$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json) Hash identifier: MOcU8e0qbyaN8PaIGUF70yoU2A/PjGEoGOcPzDxvzSM= Subject key identifier: 9F:B7:A6:2E:69:11:8F:0C:2B:F7:75:6B:31:1D:0E:D4:93:33:B9:F9 Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft Manifest number: 0BD2 Signing time: Fri 22 Aug 2025 19:01:47 +0000 Manifest this update: Fri 22 Aug 2025 19:01:47 +0000 Manifest next update: Fri 29 Aug 2025 19:01:47 +0000 Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: 9h+875pVS0DLn88AmSPKpO7yXzIOZquOcQETL3YCAgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Validity Not Before: Aug 22 19:01:47 2025 GMT Not After : Aug 29 19:01:47 2025 GMT Subject: CN=68a8be9b-8482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:77:dc:6d:ec:ae:38:37:57:06:34:2e:53:80: 57:2f:23:64:d3:56:e1:14:b4:f3:a4:e7:5f:66:53: 1f:60:43:c1:27:97:37:a2:17:8f:48:d6:0c:f5:d4: 3a:bc:71:c9:6a:59:a2:14:0c:34:40:0e:50:8c:49: 03:1f:16:c3:9f:98:2a:86:52:91:15:3c:82:8f:b2: cd:95:d3:f6:60:77:b6:da:f2:56:e2:cf:bf:08:e2: 34:76:15:14:86:18:26:a5:9a:74:bd:a0:d5:77:53: 2f:11:94:10:82:0b:54:2e:2a:ea:17:3f:6d:90:41: dd:b8:e6:53:96:30:0f:78:43:1a:71:ca:89:dc:a9: 7f:b9:32:87:c9:a8:85:69:a8:69:13:65:9e:f1:4b: 50:d0:e6:c1:62:49:2d:d6:e0:29:52:79:d9:b1:15: a0:69:92:bd:44:3c:7c:7d:9e:e5:f1:13:31:87:fd: ea:2d:d9:c0:db:d3:85:3b:fe:e1:d5:d4:06:60:71: d4:4f:40:60:ba:30:06:b0:7b:37:b5:56:98:bd:7f: 1f:b3:ef:5e:db:62:a1:2e:dd:41:c1:8c:6d:c6:14: fc:49:a7:e0:6a:fa:fd:0f:9c:4c:1b:1f:53:3b:c1: e3:08:7d:bc:19:43:25:68:60:d9:07:c9:21:5e:b7: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B7:A6:2E:69:11:8F:0C:2B:F7:75:6B:31:1D:0E:D4:93:33:B9:F9 X509v3 Authority Key Identifier: keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:55:4a:72:b0:dd:a0:32:fa:7f:cb:02:e5:91:67:40:64:ce: fb:f9:eb:49:01:54:5c:53:4a:f2:d0:9b:68:6d:85:4d:25:70: 5d:dd:20:98:24:31:26:67:b3:94:c2:b6:a0:89:0c:b1:63:94: 55:9d:ef:ad:dd:47:6e:72:15:ed:2e:bc:91:88:a4:06:a2:7c: 06:28:2f:bd:54:98:dc:26:60:0d:76:3b:11:ca:6b:2e:43:d5: 33:b4:bb:d4:cf:78:20:44:81:06:33:81:f1:f8:16:ca:ba:ad: 86:fe:b6:89:7b:ff:6e:01:36:e6:25:fa:6c:c8:32:2b:cf:94: 11:e1:28:3a:3c:ec:f7:f8:f3:f2:af:6c:a6:e7:36:40:95:29: d3:f3:9f:43:7e:d4:04:e7:dc:c0:bb:93:2f:a7:c5:4c:1f:2b: f8:94:5a:8c:2f:e2:b3:3b:89:e6:3c:a5:b2:ec:1a:08:08:ff: 8a:f7:f9:d0:41:ca:15:2f:0e:23:cb:eb:da:1c:fc:2a:70:82: e7:5a:ed:c9:6c:04:a5:ab:6c:2a:dd:32:1c:55:1e:ed:0d:04: 09:2b:a4:ec:3b:d8:11:94:90:c1:9a:f0:e8:ff:1c:cd:94:bb: 4c:c6:00:fd:7f:63:0f:d0:c1:9b:75:ef:60:f7:5c:df:b9:c0: 30:15:48:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC QTY5RTQ0M0QwHhcNMjUwODIyMTkwMTQ3WhcNMjUwODI5MTkwMTQ3WjAYMRYwFAYD VQQDEw02OGE4YmU5Yi04NDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53fcbeyuODdXBjQuU4BXLyNk01bhFLTzpOdfZlMfYEPBJ5c3ohePSNYM9dQ6 vHHJalmiFAw0QA5QjEkDHxbDn5gqhlKRFTyCj7LNldP2YHe22vJW4s+/COI0dhUU hhgmpZp0vaDVd1MvEZQQggtULirqFz9tkEHduOZTljAPeEMaccqJ3Kl/uTKHyaiF aahpE2We8UtQ0ObBYkkt1uApUnnZsRWgaZK9RDx8fZ7l8RMxh/3qLdnA29OFO/7h 1dQGYHHUT0BgujAGsHs3tVaYvX8fs+9e22KhLt1BwYxtxhT8Safgavr9D5xMGx9T O8HjCH28GUMlaGDZB8khXrc+EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+3pi5p EY8MK/d1azEdDtSTM7n5MB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0 ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxVUpysN2gMvp/ywLlkWdAZM77+etJAVRcU0ry0JtobYVNJXBd3SCY JDEmZ7OUwragiQyxY5RVne+t3UduchXtLryRiKQGonwGKC+9VJjcJmANdjsRymsu Q9UztLvUz3ggRIEGM4Hx+BbKuq2G/raJe/9uATbmJfpsyDIrz5QR4Sg6POz3+PPy r2ym5zZAlSnT859DftQE59zAu5Mvp8VMHyv4lFqML+KzO4nmPKWy7BoICP+K9/nQ QcoVLw4jy+vaHPwqcILnWu3JbASlq2wq3TIcVR7tDQQJK6TsO9gRlJDBmvDo/xzN lLtMxgD9f2MP0MGbde9g91zfucAwFUiL -----END CERTIFICATE-----Generated at Sat Aug 23 14:27:02 2025 by rpki-client