$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: /S/IC/KneUK5mBeC/FvNilzVA1+gzkECd3YXi+tV0JU= Subject key identifier: EF:E3:A9:60:F7:0E:02:54:D6:C4:A9:8F:FF:9D:1D:1E:61:D3:6D:06 Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 09FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 09F2 Signing time: Mon 16 Jun 2025 19:43:32 +0000 Manifest this update: Mon 16 Jun 2025 19:43:32 +0000 Manifest next update: Mon 23 Jun 2025 19:43:32 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: A7RVd9l6KI1fNeaw26r6lNKRyqVR/KKEEsMsw5eaXg0=) 2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: vYfbYGbaZtOjNPwwYTLo3cpgHwXTvaA/VLhLM/0gXjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2554 (0x9fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Jun 16 19:43:32 2025 GMT Not After : Jun 23 19:43:32 2025 GMT Subject: CN=685073e4-35f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:34:21:20:55:9d:09:a0:f3:1a:46:8c:98: 70:35:f5:aa:23:16:6d:72:6b:74:01:58:3f:1f:5f: d9:57:b3:95:7e:f8:d4:c6:91:e1:29:40:5e:a3:7d: 3a:e7:6e:79:88:38:1f:f6:0b:13:00:6b:d9:33:75: ec:cc:a6:69:92:88:6e:37:3a:ae:7f:03:8d:96:eb: 38:c3:2d:c2:b3:c0:88:53:0d:21:39:f1:e6:16:6a: 25:cb:b6:36:7c:97:7c:3e:a9:aa:69:d4:74:dc:90: ea:97:71:e0:78:ee:1f:f7:8b:24:7e:91:56:fd:d6: 9b:32:2f:0c:de:37:51:ba:41:87:d8:99:47:b4:81: 96:17:79:40:f7:7e:95:d7:a0:8d:0f:9e:41:73:11: 7c:4e:f8:c9:8b:38:ae:2e:c3:f6:1a:21:52:ed:3b: d4:30:c3:dc:f3:ce:e1:a9:96:a8:dc:18:9e:55:d1: 49:d6:92:4c:24:8f:5b:f7:41:86:7c:ab:0c:1a:fd: 60:0f:ce:af:e8:c4:c9:1f:7e:1a:52:e2:f6:c6:dc: d8:29:65:b7:a9:1d:91:ad:fd:5c:93:69:20:e8:06: 70:1f:fd:94:ed:03:70:b2:fc:03:f9:bc:ec:75:f3: 4d:99:1b:c4:f9:56:f6:2c:51:ba:b5:e0:ad:28:31: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E3:A9:60:F7:0E:02:54:D6:C4:A9:8F:FF:9D:1D:1E:61:D3:6D:06 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:44:29:0d:39:e8:7e:84:2a:e0:cf:ac:cb:2d:47:1f:bb:b0: c9:d7:1a:54:65:e0:1e:32:4f:9b:fb:92:b3:a5:f5:c1:b4:35: 3d:75:d9:c2:29:46:e8:8b:90:c6:9a:8f:8a:7c:6f:49:c2:38: 3a:73:d2:a4:29:aa:93:5e:5d:b5:62:b5:c8:c1:e3:ab:3a:41: 26:0c:16:e9:c0:e7:f6:1f:91:37:0c:69:b4:77:c0:a4:00:f2: 71:ba:ba:7d:91:29:63:d8:b7:54:a8:48:26:42:0b:ad:d9:a7: 7d:6f:e6:ad:eb:27:5a:64:7c:44:32:7a:eb:28:30:26:f3:f7: 94:5c:2f:e6:74:f5:63:38:1c:fa:9a:a7:42:e0:f5:2b:f8:73: 07:3d:fe:a3:cd:6d:bf:d4:db:c2:08:82:81:98:86:8c:c1:e7: d6:f9:c7:11:99:e3:c9:5f:1b:4d:c5:ac:5e:c0:85:e7:14:9b: b6:74:65:73:48:77:57:5e:84:c3:97:ed:22:34:ae:01:6e:75: 4d:6b:db:1e:ba:5a:17:a9:02:ee:5d:8c:8d:54:cf:4b:a9:d0: 32:27:bb:b8:fc:08:b1:96:d1:d6:a3:ca:9a:c3:6b:be:86:8f: 46:77:d3:cd:06:96:25:31:57:d2:1e:37:77:3a:f0:b8:74:db: cd:d8:ea:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjUwNjE2MTk0MzMyWhcNMjUwNjIzMTk0MzMyWjAYMRYwFAYD VQQDEw02ODUwNzNlNC0zNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+s0ISBVnQmg8xpGjJhwNfWqIxZtcmt0AVg/H1/ZV7OVfvjUxpHhKUBeo306 5255iDgf9gsTAGvZM3XszKZpkohuNzqufwONlus4wy3Cs8CIUw0hOfHmFmoly7Y2 fJd8PqmqadR03JDql3HgeO4f94skfpFW/dabMi8M3jdRukGH2JlHtIGWF3lA936V 16CND55BcxF8TvjJiziuLsP2GiFS7TvUMMPc887hqZao3BieVdFJ1pJMJI9b90GG fKsMGv1gD86v6MTJH34aUuL2xtzYKWW3qR2Rrf1ck2kg6AZwH/2U7QNwsvwD+bzs dfNNmRvE+Vb2LFG6teCtKDFWLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/jqWD3 DgJU1sSpj/+dHR5h020GMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0RCkNOeh+hCrgz6zLLUcfu7DJ1xpUZeAeMk+b+5KzpfXBtDU9ddnC KUboi5DGmo+KfG9Jwjg6c9KkKaqTXl21YrXIweOrOkEmDBbpwOf2H5E3DGm0d8Ck APJxurp9kSlj2LdUqEgmQgut2ad9b+at6ydaZHxEMnrrKDAm8/eUXC/mdPVjOBz6 mqdC4PUr+HMHPf6jzW2/1NvCCIKBmIaMwefW+ccRmePJXxtNxaxewIXnFJu2dGVz SHdXXoTDl+0iNK4BbnVNa9seuloXqQLuXYyNVM9LqdAyJ7u4/AixltHWo8qaw2u+ ho9Gd9PNBpYlMVfSHjd3OvC4dNvN2OoR -----END CERTIFICATE-----Generated at Wed Jun 18 08:49:28 2025 by rpki-client