$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: GolKOwiAkXH8qWprhd/ECHGoRMse329XTd9/MIJxK2c= Subject key identifier: 67:D2:34:31:C5:0F:34:C6:86:8A:8A:DF:6E:3D:8F:0B:52:17:D2:EE Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 0268 Signing time: Sun 15 Jun 2025 02:24:58 +0000 Manifest this update: Sun 15 Jun 2025 02:24:57 +0000 Manifest next update: Sun 22 Jun 2025 02:24:57 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: UYfdukrp2h97WYpT25Gz90Hw1g0JTII6WZrKiSYTBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Jun 15 02:24:57 2025 GMT Not After : Jun 22 02:24:57 2025 GMT Subject: CN=684e2ef9-1c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e6:e7:fc:a9:b2:f4:05:1b:89:db:9e:96:1f: e9:4e:da:3b:a6:e7:cb:70:77:6f:74:59:b6:9b:aa: 62:72:9b:d1:b1:41:2f:b3:7f:a7:f9:20:5c:60:89: 62:4b:80:6c:4e:57:42:2e:7f:3d:0a:39:88:5c:05: 1c:84:3e:60:e9:de:10:8f:7a:60:ab:19:07:1c:cf: f8:67:a8:2b:7f:ae:f2:44:71:7f:8c:4f:0b:d1:60: 68:56:98:d3:74:a4:6d:42:ce:35:98:b8:cb:d4:28: 7d:a6:5b:fc:64:f5:c0:fa:93:e4:51:9a:58:45:86: 21:9c:26:70:f9:70:ba:67:32:32:34:3a:d8:5f:f5: 97:1d:92:da:d3:71:74:e9:29:f2:98:c9:47:a3:98: 99:22:f2:b6:dd:fd:bb:12:f2:64:4d:e3:b3:4f:38: c7:b0:83:94:77:00:65:09:49:9b:38:80:23:60:b4: 41:ec:cc:63:a8:4c:7f:07:31:04:bb:95:b5:35:03: 61:fa:2e:7f:47:f1:f7:4e:36:29:b5:e6:b6:b9:b1: 61:ac:8a:43:0b:ab:d5:60:47:bd:60:80:eb:17:9a: ba:45:90:ef:27:bc:3e:e0:7f:b9:e5:b6:a1:77:8d: 56:a2:be:ea:8c:98:55:8d:91:f5:43:8b:75:e1:71: 3a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:34:31:C5:0F:34:C6:86:8A:8A:DF:6E:3D:8F:0B:52:17:D2:EE X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7e:6a:ce:41:14:2e:e3:71:66:46:8b:d2:1d:7e:f8:b1:f3: 43:f9:4b:c0:f5:e5:03:7f:83:e9:05:40:02:f0:41:63:68:8e: c7:b6:82:20:c2:a9:c4:36:5f:38:99:a7:6b:88:60:1a:6a:b8: a3:bb:88:2a:b4:52:0b:d7:4a:ec:27:7f:15:28:35:87:04:17: 67:85:75:90:60:dc:28:3a:75:e9:fc:8e:5d:52:2f:97:53:e1: 0a:71:95:00:4f:8b:9c:03:82:14:1c:64:3c:c2:df:37:2d:33: 0b:97:e1:f3:33:8d:35:86:f0:b5:56:eb:e7:2b:ba:2f:5d:da: 3e:ff:97:1c:04:72:63:38:c1:a5:5c:17:03:79:f6:d0:07:49: 3c:c5:06:c9:cf:ca:13:be:ab:c1:e9:13:b6:2b:78:e1:e3:26: 49:87:52:0e:90:64:34:f5:66:90:8b:b9:6f:81:3e:bd:90:d1: 41:23:d4:5c:83:58:fc:a6:e6:f2:84:f0:4f:73:c5:0b:65:ea: 22:22:e4:1e:29:3d:0a:d8:25:bb:8e:48:18:a8:c0:b9:2e:8f: fa:e0:84:e2:ae:ab:0e:2e:49:c5:c5:57:5f:e6:f7:74:b5:15: 38:73:5a:a2:18:ad:8a:46:bb:7f:d7:b1:bf:25:fd:ba:3f:73: 7f:17:12:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjUwNjE1MDIyNDU3WhcNMjUwNjIyMDIyNDU3WjAYMRYwFAYD VQQDEw02ODRlMmVmOS0xYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ubn/Kmy9AUbiduelh/pTto7pufLcHdvdFm2m6picpvRsUEvs3+n+SBcYIli S4BsTldCLn89CjmIXAUchD5g6d4Qj3pgqxkHHM/4Z6grf67yRHF/jE8L0WBoVpjT dKRtQs41mLjL1Ch9plv8ZPXA+pPkUZpYRYYhnCZw+XC6ZzIyNDrYX/WXHZLa03F0 6SnymMlHo5iZIvK23f27EvJkTeOzTzjHsIOUdwBlCUmbOIAjYLRB7MxjqEx/BzEE u5W1NQNh+i5/R/H3TjYptea2ubFhrIpDC6vVYEe9YIDrF5q6RZDvJ7w+4H+55bah d41Wor7qjJhVjZH1Q4t14XE6uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfSNDHF DzTGhoqK3249jwtSF9LuMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7fmrOQRQu43FmRovSHX74sfND+UvA9eUDf4PpBUAC8EFjaI7HtoIg wqnENl84madriGAaariju4gqtFIL10rsJ38VKDWHBBdnhXWQYNwoOnXp/I5dUi+X U+EKcZUAT4ucA4IUHGQ8wt83LTMLl+HzM401hvC1VuvnK7ovXdo+/5ccBHJjOMGl XBcDefbQB0k8xQbJz8oTvqvB6RO2K3jh4yZJh1IOkGQ09WaQi7lvgT69kNFBI9Rc g1j8pubyhPBPc8ULZeoiIuQeKT0K2CW7jkgYqMC5Lo/64ITirqsOLknFxVdf5vd0 tRU4c1qiGK2KRrt/17G/Jf26P3N/FxIb -----END CERTIFICATE-----Generated at Mon Jun 16 08:35:12 2025 by rpki-client