$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: ZKIRab9Sn+eyKrFBwn1wkIkBEOuAmOHfMRHHMModJDs= Subject key identifier: EA:A2:2D:36:A3:C8:8E:89:C2:EC:97:D2:71:F5:58:57:53:FD:50:E3 Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 07E1 Signing time: Wed 02 Jul 2025 21:17:38 +0000 Manifest this update: Wed 02 Jul 2025 21:17:37 +0000 Manifest next update: Wed 09 Jul 2025 21:17:37 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: fBO+XvaNHjj5XSGyfYfJktVsKEHES5u730GN0yFMbQc=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: cQ3kSdVpmJNxckwfYojLBqgPBczRQd1WG2pNa7wN9U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: Jul 2 21:17:37 2025 GMT Not After : Jul 9 21:17:37 2025 GMT Subject: CN=6865a1f1-2c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:a1:9f:dc:4a:92:65:c3:e1:33:c0:20:e6: 48:01:98:68:e6:ee:b8:87:3d:65:36:10:a4:7c:81: 0b:f5:dc:99:67:8d:3c:e5:2d:9a:c7:33:7b:69:87: dd:92:97:52:db:16:d0:0c:f4:a1:77:c3:42:5e:a7: 58:a4:0c:24:9d:8d:4a:ba:8e:83:2c:a0:73:be:ec: 30:84:47:32:77:b4:7a:66:4c:68:d5:0c:09:8f:b8: 2b:91:60:16:ad:ba:a9:fb:1c:59:23:3e:ce:ab:51: 42:aa:dd:49:13:1b:65:8a:5c:e8:89:87:3f:a0:60: c5:c8:83:44:18:65:61:c3:bc:c1:55:b1:94:1d:13: f9:fb:70:4b:85:34:a6:85:2d:5d:c5:9e:5f:14:23: 13:8e:ac:bf:79:d0:4f:ee:e7:9e:e0:a6:5a:44:2a: 55:97:3b:79:6f:bf:38:4d:ed:21:82:cb:30:2a:55: 3a:d8:72:b9:9a:a8:11:73:2e:94:15:32:16:4d:ba: 56:ea:95:de:9a:65:d5:ed:a3:69:a4:63:f4:d9:83: 85:4a:6a:ff:f0:fc:9a:96:f5:3d:d9:56:e8:4b:cf: 9b:16:67:d5:00:82:c5:c4:93:74:46:49:68:5b:86: fb:61:60:15:2a:87:ba:3b:61:dc:f3:24:7b:78:e0: 97:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A2:2D:36:A3:C8:8E:89:C2:EC:97:D2:71:F5:58:57:53:FD:50:E3 X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:98:28:0b:78:32:28:be:97:88:d5:fa:7b:13:ae:27:84:81: 2c:46:db:25:a8:bf:7c:e4:78:3e:7a:c8:86:82:00:c9:b5:3c: 3c:76:3e:d4:a5:9f:05:d3:72:1c:77:4e:77:26:f8:1a:75:ce: b5:4e:a5:db:63:26:16:c9:40:b8:06:5b:5b:9c:d6:14:2e:46: 62:a3:f8:91:69:bc:67:c5:98:50:fa:a6:8a:07:14:ac:2a:ba: 6d:58:a6:f6:a3:39:36:1a:42:6c:5f:19:b9:26:82:11:20:2b: c6:66:0e:08:e7:30:54:4c:71:ff:da:b7:a6:98:9a:bb:ea:67: 2a:49:dc:dd:a6:5d:23:96:fe:60:25:57:b3:1f:97:e1:dc:dc: a9:ef:63:d5:db:a2:fa:d9:89:e1:0f:3c:f5:df:b7:ad:6d:37: 67:29:7e:08:76:e5:e8:42:60:96:08:83:99:e3:fc:a4:70:22: fa:e8:d8:de:4a:55:f7:5d:6a:82:24:51:8d:39:86:5f:8c:c2: 97:cc:71:f3:b1:99:72:03:9b:1f:9d:2f:20:d7:60:43:07:09: b6:a0:94:0c:2c:97:0c:13:fe:94:89:ab:85:cc:78:9e:81:3e: 1a:19:82:fe:24:2c:3a:44:3e:72:84:61:46:0e:dd:89:53:5b: cb:0b:3c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjUwNzAyMjExNzM3WhcNMjUwNzA5MjExNzM3WjAYMRYwFAYD VQQDEw02ODY1YTFmMS0yYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdChn9xKkmXD4TPAIOZIAZho5u64hz1lNhCkfIEL9dyZZ4085S2axzN7aYfd kpdS2xbQDPShd8NCXqdYpAwknY1Kuo6DLKBzvuwwhEcyd7R6Zkxo1QwJj7grkWAW rbqp+xxZIz7Oq1FCqt1JExtlilzoiYc/oGDFyINEGGVhw7zBVbGUHRP5+3BLhTSm hS1dxZ5fFCMTjqy/edBP7uee4KZaRCpVlzt5b784Te0hgsswKlU62HK5mqgRcy6U FTIWTbpW6pXemmXV7aNppGP02YOFSmr/8PyalvU92VboS8+bFmfVAILFxJN0Rklo W4b7YWAVKoe6O2Hc8yR7eOCXgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqiLTaj yI6JwuyX0nH1WFdT/VDjMB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANmCgLeDIovpeI1fp7E64nhIEsRtslqL985Hg+esiGggDJtTw8dj7U pZ8F03Icd053Jvgadc61TqXbYyYWyUC4BltbnNYULkZio/iRabxnxZhQ+qaKBxSs KrptWKb2ozk2GkJsXxm5JoIRICvGZg4I5zBUTHH/2remmJq76mcqSdzdpl0jlv5g JVezH5fh3Nyp72PV26L62YnhDzz137etbTdnKX4IduXoQmCWCIOZ4/ykcCL66Nje SlX3XWqCJFGNOYZfjMKXzHHzsZlyA5sfnS8g12BDBwm2oJQMLJcME/6UiauFzHie gT4aGYL+JCw6RD5yhGFGDt2JU1vLCzyz -----END CERTIFICATE-----Generated at Thu Jul 3 20:47:57 2025 by rpki-client