$ rpki-client -vvf rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft File: cXie4rLIt_u60_eFpd3s7xXMFaQ.mft (raw, json) Hash identifier: 72jPVdObHY0fYEq4x6zRN4v0i3IrXue254Y+Kl4HNMk= Subject key identifier: FB:1E:51:C1:55:4C:F4:5C:9F:4D:32:6E:2F:FD:63:E7:FE:8D:15:73 Authority key identifier: 71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4 Certificate issuer: /CN=A9138171/serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4 Certificate serial: 0792 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft Manifest number: 0785 Signing time: Wed 02 Jul 2025 21:45:21 +0000 Manifest this update: Wed 02 Jul 2025 21:45:20 +0000 Manifest next update: Wed 09 Jul 2025 21:45:20 +0000 Files and hashes: 1: cXie4rLIt_u60_eFpd3s7xXMFaQ.crl (hash: neMNctB5FHeMIZNZxlQMXdgSX+NCFvGuFLpmbC3PtgE=) 2: 4848EB6E18BF11EBA5E2E946C4F9AE02.roa (hash: WcA0e7saPqIm2zyMau/4bmWlWFCaJQ2WBh7b1zXUWss=) 3: 47B8C6B018BF11EBA5E2E946C4F9AE02.roa (hash: saRxbZnY10CKxPD1pSytKLg8FuSkNaBBrOYD5Hz5qjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1938 (0x792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138171, serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4 Validity Not Before: Jul 2 21:45:20 2025 GMT Not After : Jul 9 21:45:20 2025 GMT Subject: CN=6865a871-b910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:62:a7:4b:6d:e7:66:4e:7b:3f:6f:cd:1c: c0:41:f1:dd:1f:b9:d2:c2:59:ad:17:26:23:aa:54: 55:7b:20:5b:4f:05:3f:ad:7d:25:e4:98:d3:cd:5e: 06:f4:7a:f8:56:b3:f0:80:98:c5:25:e3:49:3f:56: d0:93:fa:9a:33:d9:c8:5a:46:d0:27:0c:35:53:54: f0:7b:d8:71:d0:c3:e7:64:8a:0d:46:ce:aa:03:8b: 14:3e:50:19:70:f5:b5:c0:38:03:23:c8:15:35:d1: bb:8c:ce:5b:b4:45:d7:d5:1f:89:a8:7a:b7:13:98: 02:31:a3:08:8a:e0:df:b4:df:59:f4:ff:84:13:a2: cf:2c:fc:1a:ba:a8:be:da:b1:6c:5d:27:d3:df:53: 78:ad:a1:e1:7b:6c:54:4c:31:61:5f:4a:bf:9b:bb: fe:5e:96:47:c1:8b:e4:29:0b:17:ca:fe:e6:aa:18: 86:ae:a9:a6:0d:4d:48:20:cb:11:3f:09:4a:8c:34: 12:30:1c:37:72:d8:60:8b:5c:cd:23:b3:71:52:5a: cf:03:38:6f:cb:a1:da:12:08:64:bc:8c:0a:a1:d6: 3c:f7:7b:6f:b5:c8:68:5a:10:68:ec:26:d6:71:36: f3:0b:b2:35:12:3b:58:94:ce:bd:11:c0:5c:43:0f: a7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1E:51:C1:55:4C:F4:5C:9F:4D:32:6E:2F:FD:63:E7:FE:8D:15:73 X509v3 Authority Key Identifier: keyid:71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:0e:39:e8:d5:a3:0f:a5:64:88:15:e5:f2:84:4d:6a:43:92: