$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: g5ZSqu1xRIk9neeRkPLcJBBlULqN2LlotOIFgca6xAI= Subject key identifier: 26:54:92:E1:FF:35:DA:7B:F4:48:AD:56:83:3D:97:A1:48:A8:24:98 Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 09E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 09E1 Signing time: Mon 12 May 2025 19:45:42 +0000 Manifest this update: Mon 12 May 2025 19:45:42 +0000 Manifest next update: Mon 19 May 2025 19:45:42 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: ApCwcehw4ugtZYqdVbcvBako6yv4DDrsUPe1H3u1XW0=) 2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: vYfbYGbaZtOjNPwwYTLo3cpgHwXTvaA/VLhLM/0gXjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2537 (0x9e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: May 12 19:45:42 2025 GMT Not After : May 19 19:45:42 2025 GMT Subject: CN=68224fe6-5eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:03:ae:e4:52:64:68:b7:60:b9:78:62:9d:42: 26:80:12:dc:be:77:e6:9a:87:e0:bc:39:e1:f4:bc: 7f:c0:23:7c:9c:e4:3a:ee:7c:8b:0f:d7:5c:4a:31: 5d:62:bd:95:d1:b9:d8:bc:03:96:05:e7:83:f4:30: 39:0c:9b:1c:4b:71:1f:80:42:27:5e:3d:40:ec:fc: 86:11:08:e2:7e:af:0c:8a:e4:c6:14:f3:72:6b:18: 5e:6d:28:2d:21:1a:ea:fd:bd:6f:4e:15:76:94:38: 6c:dd:74:6b:df:a9:d8:90:a5:a1:59:96:6e:d7:00: 2e:17:e6:3a:0e:b5:10:0c:cd:d8:07:92:30:6b:b9: d0:a0:84:42:4f:c8:05:a2:92:b0:ea:fb:66:4d:18: 62:87:90:d6:d7:c7:70:7b:7b:03:55:94:0d:c9:c0: ff:27:32:ff:18:02:a0:77:53:c1:90:0b:bd:6c:11: 0e:33:d5:d1:fe:de:c1:1a:e2:ce:ad:8c:5a:00:7b: 20:65:97:2b:52:01:18:0a:ec:42:c5:f5:42:86:27: 82:e7:93:16:f7:00:95:ef:6e:9c:f3:32:0c:9b:e9: da:0c:aa:51:1e:b9:9e:68:23:df:d8:24:07:7a:1e: 45:8e:12:df:80:c8:13:61:6f:9a:bf:cc:50:11:0b: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:54:92:E1:FF:35:DA:7B:F4:48:AD:56:83:3D:97:A1:48:A8:24:98 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e6:2c:25:90:2f:43:cd:05:e1:f3:90:76:53:f6:22:1a:c8: ce:3e:73:2b:bd:ac:eb:a7:7d:b5:f2:73:fe:9a:9c:5f:a8:aa: 6f:c3:70:31:7d:cb:70:07:c0:51:5a:c7:e8:a8:83:af:97:0d: b6:5e:33:93:35:91:33:be:3b:8f:3c:e0:63:85:62:49:91:06: ac:9e:2d:7e:1f:13:30:de:cc:eb:80:70:0f:3d:cb:fe:91:78: c1:a7:5c:e2:1b:db:92:64:be:9a:f1:10:d9:4c:7f:59:56:04: 17:3c:5e:b3:20:bf:c0:8b:50:9f:dd:26:89:71:79:c2:33:23: 55:ba:8c:9d:ac:cb:b8:3d:10:d9:ee:fc:b6:98:0b:bb:ce:e0: 75:67:17:be:5d:ed:28:31:e8:ce:63:1b:d4:9f:eb:8c:36:e0: 72:c9:cf:f3:b2:89:f1:0e:c3:e5:ad:c1:da:aa:dc:06:c7:c8: 17:99:e6:b9:47:c7:e0:79:4a:f9:73:43:84:b3:60:89:a9:65: 94:79:f5:a3:0c:df:59:93:1a:b0:28:65:9a:e0:1b:19:7f:16: c8:a5:05:58:fe:c4:48:f4:2f:1c:49:5e:3b:e6:5e:7f:7a:28: 26:3a:8b:1d:f7:16:ee:05:e6:93:00:ee:f3:4c:2b:42:d8:21: e3:9e:d5:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjUwNTEyMTk0NTQyWhcNMjUwNTE5MTk0NTQyWjAYMRYwFAYD VQQDEw02ODIyNGZlNi01ZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gOu5FJkaLdguXhinUImgBLcvnfmmofgvDnh9Lx/wCN8nOQ67nyLD9dcSjFd Yr2V0bnYvAOWBeeD9DA5DJscS3EfgEInXj1A7PyGEQjifq8MiuTGFPNyaxhebSgt IRrq/b1vThV2lDhs3XRr36nYkKWhWZZu1wAuF+Y6DrUQDM3YB5Iwa7nQoIRCT8gF opKw6vtmTRhih5DW18dwe3sDVZQNycD/JzL/GAKgd1PBkAu9bBEOM9XR/t7BGuLO rYxaAHsgZZcrUgEYCuxCxfVChieC55MW9wCV726c8zIMm+naDKpRHrmeaCPf2CQH eh5FjhLfgMgTYW+av8xQEQuGsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZUkuH/ Ndp79EitVoM9l6FIqCSYMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE5iwlkC9DzQXh85B2U/YiGsjOPnMrvazrp3218nP+mpxfqKpvw3Ax fctwB8BRWsfoqIOvlw22XjOTNZEzvjuPPOBjhWJJkQasni1+HxMw3szrgHAPPcv+ kXjBp1ziG9uSZL6a8RDZTH9ZVgQXPF6zIL/Ai1Cf3SaJcXnCMyNVuoydrMu4PRDZ 7vy2mAu7zuB1Zxe+Xe0oMejOYxvUn+uMNuByyc/zsonxDsPlrcHaqtwGx8gXmea5 R8fgeUr5c0OEs2CJqWWUefWjDN9ZkxqwKGWa4BsZfxbIpQVY/sRI9C8cSV475l5/ eigmOosd9xbuBeaTAO7zTCtC2CHjntX3 -----END CERTIFICATE-----Generated at Mon May 12 21:57:16 2025 by rpki-client