$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: gTA9y90h7ZolCnHhKke2E0Ct1uHYaThcnfGHwOF5Ess= Subject key identifier: 5F:87:8B:6B:37:C5:0A:5C:02:3B:B8:16:DC:8B:E1:F2:0A:18:58:89 Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: 0104 Signing time: Thu 03 Jul 2025 03:29:06 +0000 Manifest this update: Thu 03 Jul 2025 03:29:06 +0000 Manifest next update: Thu 10 Jul 2025 03:29:06 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: RcpkikOf/qAQFaiuxHcvF0taUciBMOCpRfC2mvtWWQ0=) 2: 21212316C5FF11EF8E8D5A6AC4F9AE02.roa (hash: V6Fl4BJJ1t3UeNpBGfvNyvLgQid8VzH7z9vWNtCcihc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Jul 3 03:29:06 2025 GMT Not After : Jul 10 03:29:06 2025 GMT Subject: CN=6865f902-fbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:13:fa:7f:e0:46:ab:2e:70:89:7f:ff:37: a7:c0:ea:63:2f:37:6b:83:d5:68:ef:0e:b6:b0:12: 70:ed:c9:e6:1b:fd:54:ed:f5:18:29:a0:2f:06:63: be:c7:17:b2:06:a0:13:14:a1:ea:bf:3f:bb:a5:a5: 1c:b1:a7:0b:d2:33:af:f5:bb:57:1a:26:b6:d6:09: b3:cc:b8:f0:96:60:3b:4e:af:fa:4f:15:22:f1:e9: c5:5c:ab:2d:4d:f0:b1:51:cf:58:f9:c3:18:ac:6d: dd:a8:0f:6e:39:da:62:41:18:2b:24:f5:8a:a1:77: 0b:c9:d1:00:df:de:f3:70:f6:05:48:43:dd:22:11: f0:a5:cc:7b:f7:15:c3:c5:57:0f:02:71:0e:ed:0d: 25:9f:58:5a:8f:ff:28:18:68:bc:a0:9e:5d:7d:0c: d3:74:5a:f7:99:f2:90:b7:d5:e4:c6:9e:e0:0e:bf: 32:8e:df:05:6d:b4:00:48:c3:e0:ae:ad:f9:41:2e: f5:ad:96:97:b0:f8:7d:95:63:25:97:6f:a3:c1:de: b9:3f:f7:9f:1c:b9:91:a9:be:df:43:a9:85:40:e2: bd:13:50:71:03:c2:88:1b:72:db:c6:d5:61:d3:ab: af:db:f2:ad:f0:61:32:63:38:89:33:24:fb:f1:47: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:87:8B:6B:37:C5:0A:5C:02:3B:B8:16:DC:8B:E1:F2:0A:18:58:89 X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:67:06:78:75:a6:ed:7e:67:ef:dc:38:a3:b5:99:78:fb:1b: 3c:69:87:1c:97:eb:72:61:a2:98:28:17:fb:67:28:5a:b2:c7: fc:39:98:dc:d2:0d:71:9e:a4:da:fa:1c:22:0a:22:8a:5b:b4: fe:3f:c9:ee:ca:82:47:2e:8a:be:4c:6d:2f:9d:bf:e9:17:2d: a3:14:9f:13:73:47:e6:9a:79:72:4d:46:ba:1b:7a:ca:e0:b3: 12:3f:c7:2c:58:84:4b:43:aa:78:1b:e6:a8:a9:6a:79:a8:0d: 4b:75:5a:21:2f:c5:77:5a:90:6c:4d:4b:5c:8e:eb:9e:ae:ae: f2:c2:3e:ca:05:3f:2d:4d:57:c1:60:c3:39:20:23:db:71:6f: 8d:0e:ca:8c:97:99:90:f5:1a:7e:04:b7:46:d0:3d:7a:1f:6f: 46:23:a2:09:a0:f5:db:10:22:01:40:41:46:ee:58:ed:84:a4: a0:17:b1:34:08:07:9c:0d:a7:dc:0b:bd:99:25:4f:bf:68:76: c0:24:82:d9:26:5a:38:b6:a5:c1:86:5d:43:96:e2:99:8d:c4: ef:3e:3f:2c:42:d7:6b:1b:61:06:f7:4c:ea:92:db:d8:e9:0f: dc:08:2a:d5:ad:da:af:ce:c1:76:4d:94:97:37:dc:17:10:cc: 13:c9:6b:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUwNzAzMDMyOTA2WhcNMjUwNzEwMDMyOTA2WjAYMRYwFAYD VQQDEw02ODY1ZjkwMi1mYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3cT+n/gRqsucIl//zenwOpjLzdrg9Vo7w62sBJw7cnmG/1U7fUYKaAvBmO+ xxeyBqATFKHqvz+7paUcsacL0jOv9btXGia21gmzzLjwlmA7Tq/6TxUi8enFXKst TfCxUc9Y+cMYrG3dqA9uOdpiQRgrJPWKoXcLydEA397zcPYFSEPdIhHwpcx79xXD xVcPAnEO7Q0ln1haj/8oGGi8oJ5dfQzTdFr3mfKQt9Xkxp7gDr8yjt8FbbQASMPg rq35QS71rZaXsPh9lWMll2+jwd65P/efHLmRqb7fQ6mFQOK9E1BxA8KIG3LbxtVh 06uv2/Kt8GEyYziJMyT78UcbvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+Hi2s3 xQpcAju4FtyL4fIKGFiJMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaZwZ4dabtfmfv3DijtZl4+xs8aYccl+tyYaKYKBf7Zyhassf8OZjc 0g1xnqTa+hwiCiKKW7T+P8nuyoJHLoq+TG0vnb/pFy2jFJ8Tc0fmmnlyTUa6G3rK 4LMSP8csWIRLQ6p4G+aoqWp5qA1LdVohL8V3WpBsTUtcjuuerq7ywj7KBT8tTVfB YMM5ICPbcW+NDsqMl5mQ9Rp+BLdG0D16H29GI6IJoPXbECIBQEFG7ljthKSgF7E0 CAecDafcC72ZJU+/aHbAJILZJlo4tqXBhl1DluKZjcTvPj8sQtdrG2EG90zqktvY 6Q/cCCrVrdqvzsF2TZSXN9wXEMwTyWud -----END CERTIFICATE-----Generated at Thu Jul 3 23:37:52 2025 by rpki-client