b4:bf:d3:a7:18:29:7c:1a:11:a2:43:fe:e1:72:26:b2:51:c2: 3e:ef:47:aa:5c:65:2d:77:56:be:ca:33:02:b0:91:dd:a2:1a: 0e:0e:37:03:56:46:73:b4:0e:f0:67:39:ea:6f:3d:3a:46:fb: 22:76:aa:70:33:b5:68:30:71:91:f8:7e:5b:44:c5:9e:d7:23: b8:9e:c0:8a:b3:70:4e:c6:34:af:c3:f9:b3:77:da:3b:4c:40: 05:f8:f0:de:06:2f:c2:9f:81:10:85:a9:80:a9:19:4a:e1:a2: 9a:a7:c9:dc:99:59:b4:ff:24:d4:d4:8a:6e:ce:be:8a:32:fe: 81:f3:33:2f:1b:43:23:7a:c8:39:01:fb:de:82:e5:62:56:b5: ee:54:00:e8:ce:11:f1:56:b0:08:73:dc:03:ce:b8:35:f5:28: c0:f7:4a:85:25:40:d2:8b:5e:76:2a:f4:da:78:61:55:54:b3: 0a:5c:5c:d6:46:32:20:27:07:f2:34:d9:07:74:8e:24:76:d2: 95:49:d2:3e:59:cb:9c:a7:88:42:75:6c:17:ea:69:7d:01:b4: 55:26:77:bd:78:4d:91:12:ef:11:13:0e:f4:41:e5:d2:52:e0: 3b:47:ff:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxNzExMTAvBgNVBAUTKDcxNzg5RUUyQjJDOEI3RkJCQUQzRjc4NUE1RERFQ0VG MTVDQzE1QTQwHhcNMjUwNzAyMjE0NTIwWhcNMjUwNzA5MjE0NTIwWjAYMRYwFAYD VQQDEw02ODY1YTg3MS1iOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/5ip0tt52ZOez9vzRzAQfHdH7nSwlmtFyYjqlRVeyBbTwU/rX0l5JjTzV4G 9Hr4VrPwgJjFJeNJP1bQk/qaM9nIWkbQJww1U1Twe9hx0MPnZIoNRs6qA4sUPlAZ cPW1wDgDI8gVNdG7jM5btEXX1R+JqHq3E5gCMaMIiuDftN9Z9P+EE6LPLPwauqi+ 2rFsXSfT31N4raHhe2xUTDFhX0q/m7v+XpZHwYvkKQsXyv7mqhiGrqmmDU1IIMsR PwlKjDQSMBw3cthgi1zNI7NxUlrPAzhvy6HaEghkvIwKodY893tvtchoWhBo7CbW cTbzC7I1EjtYlM69EcBcQw+ndwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPseUcFV TPRcn00ybi/9Y+f+jRVzMB8GA1UdIwQYMBaAFHF4nuKyyLf7utP3haXd7O8VzBWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE3MS83NUQ2NEQxMjE4 QkQxMUVCOEI4NDQzNDVDNEY5QUUwMi9jWGllNHJMSXRfdTYwX2VGcGQzczd4WE1G YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYaWU0ckxJdF91NjBfZUZwZDNzN3hYTUZhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE3MS83NUQ2NEQxMjE4QkQxMUVCOEI4NDQzNDVDNEY5QUUwMi9jWGllNHJMSXRf dTYwX2VGcGQzczd4WE1GYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIDjno1aMPpWSIFeXyhE1qQ5K0v9OnGCl8GhGiQ/7hciayUcI+70eq XGUtd1a+yjMCsJHdohoODjcDVkZztA7wZznqbz06RvsidqpwM7VoMHGR+H5bRMWe 1yO4nsCKs3BOxjSvw/mzd9o7TEAF+PDeBi/Cn4EQhamAqRlK4aKap8ncmVm0/yTU 1Ipuzr6KMv6B8zMvG0Mjesg5AfveguViVrXuVADozhHxVrAIc9wDzrg19SjA90qF JUDSi152KvTaeGFVVLMKXFzWRjIgJwfyNNkHdI4kdtKVSdI+Wcucp4hCdWwX6ml9 AbRVJne9eE2REu8REw70QeXSUuA7R/8Q -----END CERTIFICATE-----Generated at Thu Jul 3 00:26:51 2025 by rpki-client