$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft File: cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft (raw, json) Hash identifier: THmdxgaEmvPssbv+5CKMUNS0dXvMl+NTMVarEc28SD0= Subject key identifier: D5:82:2E:E1:AB:C1:37:F6:73:85:86:51:BA:FB:36:D1:CE:D5:E9:EB Authority key identifier: 70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4 Certificate issuer: /CN=A9184684/serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft Manifest number: 14 Signing time: Tue 01 Jul 2025 08:48:57 +0000 Manifest this update: Tue 01 Jul 2025 08:48:56 +0000 Manifest next update: Tue 08 Jul 2025 08:48:56 +0000 Files and hashes: 1: cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl (hash: KPO9c9VDIylFXp0f5N2OV+c7TTZ6hpLJRKi/MeFQiqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184684, serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4 Validity Not Before: Jul 1 08:48:56 2025 GMT Not After : Jul 8 08:48:56 2025 GMT Subject: CN=6863a0f8-26f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:18:6f:3e:30:c9:60:4e:9f:d8:8c:e2:6b: 4a:48:d0:65:48:18:08:4d:43:f0:83:81:fc:ce:59: 56:fa:4a:2c:73:94:e0:a9:83:ee:a5:f1:f4:37:00: b8:77:60:91:16:20:52:a0:fa:74:39:b5:65:78:a2: d5:16:f7:bc:c6:5b:48:e4:71:3d:62:1d:b9:c8:d5: 92:45:27:d7:b1:9c:cd:b7:02:ca:2c:74:6c:11:18: d2:2c:0f:fd:1d:e7:a2:ef:37:85:d8:50:bb:83:f0: 0b:4a:19:56:e1:51:2c:bb:bb:96:4e:78:25:d1:08: 3f:0b:68:69:6d:d8:8a:4f:ab:84:17:c4:9c:58:45: c6:90:72:14:d7:df:87:38:4b:bf:2e:cb:66:0d:13: 8e:c1:b5:e0:7b:38:07:37:de:fb:7b:2e:d6:06:be: e9:cf:47:91:cd:05:a3:69:02:6e:01:2e:b1:7d:fe: 34:9c:c7:0f:eb:56:be:e4:3b:81:3a:f2:f1:fa:18: e7:a0:c1:15:1b:83:8b:c6:7f:a6:36:23:ca:a8:15: ea:66:26:e6:c8:5c:ad:7e:c7:72:a2:ae:e8:65:2a: c9:4f:3a:bc:2e:3c:fb:18:ce:b0:da:c9:b7:44:7d: 5f:67:2e:b1:47:61:35:61:fe:85:cf:eb:fc:c9:3a: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:82:2E:E1:AB:C1:37:F6:73:85:86:51:BA:FB:36:D1:CE:D5:E9:EB X509v3 Authority Key Identifier: keyid:70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:3d:07:3c:a7:2d:72:c2:fe:58:35:92:7f:74:84:12:00:41: 26:74:5e:2b:7f:3f:86:56:a0:76:e4:a4:a2:4d:96:98:20:f5: 08:42:e4:c3:0a:1a:87:e3:6f:b1:eb:d7:71:e0:f6:bf:1d:26: bf:86:54:d4:4c:e8:d5:8c:2b:5c:73:ab:f4:23:cb:6c:b7:3c: 42:a6:6b:74:e5:bf:7b:22:c0:7f:de:b8:9e:00:be:4f:43:4e: dc:eb:18:0e:08:68:0e:73:6a:09:24:7d:cf:1b:04:af:20:c6: 11:bb:78:cb:9d:56:7b:09:1e:71:fa:a2:6d:4b:a7:4d:2e:70: 5a:05:90:56:47:66:b8:9c:ca:30:62:1d:ba:5e:1a:05:c0:4a: 14:5e:5f:a2:51:40:86:cb:df:10:1c:f1:c0:7e:f8:76:33:56: 6a:04:a9:f6:8c:4b:81:01:a3:a5:b5:a5:62:28:54:7f:9c:48: 22:6b:33:db:2e:92:f5:0e:bf:ff:cb:4c:c7:a1:97:f5:c1:bf: 0f:09:02:72:75:53:e5:3f:65:21:b0:62:51:8c:44:3d:b1:a6: 99:33:e2:e7:94:44:e1:f9:0f:0d:2e:5b:6f:e1:a8:32:c4:3a: 33:46:77:14:fa:cc:ed:fa:30:77:ce:12:a6:d1:ab:18:e5:15: 24:44:c6:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDY4NDExMC8GA1UEBRMoNzAwMjA2M0JGMzAyQ0JBNDZGOTI0NUIwNzlBNDlCMTFB RDk2RUFFNDAeFw0yNTA3MDEwODQ4NTZaFw0yNTA3MDgwODQ4NTZaMBgxFjAUBgNV BAMTDTY4NjNhMGY4LTI2ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSJRhvPjDJYE6f2Izia0pI0GVIGAhNQ/CDgfzOWVb6SixzlOCpg+6l8fQ3ALh3 YJEWIFKg+nQ5tWV4otUW97zGW0jkcT1iHbnI1ZJFJ9exnM23AsosdGwRGNIsD/0d 56LvN4XYULuD8AtKGVbhUSy7u5ZOeCXRCD8LaGlt2IpPq4QXxJxYRcaQchTX34c4 S78uy2YNE47BteB7OAc33vt7LtYGvunPR5HNBaNpAm4BLrF9/jScxw/rVr7kO4E6 8vH6GOegwRUbg4vGf6Y2I8qoFepmJubIXK1+x3KiruhlKslPOrwuPPsYzrDaybdE fV9nLrFHYTVh/oXP6/zJOtx7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1YIu4avB N/ZzhYZRuvs20c7V6eswHwYDVR0jBBgwFoAUcAIGO/MCy6RvkkWweaSbEa2W6uQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0JGQ0FCNUNDMzk4 NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZSdmtrV3dlYVNiRWEyVzZ1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY0FJR09fTUN5NlJ2a2tXd2VhU2JFYTJXNnVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 Njg0L0JGQ0FCNUNDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZS dmtrV3dlYVNiRWEyVzZ1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKw9BzynLXLC/lg1kn90hBIAQSZ0Xit/P4ZWoHbkpKJNlpgg9QhC5MMK Gofjb7Hr13Hg9r8dJr+GVNRM6NWMK1xzq/Qjy2y3PEKma3Tlv3siwH/euJ4Avk9D TtzrGA4IaA5zagkkfc8bBK8gxhG7eMudVnsJHnH6om1Lp00ucFoFkFZHZricyjBi HbpeGgXAShReX6JRQIbL3xAc8cB++HYzVmoEqfaMS4EBo6W1pWIoVH+cSCJrM9su kvUOv//LTMehl/XBvw8JAnJ1U+U/ZSGwYlGMRD2xppkz4ueUROH5Dw0uW2/hqDLE OjNGdxT6zO36MHfOEqbRqxjlFSRExjY= -----END CERTIFICATE-----Generated at Thu Jul 3 05:04:31 2025 by rpki-client