$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: MHBqcFGZn8gjvhrSZwk3j6nJ9s01lSs75mytaelv/rc= Subject key identifier: A7:A3:70:B9:F7:89:60:DB:EA:6C:7C:37:16:56:74:48:D6:80:23:45 Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 16AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 16A3 Signing time: Fri 22 Aug 2025 16:47:30 +0000 Manifest this update: Fri 22 Aug 2025 16:47:29 +0000 Manifest next update: Fri 29 Aug 2025 16:47:29 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: PAa9+JQ6cRf0/I+meVEMPVd6ke21BtEIQPzxtKyQHWM=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: ASMLpEvsvu5fZiBYK5kv36WlKk7sSJJC1YfYG/Sqc/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5807 (0x16af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Aug 22 16:47:29 2025 GMT Not After : Aug 29 16:47:29 2025 GMT Subject: CN=68a89f22-8a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:15:72:e2:ba:f2:08:eb:cb:0b:e3:50:d7: a5:ae:cf:ce:e3:81:b6:c9:4e:3f:99:d5:65:e3:7b: e8:3a:00:58:2c:fa:1e:f7:24:33:47:3e:fa:d1:2f: 83:c8:c6:df:85:68:2b:29:97:f2:26:d1:05:c3:64: bd:20:0f:da:41:a2:2e:5f:c8:b1:24:a4:d1:45:6f: 74:46:5d:3c:20:f3:54:93:82:f8:4c:86:82:63:9e: 2b:94:71:43:ce:42:98:96:cd:3e:e3:0e:a7:5b:23: 5d:fb:6d:79:80:b8:01:b4:10:4d:7f:de:db:bb:04: 6a:9f:50:16:82:ba:09:e3:e5:61:2a:95:29:5c:0a: 58:5b:95:dd:4c:b1:c0:55:16:7e:d1:d1:5c:16:f4: 7b:ad:61:ec:aa:e4:11:04:fa:c7:a1:19:77:2f:f6: 58:6d:1a:e7:e5:7f:97:ab:7a:5f:00:11:b0:5e:95: 41:28:cd:bf:93:4c:13:b1:90:e9:68:62:d0:0b:fe: 91:d5:de:7c:a8:b8:e3:fc:d9:e4:9a:c5:b7:6a:88: b3:a3:5c:fd:f3:5a:5f:2d:f3:c8:8e:ff:c7:ac:1f: dd:96:c5:c9:74:3f:c4:b2:7d:51:36:fb:e8:4c:2e: 0c:9a:57:4e:a4:b5:46:03:3d:ae:d0:bc:27:67:fe: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A3:70:B9:F7:89:60:DB:EA:6C:7C:37:16:56:74:48:D6:80:23:45 X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:54:cb:8e:2a:46:00:56:d0:c2:d0:e0:c1:19:0e:a1:e7:76: 2d:b3:c3:cd:27:2f:8b:8c:d8:d0:65:89:b9:41:96:e2:66:79: 8d:5d:ba:99:72:23:d1:60:82:1e:19:03:66:52:28:1a:45:1a: af:08:79:57:89:d3:ab:54:05:54:33:7f:24:6f:a6:d2:d0:77: 72:b5:e4:6d:70:dd:8f:82:d4:c2:8f:70:f4:66:dd:42:9d:6d: d6:ff:74:09:76:70:af:a2:15:3e:ab:80:91:15:2c:09:48:a5: 78:b9:aa:f3:c9:25:5c:92:da:3d:31:43:61:21:9f:5b:b1:7c: 51:b7:b6:69:38:9d:16:69:5a:d1:5d:89:04:fe:2d:69:a9:a1: 0f:8a:af:cb:3e:de:b9:79:75:29:92:74:b0:60:db:26:f4:a3: 36:9e:c9:78:dc:2b:6f:51:4e:7c:ea:2d:58:94:77:1e:e3:0c: a2:8f:a7:00:d8:a0:20:d4:0f:c4:fa:fa:01:49:b8:55:e7:75: e7:14:29:e1:1d:ce:4f:99:75:57:8a:8f:8f:2e:5d:f6:7b:83: 30:9a:8f:c8:a6:a7:ec:c7:00:64:e4:92:00:b3:8f:2a:a7:2a: 92:71:11:f4:9f:cc:1c:85:58:90:79:cd:34:bf:cb:3c:12:be: 32:05:96:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjUwODIyMTY0NzI5WhcNMjUwODI5MTY0NzI5WjAYMRYwFAYD VQQDEw02OGE4OWYyMi04YTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1o4VcuK68gjrywvjUNelrs/O44G2yU4/mdVl43voOgBYLPoe9yQzRz760S+D yMbfhWgrKZfyJtEFw2S9IA/aQaIuX8ixJKTRRW90Rl08IPNUk4L4TIaCY54rlHFD zkKYls0+4w6nWyNd+215gLgBtBBNf97buwRqn1AWgroJ4+VhKpUpXApYW5XdTLHA VRZ+0dFcFvR7rWHsquQRBPrHoRl3L/ZYbRrn5X+Xq3pfABGwXpVBKM2/k0wTsZDp aGLQC/6R1d58qLjj/NnkmsW3aoizo1z981pfLfPIjv/HrB/dlsXJdD/Esn1RNvvo TC4MmldOpLVGAz2u0LwnZ/6KqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKejcLn3 iWDb6mx8NxZWdEjWgCNFMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqVMuOKkYAVtDC0ODBGQ6h53Yts8PNJy+LjNjQZYm5QZbiZnmNXbqZ ciPRYIIeGQNmUigaRRqvCHlXidOrVAVUM38kb6bS0HdyteRtcN2PgtTCj3D0Zt1C nW3W/3QJdnCvohU+q4CRFSwJSKV4uarzySVckto9MUNhIZ9bsXxRt7ZpOJ0WaVrR XYkE/i1pqaEPiq/LPt65eXUpknSwYNsm9KM2nsl43CtvUU586i1YlHce4wyij6cA 2KAg1A/E+voBSbhV53XnFCnhHc5PmXVXio+PLl32e4Mwmo/IpqfsxwBk5JIAs48q pyqScRH0n8wchViQec00v8s8Er4yBZY1 -----END CERTIFICATE-----Generated at Sun Aug 24 09:01:52 2025 by rpki-client