$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: taD95lPxHDuqJ/QmiY+3CyKGh4xqr4r7MePoH15auSg= Subject key identifier: 9F:40:8D:57:2D:C8:0E:55:C5:C5:55:4D:55:4B:F7:00:66:73:9D:A7 Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: 011E Signing time: Sat 23 Aug 2025 03:14:09 +0000 Manifest this update: Sat 23 Aug 2025 03:14:08 +0000 Manifest next update: Sat 30 Aug 2025 03:14:08 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: CUPh8DdYUjBsAxWcNfXzpyaJap1w/EyOn7HAK7HF4wI=) 2: 21212316C5FF11EF8E8D5A6AC4F9AE02.roa (hash: V6Fl4BJJ1t3UeNpBGfvNyvLgQid8VzH7z9vWNtCcihc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Aug 23 03:14:08 2025 GMT Not After : Aug 30 03:14:08 2025 GMT Subject: CN=68a93200-ce8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:47:4c:91:3d:ab:ef:f6:51:38:bd:4c:e6: a3:f7:32:dd:6c:f9:5b:cc:2c:59:df:1d:23:23:55: 79:47:c8:c7:ee:ce:58:0c:f8:04:61:c4:9a:b7:1c: 8e:48:a6:f6:21:21:58:2f:49:dd:06:ce:e3:26:6c: 03:43:6f:b5:0a:8a:e3:e6:39:c1:89:36:8c:2a:71: e9:ab:2e:4d:03:32:76:cc:ad:24:3f:d1:b9:d1:f4: 5d:06:7b:a2:23:85:19:9b:4f:ae:47:72:db:68:ff: b7:e0:2b:29:b7:67:92:82:c8:2e:47:63:93:4a:a4: cc:b5:1b:fa:aa:0b:4a:df:b5:c8:db:0b:5d:e9:6b: 23:76:37:6a:b5:60:a9:cb:94:e7:fc:82:66:d0:71: 99:c7:67:05:4c:64:e5:43:81:22:4a:57:f9:91:f6: 8e:c9:46:04:27:a7:74:c6:09:87:d2:6f:a8:17:61: 80:3d:c1:4c:d4:c4:6a:e5:7e:66:2b:0a:18:e5:5f: 20:19:18:5a:97:2f:07:d4:d4:3d:19:65:ad:c8:00: c2:da:f9:a0:56:29:eb:98:a6:20:b9:53:f0:95:8e: 7f:ff:c4:c2:f7:37:84:f8:71:ee:ff:29:78:0b:e8: f9:9e:d8:58:83:90:33:4d:c8:51:5d:36:21:f2:da: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:40:8D:57:2D:C8:0E:55:C5:C5:55:4D:55:4B:F7:00:66:73:9D:A7 X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3d:e8:be:8f:25:43:92:70:bb:60:d0:48:94:27:91:4c:74: a3:a9:63:ac:27:7e:ba:ba:56:b3:0c:66:83:91:bf:e8:f6:1b: cf:27:99:00:96:64:fc:84:87:01:3e:74:19:f3:bf:bd:87:14: ae:e4:ff:b0:05:a7:dc:c9:46:89:d9:7f:12:0a:3f:c1:8c:ae: e6:b6:99:1e:91:b4:57:f1:71:67:ac:92:fe:f0:0f:78:f1:72: c8:59:09:be:35:f6:6b:e1:70:0e:fc:1d:cd:5b:d5:75:78:c4: dc:ff:7d:94:ff:64:58:c3:7a:75:31:de:a4:f6:09:d6:94:a9: d0:8a:fc:47:2e:c8:cd:3e:e3:a4:6b:ef:27:44:5b:4c:bc:b5: 79:af:85:e6:79:de:ac:97:84:82:8a:39:fc:5e:11:90:2d:d2: 2a:f9:49:d6:ec:89:dc:fd:b9:3e:2a:80:0e:3a:03:f2:25:f5: 7f:a3:31:26:18:d6:43:7c:71:8a:6a:e4:64:92:30:41:f2:c8: 78:7a:5e:fe:2e:dc:bc:b6:c6:a4:4c:d4:9f:44:f3:1d:64:9f: 28:a0:ec:2f:7b:e8:99:b8:28:fa:e8:ef:e7:2b:b7:bb:18:4a: c7:76:b6:68:e5:24:a1:ba:d6:39:0e:12:c2:88:b0:2d:fd:2b: 76:7b:78:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUwODIzMDMxNDA4WhcNMjUwODMwMDMxNDA4WjAYMRYwFAYD VQQDEw02OGE5MzIwMC1jZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7BHTJE9q+/2UTi9TOaj9zLdbPlbzCxZ3x0jI1V5R8jH7s5YDPgEYcSatxyO SKb2ISFYL0ndBs7jJmwDQ2+1Corj5jnBiTaMKnHpqy5NAzJ2zK0kP9G50fRdBnui I4UZm0+uR3LbaP+34Cspt2eSgsguR2OTSqTMtRv6qgtK37XI2wtd6WsjdjdqtWCp y5Tn/IJm0HGZx2cFTGTlQ4EiSlf5kfaOyUYEJ6d0xgmH0m+oF2GAPcFM1MRq5X5m KwoY5V8gGRhaly8H1NQ9GWWtyADC2vmgVinrmKYguVPwlY5//8TC9zeE+HHu/yl4 C+j5nthYg5AzTchRXTYh8tqadwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9AjVct yA5VxcVVTVVL9wBmc52nMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiPei+jyVDknC7YNBIlCeRTHSjqWOsJ366ulazDGaDkb/o9hvPJ5kA lmT8hIcBPnQZ87+9hxSu5P+wBafcyUaJ2X8SCj/BjK7mtpkekbRX8XFnrJL+8A94 8XLIWQm+NfZr4XAO/B3NW9V1eMTc/32U/2RYw3p1Md6k9gnWlKnQivxHLsjNPuOk a+8nRFtMvLV5r4Xmed6sl4SCijn8XhGQLdIq+UnW7Inc/bk+KoAOOgPyJfV/ozEm GNZDfHGKauRkkjBB8sh4el7+Lty8tsakTNSfRPMdZJ8ooOwve+iZuCj66O/nK7e7 GErHdrZo5SShutY5DhLCiLAt/St2e3gE -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:26 2025 by rpki-client