$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: 2adiL6zzCsCpCcLh6iZ7+k4TJpXzIRyqXAJ8krnGy/4= Subject key identifier: DD:AD:B0:96:7D:28:7A:0F:1E:31:3B:5F:A2:08:30:CE:AE:A3:40:82 Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 09E9 Signing time: Fri 30 May 2025 20:05:53 +0000 Manifest this update: Fri 30 May 2025 20:05:52 +0000 Manifest next update: Fri 06 Jun 2025 20:05:52 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: PRhtrdbWizTLr5xmO0hGpCoL/KgdlHuFFlWQNIY8XHo=) 2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: vYfbYGbaZtOjNPwwYTLo3cpgHwXTvaA/VLhLM/0gXjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: May 30 20:05:52 2025 GMT Not After : Jun 6 20:05:52 2025 GMT Subject: CN=683a0fa0-92ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:1a:4f:18:ea:97:31:27:35:e7:57:20:4b: 68:fd:bc:24:9b:d6:66:21:3b:6b:41:ff:81:ce:40: c7:dc:38:8a:62:c5:e5:55:bd:fd:90:71:ae:8d:1d: 34:af:82:b9:c9:e5:d5:71:dc:85:95:df:a8:55:c1: 20:97:dc:97:ae:3f:09:f6:95:6c:c5:22:3b:78:1b: 7b:13:cd:36:28:6d:4a:0f:4e:32:ce:4c:03:5a:29: 0e:75:51:a2:27:9d:0d:5a:d3:9d:88:4d:e2:5e:2a: 21:0f:f0:01:3b:2b:7d:bf:7e:10:a6:6f:c0:c8:b1: 2f:ef:b9:62:c2:79:14:e0:7c:4d:f1:74:6b:74:a8: ec:6c:46:70:c8:d1:12:93:fe:42:2a:28:a6:31:09: 53:20:3a:34:7f:d3:ea:2c:8b:81:ed:89:8e:59:ab: df:a7:14:2c:63:36:e5:7d:b5:fa:ba:40:96:20:8d: 0a:f3:07:fe:bb:12:45:cb:c2:0f:ec:8e:ad:b7:bf: b4:df:c6:fb:36:c1:45:02:f8:a3:0c:83:fe:53:83: eb:aa:d3:d5:8e:6f:94:d4:95:c7:b0:cd:31:b4:d3: c2:18:34:48:9b:4c:0b:06:1f:27:98:f2:8f:19:7f: 17:4f:08:a6:5e:90:48:25:7b:b7:0e:49:a0:ab:ad: cb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AD:B0:96:7D:28:7A:0F:1E:31:3B:5F:A2:08:30:CE:AE:A3:40:82 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:5a:73:b3:b8:71:34:55:e8:04:be:11:a4:dd:40:8f:fc:41: 70:fd:db:37:50:3b:8f:95:ea:75:09:aa:e1:d1:8a:01:7a:23: 7b:79:67:84:5b:e4:5b:c2:fb:be:2a:e5:7a:e4:b4:03:db:fa: 8b:ca:b7:18:db:c7:10:04:9d:6a:03:41:3b:e9:d4:38:99:9d: 76:ec:d0:2d:64:73:9e:eb:b9:0b:ab:81:c7:43:28:c7:46:63: 79:bf:66:9b:b2:3d:60:32:f5:aa:24:a4:d4:ae:df:30:9e:66: 23:ca:5d:82:a6:e1:bc:78:96:91:af:0d:b8:a6:73:1f:20:8c: b0:30:e1:12:9a:d3:d0:47:9f:3d:3a:27:47:5d:a1:4b:02:d0: 03:f2:4b:0c:01:03:26:9b:ac:3e:3b:55:0d:ff:b8:ea:dd:25: 2a:63:e3:1a:08:cd:19:56:06:01:83:a9:dc:1e:2d:d6:57:9c: bc:50:fa:e6:5b:7e:b7:ff:51:8d:81:11:de:6c:4c:4a:40:c0: 20:03:29:0d:67:a7:37:10:57:9e:09:86:fd:c6:bf:1a:ad:3b: de:be:0b:ad:43:e9:4c:b6:56:ec:e4:50:2f:45:7c:fb:37:94: 0c:77:9f:12:76:10:68:af:65:42:84:dc:90:43:e7:4c:f5:53: d6:65:19:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjUwNTMwMjAwNTUyWhcNMjUwNjA2MjAwNTUyWjAYMRYwFAYD VQQDEw02ODNhMGZhMC05MmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmIaTxjqlzEnNedXIEto/bwkm9ZmITtrQf+BzkDH3DiKYsXlVb39kHGujR00 r4K5yeXVcdyFld+oVcEgl9yXrj8J9pVsxSI7eBt7E802KG1KD04yzkwDWikOdVGi J50NWtOdiE3iXiohD/ABOyt9v34Qpm/AyLEv77liwnkU4HxN8XRrdKjsbEZwyNES k/5CKiimMQlTIDo0f9PqLIuB7YmOWavfpxQsYzblfbX6ukCWII0K8wf+uxJFy8IP 7I6tt7+038b7NsFFAvijDIP+U4PrqtPVjm+U1JXHsM0xtNPCGDRIm0wLBh8nmPKP GX8XTwimXpBIJXu3Dkmgq63LbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2tsJZ9 KHoPHjE7X6IIMM6uo0CCMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1WnOzuHE0VegEvhGk3UCP/EFw/ds3UDuPlep1Carh0YoBeiN7eWeE W+Rbwvu+KuV65LQD2/qLyrcY28cQBJ1qA0E76dQ4mZ127NAtZHOe67kLq4HHQyjH RmN5v2absj1gMvWqJKTUrt8wnmYjyl2CpuG8eJaRrw24pnMfIIywMOESmtPQR589 OidHXaFLAtAD8ksMAQMmm6w+O1UN/7jq3SUqY+MaCM0ZVgYBg6ncHi3WV5y8UPrm W363/1GNgRHebExKQMAgAykNZ6c3EFeeCYb9xr8arTvevgutQ+lMtlbs5FAvRXz7 N5QMd58SdhBor2VChNyQQ+dM9VPWZRmq -----END CERTIFICATE-----Generated at Sat May 31 16:53:43 2025 by rpki-client