$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json) Hash identifier: Fb9rOccO9S+1BUBHYDlVKba0HjoMT6btWvmuxqoBF38= Subject key identifier: 7E:6D:97:55:08:9B:1A:EA:70:A6:F7:AC:8C:2A:60:33:E7:59:C4:AD Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft Manifest number: 0106 Signing time: Thu 17 Apr 2025 03:55:47 +0000 Manifest this update: Thu 17 Apr 2025 03:55:47 +0000 Manifest next update: Thu 24 Apr 2025 03:55:47 +0000 Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: GfBAiEEvWivJVySy1usXfvzhZOpMZp46EP8RQ93jTtI=) 2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: lfBaqProMut7Uby4sm5sXFCXR+BzVB4lKdYH7qIjDTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 03:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Validity Not Before: Apr 17 03:55:47 2025 GMT Not After : Apr 24 03:55:47 2025 GMT Subject: CN=68007bc3-5e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:ed:7f:7d:3c:0e:0b:65:1e:b1:bc:2f:0b: 33:ce:45:8f:d3:ad:ae:c7:6c:13:ab:b6:55:7d:37: ae:16:71:09:db:3b:ce:0f:63:37:75:30:29:7c:a9: a2:78:33:cf:af:5b:7f:e0:57:06:8b:35:b7:a2:7b: a4:24:32:88:30:2b:f6:a5:76:bc:1b:13:44:21:4f: e0:32:fc:ec:79:9e:62:12:4b:a9:6d:79:23:4e:cb: 8d:d2:73:08:ea:1a:5a:b8:06:cc:96:2c:cd:46:16: 0e:8b:27:89:dd:b1:91:4e:28:cb:d9:64:e5:cc:07: 3e:0b:d6:fa:73:8b:cf:0d:09:e2:d9:6f:9b:8f:fc: 96:60:15:2d:55:d2:4e:75:14:f8:19:00:05:09:92: 73:74:ae:ff:1f:c8:9c:0c:53:68:98:c1:40:11:cb: 3a:5f:f0:54:1d:d4:fd:26:25:7d:5d:a6:75:2a:1b: ad:7e:2e:98:91:3d:a8:86:23:95:8b:98:17:e8:c0: 39:63:f5:3d:43:66:0c:ea:9e:1b:7e:d5:b7:36:cc: 62:83:41:d0:c2:d7:45:bb:50:9b:0f:f3:12:16:e1: 7e:a6:52:69:0e:82:aa:54:37:ea:ff:2f:32:43:78: 45:9a:53:5c:78:3f:c3:f7:fd:d4:64:83:eb:3e:d2: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6D:97:55:08:9B:1A:EA:70:A6:F7:AC:8C:2A:60:33:E7:59:C4:AD X509v3 Authority Key Identifier: keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:88:ed:6c:24:50:c4:0a:60:c1:c7:cc:9c:e5:d7:df:38:d7: a4:9e:d4:ec:52:82:c2:99:16:d2:10:01:f5:3f:37:d5:a7:3e: 45:3d:4a:aa:13:d3:a9:86:11:47:a6:26:70:a8:cc:e4:3a:d9: c0:79:a1:42:39:b1:10:96:24:fe:f3:fe:a5:30:aa:22:49:ef: 71:41:f0:33:93:7e:6c:45:95:5a:d3:dd:9e:d2:94:a1:ad:c1: 40:5e:a2:07:eb:25:2a:4c:12:e2:0f:e1:da:8c:04:5d:ce:86: c5:d9:7f:7d:2f:05:86:e6:f5:6e:87:dc:14:a0:8e:5e:36:6b: 0b:72:45:84:ca:6c:d1:d3:60:67:2e:22:b9:69:8e:69:a1:24: aa:bf:fb:b7:a1:44:83:d2:c5:7c:4a:91:92:9f:01:a8:77:2b: 6f:05:2d:3d:56:d8:fb:6c:ad:f6:3e:dd:44:17:eb:38:f6:e6: 95:41:d0:d4:36:3f:21:52:70:ea:95:28:ac:61:32:2d:19:df: 3e:d8:47:61:d9:0d:ea:a0:27:b9:33:f1:80:ed:ec:15:58:4d: 0b:17:e3:4a:dd:17:b5:0d:56:72:8c:38:1f:53:2d:c4:d9:77: 6f:ec:25:6e:5f:f3:2e:c1:5b:5e:93:54:c8:fb:f3:7a:21:b0: ac:69:86:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE NzU1RUQwQzAwHhcNMjUwNDE3MDM1NTQ3WhcNMjUwNDI0MDM1NTQ3WjAYMRYwFAYD VQQDEw02ODAwN2JjMy01ZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsivtf308DgtlHrG8LwszzkWP062ux2wTq7ZVfTeuFnEJ2zvOD2M3dTApfKmi eDPPr1t/4FcGizW3onukJDKIMCv2pXa8GxNEIU/gMvzseZ5iEkupbXkjTsuN0nMI 6hpauAbMlizNRhYOiyeJ3bGRTijL2WTlzAc+C9b6c4vPDQni2W+bj/yWYBUtVdJO dRT4GQAFCZJzdK7/H8icDFNomMFAEcs6X/BUHdT9JiV9XaZ1Khutfi6YkT2ohiOV i5gX6MA5Y/U9Q2YM6p4bftW3Nsxig0HQwtdFu1CbD/MSFuF+plJpDoKqVDfq/y8y Q3hFmlNceD/D9/3UZIPrPtJeqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5tl1UI mxrqcKb3rIwqYDPnWcStMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP aTJtdFBER25OaG5YVmUwTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAziO1sJFDECmDBx8yc5dffONekntTsUoLCmRbSEAH1PzfVpz5FPUqq E9OphhFHpiZwqMzkOtnAeaFCObEQliT+8/6lMKoiSe9xQfAzk35sRZVa092e0pSh rcFAXqIH6yUqTBLiD+HajARdzobF2X99LwWG5vVuh9wUoI5eNmsLckWEymzR02Bn LiK5aY5poSSqv/u3oUSD0sV8SpGSnwGodytvBS09Vtj7bK32Pt1EF+s49uaVQdDU Nj8hUnDqlSisYTItGd8+2Edh2Q3qoCe5M/GA7ewVWE0LF+NK3Re1DVZyjDgfUy3E 2Xdv7CVuX/MuwVtek1TI+/N6IbCsaYYB -----END CERTIFICATE-----Generated at Sat Apr 19 00:58:50 2025 by rpki-client