$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft File: zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json) Hash identifier: 26az4XyfGqPEBKpeJKO15+ZhNrL/870OcwezOemnZKI= Subject key identifier: F5:24:60:66:B5:6C:3F:16:26:7B:EA:F5:2D:5E:C6:51:04:31:70:33 Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 Certificate issuer: /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft Manifest number: B0 Signing time: Sat 31 May 2025 05:35:05 +0000 Manifest this update: Sat 31 May 2025 05:35:04 +0000 Manifest next update: Sat 07 Jun 2025 05:35:04 +0000 Files and hashes: 1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: 1FwEVRVYbrh+AoVL9heIHhkIjzFWXHNjyNkJYo0Xh5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8 Validity Not Before: May 31 05:35:04 2025 GMT Not After : Jun 7 05:35:04 2025 GMT Subject: CN=683a9509-3c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:75:1f:4d:03:5b:06:62:a8:f3:fd:7b:43: cb:bf:da:5d:38:86:cc:88:16:fb:97:13:87:d7:ef: 55:f9:ca:94:71:29:07:7f:7c:59:90:f3:55:9c:19: e9:92:da:b8:3c:cd:f2:23:67:af:1a:95:93:b7:a8: 24:31:cc:3b:5f:e9:4f:d0:99:90:9f:c6:97:b1:8e: fb:16:c9:23:2c:42:34:2c:26:e1:ca:4b:70:44:03: 19:15:53:ad:ec:c7:cc:d3:8c:36:47:33:47:8a:9c: 91:80:85:d8:d7:9f:27:d1:bd:f5:c3:b6:b5:5e:c5: 56:50:1e:95:98:61:a4:80:5d:56:0e:ee:79:48:70: 1a:39:69:91:34:e9:1a:83:dc:3d:c9:78:cd:25:96: 90:4e:1d:d8:70:f4:2c:3b:32:ee:e5:74:3c:e0:47: bb:4b:37:97:55:58:49:5c:0b:b0:28:a8:c9:f5:eb: ce:df:a6:f9:b0:d8:0b:aa:f7:24:83:89:d1:af:62: 15:b4:8c:83:f1:86:61:c9:07:bb:af:0e:6d:1e:5e: 06:a1:6a:70:16:b4:72:3c:c3:5c:11:98:3c:2a:1b: 50:db:3a:c4:cb:ec:7b:bf:95:e4:3d:c7:2b:0d:b3: 79:d1:ed:f8:5b:71:82:5e:08:65:89:90:c6:3e:d6: 8c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:24:60:66:B5:6C:3F:16:26:7B:EA:F5:2D:5E:C6:51:04:31:70:33 X509v3 Authority Key Identifier: keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9f:16:db:7c:d7:e6:bd:cb:2d:41:b2:c8:ee:f6:36:7a:9c: e1:cb:d6:08:43:de:04:05:d0:d5:e4:6d:7e:ab:bd:78:36:2b: 00:57:3c:30:73:e1:86:43:fb:fd:8d:32:22:14:78:e2:35:52: c4:e2:65:1d:64:26:b1:01:6c:2a:7b:e2:c5:8c:fe:2d:ef:80: b1:fe:b4:16:1a:ed:d5:38:4c:52:1b:77:12:a0:d7:97:d7:b5: 7b:6d:26:02:2a:5a:34:91:53:fa:87:39:a2:40:34:16:15:59: d1:3f:14:27:6a:4e:03:3f:63:a8:e3:fe:2c:41:66:49:d5:7c: 1e:20:8a:03:46:07:51:35:5c:a1:4f:48:1e:c9:0d:39:c3:f9: f9:e1:52:41:1c:ef:55:9d:c3:f7:98:5d:d6:be:02:c0:48:47: b0:33:7b:66:72:b9:c8:0d:7f:28:bf:bf:39:ad:18:08:3b:1f: 70:9c:bf:1b:9a:c7:66:1a:59:89:e3:0b:e4:36:7a:0f:fc:94: e7:5f:ce:06:40:6a:9f:a5:de:09:58:d2:9b:5c:fc:f6:28:24: 7b:af:2e:40:4e:ae:03:1c:fb:ea:95:21:b2:03:98:2d:da:3b: bf:5b:7a:22:dd:d5:5c:ea:63:5c:c8:9f:b1:81:f1:ac:cf:6e: 39:8b:57:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKENDNkY0NEMxRTI1RjM3QTNBREY3NjI3Qjk3NzdERkEx NzdEOUQxRTgwHhcNMjUwNTMxMDUzNTA0WhcNMjUwNjA3MDUzNTA0WjAYMRYwFAYD VQQDEw02ODNhOTUwOS0zYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0R1H00DWwZiqPP9e0PLv9pdOIbMiBb7lxOH1+9V+cqUcSkHf3xZkPNVnBnp ktq4PM3yI2evGpWTt6gkMcw7X+lP0JmQn8aXsY77FskjLEI0LCbhyktwRAMZFVOt 7MfM04w2RzNHipyRgIXY158n0b31w7a1XsVWUB6VmGGkgF1WDu55SHAaOWmRNOka g9w9yXjNJZaQTh3YcPQsOzLu5XQ84Ee7SzeXVVhJXAuwKKjJ9evO36b5sNgLqvck g4nRr2IVtIyD8YZhyQe7rw5tHl4GoWpwFrRyPMNcEZg8KhtQ2zrEy+x7v5XkPccr DbN50e34W3GCXghliZDGPtaMRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUkYGa1 bD8WJnvq9S1exlEEMXAzMB8GA1UdIwQYMBaAFMxvRMHiXzejrfdie5d336F32dHo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83RDEyOUI1ODJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42T3Q5Mko3bDNmZm9YZlow ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHOUV3ZUpmTjZPdDkySjdsM2Zmb1hmWjBlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83RDEyOUI1ODJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi96RzlFd2VKZk42 T3Q5Mko3bDNmZm9YZlowZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvnxbbfNfmvcstQbLI7vY2epzhy9YIQ94EBdDV5G1+q714NisAVzww c+GGQ/v9jTIiFHjiNVLE4mUdZCaxAWwqe+LFjP4t74Cx/rQWGu3VOExSG3cSoNeX 17V7bSYCKlo0kVP6hzmiQDQWFVnRPxQnak4DP2Oo4/4sQWZJ1XweIIoDRgdRNVyh T0geyQ05w/n54VJBHO9VncP3mF3WvgLASEewM3tmcrnIDX8ov785rRgIOx9wnL8b msdmGlmJ4wvkNnoP/JTnX84GQGqfpd4JWNKbXPz2KCR7ry5ATq4DHPvqlSGyA5gt 2ju/W3oi3dVc6mNcyJ+xgfGsz245i1cr -----END CERTIFICATE-----Generated at Sat May 31 16:36:49 2025 by rpki-client