$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: t+Q3na2rN1/u6fvy67fN/vzt8z9aRtSbaYXzeQREdrg= Subject key identifier: D3:13:F2:9F:F5:EF:CC:63:E8:2E:ED:F8:98:3D:B3:CC:84:75:28:E5 Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 1238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1A1C Signing time: Wed 14 May 2025 17:13:15 +0000 Manifest this update: Wed 14 May 2025 17:13:15 +0000 Manifest next update: Wed 21 May 2025 17:13:15 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: BH52HwMEj5vpfxB2K4oNhZTngM+luS0N5S8DYuy+sw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4664 (0x1238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: May 14 17:13:15 2025 GMT Not After : May 21 17:13:15 2025 GMT Subject: CN=6824cf2b-d932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:c0:8b:fe:e0:24:51:4a:e5:bf:79:67:eb: 65:0e:56:90:69:50:9a:9b:30:db:c2:64:0c:07:eb: 29:15:0c:c7:82:d8:4a:a8:8d:a5:ab:18:bc:b0:5d: 10:7c:89:03:c6:46:23:93:7f:6b:26:73:b7:8b:ac: 0c:07:27:94:68:47:64:04:e1:f4:20:0d:bc:f3:71: 0a:d9:e7:f6:49:14:5e:85:44:ff:19:50:1c:47:fb: 1c:37:15:0f:0a:19:84:f2:06:fd:73:b7:72:27:1c: c6:e2:bf:b5:4e:27:4d:66:bf:a7:4f:40:ab:a0:13: 96:8a:7a:38:17:70:fb:4f:d8:d8:5e:64:11:de:eb: 93:f7:2d:dc:9e:ac:1c:94:ce:5d:77:61:b2:cb:0b: 77:c1:47:85:5c:b5:16:58:3f:df:33:85:0d:32:19: 3f:b9:86:99:4e:5d:54:2c:f2:3f:09:3e:76:89:a6: f8:ff:c1:08:46:5b:37:0d:c6:35:9d:75:b1:f2:2f: f1:02:df:3b:98:1c:fd:27:5e:67:c8:f2:96:6d:6a: 2b:16:df:a2:54:35:44:46:37:f0:1d:e0:95:c1:f2: d4:af:26:88:60:b8:de:fb:12:c8:18:a7:0a:2a:b4: c2:96:b6:dc:c4:8c:f5:94:f7:46:c7:6b:6c:b9:0a: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:13:F2:9F:F5:EF:CC:63:E8:2E:ED:F8:98:3D:B3:CC:84:75:28:E5 X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:62:a4:f5:c8:b9:a2:89:2b:09:3a:e8:a5:af:91:d5:19:06: 60:0b:57:e8:47:79:6c:ec:16:15:4f:4e:63:62:d8:63:5d:95: 9d:4b:a3:a6:5f:fe:dc:ed:55:27:f9:d1:c8:7f:3f:62:f8:c9: 9d:78:ba:43:a1:7b:38:59:61:92:ff:3f:dc:ad:34:7b:e6:31: c4:c7:a9:0a:de:f7:33:3d:18:8b:7a:78:d4:b5:f7:61:7c:0c: b0:50:e4:97:e8:63:6c:f2:7f:01:53:1a:58:a9:b4:4b:f8:d6: 36:c0:1e:aa:3d:36:50:d7:e8:d7:f9:91:42:09:10:db:c9:6f: be:e8:7d:24:44:ac:79:f9:d1:71:a5:8b:80:2f:5a:1c:6a:6f: 54:ec:37:f9:dd:e6:32:f0:bc:bb:58:20:a2:15:64:72:4e:ad: 8f:98:94:fe:d3:6c:75:bd:e6:3c:57:25:c6:2b:f2:98:58:46: 5b:17:e0:b2:96:2d:56:ef:70:28:e6:71:93:67:a3:f6:78:91: ff:4b:6f:61:84:a2:f0:fd:b6:76:2b:31:b4:0d:a4:cd:8b:ad: e2:98:0c:bc:68:a8:3c:11:3f:7f:8e:4d:94:40:12:5f:03:5d: eb:fd:c8:f3:8f:55:03:8d:3b:28:63:ed:b0:b3:f7:5b:37:da: 1c:11:ea:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjUwNTE0MTcxMzE1WhcNMjUwNTIxMTcxMzE1WjAYMRYwFAYD VQQDEw02ODI0Y2YyYi1kOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37nAi/7gJFFK5b95Z+tlDlaQaVCamzDbwmQMB+spFQzHgthKqI2lqxi8sF0Q fIkDxkYjk39rJnO3i6wMByeUaEdkBOH0IA2883EK2ef2SRRehUT/GVAcR/scNxUP ChmE8gb9c7dyJxzG4r+1TidNZr+nT0CroBOWino4F3D7T9jYXmQR3uuT9y3cnqwc lM5dd2Gyywt3wUeFXLUWWD/fM4UNMhk/uYaZTl1ULPI/CT52iab4/8EIRls3DcY1 nXWx8i/xAt87mBz9J15nyPKWbWorFt+iVDVERjfwHeCVwfLUryaIYLje+xLIGKcK KrTClrbcxIz1lPdGx2tsuQoVHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMT8p/1 78xj6C7t+Jg9s8yEdSjlMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+YqT1yLmiiSsJOuilr5HVGQZgC1foR3ls7BYVT05jYthjXZWdS6Om X/7c7VUn+dHIfz9i+MmdeLpDoXs4WWGS/z/crTR75jHEx6kK3vczPRiLenjUtfdh fAywUOSX6GNs8n8BUxpYqbRL+NY2wB6qPTZQ1+jX+ZFCCRDbyW++6H0kRKx5+dFx pYuAL1ocam9U7Df53eYy8Ly7WCCiFWRyTq2PmJT+02x1veY8VyXGK/KYWEZbF+Cy li1W73Ao5nGTZ6P2eJH/S29hhKLw/bZ2KzG0DaTNi63imAy8aKg8ET9/jk2UQBJf A13r/cjzj1UDjTsoY+2ws/dbN9ocEeoK -----END CERTIFICATE-----Generated at Thu May 15 19:06:56 2025 by rpki-client