$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json) Hash identifier: sFrRwyrGvQHtUM6bwi8WtjcnLDPVqNDkaZBCudkEyxk= Subject key identifier: E1:FB:72:17:72:E4:1C:BB:1F:0D:5D:B5:D3:F1:61:E0:E1:01:FA:A7 Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD Certificate issuer: /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft Manifest number: 72 Signing time: Fri 25 Apr 2025 05:49:20 +0000 Manifest this update: Fri 25 Apr 2025 05:49:20 +0000 Manifest next update: Fri 02 May 2025 05:49:20 +0000 Files and hashes: 1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: wb++OoAlNvFKbUg+YFmUcZXw9vWSXrCZD09sLA+Dkfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Validity Not Before: Apr 25 05:49:20 2025 GMT Not After : May 2 05:49:20 2025 GMT Subject: CN=680b2260-c6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:ca:61:f6:48:d3:39:d0:23:17:4c:78:c7: d2:9c:15:77:83:7a:7b:70:c1:ab:6f:a2:95:b7:11: 1b:eb:13:52:56:30:71:19:8c:0d:3f:77:f7:df:90: bb:d8:fe:26:e6:28:71:86:e5:e0:8f:3e:c0:f2:7b: 91:59:42:81:aa:07:4d:0a:07:36:41:19:60:89:8a: 8e:07:dc:74:d0:73:38:8c:e5:55:0f:3f:83:97:63: 12:d2:f4:ab:ac:a5:bc:e8:05:63:cb:e9:f0:6c:b8: 5c:fb:55:c4:5b:3c:86:4f:c7:5d:45:30:c9:76:6c: 67:0b:8c:12:6b:89:9a:2b:a1:90:4e:23:f5:16:55: 56:ca:80:e9:cd:da:07:f1:95:76:1d:33:5b:e4:dc: 90:7c:86:d4:58:7f:7f:5f:56:bb:ca:9f:9c:e1:b9: 5d:e7:3d:82:b7:5a:de:65:06:20:d0:ea:24:c5:1e: e1:20:c7:0d:ec:65:2c:36:66:88:0d:ef:72:7f:83: 78:27:ad:80:52:9c:45:90:b6:4e:25:0a:67:54:0e: 28:40:90:a3:2b:0c:a0:c1:76:51:fd:ba:76:df:35: 8e:a0:7e:c6:ee:d8:bf:3b:52:ad:41:1a:89:12:c0: 0d:47:fb:dc:28:cc:c6:4a:af:1b:31:4c:55:25:4b: 50:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FB:72:17:72:E4:1C:BB:1F:0D:5D:B5:D3:F1:61:E0:E1:01:FA:A7 X509v3 Authority Key Identifier: keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:64:10:de:9f:4e:0c:24:3b:d6:43:f9:50:57:c2:b0:01:ca: 23:0e:57:99:37:6b:51:4c:62:46:ca:42:f1:de:6e:60:2f:f5: 35:94:f6:ec:69:d9:4b:a6:00:a4:35:7e:f6:2d:b8:7b:e2:72: a5:8b:81:ff:b6:db:00:e3:6f:09:1d:b7:5e:1b:c6:08:bd:79: 1c:fb:0a:99:de:69:3e:bc:98:1f:c5:8c:c7:19:f1:43:f1:6d: ca:9c:a4:ad:c4:e1:5d:29:cd:61:7a:09:7e:38:f8:8a:07:2f: 54:31:e0:5c:e4:b2:0f:b4:0c:e7:b4:b0:4f:22:59:c9:ff:bd: ab:cd:3b:00:93:ca:9a:d8:7c:97:54:58:72:4e:95:7a:7a:4e: 17:6e:05:b1:4c:62:66:28:58:a7:44:83:12:3b:bf:c0:d6:b2: 71:1d:78:bc:8b:3e:a6:34:0d:27:c9:24:08:2c:c7:00:b6:43: 23:f1:04:20:43:c6:91:d4:7e:82:45:3d:47:be:2a:af:b2:f3: ec:88:da:80:8f:b1:c3:5b:80:fd:cb:de:96:d0:cd:41:07:a6: 41:5f:d8:b7:36:48:07:5b:d4:a7:3d:05:8f:33:e7:5f:9a:39: 99:6f:81:7b:14:0c:ac:71:a1:6f:2b:0f:3f:f9:c0:b1:c6:74: 6b:e4:76:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NzdCOTExMC8GA1UEBRMoMEEwODhBMTlCQkRCNjFERUQxOTE2Qzg2MEFCMkI4QkVF MTg2RURDRDAeFw0yNTA0MjUwNTQ5MjBaFw0yNTA1MDIwNTQ5MjBaMBgxFjAUBgNV BAMTDTY4MGIyMjYwLWM2ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1cMph9kjTOdAjF0x4x9KcFXeDentwwatvopW3ERvrE1JWMHEZjA0/d/ffkLvY /ibmKHGG5eCPPsDye5FZQoGqB00KBzZBGWCJio4H3HTQcziM5VUPP4OXYxLS9Kus pbzoBWPL6fBsuFz7VcRbPIZPx11FMMl2bGcLjBJriZoroZBOI/UWVVbKgOnN2gfx lXYdM1vk3JB8htRYf39fVrvKn5zhuV3nPYK3Wt5lBiDQ6iTFHuEgxw3sZSw2ZogN 73J/g3gnrYBSnEWQtk4lCmdUDihAkKMrDKDBdlH9unbfNY6gfsbu2L87Uq1BGokS wA1H+9wozMZKrxsxTFUlS1BTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4ftyF3Lk HLsfDV210/Fh4OEB+qcwHwYDVR0jBBgwFoAUCgiKGbvbYd7RkWyGCrK4vuGG7c0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3N0I5L0RCNTE3QjA4NzVC NjExRUZCOEUyMTUxNEM0RjlBRTAyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2dpS0didmJZZDdSa1d5R0NySzR2dUdHN2MwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 N0I5L0RCNTE3QjA4NzVCNjExRUZCOEUyMTUxNEM0RjlBRTAyL0NnaUtHYnZiWWQ3 UmtXeUdDcks0dnVHRzdjMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMpkEN6fTgwkO9ZD+VBXwrAByiMOV5k3a1FMYkbKQvHebmAv9TWU9uxp 2UumAKQ1fvYtuHvicqWLgf+22wDjbwkdt14bxgi9eRz7CpneaT68mB/FjMcZ8UPx bcqcpK3E4V0pzWF6CX44+IoHL1Qx4Fzksg+0DOe0sE8iWcn/vavNOwCTyprYfJdU WHJOlXp6ThduBbFMYmYoWKdEgxI7v8DWsnEdeLyLPqY0DSfJJAgsxwC2QyPxBCBD xpHUfoJFPUe+Kq+y8+yI2oCPscNbgP3L3pbQzUEHpkFf2Lc2SAdb1Kc9BY8z51+a OZlvgXsUDKxxoW8rDz/5wLHGdGvkdhA= -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:20 2025 by rpki-client