$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: HwLtMlqZe4KOQKvOz0KmX+ny5rXDgB5fAWhXn/r84qk= Subject key identifier: 38:DD:E5:A5:12:78:80:59:8C:B3:7E:D9:FC:C5:9D:9E:63:62:5A:55 Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: 69 Signing time: Sat 31 May 2025 06:30:36 +0000 Manifest this update: Sat 31 May 2025 06:30:35 +0000 Manifest next update: Sat 07 Jun 2025 06:30:35 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: FIKytVEzyhg4DnXyKlV1KqeYMnvslOB4Fw6IU1Wj7Uc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: May 31 06:30:35 2025 GMT Not After : Jun 7 06:30:35 2025 GMT Subject: CN=683aa20b-a7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a8:ca:3b:24:86:cd:2b:de:a7:10:dd:24:13: 39:52:03:3c:9a:eb:b7:41:c1:c1:f5:71:5c:72:ec: 15:d7:95:eb:2a:d0:02:51:e8:0e:5a:5c:a0:55:6a: 9f:63:e7:96:c4:45:47:e1:c9:87:fd:5d:34:4f:ad: 23:e2:39:2a:61:38:ed:e6:65:4b:5b:0e:f3:46:1e: 98:ec:c1:83:3a:c3:53:53:e0:d0:41:fb:7a:2a:8e: a0:22:16:ad:c5:40:a0:c0:36:54:c2:aa:9a:23:18: 47:3a:10:20:41:dd:fe:94:af:83:cd:50:ae:3a:17: 13:8b:be:f2:9e:50:99:9b:a4:14:58:ef:1d:ed:e4: fc:b8:e5:95:17:93:f8:af:f8:4f:c8:1c:23:90:5f: 89:8c:16:5f:fc:5e:57:46:fd:ea:81:c6:da:c3:fd: d2:26:c9:7b:15:a5:71:be:b5:45:f6:ab:c6:dc:67: 08:ff:af:bb:d9:d7:f9:3d:95:77:c9:33:22:2b:c8: 98:ab:36:3d:e9:3f:fc:4c:08:71:96:a6:95:a2:8f: 47:e6:61:aa:1d:38:19:75:b0:c8:c7:41:77:9e:a3: 23:2b:6e:9b:a9:2b:ba:ec:ca:86:be:24:72:31:89: 75:86:1c:7e:f5:3a:3a:cd:e0:69:91:d2:5b:75:22: c4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DD:E5:A5:12:78:80:59:8C:B3:7E:D9:FC:C5:9D:9E:63:62:5A:55 X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:8d:f7:66:0f:f9:d1:2d:ab:4a:f7:4d:22:b5:ba:f9:3c:68: 2f:70:76:1c:75:a1:8c:10:e6:aa:7d:64:40:d9:a0:d8:3e:c3: 18:f7:3c:d8:f4:3c:59:1a:c7:ad:28:41:d8:63:b4:d4:60:d4: 72:ca:19:0a:c3:ec:b7:04:ad:c7:12:29:ca:5a:75:0b:f9:87: 5a:b4:c4:96:03:b4:aa:e7:7c:2e:dc:62:9f:2a:ba:c2:dc:f7: 0c:77:05:d9:21:13:b0:9c:2d:2a:10:1e:f5:23:3a:9c:99:41: 2e:4f:4b:97:42:3a:08:a6:72:15:f1:01:93:9d:20:ad:e2:d1: 21:2c:84:de:0a:28:50:10:e2:6c:1b:5f:47:d9:88:9d:0c:be: 88:af:bb:f3:8b:c0:e6:79:a6:55:86:2d:87:08:20:9f:71:4d: 71:70:bb:6d:52:4c:eb:7d:ea:0c:6d:cf:d3:ba:c5:04:d9:b4: 43:04:b0:f8:85:3a:63:18:2d:6e:ce:e3:93:c6:d6:3c:d1:18: 6f:51:47:c2:55:88:d1:68:6f:5a:ec:26:e8:74:e0:a8:fb:dd: 86:9b:fd:7b:c7:62:4f:ec:11:d1:1c:d3:d5:3f:7a:99:cc:08: c4:2a:f1:0a:67:87:13:0c:84:ea:22:e7:16:be:53:6e:fe:cb: c9:9b:90:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoNDQ2ODlDNjcxRkFFRjE5NjdDRjdBOUIxQTMzNjhEOEI5 MTRCN0JBNzAeFw0yNTA1MzEwNjMwMzVaFw0yNTA2MDcwNjMwMzVaMBgxFjAUBgNV BAMTDTY4M2FhMjBiLWE3YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYqMo7JIbNK96nEN0kEzlSAzya67dBwcH1cVxy7BXXlesq0AJR6A5aXKBVap9j 55bERUfhyYf9XTRPrSPiOSphOO3mZUtbDvNGHpjswYM6w1NT4NBB+3oqjqAiFq3F QKDANlTCqpojGEc6ECBB3f6Ur4PNUK46FxOLvvKeUJmbpBRY7x3t5Py45ZUXk/iv +E/IHCOQX4mMFl/8XldG/eqBxtrD/dImyXsVpXG+tUX2q8bcZwj/r7vZ1/k9lXfJ MyIryJirNj3pP/xMCHGWppWij0fmYaodOBl1sMjHQXeeoyMrbpupK7rsyoa+JHIx iXWGHH71OjrN4GmR0lt1IsSjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUON3lpRJ4 gFmMs37Z/MWdnmNiWlUwHwYDVR0jBBgwFoAURGicZx+u8ZZ896mxozaNi5FLe6cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2LzA3QUU3QTk2OUNG NjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkdpY1p4LXU4Wlo4OTZteG96YU5pNUZMZTZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2LzA3QUU3QTk2OUNGNjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpa ODk2bXhvemFOaTVGTGU2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK+N92YP+dEtq0r3TSK1uvk8aC9wdhx1oYwQ5qp9ZEDZoNg+wxj3PNj0 PFkax60oQdhjtNRg1HLKGQrD7LcErccSKcpadQv5h1q0xJYDtKrnfC7cYp8qusLc 9wx3BdkhE7CcLSoQHvUjOpyZQS5PS5dCOgimchXxAZOdIK3i0SEshN4KKFAQ4mwb X0fZiJ0Mvoivu/OLwOZ5plWGLYcIIJ9xTXFwu21STOt96gxtz9O6xQTZtEMEsPiF OmMYLW7O45PG1jzRGG9RR8JViNFob1rsJuh04Kj73Yab/XvHYk/sEdEc09U/epnM CMQq8QpnhxMMhOoi5xa+U27+y8mbkB0= -----END CERTIFICATE-----Generated at Sat May 31 17:27:50 2025 by rpki-client