$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: mf9Qswp5068MYa9Snj9izYVci2criYBYCk2vEA1X9DQ= Subject key identifier: 9F:06:FB:D2:20:D0:DB:36:19:E5:B6:D9:16:DC:1E:16:B7:52:79:97 Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 066A Signing time: Sun 08 Jun 2025 22:00:15 +0000 Manifest this update: Sun 08 Jun 2025 22:00:15 +0000 Manifest next update: Sun 15 Jun 2025 22:00:15 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: y1qypeoXRMyGdjhW5//CLceOjIKcipjoAlJx9w4yDyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 22:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Jun 8 22:00:15 2025 GMT Not After : Jun 15 22:00:15 2025 GMT Subject: CN=684607ef-a5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:7c:8f:26:a6:bc:d9:6d:4b:c9:de:be:e4: 2b:86:95:2f:a7:70:2f:08:d9:64:84:1c:22:1c:84: 99:5d:f9:e0:7f:79:f1:ed:4f:26:ef:bf:27:53:b9: aa:9c:bd:46:d2:dd:e2:fc:f0:0a:e0:de:ef:cd:b1: 77:be:a2:94:82:d4:37:95:10:71:f7:f7:5c:7c:50: e7:96:79:cd:03:bc:fb:83:d8:05:c3:59:e7:2a:57: 6c:6c:31:3b:34:3e:f7:b1:51:49:16:a8:1e:53:cc: 78:59:4c:66:86:5d:72:36:10:8a:5c:2b:5b:7c:bb: 4d:cb:7e:88:b6:d0:8a:39:30:3c:dc:e5:43:d6:d8: 47:96:a1:ee:66:e4:06:b6:47:61:2c:09:f5:b6:0b: 03:fc:b9:23:6e:44:09:0d:a4:ec:d1:00:fe:7c:66: cc:f6:35:b0:09:1f:d5:fa:9e:9c:a7:62:df:14:d6: 92:98:a6:a1:37:6b:5b:02:d7:6e:a4:2c:11:a5:69: 14:9b:df:4c:3b:08:3e:b7:58:ac:f6:9a:51:36:0a: f1:df:23:83:25:df:0c:3c:be:5b:97:83:e3:d3:6b: 38:0c:0a:ec:d4:b4:94:21:00:0f:86:ec:79:58:6b: 48:b4:9b:35:ee:c9:2a:a8:57:97:ca:ba:c1:68:5f: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:06:FB:D2:20:D0:DB:36:19:E5:B6:D9:16:DC:1E:16:B7:52:79:97 X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:2b:2a:c1:8c:ca:d1:26:75:35:9e:c2:5e:bc:58:db:a3:ad: 2b:d9:19:a3:83:dd:81:86:49:5d:13:85:10:fa:19:93:c9:30: 2e:be:c1:2d:2a:64:b0:4a:72:f3:57:72:ed:26:20:cb:a4:0e: 72:42:f5:f6:1d:2a:1f:fc:50:96:da:11:74:d2:0c:5c:f2:27: 08:20:8d:85:93:7d:4d:fa:68:bb:25:20:3a:9b:f8:b4:66:d4: 9e:03:f7:3d:b6:77:e4:a9:9e:47:c7:e8:3d:de:17:21:d5:6d: d1:16:87:a8:08:c6:61:32:3b:61:75:13:ab:d6:1c:f5:46:9d: b8:58:c5:b8:92:e7:70:15:a8:87:01:4d:a3:2f:ab:97:74:29: 75:f0:50:c9:47:61:9e:50:5f:a7:9e:60:61:b7:24:71:a3:e3: c4:c1:3d:eb:64:9c:1a:cc:d9:0e:72:b0:62:80:2f:0d:d6:5d: 69:2d:03:eb:aa:d4:29:3d:83:61:67:6e:b6:3c:c4:26:fe:bb: 8d:12:4c:a9:e0:b1:26:0e:f4:9e:b5:09:c8:cf:9d:bb:cc:b5: ee:07:1e:52:0b:c0:25:b7:c3:87:22:76:24:14:03:97:83:18: ba:3d:43:0c:df:f7:69:e6:ec:c8:04:72:67:f8:a7:fd:d9:9b: 6d:14:6d:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjUwNjA4MjIwMDE1WhcNMjUwNjE1MjIwMDE1WjAYMRYwFAYD VQQDEw02ODQ2MDdlZi1hNWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+x8jyamvNltS8nevuQrhpUvp3AvCNlkhBwiHISZXfngf3nx7U8m778nU7mq nL1G0t3i/PAK4N7vzbF3vqKUgtQ3lRBx9/dcfFDnlnnNA7z7g9gFw1nnKldsbDE7 ND73sVFJFqgeU8x4WUxmhl1yNhCKXCtbfLtNy36IttCKOTA83OVD1thHlqHuZuQG tkdhLAn1tgsD/LkjbkQJDaTs0QD+fGbM9jWwCR/V+p6cp2LfFNaSmKahN2tbAtdu pCwRpWkUm99MOwg+t1is9ppRNgrx3yODJd8MPL5bl4Pj02s4DArs1LSUIQAPhux5 WGtItJs17skqqFeXyrrBaF9I2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8G+9Ig 0Ns2GeW22RbcHha3UnmXMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuKyrBjMrRJnU1nsJevFjbo60r2Rmjg92BhkldE4UQ+hmTyTAuvsEt KmSwSnLzV3LtJiDLpA5yQvX2HSof/FCW2hF00gxc8icIII2Fk31N+mi7JSA6m/i0 ZtSeA/c9tnfkqZ5Hx+g93hch1W3RFoeoCMZhMjthdROr1hz1Rp24WMW4kudwFaiH AU2jL6uXdCl18FDJR2GeUF+nnmBhtyRxo+PEwT3rZJwazNkOcrBigC8N1l1pLQPr qtQpPYNhZ262PMQm/ruNEkyp4LEmDvSetQnIz527zLXuBx5SC8Alt8OHInYkFAOX gxi6PUMM3/dp5uzIBHJn+Kf92ZttFG2K -----END CERTIFICATE-----Generated at Mon Jun 9 22:19:33 2025 by rpki-client