$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json) Hash identifier: Xa/0GjbUK/MccIhlSw9RdXJAe23xkOAKIAPIJHHkekg= Subject key identifier: B9:D9:C9:0B:51:CA:4A:45:5B:8F:72:23:C6:33:DB:54:55:54:50:07 Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Certificate serial: 0B9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft Manifest number: 0B95 Signing time: Thu 24 Apr 2025 18:54:52 +0000 Manifest this update: Thu 24 Apr 2025 18:54:51 +0000 Manifest next update: Thu 01 May 2025 18:54:51 +0000 Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: EfAm80iFkhrLEvTPHiZYsS+pOyODBZ7j9hgtBRLIVX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2970 (0xb9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Validity Not Before: Apr 24 18:54:51 2025 GMT Not After : May 1 18:54:51 2025 GMT Subject: CN=680a88fb-78d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:59:a0:54:26:16:6b:ea:ad:51:ba:b8:cb:b3: 9f:22:c8:00:09:7c:39:9f:1a:ac:36:32:7f:24:f0: 5c:65:f6:c6:de:e5:ec:e2:18:a7:df:56:b1:ed:93: ff:45:61:67:f0:66:e6:33:97:23:8c:3c:d0:4c:0f: 2d:93:f9:54:48:c2:fd:cd:21:4f:e7:30:ad:1d:e8: a1:16:14:90:90:52:83:32:6a:16:cf:99:57:1b:a7: 97:8a:71:e1:60:ed:b0:a9:9b:4a:92:50:70:e2:f5: 0c:16:30:d6:b6:97:66:39:eb:51:78:71:d3:6e:d5: 44:d4:f7:2a:16:d4:58:bf:90:1f:11:33:ce:ff:20: 0b:85:c9:80:5a:8e:37:1d:6d:53:b8:15:2d:e9:93: d5:f6:61:43:8c:60:c4:8b:de:d5:29:c2:0e:ea:30: 4e:46:ea:b2:a5:8e:32:f5:f6:ab:c6:3a:51:a5:af: 43:c0:c5:79:97:96:a3:51:10:d8:28:0a:0d:96:de: 47:e2:71:a8:99:60:79:e1:87:ab:80:a3:f4:47:ac: 8f:21:eb:55:da:6a:b6:99:6f:cb:f4:32:f1:1f:cf: 31:9f:8f:43:14:16:c6:ea:31:7e:eb:45:df:a0:eb: a6:57:81:27:93:9d:f2:fd:cd:ad:90:35:10:ed:ee: 72:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D9:C9:0B:51:CA:4A:45:5B:8F:72:23:C6:33:DB:54:55:54:50:07 X509v3 Authority Key Identifier: keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:92:35:78:18:93:e3:37:00:e7:55:ff:a4:92:3c:d2:ad:b2: 6c:03:3c:64:70:e5:23:b0:58:70:71:ae:45:4f:e8:a3:e8:22: d8:51:9e:8e:0d:43:a1:88:23:55:0e:4b:f8:f6:38:ae:46:9f: a4:08:ac:a7:f7:ce:cc:32:8a:be:e5:ca:f2:90:5e:73:d8:c6: 56:3b:7f:69:da:1b:e8:2c:22:07:61:e6:6d:cb:2a:31:d5:7e: e8:1b:e8:c1:66:2a:58:48:81:21:57:4f:14:47:c6:a2:58:41: 16:81:88:af:1c:72:51:1c:e1:9d:f6:72:e8:31:51:39:1a:c5: 94:b2:0c:0d:5a:71:ec:79:a5:d3:43:6e:a5:a2:54:eb:19:88: c2:35:9d:f4:7d:ef:f4:7e:50:0f:db:35:c3:1e:13:7f:c5:17: ad:d1:cb:d0:f0:fb:aa:fd:ed:b6:ce:6c:bf:e6:23:51:59:f2: 38:6e:96:82:81:2d:b7:53:61:e0:cc:5e:0e:b2:d9:98:77:d0: 75:73:e9:db:61:ed:ba:7b:6d:11:da:ad:70:3f:8c:63:c9:d3: d2:0f:bf:d7:79:0b:be:6f:2f:b5:d9:3b:6b:00:e9:a5:f4:5e: 76:cf:3a:a3:0c:e1:78:27:ff:ef:79:05:1e:a4:40:84:2d:c6: 24:89:ea:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC QTY5RTQ0M0QwHhcNMjUwNDI0MTg1NDUxWhcNMjUwNTAxMTg1NDUxWjAYMRYwFAYD VQQDEw02ODBhODhmYi03OGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lmgVCYWa+qtUbq4y7OfIsgACXw5nxqsNjJ/JPBcZfbG3uXs4hin31ax7ZP/ RWFn8GbmM5cjjDzQTA8tk/lUSML9zSFP5zCtHeihFhSQkFKDMmoWz5lXG6eXinHh YO2wqZtKklBw4vUMFjDWtpdmOetReHHTbtVE1PcqFtRYv5AfETPO/yALhcmAWo43 HW1TuBUt6ZPV9mFDjGDEi97VKcIO6jBORuqypY4y9farxjpRpa9DwMV5l5ajURDY KAoNlt5H4nGomWB54YergKP0R6yPIetV2mq2mW/L9DLxH88xn49DFBbG6jF+60Xf oOumV4Enk53y/c2tkDUQ7e5ypwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnZyQtR ykpFW49yI8Yz21RVVFAHMB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0 ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDkjV4GJPjNwDnVf+kkjzSrbJsAzxkcOUjsFhwca5FT+ij6CLYUZ6O DUOhiCNVDkv49jiuRp+kCKyn987MMoq+5crykF5z2MZWO39p2hvoLCIHYeZtyyox 1X7oG+jBZipYSIEhV08UR8aiWEEWgYivHHJRHOGd9nLoMVE5GsWUsgwNWnHseaXT Q26lolTrGYjCNZ30fe/0flAP2zXDHhN/xRet0cvQ8Puq/e22zmy/5iNRWfI4bpaC gS23U2HgzF4OstmYd9B1c+nbYe26e20R2q1wP4xjydPSD7/XeQu+by+12TtrAOml 9F52zzqjDOF4J//veQUepECELcYkier3 -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:54 2025 by rpki-client