$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: sQH4BZDyZlLDNa/cpRVtaBnlUbG2XFhyVvP4QobHKfs= Subject key identifier: 1C:A5:88:93:CF:88:F1:43:B7:06:04:80:E5:6F:D4:9D:6E:8E:1A:27 Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: 74 Signing time: Sat 21 Jun 2025 05:51:15 +0000 Manifest this update: Sat 21 Jun 2025 05:51:14 +0000 Manifest next update: Sat 28 Jun 2025 05:51:14 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: fbIvakjuipJA3w1c9s4MkPJHT1Pv9tgeRtTmTZOGIKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 05:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Jun 21 05:51:14 2025 GMT Not After : Jun 28 05:51:14 2025 GMT Subject: CN=68564853-c29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:4a:46:33:e0:c4:d9:e4:ef:5d:cf:5d:e6: 8e:1f:a3:e4:df:d1:fc:96:2f:f6:e9:97:62:b7:93: f8:1f:74:24:a2:8a:a3:d4:e5:2e:6e:9a:13:d0:bb: 5a:a1:6c:23:28:c6:29:25:2a:66:98:ac:68:99:e6: a2:d0:cd:71:88:4e:f6:15:b5:29:f9:55:00:99:ad: 94:8c:9b:76:cf:4f:c0:cf:b2:35:63:f7:76:cf:53: 4c:a8:af:68:9a:be:65:45:08:66:46:06:50:09:61: 46:98:89:ca:22:bf:2b:19:cb:43:4c:6b:77:86:f4: ff:10:e9:ca:4d:cd:1d:59:e8:e2:84:d1:cf:36:49: 89:ff:43:10:d7:04:a4:d8:46:1d:5a:9f:00:24:ea: ed:8a:29:0e:a0:3a:88:2d:7e:01:db:cc:27:cd:1c: 33:f3:5f:e1:c8:57:be:40:fb:4f:51:2e:b8:0a:e7: 53:2a:4e:e5:a8:9d:da:2c:32:89:37:5d:53:22:da: f2:16:ea:29:9a:13:ad:a2:c4:56:d3:2b:bb:4f:9e: c2:a3:e8:42:d4:7d:c7:19:ef:29:b8:bd:25:c6:e3: 56:33:09:1c:c9:28:8d:dd:60:ed:f9:30:8f:a0:86: a8:9e:3f:4b:21:1a:af:f1:76:08:8c:25:3f:00:46: 93:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A5:88:93:CF:88:F1:43:B7:06:04:80:E5:6F:D4:9D:6E:8E:1A:27 X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f8:f7:cc:f4:0d:4f:a9:3c:b1:43:34:a3:9d:05:5c:3d:5c: 18:3e:d2:b7:a1:e7:d5:2b:5f:95:0b:cc:3f:69:24:1c:82:0f: f0:c8:37:60:5a:5d:26:15:90:84:84:a4:0a:a8:1d:bb:87:d5: 3d:e2:95:9c:ea:d1:57:89:fe:fd:75:97:2b:79:59:eb:2e:bc: a6:e6:c0:c9:a3:cd:9f:87:a6:bd:71:6c:45:09:54:28:cb:a5: 63:80:ae:38:3b:aa:f0:67:b5:c9:89:d8:91:36:17:df:70:e6: 95:2a:11:4d:02:6b:52:0d:b5:c0:fb:e1:bc:a1:0d:fa:53:b5: 15:9f:ef:45:a8:96:af:98:f7:66:df:8b:61:b7:64:b2:27:29: 12:41:6a:85:35:4e:5e:77:1c:a2:7c:e8:39:ac:fd:1b:68:4d: 90:ec:f8:34:0a:32:56:01:63:2d:3f:3a:c4:0e:7a:5d:cb:5e: b3:eb:a5:bb:c9:d6:2c:4f:54:10:83:68:a3:7e:df:95:9c:ea: 22:ac:d3:16:f3:f6:3e:51:d9:e2:30:ca:32:af:85:d8:33:57: e3:16:30:72:b6:dd:f3:02:93:5c:1c:4a:e0:a6:70:30:ab:27: 3e:f1:78:9f:29:6d:7b:bf:23:0e:fc:72:a0:71:5e:bf:83:73: 32:2e:4b:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoNDQ2ODlDNjcxRkFFRjE5NjdDRjdBOUIxQTMzNjhEOEI5 MTRCN0JBNzAeFw0yNTA2MjEwNTUxMTRaFw0yNTA2MjgwNTUxMTRaMBgxFjAUBgNV BAMTDTY4NTY0ODUzLWMyOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7q0pGM+DE2eTvXc9d5o4fo+Tf0fyWL/bpl2K3k/gfdCSiiqPU5S5umhPQu1qh bCMoxiklKmaYrGiZ5qLQzXGITvYVtSn5VQCZrZSMm3bPT8DPsjVj93bPU0yor2ia vmVFCGZGBlAJYUaYicoivysZy0NMa3eG9P8Q6cpNzR1Z6OKE0c82SYn/QxDXBKTY Rh1anwAk6u2KKQ6gOogtfgHbzCfNHDPzX+HIV75A+09RLrgK51MqTuWondosMok3 XVMi2vIW6imaE62ixFbTK7tPnsKj6ELUfccZ7ym4vSXG41YzCRzJKI3dYO35MI+g hqieP0shGq/xdgiMJT8ARpMXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHKWIk8+I 8UO3BgSA5W/UnW6OGicwHwYDVR0jBBgwFoAURGicZx+u8ZZ896mxozaNi5FLe6cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2LzA3QUU3QTk2OUNG NjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkdpY1p4LXU4Wlo4OTZteG96YU5pNUZMZTZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2LzA3QUU3QTk2OUNGNjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpa ODk2bXhvemFOaTVGTGU2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIL498z0DU+pPLFDNKOdBVw9XBg+0reh59UrX5ULzD9pJByCD/DIN2Ba XSYVkISEpAqoHbuH1T3ilZzq0VeJ/v11lyt5WesuvKbmwMmjzZ+Hpr1xbEUJVCjL pWOArjg7qvBntcmJ2JE2F99w5pUqEU0Ca1INtcD74byhDfpTtRWf70Wolq+Y92bf i2G3ZLInKRJBaoU1Tl53HKJ86Dms/RtoTZDs+DQKMlYBYy0/OsQOel3LXrPrpbvJ 1ixPVBCDaKN+35Wc6iKs0xbz9j5R2eIwyjKvhdgzV+MWMHK23fMCk1wcSuCmcDCr Jz7xeJ8pbXu/Iw78cqBxXr+DczIuS50= -----END CERTIFICATE-----Generated at Mon Jun 23 04:46:28 2025 by rpki-client