$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: eSkkwLRAD1BobLRQGUwalfLkF4M461nSZeJyfLfENb4= Subject key identifier: BC:DB:92:80:C5:33:DD:C8:87:3A:3F:4A:3A:B0:9C:F8:3E:8C:71:AD Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0C03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 12C6 Signing time: Fri 30 May 2025 18:47:42 +0000 Manifest this update: Fri 30 May 2025 18:47:41 +0000 Manifest next update: Fri 06 Jun 2025 18:47:41 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: 5MfjEJPVbbNxkhzoxCGk6Wlq+bZU9yGKk+Q2e1HQ9tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3075 (0xc03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: May 30 18:47:41 2025 GMT Not After : Jun 6 18:47:41 2025 GMT Subject: CN=6839fd4d-fa70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:28:ac:53:7b:e3:2e:78:cc:f1:48:ce:da: 6f:52:b9:b6:8a:c7:ac:18:95:56:6d:75:24:69:58: 0c:d8:08:ac:30:2a:4a:8f:f9:ce:be:a1:06:93:d0: 48:57:0d:65:88:6b:a9:5c:8d:21:29:e7:67:eb:b4: 8b:36:91:b1:65:1e:b5:11:72:50:40:02:6c:c1:c9: 98:03:a2:09:34:ab:d1:22:34:50:4a:33:4c:06:f5: 64:39:54:4b:96:7e:a3:f2:8f:45:d8:dc:60:6e:f2: 46:af:41:89:8c:c3:57:75:69:ef:ce:f2:58:f2:8d: a1:f9:bb:56:b6:b6:29:4e:bd:ea:be:f9:55:01:c9: 9c:b8:bd:78:93:7b:d7:56:04:13:51:a2:c5:3d:82: d7:80:15:2d:40:69:a3:6e:94:c8:ca:78:d2:d5:9d: 1d:6f:f2:11:58:64:b7:96:c6:13:e7:09:37:09:2a: 7e:a7:77:80:fe:9b:84:9f:22:17:22:54:87:c6:65: a7:43:26:ac:3e:da:ea:88:21:4f:84:58:24:41:f6: 74:0c:df:82:b7:be:91:b7:89:61:2b:69:e8:4b:64: 01:f4:b8:2c:5f:7e:8a:c7:47:c8:06:48:39:02:56: ad:85:c5:58:b3:a3:23:ef:d0:e7:00:87:69:d7:ed: 6d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DB:92:80:C5:33:DD:C8:87:3A:3F:4A:3A:B0:9C:F8:3E:8C:71:AD X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a1:ad:b1:2b:f1:e0:15:1a:78:c0:a3:1a:f0:16:69:ac:f2: 01:59:4c:00:41:76:a5:e9:89:f2:32:c5:5d:e7:09:6f:3b:46: 2b:a9:74:26:05:a4:1e:e2:47:94:80:ce:80:0a:e4:b1:34:d3: 78:1c:28:27:9e:0a:fd:a2:2c:0a:22:a4:66:da:ab:f9:b3:c0: dd:7b:f9:ce:52:41:e9:81:b7:c4:e6:6a:1f:8b:48:34:55:70: 15:2c:4d:b0:1f:f6:c0:ec:89:10:a5:20:66:e1:5c:e8:20:91: 41:3c:2d:18:d9:14:aa:c0:a4:4e:19:d1:04:8d:00:37:f5:9a: 5c:67:e3:22:1e:b6:7b:ea:7c:66:2e:fe:80:7d:ad:dc:76:23: e3:0f:18:23:d4:65:96:d9:01:f7:22:a9:b6:8e:fe:6d:58:41: 09:c9:a0:c6:e3:89:5a:ed:0b:5c:1b:1c:d2:2b:f1:6e:fe:a0: ba:64:81:13:8d:b2:ea:72:3a:be:cf:e7:36:1f:37:31:2c:20: b1:a7:40:95:d5:ed:0a:36:30:9f:42:28:f2:61:ac:a9:84:92: 18:80:0d:a3:2a:1a:f1:8b:54:c1:d6:e0:64:04:42:80:e1:06: 39:84:03:bd:f7:79:3f:45:85:9c:ea:43:fa:b0:2f:fe:f8:a0: f1:8f:7c:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjUwNTMwMTg0NzQxWhcNMjUwNjA2MTg0NzQxWjAYMRYwFAYD VQQDEw02ODM5ZmQ0ZC1mYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JYorFN74y54zPFIztpvUrm2isesGJVWbXUkaVgM2AisMCpKj/nOvqEGk9BI Vw1liGupXI0hKedn67SLNpGxZR61EXJQQAJswcmYA6IJNKvRIjRQSjNMBvVkOVRL ln6j8o9F2NxgbvJGr0GJjMNXdWnvzvJY8o2h+btWtrYpTr3qvvlVAcmcuL14k3vX VgQTUaLFPYLXgBUtQGmjbpTIynjS1Z0db/IRWGS3lsYT5wk3CSp+p3eA/puEnyIX IlSHxmWnQyasPtrqiCFPhFgkQfZ0DN+Ct76Rt4lhK2noS2QB9LgsX36Kx0fIBkg5 AlathcVYs6Mj79DnAIdp1+1tUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzbkoDF M93Ihzo/SjqwnPg+jHGtMB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJoa2xK/HgFRp4wKMa8BZprPIBWUwAQXal6YnyMsVd5wlvO0YrqXQm BaQe4keUgM6ACuSxNNN4HCgnngr9oiwKIqRm2qv5s8Dde/nOUkHpgbfE5mofi0g0 VXAVLE2wH/bA7IkQpSBm4VzoIJFBPC0Y2RSqwKROGdEEjQA39ZpcZ+MiHrZ76nxm Lv6Afa3cdiPjDxgj1GWW2QH3Iqm2jv5tWEEJyaDG44la7QtcGxzSK/Fu/qC6ZIET jbLqcjq+z+c2HzcxLCCxp0CV1e0KNjCfQijyYayphJIYgA2jKhrxi1TB1uBkBEKA 4QY5hAO993k/RYWc6kP6sC/++KDxj3yu -----END CERTIFICATE-----Generated at Sat May 31 17:54:50 2025 by rpki-client