$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: Ia55bNFfHDnnlmjk2JUvSgEKfwFxFTfX3Fk5dG4VIs4= Subject key identifier: 03:AD:0F:E5:71:15:35:A1:C7:8A:5A:29:B0:30:5A:67:A6:C0:7B:3F Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0C90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0C87 Signing time: Sun 20 Jul 2025 18:17:12 +0000 Manifest this update: Sun 20 Jul 2025 18:17:11 +0000 Manifest next update: Sun 27 Jul 2025 18:17:11 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: maLiw0+Z5D4DkDXZXOtLAeR4U9EtdolF/1xNTwZqNJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3216 (0xc90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Jul 20 18:17:11 2025 GMT Not After : Jul 27 18:17:11 2025 GMT Subject: CN=687d32a8-fb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7c:d6:b9:6c:da:5b:45:4d:23:e8:98:8c:9d: b1:bc:c8:69:84:ea:96:37:5f:66:70:1b:26:08:e8: db:e6:82:70:87:57:01:64:d0:92:02:cf:8a:78:bb: b8:3a:ef:a3:19:8e:e3:7e:c6:77:c9:fd:d4:fc:3b: 80:eb:7d:45:bb:6d:fd:bb:44:b8:40:99:f4:de:70: f8:a8:80:98:b7:5f:e2:bf:f8:e4:48:14:30:13:3b: 65:46:80:b1:16:a1:e8:9f:f6:e1:b6:ad:1d:b9:24: 3e:62:94:36:b3:ca:88:72:fe:72:84:6b:b4:79:e8: 30:bc:f3:61:b9:91:ad:6c:8c:68:81:a9:72:ad:e7: d0:c2:cd:18:c8:6a:5c:ae:4a:ad:04:ff:e2:c5:b2: f5:0f:44:ed:7e:f6:9b:81:08:2d:21:bb:db:1c:89: b4:a5:1b:b1:fe:0c:2a:f5:9f:03:22:a4:6a:ea:be: a6:dd:11:dc:82:f1:c2:52:1d:5d:b8:7b:e0:76:d8: bb:8e:18:70:fe:80:d9:44:fe:ab:34:c9:20:90:a2: 4d:99:a2:ed:a3:f6:31:49:66:bb:68:5a:e1:9e:86: c2:00:78:f3:83:91:dd:fa:b3:d6:94:dc:cd:d8:5b: 3a:60:eb:cc:d4:bf:bc:7f:e2:76:2e:74:3b:21:aa: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AD:0F:E5:71:15:35:A1:C7:8A:5A:29:B0:30:5A:67:A6:C0:7B:3F X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:df:52:de:cd:ad:d4:e1:b6:9e:db:b2:84:09:50:ee:b7:d6: e6:ac:0c:db:bc:85:4c:e6:f6:60:5d:b0:a0:88:12:32:8c:58: ab:5c:c0:0d:0e:2e:84:0d:8e:4e:04:f3:81:30:25:9b:f8:5f: 7f:d9:42:be:91:e8:75:a2:d9:21:c5:4f:15:50:72:cd:ed:ba: 03:59:d4:89:57:a8:0c:d7:5b:8f:3b:95:ad:f1:21:fd:08:f3: c8:54:97:3b:df:e3:f7:ee:ce:de:4a:84:17:50:04:02:ea:31: e4:3b:b2:a3:40:ee:71:1f:7e:99:32:35:b1:a4:98:b4:d7:86: a8:3b:83:af:ad:db:0b:af:a1:e4:c6:5c:ed:0a:0b:28:a8:c7: 18:20:f5:e6:35:55:13:16:7a:66:f8:5d:f4:eb:13:ec:a7:d8: 8e:02:fb:30:f7:14:98:26:ef:e4:46:8a:1a:96:b3:22:86:fa: 9b:b5:ef:44:e8:1d:92:9b:ec:83:d1:e8:5e:17:99:21:9f:29: 8d:58:98:e7:89:ed:69:57:6c:83:0a:73:18:e1:94:ee:56:18: b7:0f:76:72:11:8f:99:e5:08:90:fe:79:21:80:a8:1e:c5:41: 34:13:4c:d0:44:72:21:c3:ab:fb:19:fe:7d:04:bc:7f:8a:9e: 27:28:2b:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjUwNzIwMTgxNzExWhcNMjUwNzI3MTgxNzExWjAYMRYwFAYD VQQDEw02ODdkMzJhOC1mYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03zWuWzaW0VNI+iYjJ2xvMhphOqWN19mcBsmCOjb5oJwh1cBZNCSAs+KeLu4 Ou+jGY7jfsZ3yf3U/DuA631Fu239u0S4QJn03nD4qICYt1/iv/jkSBQwEztlRoCx FqHon/bhtq0duSQ+YpQ2s8qIcv5yhGu0eegwvPNhuZGtbIxogalyrefQws0YyGpc rkqtBP/ixbL1D0TtfvabgQgtIbvbHIm0pRux/gwq9Z8DIqRq6r6m3RHcgvHCUh1d uHvgdti7jhhw/oDZRP6rNMkgkKJNmaLto/YxSWa7aFrhnobCAHjzg5Hd+rPWlNzN 2Fs6YOvM1L+8f+J2LnQ7IarYlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOtD+Vx FTWhx4paKbAwWmemwHs/MB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ31Leza3U4bae27KECVDut9bmrAzbvIVM5vZgXbCgiBIyjFirXMAN Di6EDY5OBPOBMCWb+F9/2UK+keh1otkhxU8VUHLN7boDWdSJV6gM11uPO5Wt8SH9 CPPIVJc73+P37s7eSoQXUAQC6jHkO7KjQO5xH36ZMjWxpJi014aoO4OvrdsLr6Hk xlztCgsoqMcYIPXmNVUTFnpm+F306xPsp9iOAvsw9xSYJu/kRooalrMihvqbte9E 6B2Sm+yD0eheF5khnymNWJjnie1pV2yDCnMY4ZTuVhi3D3ZyEY+Z5QiQ/nkhgKge xUE0E0zQRHIhw6v7Gf59BLx/ip4nKCuu -----END CERTIFICATE-----Generated at Mon Jul 21 07:08:58 2025 by rpki-client