$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft File: 99ZBYbOgStTlnAFz47gHWSgtQ8E.mft (raw, json) Hash identifier: fQGIAWZcis/W5v7g/A0aowbf9HjLiA+fWY5W61JlLn4= Subject key identifier: 8B:6F:38:D1:FF:36:11:5A:AD:3B:80:00:57:0C:62:91:2E:C4:B1:3F Authority key identifier: F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 Certificate issuer: /CN=A919C7A9/serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft Manifest number: 012A Signing time: Sat 17 May 2025 04:21:14 +0000 Manifest this update: Sat 17 May 2025 04:21:14 +0000 Manifest next update: Sat 24 May 2025 04:21:14 +0000 Files and hashes: 1: 99ZBYbOgStTlnAFz47gHWSgtQ8E.crl (hash: rHqrtKTH1xUECnEJ2wQtmWitjyn5EfQ8clp/ZHLR+bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7A9, serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Validity Not Before: May 17 04:21:14 2025 GMT Not After : May 24 04:21:14 2025 GMT Subject: CN=68280eba-99e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:3d:d6:23:a7:90:52:41:d8:f6:31:bb:d4: 36:86:d8:9e:50:7d:45:68:c8:6e:c5:08:05:b2:7a: 90:04:5d:b2:a7:9f:d2:19:1e:c9:64:f0:83:20:7a: a5:a8:cf:3a:ea:c6:f5:4b:7f:52:2d:97:cd:84:91: 29:28:17:df:35:34:44:57:f6:11:06:f5:04:81:64: 04:46:e6:e4:ec:03:d6:f1:1d:63:3b:28:31:8c:c4: 63:6d:2b:06:4d:c8:84:6e:d2:ad:d3:b4:93:e3:10: 00:6e:b0:84:90:c6:11:f1:c2:a6:eb:9b:60:ed:b5: f7:1c:99:69:9e:d3:01:0f:dd:8f:a4:dc:83:e8:f0: bc:46:cd:6a:91:94:a5:86:ba:19:88:fe:2b:28:78: 87:61:cf:5e:69:98:bb:20:83:d1:20:e7:3b:b9:0c: 30:52:8e:47:fb:52:97:ec:c9:5e:aa:02:f4:dd:09: 7a:fa:56:f4:68:ca:41:9d:9a:4d:b8:a0:95:f2:0d: c8:23:7d:9b:27:71:fa:94:14:17:af:fe:46:63:d0: e4:db:9b:8f:8a:6e:40:e3:ec:21:f3:2d:26:2a:78: 62:a3:8d:be:8c:ff:34:04:2b:00:04:01:e4:bb:39: ab:03:1d:d0:e1:20:72:73:cb:00:7b:82:4a:e6:7a: 48:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6F:38:D1:FF:36:11:5A:AD:3B:80:00:57:0C:62:91:2E:C4:B1:3F X509v3 Authority Key Identifier: keyid:F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:07:4b:7c:3a:66:2e:90:b5:2a:89:fe:40:5c:bc:4c:65:46: 09:9a:77:2a:c4:6a:a7:2d:7c:d2:0e:fc:ae:b4:b3:50:38:f5: 03:76:06:c2:cc:27:91:77:5c:48:45:3e:2f:1c:d5:4a:74:a2: 04:5b:52:2d:b7:86:bc:6a:c4:a8:92:90:d3:21:db:2c:c1:02: 8d:d4:54:d7:c4:d4:d8:29:64:61:5f:08:36:0d:e2:6b:37:f4: 46:26:44:d6:a4:39:c1:48:37:4a:ae:5d:12:68:38:88:ee:4d: 89:f6:f5:31:5e:c9:21:10:73:e5:cb:53:6e:33:ee:e9:25:a7: 16:22:36:3f:4b:94:44:17:02:46:51:aa:23:98:c2:51:a6:d8: 5d:2b:dd:96:0f:a7:34:ce:25:b7:97:27:f7:b7:ce:90:79:78: 07:c3:8a:71:3c:80:33:29:99:05:e4:31:31:4e:a8:cf:70:bd: fb:ba:40:97:e2:a6:83:91:af:a2:8a:cc:fb:b0:73:de:be:c8: 8b:44:25:8d:ad:2e:2d:32:39:7c:ac:32:36:25:2b:b8:fe:47: 13:a6:13:0d:ae:01:d0:5c:35:e9:7a:b8:e1:f2:3a:83:31:39: 7e:4e:a2:77:71:8b:9d:67:e3:8f:ab:ed:df:22:16:00:e2:fd: b4:33:c3:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QTkxMTAvBgNVBAUTKEY3RDY0MTYxQjNBMDRBRDRFNTlDMDE3M0UzQjgwNzU5 MjgyRDQzQzEwHhcNMjUwNTE3MDQyMTE0WhcNMjUwNTI0MDQyMTE0WjAYMRYwFAYD VQQDEw02ODI4MGViYS05OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ag91iOnkFJB2PYxu9Q2htieUH1FaMhuxQgFsnqQBF2yp5/SGR7JZPCDIHql qM866sb1S39SLZfNhJEpKBffNTREV/YRBvUEgWQERubk7APW8R1jOygxjMRjbSsG TciEbtKt07ST4xAAbrCEkMYR8cKm65tg7bX3HJlpntMBD92PpNyD6PC8Rs1qkZSl hroZiP4rKHiHYc9eaZi7IIPRIOc7uQwwUo5H+1KX7MleqgL03Ql6+lb0aMpBnZpN uKCV8g3II32bJ3H6lBQXr/5GY9Dk25uPim5A4+wh8y0mKnhio42+jP80BCsABAHk uzmrAx3Q4SByc8sAe4JK5npIJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItvONH/ NhFarTuAAFcMYpEuxLE/MB8GA1UdIwQYMBaAFPfWQWGzoErU5ZwBc+O4B1koLUPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdBOS9BRkEwRTJBNDgx RTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0VGxuQUZ6NDdnSFdTZ3RR OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5WkJZYk9nU3RUbG5BRno0N2dIV1NndFE4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdBOS9BRkEwRTJBNDgxRTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0 VGxuQUZ6NDdnSFdTZ3RROEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnB0t8OmYukLUqif5AXLxMZUYJmncqxGqnLXzSDvyutLNQOPUDdgbC zCeRd1xIRT4vHNVKdKIEW1Itt4a8asSokpDTIdsswQKN1FTXxNTYKWRhXwg2DeJr N/RGJkTWpDnBSDdKrl0SaDiI7k2J9vUxXskhEHPly1NuM+7pJacWIjY/S5REFwJG UaojmMJRpthdK92WD6c0ziW3lyf3t86QeXgHw4pxPIAzKZkF5DExTqjPcL37ukCX 4qaDka+iisz7sHPevsiLRCWNrS4tMjl8rDI2JSu4/kcTphMNrgHQXDXperjh8jqD MTl+TqJ3cYudZ+OPq+3fIhYA4v20M8Oj -----END CERTIFICATE-----Generated at Sat May 17 06:56:11 2025 by rpki-client