$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json) Hash identifier: ygaim9rQU+j9uJtpHE+MzVzHctXlg2aVz6OPOY+WJCc= Subject key identifier: F1:19:72:92:97:11:7C:EC:29:87:91:F0:A5:34:4B:B4:98:7F:5E:C9 Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Certificate serial: 0BBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft Manifest number: 0BB7 Signing time: Mon 30 Jun 2025 19:06:00 +0000 Manifest this update: Mon 30 Jun 2025 19:06:00 +0000 Manifest next update: Mon 07 Jul 2025 19:06:00 +0000 Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: vJqNfXDXNaDCApmf0jYsiChMMXnOYV8MN0D1VdXiYf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3004 (0xbbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Validity Not Before: Jun 30 19:06:00 2025 GMT Not After : Jul 7 19:06:00 2025 GMT Subject: CN=6862e018-5fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:e0:93:c8:f6:cd:7c:d9:ec:04:a2:7d:19: 1c:89:e0:af:25:85:25:6d:16:74:ff:69:a1:23:a5: 15:d8:56:2e:cb:b6:98:ec:a9:65:fe:09:5e:44:ed: 6f:cf:fa:94:65:da:c3:5e:4c:bf:eb:74:db:19:90: a1:1b:6e:57:78:9f:c0:55:36:a3:aa:c4:dc:34:0c: 66:86:e3:87:72:4e:bf:86:cc:25:59:1b:6e:26:ef: 30:8e:3b:b0:66:7d:2a:c7:a2:0f:df:16:5d:3a:a0: bd:96:f3:ff:5d:fe:e9:ef:ba:45:7e:21:b1:cc:f4: ad:ab:2a:ef:03:ff:37:ba:7f:c1:63:03:c1:ed:2c: 77:d3:98:15:1c:11:e5:9d:35:f2:42:4d:a1:6d:54: 56:65:1a:fb:57:10:f6:81:92:ce:3e:92:dc:2e:a1: eb:dd:96:aa:44:fd:46:ad:54:d0:53:28:c6:37:b8: 3f:cf:7d:7d:f4:c0:8a:32:a6:54:a7:db:9f:e2:aa: 02:e7:fe:ce:5c:5b:4d:b7:53:2a:80:bb:77:a8:c3: 54:f0:4c:d8:ad:48:d2:6a:9b:bb:0c:30:2d:e8:15: 66:21:59:98:4d:ad:80:c6:2d:b6:6c:5b:6f:ce:f7: e2:10:f3:5d:87:27:a4:b9:1e:8f:ef:fe:04:25:0d: 32:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:19:72:92:97:11:7C:EC:29:87:91:F0:A5:34:4B:B4:98:7F:5E:C9 X509v3 Authority Key Identifier: keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1d:e2:38:1a:cd:fd:2e:86:83:b4:67:34:0f:6a:ab:88:e6: 37:98:1b:1d:4d:fd:3a:46:d3:37:17:4e:91:e5:07:13:bb:74: 6b:a0:7c:6f:03:65:5f:1d:8e:9a:c7:3b:2d:a4:67:73:02:dd: 18:84:dc:ee:80:01:b8:4c:88:de:53:55:05:1d:c0:92:6f:86: 2b:71:94:60:16:d4:77:90:21:84:b7:8f:4b:4d:3b:30:12:31: c2:62:83:b0:87:f6:ab:c3:ed:68:17:f4:73:e6:45:99:0c:2e: 9b:1a:45:a0:0a:c9:ca:97:79:99:f7:fc:ec:df:e2:3f:07:9d: b9:b1:29:14:82:76:5a:22:24:de:43:0e:2e:c9:32:e2:5c:63: 8f:f8:7c:fa:c7:a6:a5:14:ac:35:27:03:ab:39:95:0f:b9:96: 50:34:84:9e:cd:e7:f7:17:10:de:a6:62:25:71:ce:66:f4:29: ba:e0:33:8c:b1:96:67:3f:3b:e2:ad:be:55:93:52:3f:98:97: 96:50:d1:41:df:ad:01:b3:eb:b9:71:93:7c:47:68:8f:0e:02: 66:c3:e4:04:e5:c7:e5:05:51:da:7e:8a:56:0c:ef:54:c0:f8: ff:6e:ea:da:8f:2c:54:d1:70:39:29:14:66:2d:31:1c:db:08: 00:11:61:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC QTY5RTQ0M0QwHhcNMjUwNjMwMTkwNjAwWhcNMjUwNzA3MTkwNjAwWjAYMRYwFAYD VQQDEw02ODYyZTAxOC01ZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf/gk8j2zXzZ7ASifRkcieCvJYUlbRZ0/2mhI6UV2FYuy7aY7Kll/gleRO1v z/qUZdrDXky/63TbGZChG25XeJ/AVTajqsTcNAxmhuOHck6/hswlWRtuJu8wjjuw Zn0qx6IP3xZdOqC9lvP/Xf7p77pFfiGxzPStqyrvA/83un/BYwPB7Sx305gVHBHl nTXyQk2hbVRWZRr7VxD2gZLOPpLcLqHr3ZaqRP1GrVTQUyjGN7g/z3199MCKMqZU p9uf4qoC5/7OXFtNt1MqgLt3qMNU8EzYrUjSapu7DDAt6BVmIVmYTa2Axi22bFtv zvfiEPNdhyekuR6P7/4EJQ0y/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEZcpKX EXzsKYeR8KU0S7SYf17JMB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0 ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPHeI4Gs39LoaDtGc0D2qriOY3mBsdTf06RtM3F06R5QcTu3RroHxv A2VfHY6axzstpGdzAt0YhNzugAG4TIjeU1UFHcCSb4YrcZRgFtR3kCGEt49LTTsw EjHCYoOwh/arw+1oF/Rz5kWZDC6bGkWgCsnKl3mZ9/zs3+I/B525sSkUgnZaIiTe Qw4uyTLiXGOP+Hz6x6alFKw1JwOrOZUPuZZQNISezef3FxDepmIlcc5m9Cm64DOM sZZnPzvirb5Vk1I/mJeWUNFB360Bs+u5cZN8R2iPDgJmw+QE5cflBVHafopWDO9U wPj/burajyxU0XA5KRRmLTEc2wgAEWGm -----END CERTIFICATE-----Generated at Tue Jul 1 15:04:56 2025 by rpki-client