$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft File: z9EY2pb_YF-93yeqSqAmO072edo.mft (raw, json) Hash identifier: 8orayM+qSH8y0aLDcCK+4GLX9jDDX0FDI4HaYtfr30k= Subject key identifier: 8A:2D:20:C8:1E:58:D9:A0:64:7B:7F:86:C9:B6:EA:B6:31:20:A2:AC Authority key identifier: CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA Certificate issuer: /CN=A91C9E82/serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft Manifest number: 012A Signing time: Sun 11 May 2025 03:27:03 +0000 Manifest this update: Sun 11 May 2025 03:27:03 +0000 Manifest next update: Sun 18 May 2025 03:27:03 +0000 Files and hashes: 1: z9EY2pb_YF-93yeqSqAmO072edo.crl (hash: 12tTB22EUtSOxHl13l0TShJzjcC8AEjpEn/nE75vTdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA Validity Not Before: May 11 03:27:03 2025 GMT Not After : May 18 03:27:03 2025 GMT Subject: CN=68201907-c5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:a8:58:05:e4:a6:24:b6:ff:e9:5d:5e:c9: 06:2b:8f:9a:46:67:89:93:ae:f7:9c:a3:2e:64:da: 9f:97:5f:a3:42:1d:29:8f:58:73:3f:2d:ac:7a:95: d6:0b:77:3f:31:09:05:8d:1d:66:ab:17:bd:53:78: 2c:16:56:58:b3:d9:a7:d8:da:d6:f7:1a:79:59:46: 58:26:41:e8:1f:8b:64:81:18:32:c5:10:d3:ab:03: d9:d8:df:c8:b8:c0:f9:ba:d4:fa:af:af:9f:8b:17: 05:da:d9:63:eb:13:19:f3:37:f2:42:fc:9e:35:3e: 5a:32:f3:91:fd:f7:08:35:51:f3:6e:1d:0a:80:ff: b3:0e:63:a8:71:07:66:c1:7d:2b:fd:ac:c6:72:7d: 3f:bc:87:7b:77:c1:17:6c:9c:37:d4:36:84:6c:f0: e2:47:50:8d:9a:5f:32:10:c4:4b:66:36:35:9d:39: dc:2d:df:5c:67:6f:59:ff:c1:eb:19:a9:79:09:55: b6:7f:29:a5:7e:41:7f:eb:fb:42:77:16:16:a3:9b: 35:74:18:bb:68:1b:28:7f:fd:69:5b:c2:9a:91:2b: 87:95:78:bf:23:62:43:c4:a6:47:41:ac:15:df:91: 05:d4:74:c0:d4:c0:ee:82:ac:92:e2:fa:9f:c7:e2: 16:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:20:C8:1E:58:D9:A0:64:7B:7F:86:C9:B6:EA:B6:31:20:A2:AC X509v3 Authority Key Identifier: keyid:CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:4a:b1:2a:90:24:4d:a0:41:fc:a7:f9:11:34:06:eb:48:c6: 41:01:fe:3f:7c:68:79:2a:2f:0c:6a:20:81:13:85:cd:b3:5d: 56:24:c1:1e:1e:4e:bb:68:23:3b:2e:29:1d:47:aa:5c:18:2f: d4:f4:78:c5:37:72:3e:cf:db:ab:2e:97:77:cc:f4:b2:73:5a: 0d:f5:fe:f2:cc:00:2a:2f:38:c1:40:ff:46:79:14:38:8f:dc: 27:1f:d3:d6:a5:a0:27:32:68:53:09:65:80:59:cd:9b:bc:b5: 16:cf:2e:77:0f:43:c3:5f:40:03:a7:27:5b:9a:73:cf:72:7c: 3e:0c:55:5a:be:4e:67:cb:83:ce:8c:f9:a1:63:bb:df:44:99: 2f:0e:6f:5c:2c:30:8a:35:83:12:03:3c:10:56:e0:62:62:be: 69:06:64:f9:f0:36:d1:bf:4d:13:cd:19:1b:67:38:b2:5e:c2: 3a:f7:b4:9b:06:42:11:cc:19:d4:2e:9a:f1:e4:87:c2:3c:5e: 90:81:67:8b:1b:eb:f9:64:0c:9f:3f:ed:50:cf:28:c8:35:e2: 26:c1:8f:f0:c3:57:f4:9f:e3:8b:38:9b:93:a2:f1:ea:3f:7d: 57:ca:4d:2f:9c:d5:cd:e3:a2:6a:77:3a:19:46:38:79:5b:29: 16:bf:3d:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKENGRDExOERBOTZGRjYwNUZCRERGMjdBQTRBQTAyNjNC NEVGNjc5REEwHhcNMjUwNTExMDMyNzAzWhcNMjUwNTE4MDMyNzAzWjAYMRYwFAYD VQQDEw02ODIwMTkwNy1jNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul+oWAXkpiS2/+ldXskGK4+aRmeJk673nKMuZNqfl1+jQh0pj1hzPy2sepXW C3c/MQkFjR1mqxe9U3gsFlZYs9mn2NrW9xp5WUZYJkHoH4tkgRgyxRDTqwPZ2N/I uMD5utT6r6+fixcF2tlj6xMZ8zfyQvyeNT5aMvOR/fcINVHzbh0KgP+zDmOocQdm wX0r/azGcn0/vId7d8EXbJw31DaEbPDiR1CNml8yEMRLZjY1nTncLd9cZ29Z/8Hr Gal5CVW2fymlfkF/6/tCdxYWo5s1dBi7aBsof/1pW8KakSuHlXi/I2JDxKZHQawV 35EF1HTA1MDugqyS4vqfx+IW5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIotIMge WNmgZHt/hsm26rYxIKKsMB8GA1UdIwQYMBaAFM/RGNqW/2Bfvd8nqkqgJjtO9nna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FMjMwMzIyQTYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi96OUVZMnBiX1lGLTkzeWVxU3FBbU8wNzJl ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3o5RVkycGJfWUYtOTN5ZXFTcUFtTzA3MmVkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9FMjMwMzIyQTYzNkYxMUVFOTdDNzRCNUNDNEY5QUUwMi96OUVZMnBiX1lG LTkzeWVxU3FBbU8wNzJlZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBSrEqkCRNoEH8p/kRNAbrSMZBAf4/fGh5Ki8MaiCBE4XNs11WJMEe Hk67aCM7LikdR6pcGC/U9HjFN3I+z9urLpd3zPSyc1oN9f7yzAAqLzjBQP9GeRQ4 j9wnH9PWpaAnMmhTCWWAWc2bvLUWzy53D0PDX0ADpydbmnPPcnw+DFVavk5ny4PO jPmhY7vfRJkvDm9cLDCKNYMSAzwQVuBiYr5pBmT58DbRv00TzRkbZziyXsI697Sb BkIRzBnULprx5IfCPF6QgWeLG+v5ZAyfP+1QzyjINeImwY/ww1f0n+OLOJuTovHq P31Xyk0vnNXN46JqdzoZRjh5WykWvz3Q -----END CERTIFICATE-----Generated at Sun May 11 05:05:19 2025 by rpki-client