$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: KjyHzTZgF6VzIpkeMq3oE2eg6bUDQEAwDuRzhKo8Dxw= Subject key identifier: D4:9F:27:98:80:2E:A8:F8:F5:96:8D:1A:5F:E2:8B:AD:8C:19:57:33 Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: 61 Signing time: Tue 13 May 2025 06:14:33 +0000 Manifest this update: Tue 13 May 2025 06:14:33 +0000 Manifest next update: Tue 20 May 2025 06:14:33 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: RZ1O1xg3Ia4qptZrRZj00u2vw8xLAEq2/8CNHm+KE1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: May 13 06:14:33 2025 GMT Not After : May 20 06:14:33 2025 GMT Subject: CN=6822e349-2d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:62:f7:2d:61:ee:15:8f:91:58:62:2e:e0:b0: 20:4e:9d:cb:2d:2e:2a:ae:11:3c:1f:28:78:3c:a5: e2:8c:59:f8:13:0f:3a:5f:74:75:80:aa:5f:09:e4: b6:97:37:a4:3b:14:03:95:51:5f:9e:b4:ec:36:80: 04:77:8f:d4:11:78:26:79:95:73:ac:c0:18:e9:bc: 73:ef:ae:78:dd:91:a3:31:39:a4:c1:88:57:83:42: a9:87:62:7b:90:74:9a:76:ad:cf:22:6b:78:4e:82: 21:3b:39:05:a5:ae:e5:24:77:51:77:69:be:6d:f9: 03:51:51:fb:54:de:d1:5b:6e:b6:8c:66:10:74:8e: c8:f8:80:5a:df:c6:34:d6:54:62:1f:47:05:f5:5e: 7a:13:5d:d4:7a:2e:88:9e:50:dc:62:0c:c5:15:a1: 73:80:ba:91:8c:82:30:ab:04:95:8c:ab:62:c0:9a: e9:83:f5:16:dc:b3:a2:2c:1f:01:ee:da:1e:e3:88: 98:bf:8c:29:a6:67:b6:b2:a4:f3:5f:d4:9d:fc:38: 8a:b9:33:f0:37:dc:97:cf:73:de:56:58:34:39:86: a5:a6:43:4b:8a:80:f4:b5:c1:e9:d2:bd:9f:53:09: a8:65:4e:1d:54:f5:4c:ca:41:18:1e:0d:08:bc:78: c5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9F:27:98:80:2E:A8:F8:F5:96:8D:1A:5F:E2:8B:AD:8C:19:57:33 X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:cf:71:c0:85:50:29:2a:82:fa:dd:22:01:42:ec:78:d3:69: 9d:b5:e1:ff:67:ee:96:f4:4c:e3:48:ae:4d:df:01:86:e4:12: 4d:cb:9c:d1:8d:9b:67:ed:91:fe:91:07:29:cf:34:96:7d:43: dc:ae:e4:21:35:93:4f:76:54:7b:4e:38:f8:aa:0c:0e:40:58: cc:25:ac:23:56:30:98:34:e9:6a:9f:b3:5b:55:0f:1e:75:0c: 28:43:df:3b:f4:33:0f:db:ac:66:ad:6e:58:95:b9:e2:30:40: 5c:46:21:5e:b0:02:04:5d:ac:1c:ab:93:43:bf:04:bb:8b:58: 3a:7f:08:67:34:8e:94:65:7c:5d:70:fb:57:90:7e:f8:65:f8: eb:fc:39:f9:7d:6c:99:18:28:6a:ee:83:2a:28:23:9a:d2:fd: 0b:29:b7:7a:94:8b:9b:9a:6c:de:bf:32:86:6d:d8:96:23:1d: 27:eb:e2:cc:46:91:d1:07:77:11:d5:ba:5c:96:d7:02:9e:e7: f5:ac:79:1a:3e:12:75:e2:4d:56:32:1b:5b:b0:d3:19:85:96: ff:83:7a:ea:ef:11:72:10:c6:8f:18:e2:98:83:32:97:77:0f: 85:8a:0b:be:59:57:dd:a1:9a:48:ae:d5:99:00:0c:7b:5f:e2: c7:b3:d9:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoNDQ2ODlDNjcxRkFFRjE5NjdDRjdBOUIxQTMzNjhEOEI5 MTRCN0JBNzAeFw0yNTA1MTMwNjE0MzNaFw0yNTA1MjAwNjE0MzNaMBgxFjAUBgNV BAMTDTY4MjJlMzQ5LTJkMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeYvctYe4Vj5FYYi7gsCBOncstLiquETwfKHg8peKMWfgTDzpfdHWAql8J5LaX N6Q7FAOVUV+etOw2gAR3j9QReCZ5lXOswBjpvHPvrnjdkaMxOaTBiFeDQqmHYnuQ dJp2rc8ia3hOgiE7OQWlruUkd1F3ab5t+QNRUftU3tFbbraMZhB0jsj4gFrfxjTW VGIfRwX1XnoTXdR6LoieUNxiDMUVoXOAupGMgjCrBJWMq2LAmumD9Rbcs6IsHwHu 2h7jiJi/jCmmZ7aypPNf1J38OIq5M/A33JfPc95WWDQ5hqWmQ0uKgPS1wenSvZ9T CahlTh1U9UzKQRgeDQi8eMUPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1J8nmIAu qPj1lo0aX+KLrYwZVzMwHwYDVR0jBBgwFoAURGicZx+u8ZZ896mxozaNi5FLe6cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2LzA3QUU3QTk2OUNG NjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkdpY1p4LXU4Wlo4OTZteG96YU5pNUZMZTZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2LzA3QUU3QTk2OUNGNjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpa ODk2bXhvemFOaTVGTGU2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKrPccCFUCkqgvrdIgFC7HjTaZ214f9n7pb0TONIrk3fAYbkEk3LnNGN m2ftkf6RBynPNJZ9Q9yu5CE1k092VHtOOPiqDA5AWMwlrCNWMJg06Wqfs1tVDx51 DChD3zv0Mw/brGatbliVueIwQFxGIV6wAgRdrByrk0O/BLuLWDp/CGc0jpRlfF1w +1eQfvhl+Ov8Ofl9bJkYKGrugyooI5rS/Qspt3qUi5uabN6/MoZt2JYjHSfr4sxG kdEHdxHVulyW1wKe5/WseRo+EnXiTVYyG1uw0xmFlv+DeurvEXIQxo8Y4piDMpd3 D4WKC75ZV92hmkiu1ZkADHtf4sez2eE= -----END CERTIFICATE-----Generated at Wed May 14 18:23:23 2025 by rpki-client