwFAYD VQQDEw02ODNiMjQ1OS0wODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTwpjaApKX7NUvhk6VS0wFP5ErQmoehVIzPZUzitpRMU4KuF2Es6AKM10mQu +dlRQwl0PMRdNDjJPaIMQ7V6uilyAZ9RtviDI2pcPna7Sbv0/dqnzrGOOFES30k5 jalQ6xj3YAPcCWghvLwYuD8HexkkQSUdlnpJdu57YEYNYwGmX8ERVXH2szdTEv9a N23V+Y5fkIHuJ69qkfmZkkI94mspaOvxLYtmcik9m8eFjHf3iSVDraPDEnpX4kyg EuRX3sM6JgOMpCo5M97BL27B53KwDUSAzeiEw3grG+gqOykd8TYz3TvZjIVj5GjZ lZzRlR/WOVLfgY93k38sHeXW4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1ZpRs2 PMnMSJ6cKZyPQv/fHe9BMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSx2oYo6F/68KehkpfKi2MGsSz+xiw2bFExNwsOW7PuuNnzMQLfBuM Vwpc3Zslr4IbfqBnNKeADy9P88/SOMX4bCkjBCHk750KrANreQgMBJ5s2yhQB+mK 2bCtwBTKknLyur/fYmvf4JQPRJb2o+4P5ttsDfeMNnG+TL+oWygtMlX7zrDhGeyk CbUj7mHFtEE3geajmJkY3NenufBVEsiIzITC7yxIwlhTtfBGFAm0JQc1pF37YSFb xZv9hFIaplE4R618xPsrK3ZppKFqA9uP7s3AKjXH6ZL+Dx2At8KELBA9GUmCvoaC qjNzizsZuQUl5xBDCF1ZCVLfep3B5FPz -----END CERTIFICATE-----Generated at Sat May 31 17:54:48 2025 by rpki-client