$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json) Hash identifier: gRdADgo8/8ENPwzPoszpmb1pnD7/fPBaYu13Oy/vYZA= Subject key identifier: 89:23:38:9D:5F:55:B2:93:A8:9B:A3:80:25:F5:3B:DB:4F:1A:20:76 Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft Manifest number: 010A Signing time: Fri 25 Apr 2025 04:03:50 +0000 Manifest this update: Fri 25 Apr 2025 04:03:50 +0000 Manifest next update: Fri 02 May 2025 04:03:50 +0000 Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: 9uwh8znCNh0izYbz4oZGkG5wxzF+7nO4DpGiqNUIuDg=) 2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: lfBaqProMut7Uby4sm5sXFCXR+BzVB4lKdYH7qIjDTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Validity Not Before: Apr 25 04:03:50 2025 GMT Not After : May 2 04:03:50 2025 GMT Subject: CN=680b09a6-419d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bd:aa:66:1a:fc:81:d1:b3:50:d9:c2:7b:04: b1:26:16:4a:3b:b6:56:b9:12:ef:74:00:7f:94:bd: d7:f9:f3:5e:76:e3:39:f8:01:67:db:4d:c2:11:89: 0b:28:5f:cc:6f:60:8d:b5:e0:d1:74:01:12:9b:7e: 07:35:72:2b:37:48:ce:0e:62:9e:c1:17:35:06:c5: f1:5f:6f:58:8c:ad:1d:98:31:bb:71:a3:36:0e:a5: 0f:21:f5:4b:f2:bf:94:b1:69:80:1d:66:9f:25:c3: fa:c8:0e:5e:31:af:53:9c:05:bf:b8:3d:41:b6:89: 0a:9f:7d:e4:5a:6e:e3:a7:7f:bb:11:4a:d1:51:45: 50:ef:fa:37:d5:c8:db:3a:bd:cf:e6:4e:62:68:24: 95:eb:77:2b:dc:48:1c:77:a6:44:6b:d4:94:eb:26: cf:fe:b2:27:86:f7:7b:bc:2f:4a:b1:5d:dd:4f:62: 25:d1:16:40:3d:8b:f9:df:fd:e7:8f:43:5b:4c:2a: b7:0c:7a:63:dc:68:e0:4f:b7:0c:8f:6c:5d:67:f2: b9:17:06:b8:82:2b:d5:4d:4d:a0:1d:e8:d4:8e:4d: 5c:48:ae:1b:9c:9a:31:78:af:af:8a:de:1b:6c:40: 6c:f1:ac:d2:26:85:c0:02:b0:13:c8:64:77:e7:6b: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:23:38:9D:5F:55:B2:93:A8:9B:A3:80:25:F5:3B:DB:4F:1A:20:76 X509v3 Authority Key Identifier: keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:22:1a:ae:22:6c:69:97:af:b3:cb:0b:9f:a6:21:3b:10:7c: c3:38:2e:c6:b4:b8:76:0c:c5:c1:00:a8:ba:95:55:f4:f9:55: 45:5f:6a:31:77:fb:8e:bd:cf:23:6b:2e:1c:95:1c:9b:e2:75: 50:35:77:fd:f2:5d:ef:ce:cc:65:d7:9b:e9:aa:fc:ce:ac:5b: 4e:b0:80:82:46:02:0f:a1:24:b4:70:32:da:d2:d0:20:d5:0a: 41:d1:74:76:85:df:b3:88:ee:ad:64:88:e6:77:8d:ac:af:d9: ba:a3:9e:4b:50:cc:bf:f7:20:7b:9a:c0:8b:68:cf:89:a8:4b: 5a:d3:0d:c3:b0:e4:af:fb:d0:71:8c:6a:cd:6f:94:8d:b5:86: 58:9d:38:f4:74:f0:07:22:48:fe:de:a8:fc:34:6c:d7:a8:b5: bb:5f:9e:b3:8e:92:d4:a2:e3:d8:44:ee:ae:28:99:56:b3:b6: 90:d6:92:8f:87:14:d7:93:a5:7c:f0:ca:69:07:88:c3:8a:72: 3e:1c:7a:3e:2b:f7:ad:25:07:ff:5e:2a:36:38:86:16:57:1f: 6b:2b:fa:af:68:16:6e:9b:e7:21:55:b7:d1:ee:7d:17:82:18: ec:8e:13:f4:69:d8:85:ac:5d:a4:f0:a8:4f:3b:49:e3:a6:72: c8:ed:bf:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE NzU1RUQwQzAwHhcNMjUwNDI1MDQwMzUwWhcNMjUwNTAyMDQwMzUwWjAYMRYwFAYD VQQDEw02ODBiMDlhNi00MTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA472qZhr8gdGzUNnCewSxJhZKO7ZWuRLvdAB/lL3X+fNeduM5+AFn203CEYkL KF/Mb2CNteDRdAESm34HNXIrN0jODmKewRc1BsXxX29YjK0dmDG7caM2DqUPIfVL 8r+UsWmAHWafJcP6yA5eMa9TnAW/uD1BtokKn33kWm7jp3+7EUrRUUVQ7/o31cjb Or3P5k5iaCSV63cr3Egcd6ZEa9SU6ybP/rInhvd7vC9KsV3dT2Il0RZAPYv53/3n j0NbTCq3DHpj3GjgT7cMj2xdZ/K5Fwa4givVTU2gHejUjk1cSK4bnJoxeK+vit4b bEBs8azSJoXAArATyGR352sqkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkjOJ1f VbKTqJujgCX1O9tPGiB2MB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP aTJtdFBER25OaG5YVmUwTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChIhquImxpl6+zywufpiE7EHzDOC7GtLh2DMXBAKi6lVX0+VVFX2ox d/uOvc8jay4clRyb4nVQNXf98l3vzsxl15vpqvzOrFtOsICCRgIPoSS0cDLa0tAg 1QpB0XR2hd+ziO6tZIjmd42sr9m6o55LUMy/9yB7msCLaM+JqEta0w3DsOSv+9Bx jGrNb5SNtYZYnTj0dPAHIkj+3qj8NGzXqLW7X56zjpLUouPYRO6uKJlWs7aQ1pKP hxTXk6V88MppB4jDinI+HHo+K/etJQf/Xio2OIYWVx9rK/qvaBZum+chVbfR7n0X ghjsjhP0adiFrF2k8KhPO0njpnLI7b9a -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:17 2025 by rpki-client