$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: OTpTgsfeG8/yEmzKzc3SsKznflfoNvhKk6b8tjJInmw= Subject key identifier: 15:63:B9:16:DB:F7:62:60:28:B2:9F:B3:22:B4:C1:D1:53:5A:2F:D6 Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: 58 Signing time: Fri 25 Apr 2025 06:08:54 +0000 Manifest this update: Fri 25 Apr 2025 06:08:53 +0000 Manifest next update: Fri 02 May 2025 06:08:53 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: hIvPmNDyTxkCsbtO+Hzk4knwfR2ZJfIqXmr9EFXPTRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Apr 25 06:08:53 2025 GMT Not After : May 2 06:08:53 2025 GMT Subject: CN=680b26f5-42a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:27:8b:25:b8:cb:71:44:04:49:1c:e4:ca: a4:e5:f5:3a:e9:91:86:b4:15:87:5d:d4:76:dd:7c: 2f:f5:7a:2f:05:d2:81:da:fc:fa:b2:dd:cb:3d:ee: dc:58:1c:5d:f2:a3:8f:e4:50:e0:97:cc:e0:2f:21: 31:43:41:da:6f:0f:69:7a:a7:6f:00:6c:19:f0:7f: b5:8f:a5:cf:3b:a2:dd:01:40:b6:7e:a3:97:57:cd: 00:e9:2c:31:c2:be:a3:d0:2a:3c:a6:e1:b6:48:41: 94:c6:07:a5:ff:57:7b:28:03:f9:a4:36:76:ff:fc: 17:05:59:99:ec:f4:db:6c:e7:cc:e0:62:54:5d:d7: fc:10:92:66:89:a4:d8:b2:a8:70:c8:a5:76:ec:70: 40:c7:2a:5d:8e:01:f1:42:d5:fd:48:f0:b0:b3:d2: 37:c4:7c:81:97:32:4f:b7:d0:fa:35:c8:68:72:92: 47:9e:a6:3b:5c:94:0b:fb:5a:89:11:83:20:34:ac: 14:3b:8d:13:46:ea:3d:d3:7e:b8:45:90:90:39:4b: 9a:f7:df:06:b1:b4:43:3c:e7:8b:e1:71:39:40:45: 94:1a:4b:0c:d3:85:50:a6:d1:43:38:1d:3a:77:34: 01:05:ff:8b:0e:1d:79:26:55:d2:df:e2:b3:17:2f: 71:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:63:B9:16:DB:F7:62:60:28:B2:9F:B3:22:B4:C1:D1:53:5A:2F:D6 X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:e9:0e:63:81:f2:2f:28:62:53:54:b6:ca:a6:cc:e2:e8:d4: 74:ce:ad:cd:90:22:b1:f9:81:ee:8a:39:db:5a:5a:f7:56:45: 06:16:95:73:ac:71:24:3c:10:6a:5d:c6:44:3d:9d:49:0f:89: d3:4d:3a:3e:4b:bf:02:ca:26:4c:64:5c:b1:1b:d5:25:81:25: d2:d0:82:89:6c:a8:6f:cb:70:70:37:5c:ed:ce:ea:b2:68:b3: 1a:a2:83:4b:e4:b4:ac:03:be:54:5b:6b:02:75:77:cd:0d:ea: ab:c3:e2:71:7e:f4:2f:68:2c:64:7f:d1:83:ab:cf:a4:d0:f5: e0:7e:94:d7:29:69:b2:bb:d7:fc:8b:ba:0c:8d:40:8c:0d:fe: 10:b9:3f:aa:f3:d7:b1:16:fb:a0:cd:3b:99:8f:b6:a9:7b:c1: 9b:41:59:0c:44:d5:c0:3b:e1:4a:35:64:d8:d8:d9:e9:12:94: 0e:1a:1b:b8:da:55:f2:68:41:34:ed:f1:fe:7a:df:b2:f5:07: c7:10:99:d8:56:f6:19:a8:5e:b3:97:6b:b9:7f:d1:a3:57:61: 0f:64:e4:ff:23:83:6c:8f:35:f6:bb:aa:02:ec:c2:5e:c3:a1: 68:8a:92:cc:a5:17:08:7c:d4:ad:71:d5:12:28:f5:78:d3:9d: 5f:34:10:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoNDQ2ODlDNjcxRkFFRjE5NjdDRjdBOUIxQTMzNjhEOEI5 MTRCN0JBNzAeFw0yNTA0MjUwNjA4NTNaFw0yNTA1MDIwNjA4NTNaMBgxFjAUBgNV BAMTDTY4MGIyNmY1LTQyYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4tieLJbjLcUQESRzkyqTl9TrpkYa0FYdd1HbdfC/1ei8F0oHa/Pqy3cs97txY HF3yo4/kUOCXzOAvITFDQdpvD2l6p28AbBnwf7WPpc87ot0BQLZ+o5dXzQDpLDHC vqPQKjym4bZIQZTGB6X/V3soA/mkNnb//BcFWZns9Nts58zgYlRd1/wQkmaJpNiy qHDIpXbscEDHKl2OAfFC1f1I8LCz0jfEfIGXMk+30Po1yGhykkeepjtclAv7WokR gyA0rBQ7jRNG6j3TfrhFkJA5S5r33waxtEM854vhcTlARZQaSwzThVCm0UM4HTp3 NAEF/4sOHXkmVdLf4rMXL3HPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFWO5Ftv3 YmAosp+zIrTB0VNaL9YwHwYDVR0jBBgwFoAURGicZx+u8ZZ896mxozaNi5FLe6cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2LzA3QUU3QTk2OUNG NjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkdpY1p4LXU4Wlo4OTZteG96YU5pNUZMZTZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2LzA3QUU3QTk2OUNGNjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpa ODk2bXhvemFOaTVGTGU2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMPpDmOB8i8oYlNUtsqmzOLo1HTOrc2QIrH5ge6KOdtaWvdWRQYWlXOs cSQ8EGpdxkQ9nUkPidNNOj5LvwLKJkxkXLEb1SWBJdLQgolsqG/LcHA3XO3O6rJo sxqig0vktKwDvlRbawJ1d80N6qvD4nF+9C9oLGR/0YOrz6TQ9eB+lNcpabK71/yL ugyNQIwN/hC5P6rz17EW+6DNO5mPtql7wZtBWQxE1cA74Uo1ZNjY2ekSlA4aG7ja VfJoQTTt8f5637L1B8cQmdhW9hmoXrOXa7l/0aNXYQ9k5P8jg2yPNfa7qgLswl7D oWiKksylFwh81K1x1RIo9XjTnV80EOc= -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:39 2025 by rpki-client