$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: uunJpt7MNiaYJ4WBTtCBGp7/VW0VEGXZTyzAXX98RHw= Subject key identifier: 35:0C:D8:6A:7F:79:80:BB:DE:5F:08:FE:66:D2:32:E1:7D:D9:25:8B Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 0278 Signing time: Tue 01 Jul 2025 03:28:36 +0000 Manifest this update: Tue 01 Jul 2025 03:28:35 +0000 Manifest next update: Tue 08 Jul 2025 03:28:35 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: IzVrRVdL82tWVetq9faNPRkFa4U99kUCePoizEa64Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Jul 1 03:28:35 2025 GMT Not After : Jul 8 03:28:35 2025 GMT Subject: CN=686355e3-5337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:08:0b:e2:e0:fa:2e:87:7a:df:05:76:7b:6d: 3c:c2:26:20:37:53:1e:4a:3c:de:c6:60:28:b2:9f: 78:01:e0:1b:d6:56:85:2b:46:45:24:ca:13:06:65: 9d:62:1f:72:5d:34:59:6a:d5:18:cd:e7:5c:63:02: bf:77:c2:4e:ef:94:ae:d2:3b:a7:59:96:8d:a3:a9: fa:30:12:df:f9:61:3f:0a:9b:cc:5b:34:4a:04:a3: 25:e2:4e:ec:d6:68:70:69:e0:91:c0:60:bb:54:1f: a8:bf:b3:19:72:5c:1a:fc:6e:56:3e:af:f9:7f:09: 50:64:57:e6:93:0f:dd:9f:20:54:cb:4b:be:0b:e1: 11:ec:4a:da:df:2f:cb:b4:93:d9:54:fb:3b:cd:5b: 27:a7:42:06:55:04:54:80:ac:b0:3f:1c:f8:33:f1: 2f:f4:e9:31:f1:a5:37:35:01:66:e8:cf:e1:08:55: f7:df:0b:df:ac:1b:f3:72:8b:4a:3f:2d:e6:af:71: 0b:2f:b4:19:88:f1:7d:31:3b:47:78:1d:56:03:2d: 76:63:51:16:23:a7:f7:db:a4:6e:39:d4:15:1c:c1: d3:fe:70:53:dd:c4:fe:d1:bd:6c:46:a3:ce:91:2e: 7f:5b:d9:72:51:5c:cf:c7:9c:3b:bf:c4:b2:fe:e9: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0C:D8:6A:7F:79:80:BB:DE:5F:08:FE:66:D2:32:E1:7D:D9:25:8B X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d5:aa:5c:3f:a3:6f:5d:df:08:0c:be:f4:8d:f5:b8:73:9c: 08:b4:04:40:01:a7:51:02:aa:af:fd:2f:78:76:9d:f3:08:d8: 7d:f4:08:f1:9f:59:8c:43:13:27:d5:24:0b:99:90:22:b6:91: 41:cc:7f:07:32:54:7a:01:5a:42:28:b4:30:1d:8d:a8:a8:54: da:d5:aa:e5:ad:3d:79:b3:af:6f:3c:3e:ea:02:d0:d7:cc:40: dc:5e:b5:b6:9b:fb:29:44:ce:a3:84:ff:51:4d:d6:ac:54:c5: f1:ab:f5:0e:56:8f:21:2f:07:a6:af:74:60:25:84:62:56:4d: 42:c7:36:63:ca:67:25:d7:2a:6f:a7:d1:5f:a8:c6:4a:94:a5: f7:7e:6b:34:7d:c2:fc:df:be:93:0a:f9:a4:e2:4f:e2:8f:49: 3b:18:17:57:41:c8:5c:7a:cd:4d:d9:be:2e:da:f2:1f:62:4d: 3b:95:0a:bc:04:49:a7:b0:a7:2f:27:73:47:46:5c:61:fa:41: f7:1f:95:9b:c7:87:dc:3c:4f:0e:8d:61:13:47:29:3b:66:ee: a6:b5:f4:87:41:1a:84:03:fe:c5:35:13:08:b9:54:02:9a:85: 12:33:6d:59:20:bf:83:48:10:53:38:5d:dd:04:8b:82:aa:00: 44:ab:7c:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjUwNzAxMDMyODM1WhcNMjUwNzA4MDMyODM1WjAYMRYwFAYD VQQDEw02ODYzNTVlMy01MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzggL4uD6Lod63wV2e208wiYgN1MeSjzexmAosp94AeAb1laFK0ZFJMoTBmWd Yh9yXTRZatUYzedcYwK/d8JO75Su0junWZaNo6n6MBLf+WE/CpvMWzRKBKMl4k7s 1mhwaeCRwGC7VB+ov7MZclwa/G5WPq/5fwlQZFfmkw/dnyBUy0u+C+ER7Era3y/L tJPZVPs7zVsnp0IGVQRUgKywPxz4M/Ev9Okx8aU3NQFm6M/hCFX33wvfrBvzcotK Py3mr3ELL7QZiPF9MTtHeB1WAy12Y1EWI6f326RuOdQVHMHT/nBT3cT+0b1sRqPO kS5/W9lyUVzPx5w7v8Sy/ukxBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUM2Gp/ eYC73l8I/mbSMuF92SWLMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV1apcP6NvXd8IDL70jfW4c5wItARAAadRAqqv/S94dp3zCNh99Ajx n1mMQxMn1SQLmZAitpFBzH8HMlR6AVpCKLQwHY2oqFTa1arlrT15s69vPD7qAtDX zEDcXrW2m/spRM6jhP9RTdasVMXxq/UOVo8hLwemr3RgJYRiVk1CxzZjymcl1ypv p9FfqMZKlKX3fms0fcL8376TCvmk4k/ij0k7GBdXQchces1N2b4u2vIfYk07lQq8 BEmnsKcvJ3NHRlxh+kH3H5Wbx4fcPE8OjWETRyk7Zu6mtfSHQRqEA/7FNRMIuVQC moUSM21ZIL+DSBBTOF3dBIuCqgBEq3yi -----END CERTIFICATE-----Generated at Tue Jul 1 17:15:02 2025 by rpki-client