$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: HZEYJiM3XsG7ZFlxdGk5hERfj0z9BJg8QjbSwGMO9Mo= Subject key identifier: 92:86:34:09:E3:AF:26:33:BA:D7:AE:00:95:8B:F6:06:89:65:D7:FE Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: 82 Signing time: Sat 19 Jul 2025 06:52:35 +0000 Manifest this update: Sat 19 Jul 2025 06:52:35 +0000 Manifest next update: Sat 26 Jul 2025 06:52:35 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: KixQpudj99SlnN07b7HivDmjDalV555nG+ppRNhxtdI=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: Jul 19 06:52:35 2025 GMT Not After : Jul 26 06:52:35 2025 GMT Subject: CN=687b40b3-24b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:eb:70:b8:29:e0:36:1d:86:67:e9:4f:d7: 03:35:a4:52:dd:a6:81:55:cb:41:f6:05:8c:e8:84: 1c:d0:88:a2:28:21:e5:8e:0e:f7:b6:a2:a4:cf:93: cf:fa:43:a5:92:21:a2:12:65:22:65:eb:be:78:69: 51:51:8b:2d:b2:93:7a:d5:25:ff:c9:46:64:41:cb: ec:00:3a:82:04:90:5e:59:ae:a5:1c:34:ec:44:04: d6:27:fd:38:1e:23:fa:c6:58:27:03:aa:c4:78:03: f4:90:cd:3d:7e:d1:4f:00:4b:3e:18:bd:d0:07:e7: 74:23:02:da:cd:22:5d:b9:58:71:06:ec:f7:04:34: 9c:56:5d:ea:c6:29:b2:e1:2e:d7:e0:0e:ee:34:e7: bc:9d:6b:6a:85:7f:fe:59:a0:89:ea:31:b8:90:70: 00:4f:d0:4f:a1:36:9d:80:a2:98:79:cc:fc:ca:63: 15:54:af:af:7b:16:e5:17:05:21:e8:77:70:c0:8c: 70:6b:f4:7d:e2:bd:d8:76:d4:1e:cc:8d:62:8d:30: 54:6a:07:4b:a1:6b:43:ab:ed:f5:6a:eb:f3:b0:aa: dc:b3:67:31:34:9c:cf:1d:39:50:b9:79:47:fe:95: 8b:d7:9c:e7:25:cc:4b:e2:74:14:51:98:1a:a9:de: 13:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:86:34:09:E3:AF:26:33:BA:D7:AE:00:95:8B:F6:06:89:65:D7:FE X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bc:5d:7d:fd:ee:46:90:99:91:3a:3b:be:2e:94:8c:76:c5: c0:2d:fd:c3:61:89:b5:dc:00:fe:91:77:8e:e8:83:40:62:80: 62:ac:6a:46:98:4a:ee:c3:55:0a:5e:8d:db:79:2b:2c:8c:0f: 58:b0:72:5c:b9:71:58:97:23:87:1d:ce:38:99:87:dd:12:55: 0c:4e:88:07:01:0f:87:c5:0b:a8:50:f3:19:a9:b7:27:b9:85: ce:79:9c:6a:5c:e4:1e:ae:d4:39:bc:21:8c:c0:ac:15:b1:a4: 18:b1:55:35:40:7e:e4:70:7a:1d:c1:76:97:b2:0c:f0:06:72: 01:20:bc:db:1f:e2:39:15:04:19:79:82:6a:af:6d:23:c1:53: 6c:30:5c:64:46:d4:f3:f1:7d:89:8f:19:84:f5:81:38:18:13: e2:72:3e:e2:8c:cc:2a:fa:ea:7d:6e:1d:5f:60:47:08:10:2b: b8:55:cd:bb:94:0c:bf:9c:ca:40:35:7c:79:c5:1d:2b:40:83: 3d:74:39:b1:2f:d8:35:64:d4:90:2f:3c:8a:39:c6:5a:e0:4d: d3:5e:52:0e:5d:5f:21:bc:f8:81:ae:47:d8:01:e3:fb:ce:19: d0:cc:6d:cf:08:e8:a0:18:3f:a1:a1:19:78:91:03:9c:6f:ab: 2c:37:5a:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFEMTNBMDU3RUNG RjMwN0M4NkYwHhcNMjUwNzE5MDY1MjM1WhcNMjUwNzI2MDY1MjM1WjAYMRYwFAYD VQQDEw02ODdiNDBiMy0yNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskjrcLgp4DYdhmfpT9cDNaRS3aaBVctB9gWM6IQc0IiiKCHljg73tqKkz5PP +kOlkiGiEmUiZeu+eGlRUYstspN61SX/yUZkQcvsADqCBJBeWa6lHDTsRATWJ/04 HiP6xlgnA6rEeAP0kM09ftFPAEs+GL3QB+d0IwLazSJduVhxBuz3BDScVl3qximy 4S7X4A7uNOe8nWtqhX/+WaCJ6jG4kHAAT9BPoTadgKKYecz8ymMVVK+vexblFwUh 6HdwwIxwa/R94r3YdtQezI1ijTBUagdLoWtDq+31auvzsKrcs2cxNJzPHTlQuXlH /pWL15znJcxL4nQUUZgaqd4TVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKGNAnj ryYzuteuAJWL9gaJZdf+MB8GA1UdIwQYMBaAFHFy7Qz0RwXs6xlh0ToFfs/zB8hv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BQTJBNzg0QzlE OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJlenJHV0hST2dWLXpfTUh5 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJl enJHV0hST2dWLXpfTUh5RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/vF19/e5GkJmROju+LpSMdsXALf3DYYm13AD+kXeO6INAYoBirGpG mEruw1UKXo3beSssjA9YsHJcuXFYlyOHHc44mYfdElUMTogHAQ+HxQuoUPMZqbcn uYXOeZxqXOQertQ5vCGMwKwVsaQYsVU1QH7kcHodwXaXsgzwBnIBILzbH+I5FQQZ eYJqr20jwVNsMFxkRtTz8X2JjxmE9YE4GBPicj7ijMwq+up9bh1fYEcIECu4Vc27 lAy/nMpANXx5xR0rQIM9dDmxL9g1ZNSQLzyKOcZa4E3TXlIOXV8hvPiBrkfYAeP7 zhnQzG3PCOigGD+hoRl4kQOcb6ssN1qC -----END CERTIFICATE-----Generated at Sun Jul 20 22:31:32 2025 by rpki-client