$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: F56r6oJ2p+JYaBHOJErNpyX+Bq7HuCMBFZzrldjQON8= Subject key identifier: FA:A1:88:7A:83:6A:09:B1:AE:A5:13:15:7B:D2:EC:B0:3A:62:97:6F Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0C75 Signing time: Sat 14 Jun 2025 18:09:15 +0000 Manifest this update: Sat 14 Jun 2025 18:09:14 +0000 Manifest next update: Sat 21 Jun 2025 18:09:14 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: ivaOgEjw3oFjW8uNOgLTlquU+jpFPIYnQ+IsLrajYb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Jun 14 18:09:14 2025 GMT Not After : Jun 21 18:09:14 2025 GMT Subject: CN=684dbaca-2ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:b2:11:f3:2f:56:1c:e3:d0:27:b5:72:75: 1b:1f:bb:b5:d9:18:a6:aa:a1:63:ce:80:34:a7:4e: f9:b6:6b:a2:36:ea:72:3c:49:ec:bc:6d:84:dd:45: cb:de:27:5b:a4:93:8e:e1:41:6d:24:bd:9d:5c:35: 01:f4:02:1c:f0:22:d6:b1:00:f9:3c:60:6c:f2:3d: ca:ab:01:bd:e2:b7:c3:09:7c:e0:16:8b:5f:f7:8a: 18:dd:b7:c4:54:f2:29:f9:6f:5a:75:42:83:1d:b9: 77:74:a6:f2:83:1e:bd:4a:e4:e7:eb:d4:3a:2e:84: 72:43:7d:ce:88:79:a8:4c:4c:17:62:17:63:d9:4f: 8d:52:e7:62:0b:ef:42:f5:61:ec:0f:f1:aa:5f:ef: c3:f8:4d:4a:24:b7:1d:20:37:74:4c:22:bd:ac:80: 7e:f0:83:c4:29:b0:c5:64:3a:ab:2b:dd:09:9e:f3: 7f:91:c5:87:d6:91:af:47:1f:b9:ae:0f:60:f2:d0: 17:b2:ae:3b:25:48:f8:f6:ce:9f:71:c5:82:3e:b6: 92:f1:4d:b8:81:bd:a2:01:e9:9e:30:3d:f9:f4:c9: 22:15:fc:99:bd:f7:ca:5e:8d:c8:db:5d:d9:9c:ad: 07:65:b5:ab:e3:10:40:7e:c3:7a:b6:c1:36:a5:a4: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A1:88:7A:83:6A:09:B1:AE:A5:13:15:7B:D2:EC:B0:3A:62:97:6F X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:b9:89:c8:00:3b:a7:db:df:0a:50:91:a8:04:38:81:79:f1: 92:8b:72:db:1b:cf:10:d1:ae:5e:54:fa:35:69:78:22:d0:7b: 97:13:31:2d:0f:04:68:8a:39:64:21:96:92:d1:5f:01:b9:92: 27:a5:34:cb:78:a5:e9:fa:83:e4:7f:fa:dd:8a:8a:bc:c4:b3: f5:a2:12:b5:68:23:f7:60:3e:b0:17:8f:29:bd:2d:a1:7a:68: cf:15:bd:c9:6c:e3:a3:69:9b:ad:e9:d7:8c:06:80:f4:ba:cc: e6:0a:77:de:56:e9:18:ea:e0:85:a6:ed:d8:87:31:76:c9:74: b9:cd:56:88:b3:fe:f3:1b:c1:4a:af:a2:7e:24:ff:06:0a:b9: 74:c1:35:4f:e3:db:a7:0d:14:81:13:20:04:ba:d0:bc:6d:f8: 90:96:dc:81:4e:4c:37:87:10:7f:20:9b:92:09:51:58:2e:aa: 17:99:5a:85:7a:9f:a1:ad:e4:b8:69:8b:d4:32:8c:7d:84:62: ce:37:60:51:47:5b:68:2f:32:4f:af:53:7b:c0:7f:01:a6:c4: 8a:02:04:3e:38:7b:da:5f:7a:ad:83:17:1d:f1:de:55:ec:69: 8c:b3:7e:70:12:a8:54:ca:84:70:a2:29:19:0b:9e:e9:72:e6: e0:2f:37:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjUwNjE0MTgwOTE0WhcNMjUwNjIxMTgwOTE0WjAYMRYwFAYD VQQDEw02ODRkYmFjYS0yZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrOyEfMvVhzj0Ce1cnUbH7u12RimqqFjzoA0p075tmuiNupyPEnsvG2E3UXL 3idbpJOO4UFtJL2dXDUB9AIc8CLWsQD5PGBs8j3KqwG94rfDCXzgFotf94oY3bfE VPIp+W9adUKDHbl3dKbygx69SuTn69Q6LoRyQ33OiHmoTEwXYhdj2U+NUudiC+9C 9WHsD/GqX+/D+E1KJLcdIDd0TCK9rIB+8IPEKbDFZDqrK90JnvN/kcWH1pGvRx+5 rg9g8tAXsq47JUj49s6fccWCPraS8U24gb2iAemeMD359MkiFfyZvffKXo3I213Z nK0HZbWr4xBAfsN6tsE2paRHBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqhiHqD agmxrqUTFXvS7LA6YpdvMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzuYnIADun298KUJGoBDiBefGSi3LbG88Q0a5eVPo1aXgi0HuXEzEt DwRoijlkIZaS0V8BuZInpTTLeKXp+oPkf/rdioq8xLP1ohK1aCP3YD6wF48pvS2h emjPFb3JbOOjaZut6deMBoD0uszmCnfeVukY6uCFpu3YhzF2yXS5zVaIs/7zG8FK r6J+JP8GCrl0wTVP49unDRSBEyAEutC8bfiQltyBTkw3hxB/IJuSCVFYLqoXmVqF ep+hreS4aYvUMox9hGLON2BRR1toLzJPr1N7wH8BpsSKAgQ+OHvaX3qtgxcd8d5V 7GmMs35wEqhUyoRwoikZC57pcubgLzfV -----END CERTIFICATE-----Generated at Sun Jun 15 09:53:46 2025 by rpki-client