$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json) Hash identifier: LKsvnaCuBxNTv8gKGypaL2anu0Ng3Uox1eSHbWydVmQ= Subject key identifier: B9:14:72:05:BC:99:B6:CE:37:6C:0F:B4:CD:E7:CD:93:EB:B0:66:EA Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD Certificate issuer: /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft Manifest number: 93 Signing time: Tue 01 Jul 2025 07:08:19 +0000 Manifest this update: Tue 01 Jul 2025 07:08:19 +0000 Manifest next update: Tue 08 Jul 2025 07:08:19 +0000 Files and hashes: 1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: 8B6DulA+zoL7/l1DQhL4RWtbtacM1ZJ8VXAZiPf3Srs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Validity Not Before: Jul 1 07:08:19 2025 GMT Not After : Jul 8 07:08:19 2025 GMT Subject: CN=68638963-49c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d5:f2:67:a0:a2:d6:87:7c:e1:ae:6f:bc:35: 45:5e:d9:ab:c0:e6:10:41:07:f2:5e:b7:29:72:3c: f6:ff:20:e3:84:97:c1:57:47:9e:02:8c:d9:0f:bd: 6f:71:9b:49:6f:f9:b6:c7:5e:34:87:84:22:79:d1: e8:91:9c:55:a5:0e:0e:50:83:73:2d:34:4a:5e:fe: 19:8d:35:df:db:a6:4e:7d:ad:41:c7:34:e5:24:40: ff:9d:9f:ff:6a:22:f1:89:95:71:86:07:0b:cf:c8: 83:b4:3e:4a:32:00:9f:06:6f:11:a1:2b:9b:be:3b: b8:67:fa:0e:e7:15:00:90:38:c6:7e:0c:c5:2e:a0: e9:49:65:e5:1f:ba:04:07:36:de:55:27:13:b0:b1: 8b:ab:a1:b5:3e:d8:ef:94:91:fe:eb:65:1f:35:c9: 78:45:1b:73:36:57:a1:1e:81:64:36:0b:22:5b:e7: 9d:db:cc:19:65:a4:40:35:60:e0:d1:99:ec:c7:d8: 71:59:e0:65:f2:b7:58:e5:c4:db:7e:89:cc:ef:d3: 56:be:b2:b0:23:06:79:50:ba:5f:c5:d4:e6:95:9c: 46:c3:7d:f0:16:50:ef:1b:a2:c6:82:e4:db:73:25: f7:38:e1:9c:af:9a:07:98:df:7f:a7:39:94:88:ab: 3f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:14:72:05:BC:99:B6:CE:37:6C:0F:B4:CD:E7:CD:93:EB:B0:66:EA X509v3 Authority Key Identifier: keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:0d:3d:45:df:0f:5a:ae:41:a8:5b:11:08:b8:74:51:f4:19: 2a:76:da:05:aa:14:d5:84:e0:0a:3b:f0:45:99:e1:3d:96:1d: ce:97:a4:62:e0:75:a9:41:0c:49:13:c1:34:b0:40:99:be:be: fa:2b:f9:89:29:ba:31:44:3a:ca:53:94:98:42:8c:46:09:e8: 6d:61:22:3d:4b:19:c7:73:5e:1d:37:f4:b4:7e:bb:54:f5:d0: 51:19:a3:69:18:5e:9e:a8:3c:ee:eb:69:0a:fd:15:8d:5e:ea: c6:37:55:86:73:ba:67:51:ea:9c:b8:9a:0a:cd:7f:52:ff:74: 16:42:7e:d6:56:d2:08:7c:a5:25:41:7e:7c:5c:1c:91:dc:1e: 59:ac:8c:31:ce:d1:55:c8:fb:8e:d0:15:94:19:30:89:cc:2c: 66:d6:26:52:81:90:5c:22:21:98:13:c8:48:03:63:6b:bf:99: bb:84:df:c6:18:06:8a:2f:cf:0f:40:0b:a0:89:1c:25:c1:3c: 84:b7:d5:51:d4:7a:61:79:ea:28:4c:e6:f2:59:a6:fe:6e:0d: 7b:b7:90:24:45:41:f9:1f:a3:4b:90:c4:0d:18:42:aa:dd:37: ed:3b:3a:3e:2e:3f:fb:b4:bd:57:97:a0:c4:70:a7:56:7d:60: e2:43:a2:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF RTE4NkVEQ0QwHhcNMjUwNzAxMDcwODE5WhcNMjUwNzA4MDcwODE5WjAYMRYwFAYD VQQDEw02ODYzODk2My00OWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdXyZ6Ci1od84a5vvDVFXtmrwOYQQQfyXrcpcjz2/yDjhJfBV0eeAozZD71v cZtJb/m2x140h4QiedHokZxVpQ4OUINzLTRKXv4ZjTXf26ZOfa1BxzTlJED/nZ// aiLxiZVxhgcLz8iDtD5KMgCfBm8RoSubvju4Z/oO5xUAkDjGfgzFLqDpSWXlH7oE BzbeVScTsLGLq6G1PtjvlJH+62UfNcl4RRtzNlehHoFkNgsiW+ed28wZZaRANWDg 0Znsx9hxWeBl8rdY5cTbfonM79NWvrKwIwZ5ULpfxdTmlZxGw33wFlDvG6LGguTb cyX3OOGcr5oHmN9/pzmUiKs/mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkUcgW8 mbbON2wPtM3nzZPrsGbqMB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSDT1F3w9arkGoWxEIuHRR9BkqdtoFqhTVhOAKO/BFmeE9lh3Ol6Ri 4HWpQQxJE8E0sECZvr76K/mJKboxRDrKU5SYQoxGCehtYSI9SxnHc14dN/S0frtU 9dBRGaNpGF6eqDzu62kK/RWNXurGN1WGc7pnUeqcuJoKzX9S/3QWQn7WVtIIfKUl QX58XByR3B5ZrIwxztFVyPuO0BWUGTCJzCxm1iZSgZBcIiGYE8hIA2Nrv5m7hN/G GAaKL88PQAugiRwlwTyEt9VR1HpheeooTObyWab+bg17t5AkRUH5H6NLkMQNGEKq 3TftOzo+Lj/7tL1Xl6DEcKdWfWDiQ6J8 -----END CERTIFICATE-----Generated at Wed Jul 2 16:00:04 2025 by rpki-client