$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft File: 99ZBYbOgStTlnAFz47gHWSgtQ8E.mft (raw, json) Hash identifier: 0414dYVe3/lBSJTcCJpWBA7mlZSmKAIkaSs9NRVZS5E= Subject key identifier: 12:5E:69:E9:94:77:FD:F2:59:64:01:68:66:40:20:AC:0F:1B:C4:5D Authority key identifier: F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 Certificate issuer: /CN=A919C7A9/serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft Manifest number: 0141 Signing time: Thu 03 Jul 2025 04:36:15 +0000 Manifest this update: Thu 03 Jul 2025 04:36:15 +0000 Manifest next update: Thu 10 Jul 2025 04:36:14 +0000 Files and hashes: 1: 99ZBYbOgStTlnAFz47gHWSgtQ8E.crl (hash: qxHsXOotepR6Yzzjjvz4/Jboi2Rl/Ty2QCtqbYoct34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7A9, serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Validity Not Before: Jul 3 04:36:15 2025 GMT Not After : Jul 10 04:36:14 2025 GMT Subject: CN=686608bf-5ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d0:49:fc:a8:07:4a:4c:12:6e:e6:1b:db:07: 6e:0f:10:43:97:24:34:a6:1b:4b:33:a4:57:66:fb: 4f:7e:3f:b0:bc:ed:9f:28:19:26:93:e0:f9:6d:79: bc:f1:3f:66:dd:f2:39:f9:6a:e0:66:84:94:b4:0f: f6:b7:53:6b:4b:ba:9f:88:bc:74:dd:e5:b6:85:47: 1b:40:bc:6b:1f:9b:df:a0:74:de:99:88:d3:79:ba: b1:5e:00:54:43:e3:33:94:90:9e:02:24:66:a0:8a: c9:e6:86:d5:a4:b8:35:40:73:b7:e5:e8:a1:b4:bf: ed:f7:a6:9e:e9:3b:33:36:42:38:1a:2a:ca:33:2c: 97:7c:14:1c:02:54:7c:87:a1:fd:55:50:4e:5b:8d: 47:2a:18:39:42:03:c5:7e:02:ea:aa:0f:f4:59:37: 61:e9:e8:27:5c:f6:05:95:4b:90:ef:2c:df:5e:cd: cd:4b:a8:3e:93:89:f1:34:e0:39:ae:13:e3:df:d9: 1e:5c:ec:32:49:f3:d8:e1:d7:22:bb:1f:fe:19:5e: 0f:ad:4d:61:64:b2:2a:fc:e8:88:09:53:e5:2a:15: bb:19:8d:ba:45:e3:cd:9e:be:6f:ec:34:91:31:d7: a9:39:56:52:eb:11:1f:00:7f:04:dd:60:6d:53:a3: 53:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5E:69:E9:94:77:FD:F2:59:64:01:68:66:40:20:AC:0F:1B:C4:5D X509v3 Authority Key Identifier: keyid:F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:7c:39:49:2a:f6:72:64:fe:40:e6:78:0a:00:71:88:6c:7c: cf:a6:db:05:15:ac:f5:86:ff:df:fb:dc:d0:4b:76:3a:30:5c: 97:27:ae:51:94:ca:58:eb:f8:7e:18:93:fe:9e:6e:db:94:ed: 86:88:78:f6:e5:0d:ba:d6:d5:65:d6:e7:5b:92:30:f0:3a:49: ef:bb:a4:01:53:c0:76:69:6b:46:92:75:21:22:4b:33:8b:a7: 23:89:df:c5:a6:69:80:dd:ca:a1:a7:2f:f2:c2:e8:8b:13:70: eb:15:e1:b6:98:7a:fb:40:93:3e:8b:f3:5e:f1:ee:3f:89:bc: df:0b:fe:dd:9d:9f:fa:51:3d:06:84:04:02:d4:91:a7:d3:05: 12:73:92:2c:7f:79:0c:25:1a:cf:95:50:7c:ac:24:d3:8b:34: 76:62:37:6e:e8:43:7f:43:37:72:ea:67:b8:04:c6:dc:4a:ea: be:c8:a7:43:60:0c:08:97:20:39:21:9a:13:bd:d0:6e:e6:ee: fd:42:c8:54:5a:12:6d:16:1d:bc:5a:64:62:c4:8b:dd:85:ea: ee:a5:1b:36:92:f8:b2:11:1a:82:71:1f:19:af:19:40:7f:78: 33:f5:a8:2e:f7:d2:de:32:31:92:29:6f:5d:70:ab:22:be:22: 25:e0:c4:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QTkxMTAvBgNVBAUTKEY3RDY0MTYxQjNBMDRBRDRFNTlDMDE3M0UzQjgwNzU5 MjgyRDQzQzEwHhcNMjUwNzAzMDQzNjE1WhcNMjUwNzEwMDQzNjE0WjAYMRYwFAYD VQQDEw02ODY2MDhiZi01ZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79BJ/KgHSkwSbuYb2wduDxBDlyQ0phtLM6RXZvtPfj+wvO2fKBkmk+D5bXm8 8T9m3fI5+WrgZoSUtA/2t1NrS7qfiLx03eW2hUcbQLxrH5vfoHTemYjTebqxXgBU Q+MzlJCeAiRmoIrJ5obVpLg1QHO35eihtL/t96ae6TszNkI4GirKMyyXfBQcAlR8 h6H9VVBOW41HKhg5QgPFfgLqqg/0WTdh6egnXPYFlUuQ7yzfXs3NS6g+k4nxNOA5 rhPj39keXOwySfPY4dciux/+GV4PrU1hZLIq/OiICVPlKhW7GY26RePNnr5v7DSR MdepOVZS6xEfAH8E3WBtU6NTjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJeaemU d/3yWWQBaGZAIKwPG8RdMB8GA1UdIwQYMBaAFPfWQWGzoErU5ZwBc+O4B1koLUPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdBOS9BRkEwRTJBNDgx RTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0VGxuQUZ6NDdnSFdTZ3RR OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5WkJZYk9nU3RUbG5BRno0N2dIV1NndFE4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdBOS9BRkEwRTJBNDgxRTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0 VGxuQUZ6NDdnSFdTZ3RROEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDfDlJKvZyZP5A5ngKAHGIbHzPptsFFaz1hv/f+9zQS3Y6MFyXJ65R lMpY6/h+GJP+nm7blO2GiHj25Q261tVl1udbkjDwOknvu6QBU8B2aWtGknUhIksz i6cjid/FpmmA3cqhpy/ywuiLE3DrFeG2mHr7QJM+i/Ne8e4/ibzfC/7dnZ/6UT0G hAQC1JGn0wUSc5Isf3kMJRrPlVB8rCTTizR2Yjdu6EN/Qzdy6me4BMbcSuq+yKdD YAwIlyA5IZoTvdBu5u79QshUWhJtFh28WmRixIvdherupRs2kviyERqCcR8ZrxlA f3gz9agu99LeMjGSKW9dcKsiviIl4MRh -----END CERTIFICATE-----Generated at Thu Jul 3 18:19:38 2025 by rpki-client