$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json) Hash identifier: k77a4pZNicVTd89RwlT/DpzV/0bkaFf9XJLpsusOMzU= Subject key identifier: F8:7A:B7:25:2E:F6:00:C7:0C:55:A9:D5:BA:96:A7:22:27:43:95:00 Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD Certificate issuer: /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft Manifest number: AE Signing time: Sat 23 Aug 2025 06:18:38 +0000 Manifest this update: Sat 23 Aug 2025 06:18:38 +0000 Manifest next update: Sat 30 Aug 2025 06:18:37 +0000 Files and hashes: 1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: 75cJjOx3eobNkhZgrW+muvg9xDvPxEUPxJ2esigAv3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Validity Not Before: Aug 23 06:18:38 2025 GMT Not After : Aug 30 06:18:37 2025 GMT Subject: CN=68a95d3e-ec9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:3c:04:14:af:99:87:df:98:4e:4a:fc:f6: 6d:04:de:95:4d:3c:86:b9:60:09:7a:55:8f:76:d8: 22:e2:c1:5f:f9:fd:82:39:f7:ff:0c:4a:c2:40:21: 6b:1d:3e:2f:bc:6f:ae:f1:55:72:1f:ca:c9:e2:b7: 5c:06:1f:33:d5:da:e6:2d:ac:2f:82:20:5e:eb:9b: dc:03:a1:85:31:08:2d:a7:8c:9b:07:73:36:05:42: 58:2c:c7:24:22:bc:01:ee:4f:f6:9f:6f:6b:45:23: 21:91:27:3a:31:1b:76:f7:25:4b:48:c9:9a:1c:c8: 44:20:28:a4:7e:9c:b3:f5:3e:2a:5b:63:8a:9e:3a: 16:47:8f:12:41:21:20:29:1c:f9:2b:a3:7e:68:d4: a8:cd:11:38:33:5d:49:cc:17:71:ca:f9:19:19:68: 74:b5:5e:bf:c8:4c:1d:38:eb:d5:a8:d5:ab:f5:e7: a4:28:39:73:df:68:79:b9:ab:ff:62:1f:3f:d1:51: 3c:02:a2:41:48:0f:a1:90:29:4f:cf:47:1f:7d:44: 94:a8:15:cb:19:d0:75:b6:f1:05:05:95:b0:fc:a9: 96:49:0a:2e:24:ce:3b:0c:12:82:74:14:cb:d7:5f: 15:1a:b6:3e:bb:04:3b:f6:dc:4e:0a:f6:e4:54:bc: 90:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7A:B7:25:2E:F6:00:C7:0C:55:A9:D5:BA:96:A7:22:27:43:95:00 X509v3 Authority Key Identifier: keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:28:58:3e:b2:55:4e:f7:14:e8:bd:33:99:41:48:d3:c6:e3: a8:a0:ce:a9:0b:73:aa:8b:f9:e5:b5:38:52:ea:a8:24:15:99: 75:b9:f6:3d:34:65:24:d5:c4:e1:40:cb:6c:70:7f:0c:f7:22: 4a:57:66:10:c3:f7:1a:6a:72:f0:22:01:c3:d1:47:af:da:48: 9b:c7:c8:5d:8b:5e:a5:4b:dc:6a:30:a6:5c:dc:08:9d:56:ff: b8:4f:5f:3c:2f:0b:c9:73:3d:47:de:d2:8d:88:b1:fd:d8:c7: 1f:43:43:da:61:40:e1:ef:aa:36:6e:96:29:76:1f:52:49:cf: 1a:e0:50:d3:6f:35:ac:11:8e:a0:f0:d9:c3:93:26:7a:3a:c8: 81:e0:9a:2b:4d:83:04:4e:0c:03:87:86:77:81:bf:e5:5a:01: b8:f7:2c:e4:76:0b:37:13:fc:ea:16:ce:d4:8f:c1:b9:03:36: 71:b2:21:93:3e:49:89:1e:a9:e2:c1:14:72:32:1d:18:c9:43: 18:8a:94:89:2b:e3:fe:97:eb:18:f5:14:1f:4d:ad:71:8c:cf: 4c:01:f2:7d:e2:4a:33:ee:3b:56:02:84:60:92:52:a3:48:a7: d3:f3:d1:4d:5f:d6:56:06:97:67:c9:98:04:98:07:af:b0:66: da:d6:be:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF RTE4NkVEQ0QwHhcNMjUwODIzMDYxODM4WhcNMjUwODMwMDYxODM3WjAYMRYwFAYD VQQDEw02OGE5NWQzZS1lYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuA8BBSvmYffmE5K/PZtBN6VTTyGuWAJelWPdtgi4sFf+f2COff/DErCQCFr HT4vvG+u8VVyH8rJ4rdcBh8z1drmLawvgiBe65vcA6GFMQgtp4ybB3M2BUJYLMck IrwB7k/2n29rRSMhkSc6MRt29yVLSMmaHMhEICikfpyz9T4qW2OKnjoWR48SQSEg KRz5K6N+aNSozRE4M11JzBdxyvkZGWh0tV6/yEwdOOvVqNWr9eekKDlz32h5uav/ Yh8/0VE8AqJBSA+hkClPz0cffUSUqBXLGdB1tvEFBZWw/KmWSQouJM47DBKCdBTL 118VGrY+uwQ79txOCvbkVLyQtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPh6tyUu 9gDHDFWp1bqWpyInQ5UAMB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYKFg+slVO9xTovTOZQUjTxuOooM6pC3Oqi/nltThS6qgkFZl1ufY9 NGUk1cThQMtscH8M9yJKV2YQw/caanLwIgHD0Uev2kibx8hdi16lS9xqMKZc3Aid Vv+4T188LwvJcz1H3tKNiLH92McfQ0PaYUDh76o2bpYpdh9SSc8a4FDTbzWsEY6g 8NnDkyZ6OsiB4JorTYMETgwDh4Z3gb/lWgG49yzkdgs3E/zqFs7Uj8G5AzZxsiGT PkmJHqniwRRyMh0YyUMYipSJK+P+l+sY9RQfTa1xjM9MAfJ94koz7jtWAoRgklKj SKfT89FNX9ZWBpdnyZgEmAevsGba1r4Y -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:49 2025 by rpki-client