$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: 13gDXexqmLfMDLU3vAnnEYQtFwAPdIM6wth3K4B0Wb8= Subject key identifier: 33:32:4E:61:46:20:E5:59:E2:85:87:CA:18:2E:60:0A:43:6E:2D:35 Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 092E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 092E Signing time: Tue 10 Jun 2025 20:09:15 +0000 Manifest this update: Tue 10 Jun 2025 20:09:15 +0000 Manifest next update: Tue 17 Jun 2025 20:09:15 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: GTEE9x/fKg6FtD2INBKQaC/53IbqynbxdGKTB/qcMQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2350 (0x92e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Jun 10 20:09:15 2025 GMT Not After : Jun 17 20:09:15 2025 GMT Subject: CN=684890eb-ce74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:1c:3d:bd:00:f0:94:79:88:9c:f8:4f:8c: a8:9c:68:5d:39:07:cb:22:20:ee:91:95:3a:f1:6d: 90:fa:3e:4d:5e:a4:06:f5:fd:4e:8a:d2:dd:a8:09: 06:a3:64:fe:cf:12:6c:c4:14:0e:da:e0:74:e1:43: 43:c1:f7:f7:11:95:16:e9:e6:c7:4b:62:09:d4:8b: d5:b6:5b:9c:14:1a:3c:e4:cf:de:5b:2b:d8:fa:50: 68:d4:70:01:60:cf:63:7b:9a:64:4f:b0:f6:b3:c2: e6:94:93:0d:35:38:69:30:41:21:d0:57:d0:c6:25: 58:7e:ba:49:56:bd:b9:c6:24:c5:8d:5e:1c:28:f8: 38:5c:35:45:dc:23:27:74:88:1a:13:d7:3a:76:5d: 9b:60:92:f8:74:5a:51:5a:0d:20:6d:bf:17:03:80: df:d2:8d:e1:1c:d4:01:8b:7b:bf:8d:3f:73:30:f2: 19:e3:cd:15:dd:f0:bd:e7:f5:12:b5:17:84:30:3c: 83:a9:7a:91:2d:12:ae:e5:af:45:55:9f:76:15:eb: b5:41:12:5f:5c:7a:1b:74:76:37:1f:fe:63:1f:46: c8:9d:39:3f:5c:b9:95:8c:38:cd:c6:53:af:42:2d: fc:80:a7:83:ee:17:97:f7:91:d1:42:f6:7a:15:99: c8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:32:4E:61:46:20:E5:59:E2:85:87:CA:18:2E:60:0A:43:6E:2D:35 X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:bb:1a:02:88:eb:d4:03:05:fc:bf:4f:35:c3:df:5e:e6:17: e5:3d:ab:55:6f:6f:52:ce:cd:6f:a4:ad:66:26:b0:70:d8:0f: e8:f5:21:ac:74:bb:00:84:54:92:47:3d:09:25:94:52:57:b5: 53:5e:3e:9f:49:36:56:93:de:00:f7:cc:06:48:dc:22:b4:50: d5:d0:d7:40:08:cf:5f:3a:f8:03:e7:62:e5:1e:42:46:23:34: f9:15:95:df:13:95:5c:a0:a5:a9:cf:8b:26:dc:e4:e0:02:73: de:40:7f:6a:4c:23:3e:bf:99:1b:44:99:82:0e:c3:53:3c:8f: d1:af:f5:2c:5a:e0:20:25:65:40:9f:c5:83:ee:90:91:72:db: ee:e7:69:f2:67:89:ff:e4:83:7d:de:6e:02:49:9c:24:f3:64: 1c:e3:75:0b:e1:87:ab:c9:97:48:c9:15:60:9a:a6:96:92:87: d4:21:2b:ee:cb:2d:01:97:34:ac:0e:bb:d3:be:56:17:db:ac: b5:ba:a5:a1:96:34:33:80:b9:b1:cf:cd:67:1f:fd:63:d3:9c: 25:ab:5f:0b:f5:4a:f8:e7:31:30:bd:64:9e:b6:c3:7b:d2:3d: ac:0b:35:de:ea:75:4b:10:c7:8f:73:90:62:be:b0:10:32:0e: 41:7f:96:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjUwNjEwMjAwOTE1WhcNMjUwNjE3MjAwOTE1WjAYMRYwFAYD VQQDEw02ODQ4OTBlYi1jZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEwcPb0A8JR5iJz4T4yonGhdOQfLIiDukZU68W2Q+j5NXqQG9f1OitLdqAkG o2T+zxJsxBQO2uB04UNDwff3EZUW6ebHS2IJ1IvVtlucFBo85M/eWyvY+lBo1HAB YM9je5pkT7D2s8LmlJMNNThpMEEh0FfQxiVYfrpJVr25xiTFjV4cKPg4XDVF3CMn dIgaE9c6dl2bYJL4dFpRWg0gbb8XA4Df0o3hHNQBi3u/jT9zMPIZ480V3fC95/US tReEMDyDqXqRLRKu5a9FVZ92Feu1QRJfXHobdHY3H/5jH0bInTk/XLmVjDjNxlOv Qi38gKeD7heX95HRQvZ6FZnIjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMyTmFG IOVZ4oWHyhguYApDbi01MB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEuxoCiOvUAwX8v081w99e5hflPatVb29Szs1vpK1mJrBw2A/o9SGs dLsAhFSSRz0JJZRSV7VTXj6fSTZWk94A98wGSNwitFDV0NdACM9fOvgD52LlHkJG IzT5FZXfE5VcoKWpz4sm3OTgAnPeQH9qTCM+v5kbRJmCDsNTPI/Rr/UsWuAgJWVA n8WD7pCRctvu52nyZ4n/5IN93m4CSZwk82Qc43UL4YeryZdIyRVgmqaWkofUISvu yy0BlzSsDrvTvlYX26y1uqWhljQzgLmxz81nH/1j05wlq18L9Ur45zEwvWSetsN7 0j2sCzXe6nVLEMePc5BivrAQMg5Bf5YJ -----END CERTIFICATE-----Generated at Thu Jun 12 13:15:39 2025 by rpki-client