$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json) Hash identifier: ZOtO4lVXyjYQUrSqFpdys/CNyDIxJodcxBHC1lG2ft8= Subject key identifier: A3:87:7E:5B:59:32:95:DB:74:CE:D4:1F:6A:9E:20:BE:52:33:09:53 Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Certificate serial: 0BB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft Manifest number: 0BAE Signing time: Thu 12 Jun 2025 18:46:33 +0000 Manifest this update: Thu 12 Jun 2025 18:46:32 +0000 Manifest next update: Thu 19 Jun 2025 18:46:32 +0000 Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: oWeFoXk4GacplqxseaJFSi/eSgkcUEOtjpl5R7KAcYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2995 (0xbb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Validity Not Before: Jun 12 18:46:32 2025 GMT Not After : Jun 19 18:46:32 2025 GMT Subject: CN=684b2088-d1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:ac:87:29:7c:31:e3:f8:b7:ec:f0:4a:eb: 42:1e:2d:a7:9e:9b:8f:2b:c1:c9:5a:5d:5a:75:20: d4:24:2e:fe:0b:a1:e7:65:a6:4e:c2:87:69:2c:f0: 45:40:46:b0:99:4f:2b:fc:af:41:87:49:b9:10:63: 0a:d7:ed:89:6e:67:38:8c:4b:56:a7:e1:5d:f2:dc: f1:60:a8:7f:f8:32:1d:15:2f:0a:99:e5:5e:c5:6d: e4:55:05:d7:1b:53:86:ff:7e:0e:b8:6d:69:6d:0c: 67:45:86:79:53:e0:41:ff:02:ce:e0:91:c1:ee:6b: 55:c9:3a:d4:2d:a8:3b:f3:05:49:46:b5:9d:7e:2a: e0:fb:3c:19:a7:e4:7c:2c:ee:c3:ed:1a:cf:75:51: 88:0e:fb:a8:52:2b:8e:75:40:f8:ce:81:b8:54:b7: 29:b6:b2:fb:a6:d1:81:2b:1e:d2:39:a4:6a:24:5f: 15:b7:ba:ca:d0:dc:c1:eb:86:58:d1:7f:d6:62:2b: 42:f1:3c:8a:03:93:7d:cd:a0:48:cf:14:d1:67:b8: 3d:76:53:9e:b4:12:5b:a8:d8:a2:05:df:93:4a:c3: 01:b4:4f:65:25:9d:f5:85:ac:ad:75:c5:14:b4:a0: 9e:40:ee:80:5c:21:f2:94:3c:ca:30:8d:71:b6:f7: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:87:7E:5B:59:32:95:DB:74:CE:D4:1F:6A:9E:20:BE:52:33:09:53 X509v3 Authority Key Identifier: keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:51:e7:9c:73:83:c1:58:5a:27:5e:5a:3a:3d:71:ab:d5:25: 78:c0:8d:fa:f2:3f:e9:8a:52:b9:b1:a1:76:45:be:83:e6:42: 8e:bd:3b:62:c4:f6:58:af:fe:34:b4:88:a0:f1:97:45:a3:9f: d3:62:25:f1:8d:f9:bd:fa:e4:8e:80:5d:26:34:56:8a:5e:f4: d0:ce:95:ba:60:ed:38:2a:bd:e1:95:c1:18:a6:20:03:b2:dd: b6:f3:7c:5e:81:b6:12:28:1a:a0:74:4e:a5:65:e7:28:79:fa: 41:09:2e:77:b4:4e:07:91:cf:6e:78:e8:99:e1:8f:70:90:3e: 06:c0:de:59:8b:dc:21:7a:89:19:f8:62:c6:98:6c:ed:3e:4e: 09:68:79:88:1a:ef:61:3e:f0:d7:4a:3c:81:a4:8f:39:c0:96: d6:3e:22:3b:68:c7:ca:23:44:15:ce:72:04:e5:cc:0a:37:cb: d2:74:07:90:9f:24:6a:6e:5c:a8:2c:be:32:14:fd:c6:ac:15: de:01:59:5c:b1:9e:98:07:ed:7d:69:8c:af:e5:ad:44:56:47: 34:2f:93:5a:e2:65:4b:e6:2c:39:61:c1:cd:4b:cd:3d:14:07: 59:e1:c2:fd:88:b7:ec:eb:79:e7:c9:d7:fc:2b:64:8b:1c:b4: 2b:1c:89:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC QTY5RTQ0M0QwHhcNMjUwNjEyMTg0NjMyWhcNMjUwNjE5MTg0NjMyWjAYMRYwFAYD VQQDEw02ODRiMjA4OC1kMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2eshyl8MeP4t+zwSutCHi2nnpuPK8HJWl1adSDUJC7+C6HnZaZOwodpLPBF QEawmU8r/K9Bh0m5EGMK1+2Jbmc4jEtWp+Fd8tzxYKh/+DIdFS8KmeVexW3kVQXX G1OG/34OuG1pbQxnRYZ5U+BB/wLO4JHB7mtVyTrULag78wVJRrWdfirg+zwZp+R8 LO7D7RrPdVGIDvuoUiuOdUD4zoG4VLcptrL7ptGBKx7SOaRqJF8Vt7rK0NzB64ZY 0X/WYitC8TyKA5N9zaBIzxTRZ7g9dlOetBJbqNiiBd+TSsMBtE9lJZ31haytdcUU tKCeQO6AXCHylDzKMI1xtve+WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOHfltZ MpXbdM7UH2qeIL5SMwlTMB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0 ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpUeecc4PBWFonXlo6PXGr1SV4wI368j/pilK5saF2Rb6D5kKOvTti xPZYr/40tIig8ZdFo5/TYiXxjfm9+uSOgF0mNFaKXvTQzpW6YO04Kr3hlcEYpiAD st2283xegbYSKBqgdE6lZecoefpBCS53tE4Hkc9ueOiZ4Y9wkD4GwN5Zi9wheokZ +GLGmGztPk4JaHmIGu9hPvDXSjyBpI85wJbWPiI7aMfKI0QVznIE5cwKN8vSdAeQ nyRqblyoLL4yFP3GrBXeAVlcsZ6YB+19aYyv5a1EVkc0L5Na4mVL5iw5YcHNS809 FAdZ4cL9iLfs63nnydf8K2SLHLQrHIlo -----END CERTIFICATE-----Generated at Sat Jun 14 18:55:11 2025 by rpki-client