$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json) Hash identifier: S7Jd5LOOfLWa491pk7fwVpXbMrNfMCw952W0YA23oWg= Subject key identifier: 70:08:63:BA:87:0B:BE:76:EC:50:F7:21:3B:D8:1A:CE:23:CD:78:69 Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft Manifest number: 9C Signing time: Fri 25 Apr 2025 05:18:35 +0000 Manifest this update: Fri 25 Apr 2025 05:18:35 +0000 Manifest next update: Fri 02 May 2025 05:18:35 +0000 Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: mgPk3JCMPpVk/7HzCfuP4QjCPKEFO/BHzRIzY1x+Dnk=) 2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: HXqdiQxjt6jDJRy6xUG+Y43waVhKeekg/3lz7cpck8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Validity Not Before: Apr 25 05:18:35 2025 GMT Not After : May 2 05:18:35 2025 GMT Subject: CN=680b1b2b-813b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:fd:c7:3f:02:f4:11:82:df:63:a8:6d:16: b4:23:2c:4e:7c:ea:e5:6e:42:ee:06:a5:28:5c:87: 37:a8:cb:4c:7f:00:ec:75:41:dd:14:31:69:b4:80: 2d:25:75:0e:0b:f1:d9:e5:10:7a:61:27:08:82:a9: b7:03:c7:a8:d3:17:7b:14:09:63:4f:9f:cd:0d:6b: 7c:3d:e2:9f:86:3a:85:e2:29:81:64:b5:d8:61:84: f1:20:b9:37:59:28:46:88:e0:b6:3d:bd:9b:a9:a7: 10:87:12:02:a3:23:54:89:75:20:0f:26:c8:26:e4: 80:9a:48:21:0d:4c:77:b3:b9:3e:53:25:04:bf:4c: 66:9a:d8:89:a6:26:b1:87:25:70:2f:88:8c:20:b9: 2c:88:ff:97:d5:bf:94:46:b9:d2:3c:ab:a5:6f:76: 17:c0:dc:74:4a:eb:9b:e4:b8:e9:9a:c6:5a:3c:a9: c2:5e:09:57:ff:88:59:f3:b8:c8:14:4b:73:a7:57: 1a:18:a7:96:b2:1a:ed:b4:3e:b3:57:e8:fd:68:e4: 5e:0d:0d:90:73:b8:fd:7a:84:27:c5:63:c0:d2:08: f9:d1:ee:fa:96:0e:8c:f8:54:30:06:02:32:49:3b: c5:ba:34:9f:be:84:4b:80:67:8c:eb:d0:32:8c:da: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:08:63:BA:87:0B:BE:76:EC:50:F7:21:3B:D8:1A:CE:23:CD:78:69 X509v3 Authority Key Identifier: keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:62:20:b9:0d:9e:0f:f8:53:35:fd:bf:6c:b7:4d:a4:5e:fd: ac:5a:54:03:2f:cf:76:7c:80:d9:89:a1:0a:2e:aa:67:f0:f6: 7f:82:f0:13:f4:70:2b:59:f6:76:90:45:cf:d1:f3:ef:28:cf: 8c:32:cc:20:dd:14:7a:ec:33:25:25:85:89:3d:a8:02:47:fb: c9:ca:a1:12:35:4c:d2:b7:aa:a2:66:10:33:f1:9a:ec:75:db: ff:39:ec:86:42:7a:6e:5e:f0:58:93:1a:34:15:77:6b:8e:78: 40:8a:f4:c6:54:77:d8:68:5d:c3:f7:7e:67:10:33:5e:a1:98: f9:6f:8c:87:5c:b1:08:9b:11:25:ef:8c:3c:a4:7f:5c:ca:fe: 12:98:9c:b4:b3:2b:ff:76:09:a3:1c:4e:48:09:18:e9:c4:76: 07:ad:f3:c3:35:2a:01:9d:70:9b:7e:b4:22:56:be:22:eb:fb: c0:76:7c:3b:92:7a:ca:5f:7e:39:32:22:27:8a:fc:3c:3e:9f: dd:bd:6a:42:f5:88:3e:99:a0:29:ab:ef:5e:64:c2:b7:a3:5b: 4d:73:12:96:40:af:bd:24:d7:65:6b:ef:9e:b7:41:74:6c:18: 73:01:82:c5:df:c7:9d:5e:b4:4d:ff:24:74:84:13:63:f7:f4: 4f:50:96:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDY1ODE0MDJBMkRBRUM1M0VDRDY1RkQ3QzFEQzgwMEZB NkU3NTczRkEwHhcNMjUwNDI1MDUxODM1WhcNMjUwNTAyMDUxODM1WjAYMRYwFAYD VQQDEw02ODBiMWIyYi04MTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBr9xz8C9BGC32OobRa0IyxOfOrlbkLuBqUoXIc3qMtMfwDsdUHdFDFptIAt JXUOC/HZ5RB6YScIgqm3A8eo0xd7FAljT5/NDWt8PeKfhjqF4imBZLXYYYTxILk3 WShGiOC2Pb2bqacQhxICoyNUiXUgDybIJuSAmkghDUx3s7k+UyUEv0xmmtiJpiax hyVwL4iMILksiP+X1b+URrnSPKulb3YXwNx0Suub5LjpmsZaPKnCXglX/4hZ87jI FEtzp1caGKeWshrttD6zV+j9aOReDQ2Qc7j9eoQnxWPA0gj50e76lg6M+FQwBgIy STvFujSfvoRLgGeM69AyjNrdUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAIY7qH C7527FD3ITvYGs4jzXhpMB8GA1UdIwQYMBaAFGWBQCotrsU+zWX9fB3IAPpudXP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC84MjVCRUI3NDM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhUN05aZjE4SGNnQS1tNTFj X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZRkFLaTJ1eFQ3TlpmMThIY2dBLW01MWNfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC84MjVCRUI3NDM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhU N05aZjE4SGNnQS1tNTFjX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNYiC5DZ4P+FM1/b9st02kXv2sWlQDL892fIDZiaEKLqpn8PZ/gvAT 9HArWfZ2kEXP0fPvKM+MMswg3RR67DMlJYWJPagCR/vJyqESNUzSt6qiZhAz8Zrs ddv/OeyGQnpuXvBYkxo0FXdrjnhAivTGVHfYaF3D935nEDNeoZj5b4yHXLEImxEl 74w8pH9cyv4SmJy0syv/dgmjHE5ICRjpxHYHrfPDNSoBnXCbfrQiVr4i6/vAdnw7 knrKX345MiInivw8Pp/dvWpC9Yg+maApq+9eZMK3o1tNcxKWQK+9JNdla++et0F0 bBhzAYLF38edXrRN/yR0hBNj9/RPUJYO -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:13 2025 by rpki-client