$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: 1b9HutvL6m/PxCx4tI4a7Uzwsh4ONdsrBJhfN0/uo8E= Subject key identifier: 4F:8C:09:22:94:D5:D8:7C:5F:7F:29:ED:2F:CA:B2:8A:C2:60:8B:D7 Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 09E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 09DB Signing time: Wed 30 Apr 2025 19:44:28 +0000 Manifest this update: Wed 30 Apr 2025 19:44:28 +0000 Manifest next update: Wed 07 May 2025 19:44:28 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: 1Vfxw24BfH6rDqvEcT6AFrbVYBnfOO6Zcoyc8G5Y7/Y=) 2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: vYfbYGbaZtOjNPwwYTLo3cpgHwXTvaA/VLhLM/0gXjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 19:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2531 (0x9e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Apr 30 19:44:28 2025 GMT Not After : May 7 19:44:28 2025 GMT Subject: CN=68127d9c-9336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:30:42:69:00:07:27:0a:da:ba:c7:be:50:12: 16:05:23:e3:5f:35:96:63:98:e7:3c:59:fe:55:76: 15:d3:a2:6e:38:cd:f7:01:e7:f3:ac:f1:df:5d:0a: 86:25:8e:4c:5c:87:59:a2:d1:21:c2:79:2c:4f:b9: 7f:f4:47:a5:6a:5e:d4:e5:ca:af:bb:e1:7b:78:4a: aa:80:e0:81:2a:2d:77:26:7b:cf:56:3f:2a:7a:dd: fb:de:55:98:eb:c7:9c:8e:74:a4:06:9b:2a:26:07: 45:50:40:d3:57:67:7e:95:55:8e:19:c2:b9:2e:51: cf:d8:8a:50:a9:39:73:4a:ac:7b:52:87:b1:29:95: ad:ac:4c:4f:e8:d2:9e:5c:60:05:22:d7:67:57:81: 3a:de:d0:5b:e5:ff:6a:ab:d3:de:f1:68:27:90:43: d1:9d:2a:72:7c:a0:dd:98:9d:37:b1:c4:fa:9d:24: 7a:4c:af:cf:f7:60:f4:65:07:cd:21:d4:da:ee:43: e3:07:80:2b:cb:21:82:73:05:05:d7:ac:1d:88:0f: 3b:31:93:19:5f:29:42:e8:63:71:2b:f3:bf:c1:80: 7e:13:ed:fe:cc:b1:b4:b5:1b:d4:62:b5:80:a3:66: 29:5e:4b:92:bd:19:dc:63:a0:58:4d:9e:7b:74:9f: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8C:09:22:94:D5:D8:7C:5F:7F:29:ED:2F:CA:B2:8A:C2:60:8B:D7 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:7a:a9:fb:14:3e:91:ab:18:f7:34:e7:69:9f:88:b4:2b:c2: 28:fc:63:08:22:7a:f6:76:e1:cb:3f:1c:1c:55:da:40:bc:3a: a4:ad:79:51:47:3c:f7:66:9e:93:d9:60:de:83:fa:23:d3:de: 7f:58:37:e9:c7:b9:ac:67:02:a2:52:0f:36:ce:33:da:24:2d: ff:4a:56:e8:b4:24:b3:54:19:71:4b:57:23:70:a0:57:29:56: f8:d5:a5:35:c0:7a:aa:f1:d1:7e:39:db:4c:81:2b:e8:81:3d: 39:50:25:81:af:33:24:ca:c0:a8:d5:bb:9b:a9:5b:69:0c:a3: 53:76:0a:c0:01:df:27:c4:52:12:74:15:fe:c9:cf:29:3f:39: 94:83:a7:d3:96:60:82:09:1d:cc:6e:0c:04:0b:98:f6:db:ff: 81:f1:25:09:4a:c3:5c:04:62:9f:d9:d2:c5:57:2e:68:7a:67: b5:55:9a:9e:9d:6f:21:62:53:3a:af:0a:0a:bd:70:bb:a0:b4: a7:19:c1:04:07:81:8c:6a:e1:88:77:fc:33:2d:64:61:82:49: a9:66:b4:81:5e:17:f5:ad:07:91:16:db:20:ee:cb:fb:c9:b8: f5:6e:a8:f7:87:3d:73:19:72:9d:bc:a6:70:cf:f7:31:ce:01: 34:a2:5c:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjUwNDMwMTk0NDI4WhcNMjUwNTA3MTk0NDI4WjAYMRYwFAYD VQQDEw02ODEyN2Q5Yy05MzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDBCaQAHJwrause+UBIWBSPjXzWWY5jnPFn+VXYV06JuOM33AefzrPHfXQqG JY5MXIdZotEhwnksT7l/9Eelal7U5cqvu+F7eEqqgOCBKi13JnvPVj8qet373lWY 68ecjnSkBpsqJgdFUEDTV2d+lVWOGcK5LlHP2IpQqTlzSqx7UoexKZWtrExP6NKe XGAFItdnV4E63tBb5f9qq9Pe8WgnkEPRnSpyfKDdmJ03scT6nSR6TK/P92D0ZQfN IdTa7kPjB4AryyGCcwUF16wdiA87MZMZXylC6GNxK/O/wYB+E+3+zLG0tRvUYrWA o2YpXkuSvRncY6BYTZ57dJ/GZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+MCSKU 1dh8X38p7S/KsorCYIvXMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZeqn7FD6Rqxj3NOdpn4i0K8Io/GMIInr2duHLPxwcVdpAvDqkrXlR Rzz3Zp6T2WDeg/oj095/WDfpx7msZwKiUg82zjPaJC3/SlbotCSzVBlxS1cjcKBX KVb41aU1wHqq8dF+OdtMgSvogT05UCWBrzMkysCo1bubqVtpDKNTdgrAAd8nxFIS dBX+yc8pPzmUg6fTlmCCCR3MbgwEC5j22/+B8SUJSsNcBGKf2dLFVy5oeme1VZqe nW8hYlM6rwoKvXC7oLSnGcEEB4GMauGId/wzLWRhgkmpZrSBXhf1rQeRFtsg7sv7 ybj1bqj3hz1zGXKdvKZwz/cxzgE0olwx -----END CERTIFICATE-----Generated at Thu May 1 10:15:38 2025 by rpki-client