$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft File: 99ZBYbOgStTlnAFz47gHWSgtQ8E.mft (raw, json) Hash identifier: 32flT5jwdMGbc+3p/9JjX0CWQdJE6RGejjclPkeOy10= Subject key identifier: 98:55:BA:1E:3E:4B:B8:4F:F6:82:E4:60:C3:39:C3:F1:0C:AC:7A:9F Authority key identifier: F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 Certificate issuer: /CN=A919C7A9/serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft Manifest number: 011D Signing time: Fri 25 Apr 2025 03:58:23 +0000 Manifest this update: Fri 25 Apr 2025 03:58:23 +0000 Manifest next update: Fri 02 May 2025 03:58:23 +0000 Files and hashes: 1: 99ZBYbOgStTlnAFz47gHWSgtQ8E.crl (hash: WR89xjsYOlbqjzZUKBqPWkw4jce+Xct67a3YrV/mbc0=) 2: 1ADFE79AE05211EFBD383A20C4F9AE02.roa (hash: jbtypmu4PtZLNmhNfVSpXJscyb+qfRqutu0axWM/TEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7A9, serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Validity Not Before: Apr 25 03:58:23 2025 GMT Not After : May 2 03:58:23 2025 GMT Subject: CN=680b085f-6187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:79:7b:ad:d2:94:e8:69:a3:5a:22:76:ce:c7: 49:f0:f5:89:87:d9:d3:d4:06:46:95:dc:1d:fc:ef: 77:7e:c4:00:11:ea:fb:42:dd:57:b7:2b:d1:9c:6a: e0:16:18:d6:4b:a1:1c:e7:09:29:d4:9a:4b:95:0a: 79:77:92:8b:82:6f:c2:c1:ec:41:a6:30:1c:c4:46: 8d:6e:b7:9f:98:dd:e3:8f:6b:b2:bc:6d:93:5c:c9: ce:55:8c:01:a9:d9:14:8e:ef:4c:3a:62:b4:f4:4b: 87:9c:ad:76:cb:1b:1a:eb:63:9b:c2:6f:33:46:6b: 82:7e:a3:c5:85:04:f7:21:4d:11:a9:d0:0e:95:5c: d1:df:8b:6b:51:7c:20:8c:e9:2b:ee:c8:cd:5b:3c: f9:43:97:e3:98:fd:81:81:f1:d1:e6:af:62:05:4d: 82:e3:a9:ed:a8:27:37:ea:6e:48:88:3a:f5:ab:72: dc:4d:aa:df:aa:a8:7f:6b:ae:35:6f:01:b6:40:fb: 56:c0:50:60:7d:93:80:0a:b0:79:65:1f:5f:31:1c: 85:7f:c1:b8:52:4a:f9:07:87:b6:e7:6d:74:e8:07: bf:dc:4f:12:82:8e:37:5d:e0:ec:c7:7b:97:53:d3: 8d:39:29:cc:2f:51:19:bc:6e:54:65:65:8f:0e:07: fd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:55:BA:1E:3E:4B:B8:4F:F6:82:E4:60:C3:39:C3:F1:0C:AC:7A:9F X509v3 Authority Key Identifier: keyid:F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:fe:a6:73:e7:42:4d:a6:02:03:e2:7d:ce:ba:c3:c2:0a:45: a4:5c:c6:8d:68:be:d2:84:f7:63:a0:c6:1b:da:42:be:3e:af: bc:0c:f1:06:6d:11:c4:f2:9e:65:1b:2d:d7:7e:c1:3f:a7:ff: e0:58:a1:5f:94:05:ec:08:f5:95:82:d3:54:6a:45:d5:da:f0: d0:1f:57:c5:ff:87:92:23:a2:4a:9e:0d:ca:26:43:70:a8:9f: 32:71:fd:cb:8e:64:74:b3:59:84:0d:a0:55:19:ca:aa:0a:ac: cc:95:05:08:f3:61:cf:42:55:b9:e1:c5:a5:fc:97:86:9e:da: 08:66:e7:0f:ca:0f:51:5a:cd:03:12:bd:a3:57:46:e8:69:17: b9:1d:50:88:c6:97:94:fa:8f:fe:26:1e:72:6b:c0:1d:5a:3f: c8:c3:c3:de:38:33:ad:ab:ae:6d:c1:a6:1a:47:74:ad:8b:4c: ca:93:d3:27:5c:2c:75:cd:ee:38:fd:89:a6:58:16:13:19:68: a7:0a:90:23:ad:bb:b3:b9:75:93:1d:72:77:d5:57:7d:77:60: 5a:0c:9d:71:99:e0:30:c7:1a:f8:22:e5:93:2e:d5:73:ac:06: c0:6d:43:e6:c4:9b:ca:3d:69:57:fa:b3:c6:f1:23:d0:58:0f: f8:e0:59:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QTkxMTAvBgNVBAUTKEY3RDY0MTYxQjNBMDRBRDRFNTlDMDE3M0UzQjgwNzU5 MjgyRDQzQzEwHhcNMjUwNDI1MDM1ODIzWhcNMjUwNTAyMDM1ODIzWjAYMRYwFAYD VQQDEw02ODBiMDg1Zi02MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nl7rdKU6GmjWiJ2zsdJ8PWJh9nT1AZGldwd/O93fsQAEer7Qt1XtyvRnGrg FhjWS6Ec5wkp1JpLlQp5d5KLgm/CwexBpjAcxEaNbrefmN3jj2uyvG2TXMnOVYwB qdkUju9MOmK09EuHnK12yxsa62Obwm8zRmuCfqPFhQT3IU0RqdAOlVzR34trUXwg jOkr7sjNWzz5Q5fjmP2BgfHR5q9iBU2C46ntqCc36m5IiDr1q3LcTarfqqh/a641 bwG2QPtWwFBgfZOACrB5ZR9fMRyFf8G4Ukr5B4e252106Ae/3E8Sgo43XeDsx3uX U9ONOSnML1EZvG5UZWWPDgf9qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhVuh4+ S7hP9oLkYMM5w/EMrHqfMB8GA1UdIwQYMBaAFPfWQWGzoErU5ZwBc+O4B1koLUPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdBOS9BRkEwRTJBNDgx RTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0VGxuQUZ6NDdnSFdTZ3RR OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5WkJZYk9nU3RUbG5BRno0N2dIV1NndFE4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdBOS9BRkEwRTJBNDgxRTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0 VGxuQUZ6NDdnSFdTZ3RROEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC/qZz50JNpgID4n3OusPCCkWkXMaNaL7ShPdjoMYb2kK+Pq+8DPEG bRHE8p5lGy3XfsE/p//gWKFflAXsCPWVgtNUakXV2vDQH1fF/4eSI6JKng3KJkNw qJ8ycf3LjmR0s1mEDaBVGcqqCqzMlQUI82HPQlW54cWl/JeGntoIZucPyg9RWs0D Er2jV0boaRe5HVCIxpeU+o/+Jh5ya8AdWj/Iw8PeODOtq65twaYaR3Sti0zKk9Mn XCx1ze44/YmmWBYTGWinCpAjrbuzuXWTHXJ31Vd9d2BaDJ1xmeAwxxr4IuWTLtVz rAbAbUPmxJvKPWlX+rPG8SPQWA/44FkT -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:43 2025 by rpki-client