$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft File: cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft (raw, json) Hash identifier: U53I2uAfZFEU7UcvfkyKy7HEkUDAv+Bb83ibMvMDUKc= Subject key identifier: F2:AB:9F:07:8B:E5:83:0A:B3:61:05:F8:10:01:0F:B7:49:74:D9:F6 Authority key identifier: 70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4 Certificate issuer: /CN=A9184684/serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft Manifest number: 09 Signing time: Mon 09 Jun 2025 07:04:56 +0000 Manifest this update: Mon 09 Jun 2025 07:04:55 +0000 Manifest next update: Mon 16 Jun 2025 07:04:55 +0000 Files and hashes: 1: cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl (hash: 6AIs+UCDNoZu628eKHYMkTrCn5xCZjRogZbN4VYmLeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 07:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184684, serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4 Validity Not Before: Jun 9 07:04:55 2025 GMT Not After : Jun 16 07:04:55 2025 GMT Subject: CN=68468798-0fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:ce:c1:1b:82:51:5f:f7:3d:8f:80:b0:34: 74:ec:f8:7f:e9:77:3f:c8:02:c4:cc:ae:03:dc:b7: 6a:f9:11:2c:9c:5c:5a:7c:64:5b:b2:ae:f2:f7:4f: b3:fc:9e:b4:6b:d0:be:c5:a6:5a:c8:c8:f1:33:a1: 3c:97:7f:19:e2:11:38:2c:c1:13:2c:6f:2e:18:75: c6:5a:52:c8:93:4d:3b:2b:77:4a:36:f1:e7:b5:c0: e6:8e:b9:2b:df:b2:a3:15:6e:84:eb:b9:1f:4c:d2: 48:2f:55:9e:b9:e2:f6:a4:73:f8:5e:38:08:70:f8: 59:98:83:70:9b:fd:25:86:5b:8c:33:99:26:42:56: 4b:9b:73:0a:9a:0b:73:2f:cf:57:5a:12:8c:e7:cf: dc:cd:fa:43:fa:b7:af:7b:7e:56:66:07:52:74:19: 06:08:8e:e9:59:6f:e4:fa:1d:cb:d8:5a:b1:5a:1e: 36:10:44:d6:00:8a:f4:e4:2e:0f:05:b5:da:6c:be: 3c:03:19:84:d1:45:be:90:88:03:4b:98:4a:47:14: 03:29:35:ee:41:b3:a7:cb:51:69:b1:33:53:0c:4d: 85:52:c9:77:7f:eb:e4:68:28:fb:9f:7e:d5:44:30: 44:18:7a:ed:c0:67:ca:b4:12:4d:cc:c7:f4:9e:ef: 63:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AB:9F:07:8B:E5:83:0A:B3:61:05:F8:10:01:0F:B7:49:74:D9:F6 X509v3 Authority Key Identifier: keyid:70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fb:ac:65:18:00:7a:8a:9d:7e:a2:7a:6d:25:46:7e:fc:73: 5a:85:d6:df:a1:9c:59:3a:5f:5e:41:e5:60:fa:86:2d:c1:8b: 56:82:94:be:a5:c0:2d:64:2d:db:4c:82:1d:60:1d:51:a4:ff: 95:f7:11:12:59:5f:80:45:d7:88:b7:75:e9:68:a8:52:a3:93: 7d:31:41:74:ed:0f:ca:81:27:47:be:89:c0:c9:3f:5a:ee:b3: dd:9f:59:90:cc:ce:6c:1b:4e:7b:6a:0b:df:b8:ce:e5:71:93: 59:cf:3a:22:b8:31:b5:ca:af:d9:40:14:b1:b8:62:98:ff:02: 6f:84:9e:f3:b9:67:85:39:47:55:32:ce:d4:b9:1e:3b:4c:a5: 38:1d:4d:d3:59:4c:d5:16:65:90:a8:9e:e2:8b:79:2d:f7:52: a3:cc:57:dd:d6:5a:ee:93:2d:1e:4d:40:de:28:74:6a:d6:8d: 47:e4:ad:3e:d5:07:31:0a:32:7d:27:ef:29:96:58:8d:56:6c: 1b:21:49:1b:69:e1:f3:b3:dd:e9:e9:98:78:0e:80:88:e5:67: 39:6d:5b:53:ac:1e:d2:b9:45:3a:a0:ad:dd:9e:96:10:ac:eb: 4e:31:87:c5:42:1b:73:ce:6a:4e:11:2f:8a:80:4d:f7:27:5b: 35:49:fe:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDY4NDExMC8GA1UEBRMoNzAwMjA2M0JGMzAyQ0JBNDZGOTI0NUIwNzlBNDlCMTFB RDk2RUFFNDAeFw0yNTA2MDkwNzA0NTVaFw0yNTA2MTYwNzA0NTVaMBgxFjAUBgNV BAMTDTY4NDY4Nzk4LTBmYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClDM7BG4JRX/c9j4CwNHTs+H/pdz/IAsTMrgPct2r5ESycXFp8ZFuyrvL3T7P8 nrRr0L7FplrIyPEzoTyXfxniETgswRMsby4YdcZaUsiTTTsrd0o28ee1wOaOuSvf sqMVboTruR9M0kgvVZ654vakc/heOAhw+FmYg3Cb/SWGW4wzmSZCVkubcwqaC3Mv z1daEoznz9zN+kP6t697flZmB1J0GQYIjulZb+T6HcvYWrFaHjYQRNYAivTkLg8F tdpsvjwDGYTRRb6QiANLmEpHFAMpNe5Bs6fLUWmxM1MMTYVSyXd/6+RoKPufftVE MEQYeu3AZ8q0Ek3Mx/Se72NHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8qufB4vl gwqzYQX4EAEPt0l02fYwHwYDVR0jBBgwFoAUcAIGO/MCy6RvkkWweaSbEa2W6uQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0JGQ0FCNUNDMzk4 NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZSdmtrV3dlYVNiRWEyVzZ1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY0FJR09fTUN5NlJ2a2tXd2VhU2JFYTJXNnVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 Njg0L0JGQ0FCNUNDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZS dmtrV3dlYVNiRWEyVzZ1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEv7rGUYAHqKnX6iem0lRn78c1qF1t+hnFk6X15B5WD6hi3Bi1aClL6l wC1kLdtMgh1gHVGk/5X3ERJZX4BF14i3deloqFKjk30xQXTtD8qBJ0e+icDJP1ru s92fWZDMzmwbTntqC9+4zuVxk1nPOiK4MbXKr9lAFLG4Ypj/Am+EnvO5Z4U5R1Uy ztS5HjtMpTgdTdNZTNUWZZConuKLeS33UqPMV93WWu6TLR5NQN4odGrWjUfkrT7V BzEKMn0n7ymWWI1WbBshSRtp4fOz3enpmHgOgIjlZzltW1OsHtK5RTqgrd2elhCs 604xh8VCG3POak4RL4qATfcnWzVJ/lg= -----END CERTIFICATE-----Generated at Mon Jun 9 13:49:35 2025 by rpki-client