$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: bHv74fMqia2IwVuJmZorTOjU9GiIeI85mCNhWG18J6Y= Subject key identifier: B5:FA:6F:6A:ED:E4:30:CD:31:8A:5C:6D:5E:66:F6:50:D0:9F:AD:E4 Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0C56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0C4D Signing time: Fri 28 Mar 2025 18:30:52 +0000 Manifest this update: Fri 28 Mar 2025 18:30:51 +0000 Manifest next update: Fri 04 Apr 2025 18:30:51 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: e2U3L6CsSbs/X8Htc8EQ6H/O1b1j3MgHme5Vi1G668o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 18:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635 Validity Not Before: Mar 28 18:30:51 2025 GMT Not After : Apr 4 18:30:51 2025 GMT Subject: CN=67e6eadc-5273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:31:bb:c8:32:65:c1:aa:d4:99:44:79:84:29: aa:d5:dc:94:40:f2:cc:0d:c4:be:9f:63:f9:98:26: 25:98:68:4e:f8:bf:e2:53:b9:c3:70:8f:18:04:51: e2:a7:85:bd:68:6d:e2:f6:ab:c7:d1:ff:90:49:67: 24:4a:36:e6:0c:18:2a:37:79:98:e6:c5:59:7a:d0: e3:0d:fe:f8:b5:9e:a5:bc:3d:c5:4e:52:08:ed:e2: 16:47:a7:7a:86:ad:d4:cc:db:e0:3d:75:b7:3b:b2: d6:4c:02:ad:48:cc:7e:3a:f7:1f:8a:28:b7:1e:4c: 4f:e6:57:4f:98:60:97:b3:ce:ef:11:d6:82:b1:16: 2a:12:81:fb:20:a6:0b:f0:a2:27:a0:62:cd:4c:46: 91:8b:59:69:6d:90:92:50:a7:dc:30:94:23:d1:9d: 4d:22:4d:60:9e:11:2d:0b:34:6b:07:fc:25:b6:b0: 46:c7:0b:bc:ab:9c:aa:2d:d6:f1:56:81:04:cb:89: a9:de:7b:97:c2:48:64:e4:37:10:ba:ec:77:64:9c: e5:9c:c9:14:8e:c1:8e:e4:84:75:aa:0e:c1:6d:8c: c7:91:ae:01:d6:80:64:4c:2b:c4:c8:eb:55:13:0a: 14:fc:1a:8b:0a:17:d7:ca:41:a9:b8:96:31:66:61: 02:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FA:6F:6A:ED:E4:30:CD:31:8A:5C:6D:5E:66:F6:50:D0:9F:AD:E4 X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6c:d8:f0:41:33:6d:1e:f1:38:14:25:7f:72:b6:e8:12:06: c6:95:c0:40:bb:2a:36:fc:39:54:2a:fa:e7:f3:4e:6f:73:1a: 1b:71:08:95:8b:74:3b:18:d2:56:54:92:e0:74:7f:64:b4:69: 69:25:cf:f5:7e:e5:b7:2e:4a:b1:52:ad:95:15:8f:9c:3c:98: 85:c4:78:42:04:13:54:8c:f5:a4:77:a2:7c:d8:df:95:bd:ef: 69:e6:f1:7c:ba:46:28:6e:e6:70:45:f9:d1:04:bd:ed:ec:df: 5f:6e:7e:26:2d:4a:f3:fa:14:03:04:a9:8f:8c:b5:13:c4:bc: b4:cf:77:42:29:48:3f:6d:1a:40:66:5c:e3:32:81:9c:e9:08: ac:11:c7:20:b5:d9:26:04:db:81:c8:c7:79:c6:cc:85:4e:7d: 68:75:9b:c7:fe:8a:a3:45:eb:3e:59:09:8d:93:83:3e:42:c9: 0f:ac:c5:b5:c9:31:7d:65:52:ff:33:6d:ee:89:de:77:f4:ca: 49:75:f1:0a:65:43:52:fc:8d:61:23:97:9b:f2:b0:9d:ca:b3: 1a:8f:ae:b1:06:9d:f2:19:6a:91:a2:0b:41:f6:f8:95:b6:ca: a7:a9:c8:8d:45:82:ee:74:58:c2:fd:0b:09:1f:08:cc:93:59: d3:54:dc:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjUwMzI4MTgzMDUxWhcNMjUwNDA0MTgzMDUxWjAYMRYwFAYD VQQDEw02N2U2ZWFkYy01MjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DG7yDJlwarUmUR5hCmq1dyUQPLMDcS+n2P5mCYlmGhO+L/iU7nDcI8YBFHi p4W9aG3i9qvH0f+QSWckSjbmDBgqN3mY5sVZetDjDf74tZ6lvD3FTlII7eIWR6d6 hq3UzNvgPXW3O7LWTAKtSMx+Ovcfiii3HkxP5ldPmGCXs87vEdaCsRYqEoH7IKYL 8KInoGLNTEaRi1lpbZCSUKfcMJQj0Z1NIk1gnhEtCzRrB/wltrBGxwu8q5yqLdbx VoEEy4mp3nuXwkhk5DcQuux3ZJzlnMkUjsGO5IR1qg7BbYzHka4B1oBkTCvEyOtV EwoU/BqLChfXykGpuJYxZmECuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLX6b2rt 5DDNMYpcbV5m9lDQn63kMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0bNjwQTNtHvE4FCV/crboEgbGlcBAuyo2/DlUKvrn805vcxobcQiV i3Q7GNJWVJLgdH9ktGlpJc/1fuW3LkqxUq2VFY+cPJiFxHhCBBNUjPWkd6J82N+V ve9p5vF8ukYobuZwRfnRBL3t7N9fbn4mLUrz+hQDBKmPjLUTxLy0z3dCKUg/bRpA ZlzjMoGc6QisEccgtdkmBNuByMd5xsyFTn1odZvH/oqjRes+WQmNk4M+QskPrMW1 yTF9ZVL/M23uid539MpJdfEKZUNS/I1hI5eb8rCdyrMaj66xBp3yGWqRogtB9viV tsqnqciNRYLudFjC/QsJHwjMk1nTVNwz -----END CERTIFICATE-----Generated at Fri Apr 4 18:24:00 2025 by rpki-client