$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: hGkut2KK7ute7MGTRJRpPb8XWt7amB+jQhoyma71UCk= Subject key identifier: 00:D9:1B:20:51:21:03:22:14:86:10:A8:D1:21:94:71:C9:D7:D2:5E Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0A01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 09F9 Signing time: Mon 30 Jun 2025 20:00:50 +0000 Manifest this update: Mon 30 Jun 2025 20:00:50 +0000 Manifest next update: Mon 07 Jul 2025 20:00:50 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: PPVz8sctWtWyJWT9pD5pYZHPVZ92CeW7kgGxTdBYxyc=) 2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: vYfbYGbaZtOjNPwwYTLo3cpgHwXTvaA/VLhLM/0gXjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Jun 30 20:00:50 2025 GMT Not After : Jul 7 20:00:50 2025 GMT Subject: CN=6862ecf2-1de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:8e:04:a4:b8:5b:3f:e4:b3:3a:b5:33:d8: 95:6d:b9:ea:16:2a:f1:42:01:62:2b:65:e2:f7:0c: c3:bc:62:b9:63:f6:b3:ed:be:ff:85:b3:19:dd:f3: 48:2e:6d:93:8f:3b:7c:08:00:ef:ba:21:ea:f4:e1: 09:83:c7:ba:88:df:bf:3d:12:2c:10:a4:95:39:83: 50:61:83:46:2e:d6:09:8f:73:03:54:a1:3e:1d:3b: 8b:85:bc:7a:5e:19:80:b4:c3:c6:31:4a:fa:66:56: dd:56:08:db:d6:d2:c6:69:cd:f6:dc:98:19:88:61: 6e:9a:ca:70:62:37:95:ab:36:4e:f2:cb:0b:82:17: b7:2d:0d:1c:d2:0f:b5:c9:92:18:0a:b0:e3:e6:c4: 12:7f:94:21:46:43:b0:1f:a8:08:64:58:9f:31:73: 3b:70:a6:7e:4a:72:d5:02:7c:93:11:a4:58:aa:b2: 90:b1:09:66:60:79:b0:c1:b5:97:d3:74:a9:1b:3d: 38:6f:2f:89:ce:03:2a:99:77:59:e8:3f:99:d9:82: 44:77:66:1e:84:42:a6:2f:70:13:45:f9:0d:95:dc: 68:44:a7:b7:61:1c:18:43:67:69:db:eb:47:34:68: 72:dd:f6:a2:30:e0:53:ad:a1:1d:5f:0b:73:56:73: 93:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D9:1B:20:51:21:03:22:14:86:10:A8:D1:21:94:71:C9:D7:D2:5E X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8d:16:3b:37:8c:29:11:73:76:94:68:42:96:b5:20:7d:e4: 47:c4:48:27:47:16:01:61:50:f4:97:bd:ca:35:da:43:72:f4: db:6b:2d:c0:c2:09:98:fd:c9:51:56:af:d6:2d:20:f5:71:9f: 93:7f:6d:1f:66:04:5c:cc:e5:f5:83:d2:57:8e:72:16:69:7a: 66:38:a2:5e:54:eb:f0:b7:04:a0:49:a9:0d:00:b2:fb:ba:be: e5:be:b1:5a:e9:eb:98:eb:b9:e7:c0:48:8e:26:ec:69:fd:52: 23:d1:54:bf:ca:d3:b7:75:ca:63:0f:f7:22:8f:6e:16:eb:cb: 71:aa:01:31:27:fa:29:a7:b8:e8:3d:9b:dc:12:6e:bd:71:f6: 76:96:1a:57:c1:14:96:fb:5e:7e:22:1f:12:8e:63:49:71:13: de:87:0f:d4:d8:e3:87:f1:0d:2e:f7:66:ac:16:91:11:e3:5d: ed:e4:96:53:c1:4f:e6:40:15:76:eb:e6:ab:1e:6d:26:c1:0e: 45:42:85:9c:96:c8:bf:31:f5:a3:1e:2f:6f:1a:b5:e3:39:e1: 29:b0:fa:ee:87:52:cd:5b:1d:56:eb:2c:51:18:16:f0:1d:17: d3:92:62:9b:4d:1b:4e:93:cf:6f:bd:d3:af:8d:46:0a:87:77: 4a:78:d4:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjUwNjMwMjAwMDUwWhcNMjUwNzA3MjAwMDUwWjAYMRYwFAYD VQQDEw02ODYyZWNmMi0xZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPeOBKS4Wz/kszq1M9iVbbnqFirxQgFiK2Xi9wzDvGK5Y/az7b7/hbMZ3fNI Lm2Tjzt8CADvuiHq9OEJg8e6iN+/PRIsEKSVOYNQYYNGLtYJj3MDVKE+HTuLhbx6 XhmAtMPGMUr6ZlbdVgjb1tLGac323JgZiGFumspwYjeVqzZO8ssLghe3LQ0c0g+1 yZIYCrDj5sQSf5QhRkOwH6gIZFifMXM7cKZ+SnLVAnyTEaRYqrKQsQlmYHmwwbWX 03SpGz04by+JzgMqmXdZ6D+Z2YJEd2YehEKmL3ATRfkNldxoRKe3YRwYQ2dp2+tH NGhy3faiMOBTraEdXwtzVnOTXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADZGyBR IQMiFIYQqNEhlHHJ19JeMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsjRY7N4wpEXN2lGhClrUgfeRHxEgnRxYBYVD0l73KNdpDcvTbay3A wgmY/clRVq/WLSD1cZ+Tf20fZgRczOX1g9JXjnIWaXpmOKJeVOvwtwSgSakNALL7 ur7lvrFa6euY67nnwEiOJuxp/VIj0VS/ytO3dcpjD/cij24W68txqgExJ/opp7jo PZvcEm69cfZ2lhpXwRSW+15+Ih8SjmNJcRPehw/U2OOH8Q0u92asFpER413t5JZT wU/mQBV26+arHm0mwQ5FQoWclsi/MfWjHi9vGrXjOeEpsPruh1LNWx1W6yxRGBbw HRfTkmKbTRtOk89vvdOvjUYKh3dKeNQE -----END CERTIFICATE-----Generated at Wed Jul 2 16:35:28 2025 by rpki-client