$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft File: cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft (raw, json) Hash identifier: zGO9ZbNnJS2Tud6aWnMaALBLpjkj2pwbZRKKypGr2fM= Subject key identifier: 2D:1C:73:88:7E:25:0E:06:DE:9A:49:60:85:50:8D:E5:1A:98:F5:A3 Authority key identifier: 70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4 Certificate issuer: /CN=A9184684/serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft Manifest number: 28 Signing time: Sat 09 Aug 2025 08:16:55 +0000 Manifest this update: Sat 09 Aug 2025 08:16:54 +0000 Manifest next update: Sat 16 Aug 2025 08:16:54 +0000 Files and hashes: 1: cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl (hash: 6Mf97lPi9xy2Oi6eZ44IIs6cDlhHhhCodWRAeBaT6gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184684, serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4 Validity Not Before: Aug 9 08:16:54 2025 GMT Not After : Aug 16 08:16:54 2025 GMT Subject: CN=689703f7-a08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:ea:c0:46:6f:49:26:de:37:6d:5f:72:73: ab:5a:23:2e:91:36:62:2e:ed:9e:83:14:d4:0e:33: 23:28:0b:e7:02:8d:d8:4f:e3:bc:63:78:b1:8e:c2: 77:1a:ea:b8:ce:9c:3b:e8:26:7a:90:2c:f3:cf:9a: 0b:d0:fb:8c:41:44:39:74:29:19:dc:8f:8a:12:44: 17:ea:e5:87:cd:3a:04:84:bb:4b:6b:ae:67:8f:4c: f3:dc:f3:86:a2:80:93:73:3f:2d:27:a6:9c:3e:d9: 7d:36:9d:fa:48:7d:3e:32:e4:4c:fd:73:93:57:6f: 8d:6b:fd:9c:4d:5d:72:70:8e:1f:b7:35:f6:88:3a: 62:64:6e:31:ab:47:27:c7:d1:a6:62:6b:d1:f1:1b: 41:8e:36:88:4d:fb:1c:02:4b:ac:8e:0b:6e:bb:2f: f6:ae:bf:f7:49:be:89:90:47:0b:2f:20:1e:51:3b: 88:43:f5:7f:94:a0:37:3c:37:dd:8a:aa:37:5e:aa: 9c:25:94:5e:ba:d2:d3:a9:34:95:26:13:ec:18:78: eb:aa:31:b7:03:56:8d:07:16:2a:c5:e1:c7:28:e8: 0e:76:f9:a3:e5:4b:62:f3:87:3f:35:d3:16:a5:8a: 98:b8:65:48:a4:6a:22:80:94:da:72:c9:e7:11:5d: 5f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1C:73:88:7E:25:0E:06:DE:9A:49:60:85:50:8D:E5:1A:98:F5:A3 X509v3 Authority Key Identifier: keyid:70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:18:da:92:45:c1:5f:c5:ba:41:df:b4:25:bc:03:fd:bb:ee: a4:b0:11:c6:d4:89:d2:4a:9e:80:4f:f9:f0:03:7e:4d:8e:b6: 30:5b:13:55:74:9a:a1:7c:6b:53:d4:10:0d:48:4d:30:c1:a7: 82:b9:66:f6:93:2f:71:18:8f:e8:99:4a:7c:45:36:bc:bb:86: 4c:7d:1e:35:e7:bb:03:66:75:1b:8f:58:91:93:06:11:e2:67: 5c:89:69:f9:eb:f3:35:ee:67:a6:49:60:47:ee:46:35:57:b5: b8:58:20:75:7c:78:a7:22:0e:a0:7f:0b:5a:bb:d0:bf:eb:1b: 5f:eb:f1:44:c6:ad:1f:6c:dd:b2:43:31:5d:31:76:3d:81:7e: cf:cd:ac:e7:7b:02:9a:77:c4:1d:08:a4:26:b3:c8:69:34:9a: bc:16:ff:75:39:f1:3a:1f:54:bf:6f:32:2a:f5:a1:98:ce:f2: 7e:21:89:64:63:d6:d8:f4:25:34:9c:e4:30:85:ba:a1:29:92: 4c:be:52:4b:ac:5f:53:c3:ee:07:8f:95:97:cf:de:a8:ee:99: 44:ea:62:85:04:04:65:91:aa:ef:8c:1c:c8:de:d1:59:1d:a8: 75:87:dd:3b:19:ad:b0:57:53:5b:31:57:19:0e:3d:26:81:47: b1:3b:13:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDY4NDExMC8GA1UEBRMoNzAwMjA2M0JGMzAyQ0JBNDZGOTI0NUIwNzlBNDlCMTFB RDk2RUFFNDAeFw0yNTA4MDkwODE2NTRaFw0yNTA4MTYwODE2NTRaMBgxFjAUBgNV BAMTDTY4OTcwM2Y3LWEwOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGeerARm9JJt43bV9yc6taIy6RNmIu7Z6DFNQOMyMoC+cCjdhP47xjeLGOwnca 6rjOnDvoJnqQLPPPmgvQ+4xBRDl0KRncj4oSRBfq5YfNOgSEu0trrmePTPPc84ai gJNzPy0nppw+2X02nfpIfT4y5Ez9c5NXb41r/ZxNXXJwjh+3NfaIOmJkbjGrRyfH 0aZia9HxG0GONohN+xwCS6yOC267L/auv/dJvomQRwsvIB5RO4hD9X+UoDc8N92K qjdeqpwllF660tOpNJUmE+wYeOuqMbcDVo0HFirF4cco6A52+aPlS2Lzhz810xal ipi4ZUikaiKAlNpyyecRXV9pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULRxziH4l DgbemklghVCN5RqY9aMwHwYDVR0jBBgwFoAUcAIGO/MCy6RvkkWweaSbEa2W6uQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0JGQ0FCNUNDMzk4 NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZSdmtrV3dlYVNiRWEyVzZ1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY0FJR09fTUN5NlJ2a2tXd2VhU2JFYTJXNnVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 Njg0L0JGQ0FCNUNDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZS dmtrV3dlYVNiRWEyVzZ1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAMY2pJFwV/FukHftCW8A/277qSwEcbUidJKnoBP+fADfk2OtjBbE1V0 mqF8a1PUEA1ITTDBp4K5ZvaTL3EYj+iZSnxFNry7hkx9HjXnuwNmdRuPWJGTBhHi Z1yJafnr8zXuZ6ZJYEfuRjVXtbhYIHV8eKciDqB/C1q70L/rG1/r8UTGrR9s3bJD MV0xdj2Bfs/NrOd7App3xB0IpCazyGk0mrwW/3U58TofVL9vMir1oZjO8n4hiWRj 1tj0JTSc5DCFuqEpkky+UkusX1PD7gePlZfP3qjumUTqYoUEBGWRqu+MHMje0Vkd qHWH3TsZrbBXU1sxVxkOPSaBR7E7E0U= -----END CERTIFICATE-----Generated at Sat Aug 9 23:21:01 2025 by rpki-client