$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft File: 09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json) Hash identifier: WDn/efK21eDgqPgYYWnqgq2w1LWydez/8BQmaRWncxQ= Subject key identifier: 27:7C:DF:EF:73:76:B1:56:19:60:F9:91:E0:BA:36:30:4C:5F:3E:6A Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 Certificate issuer: /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft Manifest number: 7E Signing time: Fri 25 Apr 2025 05:43:24 +0000 Manifest this update: Fri 25 Apr 2025 05:43:23 +0000 Manifest next update: Fri 02 May 2025 05:43:23 +0000 Files and hashes: 1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: BdSiy7cfQhCaenb2pMjRe4YaYYun2JrRwPNNiY4oBTg=) 2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: 2nR72gd8fEEO90sm8QM92ng7Ua1iEJ7Ic792MqQQzEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Validity Not Before: Apr 25 05:43:23 2025 GMT Not After : May 2 05:43:23 2025 GMT Subject: CN=680b20fb-dcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:2f:2d:44:1a:bd:82:b1:3b:ed:01:37:43: 4e:b7:cc:be:03:15:29:4c:72:41:35:5d:78:bc:92: cd:6e:89:e8:bd:4f:8d:77:ff:f7:25:1e:6d:6f:9b: b5:23:3e:e5:5f:f0:cc:c2:a1:a7:b7:e0:17:29:0f: 25:9b:2b:60:82:8b:67:45:1d:e0:d4:e2:d9:4f:af: e7:ce:aa:0e:69:c3:60:e2:ad:de:b6:9f:57:e1:a2: ca:23:fa:47:10:73:87:90:86:07:0b:32:56:a0:09: 40:f3:b6:58:c6:fd:19:10:88:52:64:9a:f5:e0:98: 8b:1d:85:c5:77:89:c8:d8:bd:e2:2b:53:7b:d7:82: ca:24:a0:e5:21:94:2e:07:6c:65:78:3f:8f:4a:53: 47:fd:18:cd:bd:d2:72:a9:f7:ee:78:6a:53:84:2c: d2:33:57:0a:17:a4:35:f3:a2:07:04:f3:f5:69:84: b5:85:ac:f4:c7:56:de:51:b4:4b:97:fc:82:32:d7: ac:fd:10:7f:86:07:07:56:d1:7d:36:b6:f1:45:13: 05:4b:eb:01:42:2a:00:b6:ff:43:0c:85:1a:c2:a7: e7:18:50:a2:83:52:a2:a4:4d:a5:a7:37:73:89:c2: 82:3a:42:9e:24:86:1b:08:3d:21:10:73:76:80:c3: 6c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7C:DF:EF:73:76:B1:56:19:60:F9:91:E0:BA:36:30:4C:5F:3E:6A X509v3 Authority Key Identifier: keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:46:95:32:05:dc:f9:be:8e:3d:ee:57:e0:d0:7e:cc:3e:56: bc:7b:0e:d4:b0:c6:e5:43:25:63:77:b5:61:ef:91:73:df:66: b8:02:d9:99:05:d2:56:bc:f9:f0:23:17:85:b7:95:94:48:8a: b1:3a:12:d6:80:f3:af:ff:dc:3d:6e:69:76:42:bf:55:5a:cd: 7d:4c:9a:92:ea:f6:ca:ba:31:91:40:78:e4:03:aa:8b:29:cc: 0a:2f:3d:ea:42:07:69:48:0d:9c:9f:b8:11:00:53:8d:2b:18: 71:34:e0:cc:f5:f5:92:57:6a:ef:bc:e6:bc:5a:9b:de:d4:1e: 52:99:d8:3a:d4:6f:4e:a2:89:be:71:5c:d3:e8:27:c3:6b:bc: a8:e7:dc:7b:4e:e9:56:20:eb:6b:92:45:ac:b2:27:e3:36:d1: 6e:7b:c9:27:ea:e5:09:e4:b4:a2:8d:16:36:65:9c:ca:c9:b3: ea:97:11:da:2e:73:db:0b:cf:70:f6:f9:f4:09:bf:63:d2:02: a5:3c:e3:4b:f1:e1:0c:7a:00:71:60:4e:26:5d:8f:87:a6:f6: 96:6f:a6:58:77:43:16:36:04:23:c4:a3:00:50:9b:cc:aa:1d: 5f:8c:4b:ac:9e:86:2c:5e:30:ca:e2:1e:0d:1a:4a:eb:e5:47: 70:b2:be:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENzQxMTAvBgNVBAUTKEQzRENFMTcxNDNGOUNGNURGODAwNEY4QzY1OTdGQjJD OENDQzcwNDYwHhcNMjUwNDI1MDU0MzIzWhcNMjUwNTAyMDU0MzIzWjAYMRYwFAYD VQQDEw02ODBiMjBmYi1kY2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fYvLUQavYKxO+0BN0NOt8y+AxUpTHJBNV14vJLNbonovU+Nd//3JR5tb5u1 Iz7lX/DMwqGnt+AXKQ8lmytggotnRR3g1OLZT6/nzqoOacNg4q3etp9X4aLKI/pH EHOHkIYHCzJWoAlA87ZYxv0ZEIhSZJr14JiLHYXFd4nI2L3iK1N714LKJKDlIZQu B2xleD+PSlNH/RjNvdJyqffueGpThCzSM1cKF6Q186IHBPP1aYS1haz0x1beUbRL l/yCMtes/RB/hgcHVtF9NrbxRRMFS+sBQioAtv9DDIUawqfnGFCig1KipE2lpzdz icKCOkKeJIYbCD0hEHN2gMNsaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCd83+9z drFWGWD5keC6NjBMXz5qMB8GA1UdIwQYMBaAFNPc4XFD+c9d+ABPjGWX+yyMzHBG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q3NC8zNzhEOUEwQTY5 MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXoxMzRBRS1NWlpmN0xJek1j RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q3NC8zNzhEOUEwQTY5MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXox MzRBRS1NWlpmN0xJek1jRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCRpUyBdz5vo497lfg0H7MPla8ew7UsMblQyVjd7Vh75Fz32a4AtmZ BdJWvPnwIxeFt5WUSIqxOhLWgPOv/9w9bml2Qr9VWs19TJqS6vbKujGRQHjkA6qL KcwKLz3qQgdpSA2cn7gRAFONKxhxNODM9fWSV2rvvOa8Wpve1B5Smdg61G9Ooom+ cVzT6CfDa7yo59x7TulWIOtrkkWssifjNtFue8kn6uUJ5LSijRY2ZZzKybPqlxHa LnPbC89w9vn0Cb9j0gKlPONL8eEMegBxYE4mXY+HpvaWb6ZYd0MWNgQjxKMAUJvM qh1fjEusnoYsXjDK4h4NGkrr5Udwsr7k -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:32 2025 by rpki-client