$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: Jr34EwOFrv/mjc+AMnGnpHhDJfOlsb6bLeiEZ9mFIL0= Subject key identifier: 57:DC:4D:54:19:6D:4D:49:D2:A0:6F:85:56:0E:6E:D7:5E:D0:44:64 Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 242E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 2410 Signing time: Thu 24 Apr 2025 15:49:58 +0000 Manifest this update: Thu 24 Apr 2025 15:49:58 +0000 Manifest next update: Thu 01 May 2025 15:49:58 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: aVzgOK35tsgofXT5bDuogSkZ6PjyJlQI2BH8ieOXy2E=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: crjIi9A4daWBIMavWgwdrvqfs6rboASaaFeiLlhaj3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9262 (0x242e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Apr 24 15:49:58 2025 GMT Not After : May 1 15:49:58 2025 GMT Subject: CN=680a5da6-f9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:1a:58:21:86:f2:fe:6c:cc:20:ed:a1:f8: 71:cb:7e:31:bc:8f:f6:a8:51:1b:d3:03:51:22:90: 4e:ad:51:cc:cf:46:c7:3e:9d:ec:7b:c4:e6:e6:ce: fe:b7:84:ca:29:04:50:2b:c9:a1:e4:9e:58:dd:4c: 15:61:84:ca:a8:f8:7f:49:29:b9:96:67:1f:db:85: 7c:92:35:68:43:64:90:a6:f4:47:f3:53:6e:79:8d: 5a:57:4e:32:61:96:3b:58:28:a7:23:aa:1b:54:e4: bf:1b:7b:f6:c4:18:a4:11:cb:4c:13:af:2c:89:86: 17:74:11:50:ce:84:3a:ff:df:bf:4b:8d:5f:57:70: c8:e7:1d:76:01:5d:eb:bf:c6:40:22:cd:f2:c9:1c: 2a:44:97:60:74:29:9a:34:56:4e:c0:7c:18:6d:02: 9c:f9:83:a5:94:3e:84:b4:c4:21:5f:82:bb:b4:f6: a8:66:46:ad:86:ee:f0:53:c5:16:97:ad:30:c8:3d: c2:dd:bf:45:aa:df:20:61:1d:e3:b7:d1:ee:6e:c3: 8d:04:94:f6:bd:30:48:12:03:c6:3d:5b:47:85:3f: 48:37:66:29:f3:35:07:9a:f3:83:81:94:12:1b:dd: a8:0f:b7:ca:54:e4:4d:a9:ef:a7:bf:a0:21:de:a8: 3d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DC:4D:54:19:6D:4D:49:D2:A0:6F:85:56:0E:6E:D7:5E:D0:44:64 X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:45:04:4f:28:59:be:70:46:be:e2:95:0e:42:68:02:b4:9b: d8:66:8e:12:18:02:b9:e5:60:5b:cf:f7:06:50:a1:da:ec:e1: 38:64:6e:7f:7b:ae:56:cc:78:b2:66:5d:61:d4:ce:82:3e:52: 37:d3:fa:de:0f:ef:fc:83:92:c1:f0:93:f2:fa:ff:f3:89:a7: 6b:35:03:c4:f5:6d:f7:9b:af:9c:51:28:03:3e:82:88:8e:e1: 93:9b:fe:ff:81:7d:05:7d:bb:8e:e7:89:f5:40:27:68:f4:68: 37:79:2a:55:fb:dc:3d:c4:49:23:cc:33:b2:4d:e3:a3:9c:e3: c2:3a:0a:a6:14:89:ac:22:b8:54:e6:26:1a:4c:7b:72:f1:ae: 69:33:f7:9a:f7:35:16:50:f8:20:cc:9d:77:a5:8f:90:de:8e: 93:2c:56:ec:30:05:3f:72:c8:90:d5:7f:ea:ed:bb:d9:2f:85: eb:db:b0:c9:68:e8:02:44:d9:d7:05:6e:fd:f4:44:f7:4b:aa: 59:4a:51:3e:bc:b6:a9:5b:24:5b:b1:2d:ec:89:28:44:59:90: 97:1a:c2:26:9c:cb:4f:1e:b7:2e:9a:b7:dd:14:49:f3:11:2e: 23:4a:a3:ab:9e:f4:35:b6:de:42:f1:c0:97:63:1f:d5:61:19: d6:f6:bc:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjUwNDI0MTU0OTU4WhcNMjUwNTAxMTU0OTU4WjAYMRYwFAYD VQQDEw02ODBhNWRhNi1mOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxIaWCGG8v5szCDtofhxy34xvI/2qFEb0wNRIpBOrVHMz0bHPp3se8Tm5s7+ t4TKKQRQK8mh5J5Y3UwVYYTKqPh/SSm5lmcf24V8kjVoQ2SQpvRH81NueY1aV04y YZY7WCinI6obVOS/G3v2xBikEctME68siYYXdBFQzoQ6/9+/S41fV3DI5x12AV3r v8ZAIs3yyRwqRJdgdCmaNFZOwHwYbQKc+YOllD6EtMQhX4K7tPaoZkathu7wU8UW l60wyD3C3b9Fqt8gYR3jt9HubsONBJT2vTBIEgPGPVtHhT9IN2Yp8zUHmvODgZQS G92oD7fKVORNqe+nv6Ah3qg90QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfcTVQZ bU1J0qBvhVYObtde0ERkMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlRQRPKFm+cEa+4pUOQmgCtJvYZo4SGAK55WBbz/cGUKHa7OE4ZG5/ e65WzHiyZl1h1M6CPlI30/reD+/8g5LB8JPy+v/ziadrNQPE9W33m6+cUSgDPoKI juGTm/7/gX0FfbuO54n1QCdo9Gg3eSpV+9w9xEkjzDOyTeOjnOPCOgqmFImsIrhU 5iYaTHty8a5pM/ea9zUWUPggzJ13pY+Q3o6TLFbsMAU/csiQ1X/q7bvZL4Xr27DJ aOgCRNnXBW799ET3S6pZSlE+vLapWyRbsS3siShEWZCXGsImnMtPHrcumrfdFEnz ES4jSqOrnvQ1tt5C8cCXYx/VYRnW9rz8 -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:36 2025 by rpki-client