$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: VLkCTBcq5zW1MahErdYyHiR8tTAyLUf+J3D76kyPV+g= Subject key identifier: 7D:4A:A2:A8:1E:6F:4F:5B:C7:94:F0:DA:AB:37:E9:ED:54:C5:25:EC Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0C5B Signing time: Thu 24 Apr 2025 18:15:12 +0000 Manifest this update: Thu 24 Apr 2025 18:15:12 +0000 Manifest next update: Thu 01 May 2025 18:15:12 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: /0tHpfys8Sb0O9py0xqaDxz76SDxhRsHeU7mqIQ+z7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Apr 24 18:15:12 2025 GMT Not After : May 1 18:15:12 2025 GMT Subject: CN=680a7fb0-8517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:45:f8:b7:39:06:43:02:b2:ef:bc:39:76: b8:a3:cc:10:51:8f:b8:87:dd:bc:b9:b9:c7:eb:61: 27:b8:a8:a2:5b:f4:07:14:cf:0c:32:ff:7a:03:45: 6e:e6:5d:f1:2f:e3:b5:ce:cc:6c:28:71:57:57:a9: aa:b1:de:c2:62:e8:5b:ad:f1:14:05:d2:a5:0b:ac: b3:3a:f1:d3:2b:7a:8a:c1:03:4c:0f:63:00:d9:82: 23:fc:53:e0:f7:30:76:73:04:d2:f4:33:6c:c5:4f: e1:ed:f3:db:be:cc:cd:18:71:6a:e7:8b:7f:bc:e0: 83:9a:4a:c2:29:80:1b:f5:08:9f:24:d4:49:a0:87: 67:7d:d1:86:ec:02:26:04:03:a4:59:12:a0:63:95: a5:ed:d3:29:19:72:bb:cb:de:54:97:f5:42:f0:d1: fe:a9:27:33:c5:11:ab:a9:d7:9a:0e:70:0a:1b:41: cf:e0:f4:a4:87:1d:fa:dd:b2:9b:df:61:f8:45:8f: be:0b:06:a3:85:b8:40:b1:54:3f:af:21:5d:7a:0d: 31:85:81:46:5f:ff:f9:09:10:72:81:33:e7:2a:a2: 97:94:d6:95:67:00:d1:39:29:a7:3e:19:e4:85:be: 95:fc:cc:03:a9:e6:83:29:d6:4e:69:b1:3d:51:c9: c3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4A:A2:A8:1E:6F:4F:5B:C7:94:F0:DA:AB:37:E9:ED:54:C5:25:EC X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:1d:eb:ad:c0:70:8c:a2:d6:9e:af:04:d8:49:52:fe:dc:be: 63:83:ab:c1:fb:63:c7:c3:55:13:91:51:44:5d:70:26:65:4f: d2:d1:fd:d8:46:2f:b9:a0:8e:56:f1:b0:7c:b1:7f:d1:ea:6c: c5:1a:b9:9f:fb:53:1d:74:09:48:5d:f3:55:92:96:e3:5d:b7: c8:8e:cd:0c:f2:2a:88:f8:86:fe:05:cb:f5:65:b6:76:6f:e8: dc:c5:d9:da:25:a7:5c:90:59:a6:9e:9b:51:67:b5:e9:07:47: 88:a6:ad:25:c3:10:69:32:32:7b:79:33:17:83:0b:09:ec:1b: 3f:ea:ef:fc:37:4a:2e:9f:c0:3e:12:3b:77:c2:3d:7f:26:52: 7a:ca:c6:2e:f7:cb:0d:c2:a7:45:a9:b2:74:7a:ce:bc:69:50: a1:b5:3c:d3:89:63:bf:28:1a:99:b1:09:53:84:7f:a2:42:b6: 46:24:80:2d:d4:09:f5:f6:a2:f7:83:cb:04:68:28:f6:9b:6b: c9:a8:3c:21:9b:66:dc:e2:40:df:26:a0:de:e4:39:e5:4a:f0: 14:e0:82:8f:db:f5:42:2a:dd:f1:60:d8:19:c4:0d:3f:47:1d: 55:cb:fd:4b:df:0b:39:1c:8c:2d:4a:16:5c:fc:16:ed:18:e5: 8e:4b:a8:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjUwNDI0MTgxNTEyWhcNMjUwNTAxMTgxNTEyWjAYMRYwFAYD VQQDEw02ODBhN2ZiMC04NTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvu9F+Lc5BkMCsu+8OXa4o8wQUY+4h928ubnH62EnuKiiW/QHFM8MMv96A0Vu 5l3xL+O1zsxsKHFXV6mqsd7CYuhbrfEUBdKlC6yzOvHTK3qKwQNMD2MA2YIj/FPg 9zB2cwTS9DNsxU/h7fPbvszNGHFq54t/vOCDmkrCKYAb9QifJNRJoIdnfdGG7AIm BAOkWRKgY5Wl7dMpGXK7y95Ul/VC8NH+qSczxRGrqdeaDnAKG0HP4PSkhx363bKb 32H4RY++CwajhbhAsVQ/ryFdeg0xhYFGX//5CRBygTPnKqKXlNaVZwDROSmnPhnk hb6V/MwDqeaDKdZOabE9UcnDdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1Koqge b09bx5Tw2qs36e1UxSXsMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTHeutwHCMotaerwTYSVL+3L5jg6vB+2PHw1UTkVFEXXAmZU/S0f3Y Ri+5oI5W8bB8sX/R6mzFGrmf+1MddAlIXfNVkpbjXbfIjs0M8iqI+Ib+Bcv1ZbZ2 b+jcxdnaJadckFmmnptRZ7XpB0eIpq0lwxBpMjJ7eTMXgwsJ7Bs/6u/8N0oun8A+ Ejt3wj1/JlJ6ysYu98sNwqdFqbJ0es68aVChtTzTiWO/KBqZsQlThH+iQrZGJIAt 1An19qL3g8sEaCj2m2vJqDwhm2bc4kDfJqDe5DnlSvAU4IKP2/VCKt3xYNgZxA0/ Rx1Vy/1L3ws5HIwtShZc/BbtGOWOS6gA -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:02 2025 by rpki-client