$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: t27+96eru77dxKb8sQ88b1ImqcXnbAlP1GkAOVBb4Eg= Subject key identifier: A5:E3:08:97:FC:66:97:45:8F:DB:7D:89:AB:CA:FB:9F:4E:92:FD:8A Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 07C9 Signing time: Wed 14 May 2025 21:11:08 +0000 Manifest this update: Wed 14 May 2025 21:11:08 +0000 Manifest next update: Wed 21 May 2025 21:11:08 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: 1VI7+UzEQjGhKtslwqtGLpkfrBMua1Ccdl5NdfL6TTc=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: cQ3kSdVpmJNxckwfYojLBqgPBczRQd1WG2pNa7wN9U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: May 14 21:11:08 2025 GMT Not After : May 21 21:11:08 2025 GMT Subject: CN=682506ec-024b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8c:e8:fc:8b:de:e6:27:d1:d5:57:dc:cd:61: 26:ee:97:18:e4:59:27:01:c5:88:2d:44:de:dc:e8: 22:12:bf:0d:7f:11:b2:28:9a:cd:a2:02:94:f2:c2: 6e:28:0e:54:98:7e:b5:00:a4:56:01:7f:4d:5f:de: 87:5e:a7:48:91:83:fb:c9:d0:95:a7:78:be:d5:82: b4:f1:66:2e:ed:3f:ec:ca:58:72:cd:18:ca:bd:b4: 65:e4:d1:6f:6d:03:60:67:d8:48:3b:f9:3c:fe:5c: 14:a2:83:d0:91:f5:10:c3:90:33:80:88:71:dd:68: 50:ce:9b:4c:86:9c:f2:67:80:34:bb:d1:77:42:bf: e3:7b:7f:1b:cb:c9:88:76:50:1b:b9:17:35:4c:4b: db:08:6b:12:fb:cc:03:37:cb:ff:a6:9e:11:d3:2a: 75:96:90:71:6f:8e:0c:12:ff:99:36:a5:02:c7:f3: cd:74:db:6a:25:2d:82:d9:3f:c9:82:69:30:03:ab: c4:13:4a:92:47:5b:fe:b0:61:4b:40:7d:80:2f:a6: 23:ba:7c:33:f5:4a:86:df:56:aa:5b:b0:12:dd:10: 8c:46:0d:b0:d1:8f:74:0c:8a:9e:06:c9:be:be:b1: c8:bb:5b:1b:68:6c:a1:30:e5:11:35:3a:c9:86:81: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E3:08:97:FC:66:97:45:8F:DB:7D:89:AB:CA:FB:9F:4E:92:FD:8A X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:78:d8:e6:2a:30:89:7d:09:55:01:a0:7b:5d:cf:c3:d7:6e: f1:e5:34:f9:d0:f7:40:11:c4:a0:2f:9f:e1:92:12:4e:c8:43: f1:a4:9d:0b:52:3b:9f:e9:aa:2d:40:3f:14:b8:26:09:48:b5: 08:ee:4b:b5:21:8d:a8:b4:c8:4d:52:31:3e:7c:e1:44:f1:2a: 87:7c:f2:a6:59:51:17:1a:b4:69:38:bd:69:4f:e6:63:bc:48: 9a:41:97:cc:48:e3:97:00:d0:bd:10:f2:b5:40:95:3b:9b:dd: df:13:c6:13:b3:0a:d1:8d:9c:ea:ff:2c:2d:ec:bf:97:ec:c6: eb:a5:d6:04:29:1f:72:f5:40:5b:40:67:86:12:41:7d:f4:fd: 1b:6a:42:dd:97:cc:69:40:64:ab:23:92:22:e5:b7:07:35:e8: 93:cd:9c:9e:5f:20:b4:60:24:0d:71:b7:29:67:ac:7f:d6:6c: f2:c0:d9:e7:4e:02:c5:bd:c2:97:a1:b9:28:99:09:b4:7b:e4: 24:e1:43:0a:11:dc:e6:eb:f2:ca:b6:d9:0c:56:67:05:9b:24: 39:b1:a8:d9:14:3f:2e:0d:26:99:1f:a1:1c:93:12:58:f3:a9: cc:ef:96:db:74:86:57:fb:2e:1e:a6:c4:05:00:73:77:84:69: fd:6d:80:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjUwNTE0MjExMTA4WhcNMjUwNTIxMjExMTA4WjAYMRYwFAYD VQQDEw02ODI1MDZlYy0wMjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Yzo/Ive5ifR1VfczWEm7pcY5FknAcWILUTe3OgiEr8NfxGyKJrNogKU8sJu KA5UmH61AKRWAX9NX96HXqdIkYP7ydCVp3i+1YK08WYu7T/sylhyzRjKvbRl5NFv bQNgZ9hIO/k8/lwUooPQkfUQw5AzgIhx3WhQzptMhpzyZ4A0u9F3Qr/je38by8mI dlAbuRc1TEvbCGsS+8wDN8v/pp4R0yp1lpBxb44MEv+ZNqUCx/PNdNtqJS2C2T/J gmkwA6vEE0qSR1v+sGFLQH2AL6Yjunwz9UqG31aqW7AS3RCMRg2w0Y90DIqeBsm+ vrHIu1sbaGyhMOURNTrJhoHDeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXjCJf8 ZpdFj9t9iavK+59Okv2KMB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLeNjmKjCJfQlVAaB7Xc/D127x5TT50PdAEcSgL5/hkhJOyEPxpJ0L Ujuf6aotQD8UuCYJSLUI7ku1IY2otMhNUjE+fOFE8SqHfPKmWVEXGrRpOL1pT+Zj vEiaQZfMSOOXANC9EPK1QJU7m93fE8YTswrRjZzq/ywt7L+X7MbrpdYEKR9y9UBb QGeGEkF99P0bakLdl8xpQGSrI5Ii5bcHNeiTzZyeXyC0YCQNcbcpZ6x/1mzywNnn TgLFvcKXobkomQm0e+Qk4UMKEdzm6/LKttkMVmcFmyQ5sajZFD8uDSaZH6EckxJY 86nM75bbdIZX+y4epsQFAHN3hGn9bYB3 -----END CERTIFICATE-----Generated at Thu May 15 15:51:32 2025 by rpki-client