$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: X2pSzxzOmtBlp+NX2WUzOWewyb2AA8b43lWYQvjK+Ao= Subject key identifier: FB:87:D1:4F:44:A6:12:37:31:32:7B:D0:6E:CE:00:CB:E8:F7:D7:D1 Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 1692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 1687 Signing time: Wed 02 Jul 2025 16:49:32 +0000 Manifest this update: Wed 02 Jul 2025 16:49:32 +0000 Manifest next update: Wed 09 Jul 2025 16:49:32 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: NLlHf/c1GG29FTKR37ZKlwPOoxQ/C2pqfmgpOKsPHjg=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: v3sjoQSpuFWRMhTWonBiueiIp4Y61jfzrKe4k2e0JcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5778 (0x1692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Jul 2 16:49:32 2025 GMT Not After : Jul 9 16:49:32 2025 GMT Subject: CN=6865631c-f757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2f:94:92:dd:3e:2a:57:c1:85:ed:7b:b2:ed: 10:a8:56:c6:a1:39:e1:2e:e6:79:27:62:da:0a:ba: 51:49:aa:46:c4:39:f9:06:40:14:0d:a1:df:1e:a6: da:32:9b:2d:40:5b:92:7d:0c:43:d0:a4:6b:81:2d: 78:8d:d6:9c:24:e9:a9:34:1b:45:25:46:53:3d:e8: 32:66:8c:14:ed:db:03:f7:01:4f:af:19:e5:62:4f: fd:a6:e3:f1:64:be:69:94:d1:a1:79:e1:5c:ed:9b: 97:d9:6e:b7:d3:23:81:bf:da:db:28:0a:b8:28:ff: 39:76:93:11:90:94:f7:2e:f3:d1:70:73:6c:61:16: 80:54:9c:30:79:67:48:1e:4b:17:5c:44:51:0d:4f: 2b:cd:b0:89:99:9d:b9:9e:99:d5:5c:b8:c4:f6:53: d4:6c:f3:19:cd:28:3e:2a:14:26:1a:f4:c3:04:97: 71:17:2e:6f:f1:a6:48:1b:7f:13:2e:35:bb:78:f0: a6:67:fd:ff:b4:92:22:18:a5:23:d5:69:1c:f3:3b: 1f:d8:f0:58:b8:0d:7a:03:b9:37:c4:c5:06:f5:62: ba:15:06:96:44:46:07:bd:87:fd:af:43:34:66:04: 01:b7:29:c4:43:b8:17:8d:0b:0a:7e:27:ab:f1:c5: 0a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:87:D1:4F:44:A6:12:37:31:32:7B:D0:6E:CE:00:CB:E8:F7:D7:D1 X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:52:13:d8:44:d4:42:0a:65:16:e0:c5:1e:4b:b6:bd:a8:a0: 0f:f4:64:d2:45:31:3e:9b:c9:b2:da:27:d0:90:d7:59:0a:00: d7:0e:fb:3a:d2:12:14:aa:1c:cf:d5:73:fb:ae:98:2e:68:72: 7a:eb:9b:c9:ca:45:b4:a8:ef:78:f3:e7:3e:f3:97:af:a2:85: 94:d9:2e:17:2c:10:8e:37:e3:9e:49:dd:f7:fa:ad:22:df:e6: 69:78:8c:d7:cb:dc:f9:3e:62:a1:45:70:41:a1:7d:19:31:71: 4c:8b:6c:b0:0c:d5:cd:a4:d8:63:ed:79:13:9e:e0:1d:bd:6f: d2:95:46:cd:37:b1:4c:ca:e3:1e:4f:ca:0e:bc:a0:08:cf:f1: fd:4e:b5:4b:18:71:42:a8:13:fd:a1:1e:d6:25:20:c9:e2:59: 9a:69:26:65:04:90:05:4a:e5:a9:60:81:6b:b3:e4:42:60:73: 78:b8:89:cc:69:55:12:81:69:72:c3:88:87:9a:0d:91:c4:17: 2d:ba:c7:0d:9d:c7:27:ac:c4:00:0e:7c:47:34:18:9d:69:da: 5c:b5:05:1d:26:e8:7b:ac:8d:e2:79:72:1e:c5:b1:ec:78:de: 4a:75:18:9e:91:90:20:1d:65:66:fd:b7:c7:83:fb:0f:e4:73: 56:92:b1:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjUwNzAyMTY0OTMyWhcNMjUwNzA5MTY0OTMyWjAYMRYwFAYD VQQDEw02ODY1NjMxYy1mNzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9C+Ukt0+KlfBhe17su0QqFbGoTnhLuZ5J2LaCrpRSapGxDn5BkAUDaHfHqba MpstQFuSfQxD0KRrgS14jdacJOmpNBtFJUZTPegyZowU7dsD9wFPrxnlYk/9puPx ZL5plNGheeFc7ZuX2W630yOBv9rbKAq4KP85dpMRkJT3LvPRcHNsYRaAVJwweWdI HksXXERRDU8rzbCJmZ25npnVXLjE9lPUbPMZzSg+KhQmGvTDBJdxFy5v8aZIG38T LjW7ePCmZ/3/tJIiGKUj1Wkc8zsf2PBYuA16A7k3xMUG9WK6FQaWREYHvYf9r0M0 ZgQBtynEQ7gXjQsKfier8cUKrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuH0U9E phI3MTJ70G7OAMvo99fRMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlUhPYRNRCCmUW4MUeS7a9qKAP9GTSRTE+m8my2ifQkNdZCgDXDvs6 0hIUqhzP1XP7rpguaHJ665vJykW0qO948+c+85evooWU2S4XLBCON+OeSd33+q0i 3+ZpeIzXy9z5PmKhRXBBoX0ZMXFMi2ywDNXNpNhj7XkTnuAdvW/SlUbNN7FMyuMe T8oOvKAIz/H9TrVLGHFCqBP9oR7WJSDJ4lmaaSZlBJAFSuWpYIFrs+RCYHN4uInM aVUSgWlyw4iHmg2RxBctuscNnccnrMQADnxHNBidadpctQUdJuh7rI3ieXIexbHs eN5KdRiekZAgHWVm/bfHg/sP5HNWkrF/ -----END CERTIFICATE-----Generated at Thu Jul 3 00:34:48 2025 by rpki-client