$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: 0Kj1LTfsKrc2NnciBAQcdFLsZCBwZucXfjYOi9E0mes= Subject key identifier: F4:C8:A3:FA:28:98:51:D5:A3:BE:A8:9A:2C:7D:EE:CE:50:7A:F0:83 Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: 79 Signing time: Tue 01 Jul 2025 07:29:45 +0000 Manifest this update: Tue 01 Jul 2025 07:29:44 +0000 Manifest next update: Tue 08 Jul 2025 07:29:44 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: anCCnFsZU+tfeyb8mLeGfYU8d0vi6F0UZjtEPY3jdEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Jul 1 07:29:44 2025 GMT Not After : Jul 8 07:29:44 2025 GMT Subject: CN=68638e68-a41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:ca:44:40:b6:ac:e7:b9:9d:08:63:87:f0: c1:97:f2:30:99:f6:c8:7e:ff:89:f8:4e:3b:e4:6b: 7a:f4:dc:62:23:75:49:ba:2f:99:7f:e5:ad:3c:dc: 25:b7:24:20:00:0d:e6:39:84:fb:25:6d:67:83:12: 9f:82:42:2a:c8:7b:ab:18:7e:e4:85:52:3f:f7:dd: c6:d8:ad:1f:19:1c:5c:9d:8a:e6:6d:9c:41:1a:a8: f6:3f:94:88:4e:e3:83:60:71:c8:fc:22:53:8e:77: 8a:53:88:b8:ce:51:04:ca:a8:25:18:78:cd:78:c7: d4:f7:d0:f4:90:7f:27:53:f5:e6:6b:a1:93:be:a0: 47:a1:a4:ad:18:06:f3:f5:97:99:22:9d:fd:b9:27: 77:0c:35:97:0a:32:02:95:20:97:5e:e5:15:a6:96: bb:ec:ff:fe:5c:a8:f3:09:2e:80:36:21:8a:fd:bf: e2:9c:fa:a0:9a:54:fd:bc:70:40:d3:8a:f0:07:3a: 91:a9:a6:f5:6d:70:fa:61:41:f5:7a:1e:d9:92:00: a5:f5:ea:c3:59:74:88:8c:f1:2b:43:53:58:47:2d: 68:15:99:28:8f:e2:cc:71:b3:73:d7:a9:c2:0b:b6: 9b:af:6f:cc:00:c9:27:88:27:dd:12:cf:db:13:ee: 41:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C8:A3:FA:28:98:51:D5:A3:BE:A8:9A:2C:7D:EE:CE:50:7A:F0:83 X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a9:50:61:0b:93:70:ea:45:ad:2f:c2:e9:b4:23:fe:4c:dd: 6e:65:34:1f:0c:0c:7a:a8:fe:c0:8f:2a:bf:16:b5:9b:db:27: 40:f0:fb:f3:7b:3c:fd:74:6e:b5:3a:b2:ff:ab:6d:9a:c7:d9: a7:a8:f0:5c:d8:ab:b3:d1:45:9b:5f:9d:42:73:47:29:4c:00: 3b:0d:6a:23:36:e8:b2:4a:6a:f5:c7:99:27:8b:9b:00:9e:7f: cb:c4:2a:11:4c:03:f6:ec:17:14:eb:b8:38:24:e7:83:07:32: cf:56:7d:e9:60:d1:32:bd:3a:c2:ed:78:90:95:ec:ab:8b:94: 97:88:58:37:fa:e1:99:e1:a4:7f:1c:a3:74:68:ee:7b:df:5d: 26:1d:4b:e0:fb:78:f8:ab:93:0b:1c:e3:ee:10:b3:0f:d5:05: 65:04:53:b0:33:b4:2f:4e:cf:cd:69:8e:8d:76:54:89:da:50: 77:66:fe:c7:2d:e8:e7:20:57:a3:08:e8:32:2d:d7:36:eb:06: 2d:a9:7b:76:3b:51:02:fd:04:17:76:74:74:8d:e2:8b:44:e5: 57:80:e5:9f:dc:ca:41:61:f3:d5:10:e6:8f:4f:c1:72:e7:2e: 66:55:e9:fb:0f:f6:a6:bd:18:95:32:77:f2:93:47:66:5a:fe: 32:3e:4a:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoNDQ2ODlDNjcxRkFFRjE5NjdDRjdBOUIxQTMzNjhEOEI5 MTRCN0JBNzAeFw0yNTA3MDEwNzI5NDRaFw0yNTA3MDgwNzI5NDRaMBgxFjAUBgNV BAMTDTY4NjM4ZTY4LWE0MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAcMpEQLas57mdCGOH8MGX8jCZ9sh+/4n4Tjvka3r03GIjdUm6L5l/5a083CW3 JCAADeY5hPslbWeDEp+CQirIe6sYfuSFUj/33cbYrR8ZHFydiuZtnEEaqPY/lIhO 44Ngccj8IlOOd4pTiLjOUQTKqCUYeM14x9T30PSQfydT9eZroZO+oEehpK0YBvP1 l5kinf25J3cMNZcKMgKVIJde5RWmlrvs//5cqPMJLoA2IYr9v+Kc+qCaVP28cEDT ivAHOpGppvVtcPphQfV6HtmSAKX16sNZdIiM8StDU1hHLWgVmSiP4sxxs3PXqcIL tpuvb8wAySeIJ90Sz9sT7kELAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9Mij+iiY UdWjvqiaLH3uzlB68IMwHwYDVR0jBBgwFoAURGicZx+u8ZZ896mxozaNi5FLe6cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2LzA3QUU3QTk2OUNG NjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkdpY1p4LXU4Wlo4OTZteG96YU5pNUZMZTZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2LzA3QUU3QTk2OUNGNjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpa ODk2bXhvemFOaTVGTGU2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJmpUGELk3DqRa0vwum0I/5M3W5lNB8MDHqo/sCPKr8WtZvbJ0Dw+/N7 PP10brU6sv+rbZrH2aeo8FzYq7PRRZtfnUJzRylMADsNaiM26LJKavXHmSeLmwCe f8vEKhFMA/bsFxTruDgk54MHMs9Wfelg0TK9OsLteJCV7KuLlJeIWDf64ZnhpH8c o3Ro7nvfXSYdS+D7ePirkwsc4+4Qsw/VBWUEU7AztC9Oz81pjo12VInaUHdm/sct 6OcgV6MI6DIt1zbrBi2pe3Y7UQL9BBd2dHSN4otE5VeA5Z/cykFh89UQ5o9PwXLn LmZV6fsP9qa9GJUyd/KTR2Za/jI+Svg= -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:28 2025 by rpki-client