$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: 8kVNH3tC/d9VvHXfDQqivSWutGzx0KPVKOqMDLUkxXE= Subject key identifier: 82:DE:F2:6F:6A:51:D6:24:33:DB:83:8A:97:08:3A:79:78:05:B5:47 Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 2439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 241B Signing time: Fri 16 May 2025 16:01:48 +0000 Manifest this update: Fri 16 May 2025 16:01:48 +0000 Manifest next update: Fri 23 May 2025 16:01:48 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: qZOSXVlAXm2feaXMI0cplPXzIS3+JkiijYuPAXPguI0=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: crjIi9A4daWBIMavWgwdrvqfs6rboASaaFeiLlhaj3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9273 (0x2439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: May 16 16:01:48 2025 GMT Not After : May 23 16:01:48 2025 GMT Subject: CN=6827616c-f8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:03:fb:53:58:58:fa:79:9a:e9:fe:5d:e9: 6e:b9:b1:77:7c:cf:3e:a3:02:bd:cc:7c:09:54:cc: cc:0a:2c:d8:33:bc:ac:df:bf:74:af:d8:e2:0d:99: 24:c6:4a:4d:92:b2:98:52:a5:97:41:d8:3f:ad:7d: 2a:d2:ff:72:0f:43:24:d4:f7:96:75:b3:9e:cf:18: 6e:cd:92:f7:c1:0d:80:3e:d7:c0:80:de:23:e9:d5: ac:a4:d5:b4:35:bd:2f:70:6a:a8:9b:86:53:4e:4f: a5:6e:0e:45:7f:29:7a:27:1b:6f:84:ff:ae:bf:66: 89:7a:a5:c2:83:c7:27:ef:a2:c0:ac:20:d6:d9:66: fd:fc:27:77:77:e3:bd:28:7d:3a:11:7e:cc:71:e2: d0:a8:1a:46:db:5b:36:c3:39:5c:10:c6:3b:36:dd: 0a:fc:a0:d3:6a:e7:c5:c3:26:df:89:96:4b:00:ae: be:54:52:a8:35:5d:a2:e9:4b:0c:6a:ba:fa:52:70: 99:08:56:ae:6b:17:cc:d5:b8:c1:81:dd:9d:e4:1f: bb:1a:05:f4:6a:b2:31:05:8e:51:34:ca:9f:ab:35: 4a:fb:1b:9a:ff:58:cf:07:40:52:1b:c2:76:4c:e9: 6e:ec:9e:0c:33:93:87:ce:eb:ee:b3:8d:d6:75:22: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DE:F2:6F:6A:51:D6:24:33:DB:83:8A:97:08:3A:79:78:05:B5:47 X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:a2:1c:f9:bb:dc:4a:02:32:3d:60:57:34:83:63:49:e1:28: 35:32:c3:1e:7d:f5:17:ee:2d:7c:e8:a9:1c:b3:c2:37:74:57: e6:ff:2b:94:4d:0d:c3:bc:5c:be:83:0b:c1:7b:f7:4f:3a:49: fb:68:2d:12:a1:fc:f6:1f:32:ec:b8:fa:a9:52:06:b3:bf:04: ac:dd:8c:1b:f3:d2:2a:4a:8a:84:ea:bd:7b:b3:2a:94:64:33: dd:e4:99:c2:5e:d9:92:b5:98:34:79:51:b1:7e:e4:f3:f2:9a: f6:39:bc:d6:78:d3:06:61:f2:bc:18:32:15:e6:c7:49:77:a5: ba:29:a6:54:a7:5a:fa:bb:5a:af:4e:44:5a:5f:23:00:fe:69: da:e9:bc:da:83:2b:b0:31:c1:8d:0c:f9:4e:4d:73:26:5a:f6: 86:89:ab:c6:d7:7d:16:3f:91:03:3b:6a:e8:0a:ac:ae:27:19: c1:dd:63:87:5a:d3:c7:24:c3:97:08:aa:a1:37:0c:b8:22:28: 7b:3e:84:79:a6:d1:d8:60:79:ba:97:46:16:c5:f3:fb:18:5f: 19:b0:0a:e2:43:31:6f:a1:57:5c:82:22:e2:f9:91:d1:9d:1a: 53:eb:68:c4:7d:29:55:8e:e5:12:b0:7d:69:e4:86:d9:20:c9: 36:03:ab:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjUwNTE2MTYwMTQ4WhcNMjUwNTIzMTYwMTQ4WjAYMRYwFAYD VQQDEw02ODI3NjE2Yy1mOGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZsD+1NYWPp5mun+XeluubF3fM8+owK9zHwJVMzMCizYM7ys3790r9jiDZkk xkpNkrKYUqWXQdg/rX0q0v9yD0Mk1PeWdbOezxhuzZL3wQ2APtfAgN4j6dWspNW0 Nb0vcGqom4ZTTk+lbg5Ffyl6JxtvhP+uv2aJeqXCg8cn76LArCDW2Wb9/Cd3d+O9 KH06EX7MceLQqBpG21s2wzlcEMY7Nt0K/KDTaufFwybfiZZLAK6+VFKoNV2i6UsM arr6UnCZCFauaxfM1bjBgd2d5B+7GgX0arIxBY5RNMqfqzVK+xua/1jPB0BSG8J2 TOlu7J4MM5OHzuvus43WdSLXXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILe8m9q UdYkM9uDipcIOnl4BbVHMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0ohz5u9xKAjI9YFc0g2NJ4Sg1MsMeffUX7i186Kkcs8I3dFfm/yuU TQ3DvFy+gwvBe/dPOkn7aC0Sofz2HzLsuPqpUgazvwSs3Ywb89IqSoqE6r17syqU ZDPd5JnCXtmStZg0eVGxfuTz8pr2ObzWeNMGYfK8GDIV5sdJd6W6KaZUp1r6u1qv TkRaXyMA/mna6bzagyuwMcGNDPlOTXMmWvaGiavG130WP5EDO2roCqyuJxnB3WOH WtPHJMOXCKqhNwy4Iih7PoR5ptHYYHm6l0YWxfP7GF8ZsAriQzFvoVdcgiLi+ZHR nRpT62jEfSlVjuUSsH1p5IbZIMk2A6sE -----END CERTIFICATE-----Generated at Sun May 18 02:05:21 2025 by rpki-client