$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft File: cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft (raw, json) Hash identifier: o6NzdWFf149P4O4a6rflCJac2auIQvuqDHHYEc1cqPI= Subject key identifier: 04:34:92:71:66:A1:23:EC:FF:E1:29:4D:45:45:A0:91:BB:E5:2F:B3 Authority key identifier: 70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4 Certificate issuer: /CN=A9184684/serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft Manifest number: 2F Signing time: Sat 23 Aug 2025 07:55:11 +0000 Manifest this update: Sat 23 Aug 2025 07:55:11 +0000 Manifest next update: Sat 30 Aug 2025 07:55:11 +0000 Files and hashes: 1: cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl (hash: 9W9+TwMvvutrZUYfyq5aYPXvZPPGO/BQyxKkxNHeA7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184684, serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4 Validity Not Before: Aug 23 07:55:11 2025 GMT Not After : Aug 30 07:55:11 2025 GMT Subject: CN=68a973df-df6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:eb:dc:f0:f2:0c:de:3f:22:c8:f7:dc:f4: 7e:66:5b:ee:de:11:8d:8f:2b:2d:4a:85:06:a8:62: bd:2c:bb:61:cf:0d:dc:75:6e:57:4c:a5:f6:a4:5c: 85:48:07:f8:7f:62:95:53:b7:32:d7:46:c7:42:d7: 60:8b:18:27:2a:45:e0:c1:18:5e:d5:f2:04:5f:7a: b0:05:22:b7:2a:05:16:fc:34:4e:3e:e1:aa:bc:df: 34:77:a7:48:cf:a3:b0:74:24:70:bb:26:ba:54:6c: f8:05:33:05:52:c0:8b:bc:80:ca:14:bd:1f:41:ab: b6:67:5c:65:eb:15:01:be:23:bb:3f:98:99:0b:12: b2:80:88:fd:c9:86:2d:9b:c4:0c:8f:ad:b7:ca:12: 70:dc:34:9b:2c:c3:37:48:db:be:62:91:25:bf:ef: 1a:7d:a7:cc:94:1f:7f:ff:43:dd:70:77:e4:8a:34: 8b:ee:73:c7:08:c9:2a:49:89:00:7e:73:4d:84:01: c4:90:ed:88:a5:a3:65:99:b5:82:a2:f6:aa:8b:c4: b5:29:1e:f6:8e:c0:eb:d9:99:54:27:24:68:87:ce: 6b:77:1b:54:91:f9:a5:ec:d6:5c:6c:e6:e2:84:0e: 81:24:cb:9e:65:2b:6a:2a:5e:da:ee:a9:8c:7c:3e: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:34:92:71:66:A1:23:EC:FF:E1:29:4D:45:45:A0:91:BB:E5:2F:B3 X509v3 Authority Key Identifier: keyid:70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c6:e0:dd:e3:c9:fa:01:4a:d2:99:2a:f8:91:9b:ad:15:85: 00:fb:42:8e:81:5e:86:e4:86:d2:d1:62:8a:03:22:b0:8f:12: 69:bf:57:67:ab:63:72:55:46:5a:f1:b0:36:31:5f:42:a4:6e: 5d:71:a7:37:30:bb:9a:45:8b:41:2f:a2:c5:15:58:8e:a7:16: f9:e0:ab:f4:66:39:74:08:94:df:1c:f1:78:e4:dd:b3:66:f1: 4e:bd:a5:82:80:52:f6:9b:bf:e7:e5:a7:15:3f:90:b5:ca:98: b7:83:21:cc:22:60:f9:12:15:ce:5c:86:2d:8f:ca:a0:5f:c5: c2:6a:a9:8b:b1:1a:94:24:40:ed:f0:87:9f:31:21:ea:b4:7a: 85:6e:e1:e8:8a:af:76:dc:06:21:3a:f0:dc:e4:7e:9e:d7:09: a2:47:ef:bc:a1:6f:cb:30:29:d2:38:5a:49:62:c8:ac:b5:b2: 9f:09:cd:3a:01:86:39:5e:ba:43:f2:52:c7:61:06:5c:10:a9: 40:68:ea:a9:f5:e3:c2:d1:62:11:8a:29:cf:e2:08:7d:0a:90: 88:d1:9e:76:5f:6e:c3:56:d7:b7:89:50:17:5d:7b:be:19:fa: 10:c6:e9:74:f4:80:f3:ea:65:79:c2:0b:50:7f:12:fd:72:1c: d8:b4:65:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDY4NDExMC8GA1UEBRMoNzAwMjA2M0JGMzAyQ0JBNDZGOTI0NUIwNzlBNDlCMTFB RDk2RUFFNDAeFw0yNTA4MjMwNzU1MTFaFw0yNTA4MzAwNzU1MTFaMBgxFjAUBgNV BAMTDTY4YTk3M2RmLWRmNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOGevc8PIM3j8iyPfc9H5mW+7eEY2PKy1KhQaoYr0su2HPDdx1bldMpfakXIVI B/h/YpVTtzLXRsdC12CLGCcqReDBGF7V8gRferAFIrcqBRb8NE4+4aq83zR3p0jP o7B0JHC7JrpUbPgFMwVSwIu8gMoUvR9Bq7ZnXGXrFQG+I7s/mJkLErKAiP3Jhi2b xAyPrbfKEnDcNJsswzdI275ikSW/7xp9p8yUH3//Q91wd+SKNIvuc8cIySpJiQB+ c02EAcSQ7Yilo2WZtYKi9qqLxLUpHvaOwOvZmVQnJGiHzmt3G1SR+aXs1lxs5uKE DoEky55lK2oqXtruqYx8Pq0XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBDSScWah I+z/4SlNRUWgkbvlL7MwHwYDVR0jBBgwFoAUcAIGO/MCy6RvkkWweaSbEa2W6uQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0JGQ0FCNUNDMzk4 NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZSdmtrV3dlYVNiRWEyVzZ1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY0FJR09fTUN5NlJ2a2tXd2VhU2JFYTJXNnVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 Njg0L0JGQ0FCNUNDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZS dmtrV3dlYVNiRWEyVzZ1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHjG4N3jyfoBStKZKviRm60VhQD7Qo6BXobkhtLRYooDIrCPEmm/V2er Y3JVRlrxsDYxX0Kkbl1xpzcwu5pFi0EvosUVWI6nFvngq/RmOXQIlN8c8Xjk3bNm 8U69pYKAUvabv+flpxU/kLXKmLeDIcwiYPkSFc5chi2PyqBfxcJqqYuxGpQkQO3w h58xIeq0eoVu4eiKr3bcBiE68Nzkfp7XCaJH77yhb8swKdI4WkliyKy1sp8JzToB hjleukPyUsdhBlwQqUBo6qn148LRYhGKKc/iCH0KkIjRnnZfbsNW17eJUBdde74Z +hDG6XT0gPPqZXnCC1B/Ev1yHNi0ZSU= -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:31 2025 by rpki-client