$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: tNYH3bOkijY4JSZMnTjxxDF35tdErZmtvOGi68UayeU= Subject key identifier: AE:D8:67:69:5D:5D:15:C3:4C:B2:1A:AF:A0:E4:11:68:61:82:F0:E8 Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: 94 Signing time: Sat 23 Aug 2025 06:39:30 +0000 Manifest this update: Sat 23 Aug 2025 06:39:30 +0000 Manifest next update: Sat 30 Aug 2025 06:39:30 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: 0yax1e6QXaQiwNdGk+otgrZoUaAaQ1GNDThNA0QtDBk=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: Aug 23 06:39:30 2025 GMT Not After : Aug 30 06:39:30 2025 GMT Subject: CN=68a96222-9e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:d8:e4:f9:b6:a3:48:e6:13:4a:6a:40:e9: 7e:ca:14:34:5b:50:5c:28:e9:98:2f:10:f5:6c:84: 51:a0:60:9c:e6:26:56:25:22:68:ae:6e:f8:3a:02: c3:44:fe:93:09:63:19:02:10:0e:25:3b:f7:6c:c5: 36:1e:24:9b:2e:88:da:cd:af:2f:fa:34:38:96:01: 1d:de:bc:c3:25:42:f6:4d:c5:fd:05:70:c7:26:90: 6f:de:98:6b:61:76:19:d3:8d:77:97:49:24:a6:8f: 5d:52:f2:b5:20:42:6b:08:c7:cb:7d:22:24:9f:cd: 9b:a1:43:82:eb:0c:df:c6:71:4d:b4:3f:41:ae:51: 8d:b6:75:11:1b:f7:0c:d6:0a:3d:4c:b3:65:a8:8e: eb:06:fb:fd:cf:ba:b2:96:b9:55:07:5c:6d:47:6a: 65:a6:ef:fc:99:67:98:75:52:00:9f:ed:18:8f:b0: d6:fd:88:39:c5:1b:c6:59:64:bd:a7:78:ed:eb:59: ac:c9:6f:6f:f0:1e:58:45:2e:f4:ff:96:ea:ef:c6: d4:4d:81:fb:4b:4e:61:e6:a0:71:0d:21:ef:04:82: 20:44:c7:5b:47:5a:83:9e:a9:fc:d0:49:ad:cf:ed: a6:af:77:a3:9b:f4:25:92:19:8c:89:9d:f0:46:99: 41:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D8:67:69:5D:5D:15:C3:4C:B2:1A:AF:A0:E4:11:68:61:82:F0:E8 X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:58:fe:b9:20:ed:db:10:3a:63:f2:a1:29:5a:b1:dc:e3:cd: fd:cc:c9:af:ad:04:45:3b:25:83:a4:a3:f0:ff:fd:31:70:2d: 5a:57:5b:34:7e:3a:84:ba:bd:01:c0:23:6e:84:8b:41:25:28: 3e:60:9e:ac:7c:1a:16:a7:ba:15:02:5f:13:cc:83:d6:60:4d: a2:2b:30:1a:21:9e:65:33:d8:af:51:f8:ee:47:ed:d3:48:c5: e2:a3:c5:3c:81:b9:69:b4:62:57:d2:43:89:35:ae:bb:17:49: 75:76:b0:4e:a9:23:14:3a:9f:9a:ea:6c:84:5f:6b:e5:6b:c1: b6:9c:62:77:39:99:13:f5:05:78:4a:a8:ac:24:10:d1:32:5d: 0a:8c:5e:6f:86:6e:72:a6:5d:17:66:44:a0:0e:03:35:cc:f3: 2b:4e:d6:3a:db:72:69:6b:f9:75:95:37:2b:f1:3a:b1:70:1c: 12:a9:9e:1d:6b:a2:2a:ca:03:98:e5:53:2f:49:fa:44:b2:5b: b0:e7:a4:e3:90:16:60:fc:2f:3f:94:e9:80:20:b1:ea:cc:2d: bd:d4:97:43:a9:f8:93:9b:ad:bc:13:87:89:84:6f:5b:13:0f: a9:95:e1:9b:38:e1:1a:ec:82:b5:7b:39:a9:55:28:37:e5:c7: 46:0f:82:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFEMTNBMDU3RUNG RjMwN0M4NkYwHhcNMjUwODIzMDYzOTMwWhcNMjUwODMwMDYzOTMwWjAYMRYwFAYD VQQDEw02OGE5NjIyMi05ZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY3Y5Pm2o0jmE0pqQOl+yhQ0W1BcKOmYLxD1bIRRoGCc5iZWJSJorm74OgLD RP6TCWMZAhAOJTv3bMU2HiSbLojaza8v+jQ4lgEd3rzDJUL2TcX9BXDHJpBv3phr YXYZ0413l0kkpo9dUvK1IEJrCMfLfSIkn82boUOC6wzfxnFNtD9BrlGNtnURG/cM 1go9TLNlqI7rBvv9z7qylrlVB1xtR2plpu/8mWeYdVIAn+0Yj7DW/Yg5xRvGWWS9 p3jt61msyW9v8B5YRS70/5bq78bUTYH7S05h5qBxDSHvBIIgRMdbR1qDnqn80Emt z+2mr3ejm/QlkhmMiZ3wRplBKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7YZ2ld XRXDTLIar6DkEWhhgvDoMB8GA1UdIwQYMBaAFHFy7Qz0RwXs6xlh0ToFfs/zB8hv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BQTJBNzg0QzlE OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJlenJHV0hST2dWLXpfTUh5 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJl enJHV0hST2dWLXpfTUh5RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkWP65IO3bEDpj8qEpWrHc4839zMmvrQRFOyWDpKPw//0xcC1aV1s0 fjqEur0BwCNuhItBJSg+YJ6sfBoWp7oVAl8TzIPWYE2iKzAaIZ5lM9ivUfjuR+3T SMXio8U8gblptGJX0kOJNa67F0l1drBOqSMUOp+a6myEX2vla8G2nGJ3OZkT9QV4 SqisJBDRMl0KjF5vhm5ypl0XZkSgDgM1zPMrTtY623Jpa/l1lTcr8TqxcBwSqZ4d a6IqygOY5VMvSfpEsluw56TjkBZg/C8/lOmAILHqzC291JdDqfiTm628E4eJhG9b Ew+pleGbOOEa7IK1ezmpVSg35cdGD4Lb -----END CERTIFICATE-----Generated at Sat Aug 23 14:18:25 2025 by rpki-client