$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json) Hash identifier: DGsKY3FcIxAH4+1/yD0ttKBqHc7VEMIcu0U+DmE7n7g= Subject key identifier: 27:B9:03:36:96:95:FC:80:5A:B6:C1:0D:B1:AD:75:16:65:C1:78:9F Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft Manifest number: 012B Signing time: Tue 01 Jul 2025 05:04:56 +0000 Manifest this update: Tue 01 Jul 2025 05:04:56 +0000 Manifest next update: Tue 08 Jul 2025 05:04:56 +0000 Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: /obrxMdqGqp/hNV4EftO9xrz+9fgYzZ8Y6Ok1lDzJeU=) 2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: lfBaqProMut7Uby4sm5sXFCXR+BzVB4lKdYH7qIjDTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Validity Not Before: Jul 1 05:04:56 2025 GMT Not After : Jul 8 05:04:56 2025 GMT Subject: CN=68636c78-0932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:68:ff:cb:40:12:dd:07:d3:fa:a0:aa:f0: de:9b:6d:de:32:72:ed:62:e8:95:6d:63:ca:4e:ca: 48:c7:04:9a:71:0f:59:ac:ed:50:d9:cb:42:68:46: 3f:e1:98:4f:0e:0f:b4:72:9f:c6:b7:40:0a:18:8c: c0:f6:64:bc:a7:24:d9:36:0c:6f:1f:5f:0e:d5:22: dd:ca:04:dc:7e:8b:ef:a2:a4:78:2f:24:63:30:5c: d4:42:91:a9:bb:83:b7:c6:48:81:7c:57:df:73:a4: 55:f6:bd:2f:b5:95:9d:f5:d8:28:18:1c:a2:39:df: a3:08:3d:c1:53:7b:6c:37:51:c1:0d:81:7a:e1:85: a1:70:af:d5:28:5f:2a:e2:25:27:95:64:24:52:95: 65:6c:04:24:2c:ba:64:df:97:d0:61:36:f6:cd:f0: ef:78:dc:b9:a2:66:a6:e8:c9:f7:7b:72:ff:1d:4f: b1:14:32:01:ed:5c:05:34:76:10:e1:55:5d:77:8c: d4:dd:ed:dc:c6:6f:50:3d:63:cb:cf:37:ed:26:c7: 7e:03:55:ce:b5:38:26:bc:e0:83:9c:8e:e6:1b:a1: 0b:65:05:bf:ce:ed:ed:c0:9b:a8:2e:8b:86:60:44: c3:b4:17:4f:b9:4c:87:99:f0:47:23:7c:5b:e0:5e: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B9:03:36:96:95:FC:80:5A:B6:C1:0D:B1:AD:75:16:65:C1:78:9F X509v3 Authority Key Identifier: keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:35:72:fe:eb:23:fd:7c:22:e8:98:5b:ef:86:e6:03:94:1d: 53:40:46:94:f7:d0:3a:15:f0:1e:2d:30:66:36:2d:df:b4:6e: c8:57:d6:72:22:34:0b:01:48:5b:03:5f:cf:6c:78:24:ab:ef: e1:26:92:70:fb:f5:cc:38:f1:54:21:d0:ba:02:f3:ba:dd:6e: 10:b5:46:64:80:8d:23:99:b7:56:07:0a:06:79:cd:63:11:4e: 17:fb:98:fa:9d:3b:5d:51:bd:46:54:da:43:47:ed:25:c4:20: 70:9e:e6:7e:aa:91:eb:3a:56:54:1e:30:eb:9c:f5:cb:11:0d: ba:c0:3f:57:b5:30:ad:a9:bf:6c:09:d3:e8:e8:d1:6d:44:4d: 24:e1:4d:aa:b5:bd:42:d0:21:42:3f:b1:bb:c9:d9:67:33:b6: 03:a9:fd:08:d6:c4:3b:4d:27:da:1f:ec:50:e8:de:b0:be:9a: 71:40:22:55:6f:a4:5c:cd:59:b6:53:34:85:b5:59:1e:9b:92: 94:78:9e:81:ed:78:c7:0b:51:cc:21:bf:3c:fa:f6:18:18:6c: f9:03:25:3a:da:b7:4f:dc:17:78:78:5b:9f:63:2b:f9:2b:fa: a4:45:78:0a:0b:96:e2:ab:e5:ea:89:86:5a:85:f0:96:c7:30: 98:59:96:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE NzU1RUQwQzAwHhcNMjUwNzAxMDUwNDU2WhcNMjUwNzA4MDUwNDU2WjAYMRYwFAYD VQQDEw02ODYzNmM3OC0wOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdZo/8tAEt0H0/qgqvDem23eMnLtYuiVbWPKTspIxwSacQ9ZrO1Q2ctCaEY/ 4ZhPDg+0cp/Gt0AKGIzA9mS8pyTZNgxvH18O1SLdygTcfovvoqR4LyRjMFzUQpGp u4O3xkiBfFffc6RV9r0vtZWd9dgoGByiOd+jCD3BU3tsN1HBDYF64YWhcK/VKF8q 4iUnlWQkUpVlbAQkLLpk35fQYTb2zfDveNy5omam6Mn3e3L/HU+xFDIB7VwFNHYQ 4VVdd4zU3e3cxm9QPWPLzzftJsd+A1XOtTgmvOCDnI7mG6ELZQW/zu3twJuoLouG YETDtBdPuUyHmfBHI3xb4F7+qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe5AzaW lfyAWrbBDbGtdRZlwXifMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP aTJtdFBER25OaG5YVmUwTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/NXL+6yP9fCLomFvvhuYDlB1TQEaU99A6FfAeLTBmNi3ftG7IV9Zy IjQLAUhbA1/PbHgkq+/hJpJw+/XMOPFUIdC6AvO63W4QtUZkgI0jmbdWBwoGec1j EU4X+5j6nTtdUb1GVNpDR+0lxCBwnuZ+qpHrOlZUHjDrnPXLEQ26wD9XtTCtqb9s CdPo6NFtRE0k4U2qtb1C0CFCP7G7ydlnM7YDqf0I1sQ7TSfaH+xQ6N6wvppxQCJV b6RczVm2UzSFtVkem5KUeJ6B7XjHC1HMIb88+vYYGGz5AyU62rdP3Bd4eFufYyv5 K/qkRXgKC5biq+XqiYZahfCWxzCYWZZQ -----END CERTIFICATE-----Generated at Wed Jul 2 20:04:54 2025 by rpki-client