$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json) Hash identifier: rJxStmZRE+R83I6IehoFLHQ8ZiBLV1yH3XdizcyU6MU= Subject key identifier: B3:37:F8:04:06:7C:B6:F8:40:77:68:F6:83:7C:10:E4:6D:4F:ED:E6 Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft Manifest number: 0113 Signing time: Tue 13 May 2025 04:04:59 +0000 Manifest this update: Tue 13 May 2025 04:04:58 +0000 Manifest next update: Tue 20 May 2025 04:04:58 +0000 Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: eueYh597X6UzqFqbgvUq3jJ8wy0KxB0cAkrzaVBxrCQ=) 2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: lfBaqProMut7Uby4sm5sXFCXR+BzVB4lKdYH7qIjDTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Validity Not Before: May 13 04:04:58 2025 GMT Not After : May 20 04:04:58 2025 GMT Subject: CN=6822c4eb-8557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:db:5a:60:1d:33:e1:15:a1:d1:f7:38:f8:6b: b8:a5:92:10:35:41:6d:ea:7c:a2:b4:5f:bb:aa:29: 22:c0:02:3a:53:cf:48:c1:51:17:4f:d8:ad:ba:91: bb:0c:81:5b:5b:ca:ea:a6:1f:83:02:e1:74:90:8a: 36:a7:7b:ea:ff:08:f3:91:65:fe:bc:ef:0f:a9:4c: bd:98:b1:67:25:2a:31:cd:4a:c4:9b:d2:e7:9a:27: 36:ff:ba:53:55:01:88:f5:ac:eb:8b:52:22:7a:3e: 69:47:bd:bc:66:81:af:b8:70:54:d1:e0:8b:1a:b6: 17:0c:ad:50:cc:a4:e5:d2:ac:74:b3:36:09:3d:d7: e1:ec:3e:99:8d:53:eb:6d:27:10:3f:43:dc:d8:d7: f5:cf:61:03:e0:5f:d1:c2:06:95:04:58:b9:c9:01: 10:6b:0d:e7:3f:10:f6:24:48:58:9b:4a:21:b4:13: c6:00:68:8e:bd:22:60:a0:87:d4:3c:f0:2f:5e:cc: a3:e2:3a:bc:cd:ba:07:a7:be:89:86:60:e9:da:65: 4e:f4:1d:40:cf:87:bc:6a:41:ed:18:83:f1:98:9a: ca:82:84:d5:c3:c3:d7:ae:d2:ac:20:d7:e6:5c:26: 72:b7:a7:39:22:19:6f:1f:45:7a:36:ad:55:55:19: 5d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:37:F8:04:06:7C:B6:F8:40:77:68:F6:83:7C:10:E4:6D:4F:ED:E6 X509v3 Authority Key Identifier: keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:ee:2e:ea:95:62:1c:59:6f:43:68:17:2d:fb:7c:64:aa:d9: a7:f5:10:b6:54:6f:a2:0e:21:39:89:c3:d5:92:d1:43:4e:29: 39:b0:16:34:e0:f7:83:be:80:99:06:21:a6:8d:db:f5:4d:c9: 4d:36:14:6e:14:53:52:ab:4b:a2:f5:0d:c5:36:08:5b:ef:b4: b7:9f:33:dc:08:54:93:a5:2d:e3:2b:04:a7:df:f9:61:a2:40: 4c:54:4c:84:bd:ac:b7:d1:a2:8e:1f:7a:73:90:07:36:79:3e: 9e:c9:09:14:de:25:a7:61:af:e7:9c:92:5c:b5:03:f0:5f:34: e3:39:98:f4:7d:ac:6e:7a:65:15:1c:f4:08:f7:06:f4:5c:09: bb:21:f9:20:3d:ba:ca:18:db:65:da:c7:2a:f9:75:2c:44:21: c9:84:dd:e3:37:43:cf:71:97:c2:12:15:c0:d7:d1:24:c3:b3: a3:86:f7:06:bc:2e:c7:c6:03:0c:bd:36:49:8d:96:fd:b3:33: ad:b8:bf:bc:6f:f0:9f:aa:2c:c8:cd:f5:1f:54:e6:68:e9:79: 07:71:dd:5a:5b:e3:ec:33:77:6f:dd:cf:e9:f0:ca:62:b2:c0: 45:ee:80:41:60:43:e9:9e:1e:19:06:74:c2:aa:6b:52:7b:9f: bb:a4:b6:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE NzU1RUQwQzAwHhcNMjUwNTEzMDQwNDU4WhcNMjUwNTIwMDQwNDU4WjAYMRYwFAYD VQQDEw02ODIyYzRlYi04NTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NtaYB0z4RWh0fc4+Gu4pZIQNUFt6nyitF+7qikiwAI6U89IwVEXT9itupG7 DIFbW8rqph+DAuF0kIo2p3vq/wjzkWX+vO8PqUy9mLFnJSoxzUrEm9Lnmic2/7pT VQGI9azri1Iiej5pR728ZoGvuHBU0eCLGrYXDK1QzKTl0qx0szYJPdfh7D6ZjVPr bScQP0Pc2Nf1z2ED4F/RwgaVBFi5yQEQaw3nPxD2JEhYm0ohtBPGAGiOvSJgoIfU PPAvXsyj4jq8zboHp76JhmDp2mVO9B1Az4e8akHtGIPxmJrKgoTVw8PXrtKsINfm XCZyt6c5IhlvH0V6Nq1VVRldDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLM3+AQG fLb4QHdo9oN8EORtT+3mMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP aTJtdFBER25OaG5YVmUwTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF7i7qlWIcWW9DaBct+3xkqtmn9RC2VG+iDiE5icPVktFDTik5sBY0 4PeDvoCZBiGmjdv1TclNNhRuFFNSq0ui9Q3FNghb77S3nzPcCFSTpS3jKwSn3/lh okBMVEyEvay30aKOH3pzkAc2eT6eyQkU3iWnYa/nnJJctQPwXzTjOZj0faxuemUV HPQI9wb0XAm7IfkgPbrKGNtl2scq+XUsRCHJhN3jN0PPcZfCEhXA19Ekw7OjhvcG vC7HxgMMvTZJjZb9szOtuL+8b/CfqizIzfUfVOZo6XkHcd1aW+PsM3dv3c/p8Mpi ssBF7oBBYEPpnh4ZBnTCqmtSe5+7pLaj -----END CERTIFICATE-----Generated at Tue May 13 10:32:30 2025 by rpki-client