$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft File: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft (raw, json) Hash identifier: zA7Fa32WhIYG6mcoNkkFfBXs39wSzXC8wCnem03uRD0= Subject key identifier: 41:17:04:CE:F1:22:87:6A:FD:32:E8:AE:B0:75:53:FD:23:56:A3:76 Authority key identifier: E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 Certificate issuer: /CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Certificate serial: 3478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft Manifest number: 3478 Signing time: Thu 24 Apr 2025 15:12:05 +0000 Manifest this update: Thu 24 Apr 2025 15:12:05 +0000 Manifest next update: Thu 01 May 2025 15:12:05 +0000 Files and hashes: 1: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl (hash: 8qhhJ5spnwU5FvZ6cxU9B+CsZjY2nGDw9MSFsdCPVok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B77, serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Validity Not Before: Apr 24 15:12:05 2025 GMT Not After : May 1 15:12:05 2025 GMT Subject: CN=680a54c5-6aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:17:00:39:b3:72:c9:ff:ba:06:82:c9:bd: fd:d3:cf:3a:2d:8a:8c:43:e9:5d:a3:db:35:75:4c: b6:cb:f1:22:04:8b:ff:0a:27:41:ad:c0:14:55:5f: 49:7c:5e:ab:5c:6e:85:6d:e2:cf:ab:1e:d2:de:da: 00:aa:25:af:e0:f8:8e:2b:6f:b8:1d:69:78:09:f0: c9:17:38:b6:b5:a0:83:4b:5b:87:cc:11:c1:5c:56: 83:f9:aa:98:0c:17:c4:55:e5:21:11:78:3e:37:be: d1:7e:c5:9b:ba:01:da:89:ce:42:3d:b8:21:bb:f7: 79:57:1f:f3:5e:f7:16:ff:e1:97:43:f3:d7:31:2d: 2c:e0:c4:7f:62:6a:e0:9e:1b:60:14:f3:7b:ab:78: 45:99:ce:10:f8:24:37:33:58:f1:25:77:c4:75:d0: db:ff:99:58:1e:2c:b6:d1:ef:87:57:e3:95:17:92: 7a:bd:39:91:dd:83:58:a3:0d:dd:c0:2b:05:3d:a9: 65:97:eb:7e:c1:f6:3a:ca:f8:bd:66:cf:6d:5f:fc: c2:bc:f2:3a:f4:9c:5b:b9:73:da:c5:17:10:97:90: 79:1a:d5:85:e8:fd:29:38:1a:60:f0:f8:0f:92:56: 7e:7e:88:22:3b:09:5a:f1:6a:d7:30:d7:3c:63:e6: d1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:04:CE:F1:22:87:6A:FD:32:E8:AE:B0:75:53:FD:23:56:A3:76 X509v3 Authority Key Identifier: keyid:E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5e:c6:dc:af:0e:08:20:f1:92:01:6f:4d:b6:a3:f2:0c:8e: 39:63:eb:51:85:d2:3d:77:9f:4a:6e:f0:87:a7:2a:7c:23:9e: 80:90:61:9a:d6:a2:96:3b:1d:3e:2a:a8:b7:a9:c1:bc:af:69: b0:18:41:a8:08:7f:0a:7d:ec:cc:2d:6d:60:6d:c2:81:64:30: 1a:eb:5d:60:9b:6c:66:e2:4e:66:89:da:9f:10:57:a6:19:cb: 6c:69:96:38:6b:c5:a0:72:89:3d:36:d5:44:f7:b0:e4:b7:ae: aa:93:6d:26:98:51:2f:59:59:fb:10:68:d2:b2:0b:54:b5:44: fa:d2:fb:6e:51:ae:b8:92:4a:9c:bd:21:42:37:99:91:f9:43: ad:55:d8:b2:ac:ee:26:de:04:d7:3b:97:87:df:2d:36:b3:02: 78:75:15:1e:e9:9e:48:93:b5:38:2d:2d:f8:e0:16:d0:94:eb: a1:4b:2e:bc:bb:e6:64:b4:48:80:02:4d:ff:6f:37:30:8a:4c: f0:22:8f:59:69:92:a5:e1:a3:7d:e3:bd:13:32:10:c6:67:63: 9c:98:63:ea:b5:f8:84:db:a9:98:35:9e:27:a0:a2:09:9f:6e: 65:58:05:7c:b5:b8:cd:e4:ed:33:f3:a8:f7:3d:b6:2b:16:79: 5b:7d:4c:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCNzcxMTAvBgNVBAUTKEU1OTVCQ0I3QkZFM0M4NjcyQTgyODIxQ0M5MzZCQzhF QzM5MjAzNjkwHhcNMjUwNDI0MTUxMjA1WhcNMjUwNTAxMTUxMjA1WjAYMRYwFAYD VQQDEw02ODBhNTRjNS02YWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVUXADmzcsn/ugaCyb390886LYqMQ+ldo9s1dUy2y/EiBIv/CidBrcAUVV9J fF6rXG6FbeLPqx7S3toAqiWv4PiOK2+4HWl4CfDJFzi2taCDS1uHzBHBXFaD+aqY DBfEVeUhEXg+N77RfsWbugHaic5CPbghu/d5Vx/zXvcW/+GXQ/PXMS0s4MR/Ymrg nhtgFPN7q3hFmc4Q+CQ3M1jxJXfEddDb/5lYHiy20e+HV+OVF5J6vTmR3YNYow3d wCsFPalll+t+wfY6yvi9Zs9tX/zCvPI69JxbuXPaxRcQl5B5GtWF6P0pOBpg8PgP klZ+fogiOwla8WrXMNc8Y+bRcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEXBM7x Iodq/TLorrB1U/0jVqN2MB8GA1UdIwQYMBaAFOWVvLe/48hnKoKCHMk2vI7DkgNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0I3Ny81ODk4QTU2QzFE QTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlHY3Fnb0ljeVRhOGpzT1NB MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaVzh0N19qeUdjcWdvSWN5VGE4anNPU0Eyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0I3Ny81ODk4QTU2QzFEQTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlH Y3Fnb0ljeVRhOGpzT1NBMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANXsbcrw4IIPGSAW9NtqPyDI45Y+tRhdI9d59KbvCHpyp8I56AkGGa 1qKWOx0+Kqi3qcG8r2mwGEGoCH8KfezMLW1gbcKBZDAa611gm2xm4k5midqfEFem GctsaZY4a8Wgcok9NtVE97Dkt66qk20mmFEvWVn7EGjSsgtUtUT60vtuUa64kkqc vSFCN5mR+UOtVdiyrO4m3gTXO5eH3y02swJ4dRUe6Z5Ik7U4LS344BbQlOuhSy68 u+ZktEiAAk3/bzcwikzwIo9ZaZKl4aN9470TMhDGZ2OcmGPqtfiE26mYNZ4noKIJ n25lWAV8tbjN5O0z86j3PbYrFnlbfUxs -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:33 2025 by rpki-client