$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: gCsGqYRWIPtsKWPTD19VW7Dp924rcZ85ycak+qQuzKw= Subject key identifier: 02:A9:7C:84:F8:43:6D:9D:4B:07:6B:7F:30:44:21:0F:46:AB:F8:C7 Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 07FB Signing time: Fri 22 Aug 2025 21:05:02 +0000 Manifest this update: Fri 22 Aug 2025 21:05:02 +0000 Manifest next update: Fri 29 Aug 2025 21:05:02 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: 0A52CI73FZ1qQOPPIweZXAo3BsJMUNH7t+B8fb6gyyY=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: cQ3kSdVpmJNxckwfYojLBqgPBczRQd1WG2pNa7wN9U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: Aug 22 21:05:02 2025 GMT Not After : Aug 29 21:05:02 2025 GMT Subject: CN=68a8db7e-e06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:e3:34:7e:37:f6:3b:03:14:49:96:ad:79: be:ee:35:ec:c7:05:33:41:ee:01:da:64:e6:b9:f2: 52:ab:38:ba:49:44:c4:00:03:50:3a:2b:76:26:f5: ff:2b:7b:e8:37:d3:c7:f8:d8:9e:8a:86:68:37:99: ed:39:d0:1c:ae:e6:e5:90:da:a0:6c:ee:ae:97:cd: ff:89:41:bd:61:8d:16:83:e4:0d:d1:f0:ba:0b:f5: a9:cd:5d:55:b9:09:78:58:de:61:03:41:9d:24:57: 51:5b:85:fd:45:70:9c:7e:fc:4e:ce:95:17:79:5a: 11:a8:a3:01:75:20:cf:71:03:d3:79:02:fc:4f:b8: cf:6f:4f:f6:21:4f:ed:46:b4:48:d5:1d:d7:ac:ad: 93:b9:71:55:34:b4:b2:09:e8:09:f5:8b:7a:c3:d9: fa:e1:65:b6:1f:42:c1:b3:c0:0b:f3:0c:07:1c:42: e5:58:09:fc:b7:70:b0:8d:be:f7:90:c6:c9:27:41: 67:52:b5:5f:68:70:cb:35:00:e0:71:1d:0d:36:1d: 05:d2:e4:50:19:29:39:20:ec:84:82:12:d5:da:58: d0:a2:fc:5b:31:6f:1d:a3:f0:e9:fc:5f:ed:f1:99: cc:5c:3b:95:80:ba:64:6c:68:f5:26:47:35:b8:33: 5d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A9:7C:84:F8:43:6D:9D:4B:07:6B:7F:30:44:21:0F:46:AB:F8:C7 X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:46:cf:c6:c0:e9:34:c2:1f:a7:a6:73:f4:a9:06:2d:8a:82: d3:12:be:0e:6d:33:c5:5e:84:14:44:a9:48:72:ae:5f:00:aa: 6c:df:be:35:73:7f:a9:be:a6:ea:8a:15:bd:09:24:51:31:4f: 79:0e:8b:a9:dd:ce:eb:d4:60:3c:f6:f5:bb:d3:b2:c8:ad:8f: 41:4a:44:e7:c4:c9:24:02:68:99:d6:e4:a5:14:02:c5:a1:b6: 41:cc:d4:e3:d9:0c:18:1a:07:24:d8:af:c5:88:50:3d:80:0c: f2:d4:2c:bd:db:08:e8:a5:34:b6:40:8b:ff:2b:d1:75:8f:bb: 4f:c7:bd:04:83:1b:27:c4:c8:b2:12:2b:d2:ee:02:a5:f8:d5: 9d:86:33:6b:57:e1:e5:3a:ed:d6:2f:06:b8:f6:ca:6e:96:39: 35:3c:a4:45:2e:12:2a:c3:c4:1c:47:f0:8e:6c:4c:6a:f4:75: a8:4f:99:6e:ae:09:01:b5:c0:ad:75:c3:65:35:a9:e9:08:1d: 00:93:11:c9:be:54:fa:27:40:ed:6c:0a:61:f4:9d:98:be:8c: 0f:b0:4f:47:78:ea:a8:77:90:51:a3:97:e1:af:e6:98:d0:39: fc:ac:c2:e3:75:6b:64:51:25:f5:16:a2:68:21:90:2c:e3:0f: fd:e0:38:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjUwODIyMjEwNTAyWhcNMjUwODI5MjEwNTAyWjAYMRYwFAYD VQQDEw02OGE4ZGI3ZS1lMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA103jNH439jsDFEmWrXm+7jXsxwUzQe4B2mTmufJSqzi6SUTEAANQOit2JvX/ K3voN9PH+NieioZoN5ntOdAcrublkNqgbO6ul83/iUG9YY0Wg+QN0fC6C/WpzV1V uQl4WN5hA0GdJFdRW4X9RXCcfvxOzpUXeVoRqKMBdSDPcQPTeQL8T7jPb0/2IU/t RrRI1R3XrK2TuXFVNLSyCegJ9Yt6w9n64WW2H0LBs8AL8wwHHELlWAn8t3Cwjb73 kMbJJ0FnUrVfaHDLNQDgcR0NNh0F0uRQGSk5IOyEghLV2ljQovxbMW8do/Dp/F/t 8ZnMXDuVgLpkbGj1Jkc1uDNdjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKpfIT4 Q22dSwdrfzBEIQ9Gq/jHMB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBRs/GwOk0wh+npnP0qQYtioLTEr4ObTPFXoQURKlIcq5fAKps3741 c3+pvqbqihW9CSRRMU95Doup3c7r1GA89vW707LIrY9BSkTnxMkkAmiZ1uSlFALF obZBzNTj2QwYGgck2K/FiFA9gAzy1Cy92wjopTS2QIv/K9F1j7tPx70EgxsnxMiy EivS7gKl+NWdhjNrV+HlOu3WLwa49spuljk1PKRFLhIqw8QcR/CObExq9HWoT5lu rgkBtcCtdcNlNanpCB0AkxHJvlT6J0DtbAph9J2YvowPsE9HeOqod5BRo5fhr+aY 0Dn8rMLjdWtkUSX1FqJoIZAs4w/94Dj1 -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:11 2025 by rpki-client