$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: ZUijYbePFTUZaPfA2vyHUIiY4ZK+TS9ITj1Ax3UoBH8= Subject key identifier: D3:EE:A6:A3:01:04:7D:C1:24:06:4A:49:09:DC:EB:72:32:34:C9:87 Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0C76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0C6D Signing time: Fri 30 May 2025 18:28:54 +0000 Manifest this update: Fri 30 May 2025 18:28:54 +0000 Manifest next update: Fri 06 Jun 2025 18:28:54 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: wxorW6lL/H4ZqUloGREt50Z5CNj+Zv4N4wLwdnQ6/kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3190 (0xc76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: May 30 18:28:54 2025 GMT Not After : Jun 6 18:28:54 2025 GMT Subject: CN=6839f8e6-39a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:62:43:92:4e:ea:75:be:05:5a:5d:b9:1c:a5: 5e:f3:d7:22:0f:3e:8f:2e:c4:95:56:ec:46:bf:de: 98:58:d9:32:c4:dd:b3:c7:f0:15:a7:7b:9b:15:20: ce:77:28:8d:d4:6e:80:0d:7d:df:3f:2b:b6:80:62: 03:96:73:c6:ac:e6:73:d9:7a:a4:1f:cb:7b:34:1b: 80:3a:cf:52:38:20:ae:85:bf:8f:da:7e:ed:32:12: af:4b:e3:26:16:e5:d7:90:f0:9f:a3:9b:49:62:3c: b7:20:54:c2:7f:88:fc:10:7f:2d:e0:01:02:db:03: c0:13:a8:58:63:27:da:24:2e:96:c4:ab:5e:d2:ec: 32:7f:ef:d5:89:dc:c3:f0:24:4f:34:29:fe:df:52: 3c:18:f2:66:e5:e1:0d:59:1e:b1:24:e1:3e:2d:41: 20:5c:05:82:d9:14:a7:37:ea:01:08:85:91:53:35: 0e:38:b2:26:0e:d9:ab:e3:52:9e:4c:82:b7:3a:ff: cf:0a:a5:3a:15:87:65:3f:7a:e0:00:63:8a:f6:4f: 98:b4:f0:85:0b:5d:f2:ef:bf:db:a4:0b:e6:0d:c1: c9:55:aa:7d:71:9f:9a:53:6b:cc:d1:b4:9a:04:4e: 89:74:92:db:8c:3f:a1:ca:0a:e2:61:e1:67:bf:5f: f4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EE:A6:A3:01:04:7D:C1:24:06:4A:49:09:DC:EB:72:32:34:C9:87 X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:b6:bb:aa:07:f1:05:7b:86:d9:4b:5b:78:9b:43:a8:e7:07: 44:a1:ea:9c:db:f3:aa:a4:ef:0f:3c:6a:89:33:1d:96:9f:a3: d5:82:aa:c6:fe:5a:e9:30:9f:53:18:db:15:77:61:14:71:0f: e8:43:55:29:aa:6f:9e:f1:54:c7:d9:f3:9e:b9:82:6f:5a:a0: d2:df:aa:71:f0:ad:81:3c:b9:f3:94:85:27:96:94:b7:99:f6: 9d:92:e0:8f:22:ec:20:9e:dd:37:69:2f:20:99:d4:60:3d:a7: 30:36:fb:60:3d:e1:62:0f:16:07:8f:0a:45:c7:77:fa:a8:73: 56:7c:fb:77:e5:f5:10:5e:af:db:9f:25:49:19:8a:20:ad:95: ba:3d:a0:4e:6d:85:6d:32:28:18:32:b5:aa:1b:21:fb:af:39: 85:1e:73:58:b4:a2:7e:82:79:ed:c0:4e:13:69:64:b2:66:10: 9a:49:28:52:e8:06:07:22:2f:2f:00:2b:1e:e6:55:17:f0:dd: e9:f5:1c:12:7a:45:99:86:b5:be:13:52:76:88:74:e2:fb:d3: d0:d5:84:c0:c8:85:f5:1b:f7:96:55:1d:dc:73:cf:01:5a:c7: 41:07:ca:6f:2c:9c:68:c5:5d:67:16:c7:ab:ea:a8:8b:87:25: ff:7c:54:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjUwNTMwMTgyODU0WhcNMjUwNjA2MTgyODU0WjAYMRYwFAYD VQQDEw02ODM5ZjhlNi0zOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmJDkk7qdb4FWl25HKVe89ciDz6PLsSVVuxGv96YWNkyxN2zx/AVp3ubFSDO dyiN1G6ADX3fPyu2gGIDlnPGrOZz2XqkH8t7NBuAOs9SOCCuhb+P2n7tMhKvS+Mm FuXXkPCfo5tJYjy3IFTCf4j8EH8t4AEC2wPAE6hYYyfaJC6WxKte0uwyf+/VidzD 8CRPNCn+31I8GPJm5eENWR6xJOE+LUEgXAWC2RSnN+oBCIWRUzUOOLImDtmr41Ke TIK3Ov/PCqU6FYdlP3rgAGOK9k+YtPCFC13y77/bpAvmDcHJVap9cZ+aU2vM0bSa BE6JdJLbjD+hygriYeFnv1/0aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPupqMB BH3BJAZKSQnc63IyNMmHMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLtruqB/EFe4bZS1t4m0Oo5wdEoeqc2/OqpO8PPGqJMx2Wn6PVgqrG /lrpMJ9TGNsVd2EUcQ/oQ1Upqm+e8VTH2fOeuYJvWqDS36px8K2BPLnzlIUnlpS3 mfadkuCPIuwgnt03aS8gmdRgPacwNvtgPeFiDxYHjwpFx3f6qHNWfPt35fUQXq/b nyVJGYogrZW6PaBObYVtMigYMrWqGyH7rzmFHnNYtKJ+gnntwE4TaWSyZhCaSShS 6AYHIi8vACse5lUX8N3p9RwSekWZhrW+E1J2iHTi+9PQ1YTAyIX1G/eWVR3cc88B WsdBB8pvLJxoxV1nFser6qiLhyX/fFQQ -----END CERTIFICATE-----Generated at Sat May 31 17:26:20 2025 by rpki-client