$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: tCaAxn7WLyyKbdFhEAqTPO8GW8KlfzWaJiNCkoFNMkk= Subject key identifier: 18:4F:8E:97:82:19:F8:FD:8D:0E:F9:91:46:1D:32:79:39:D7:7F:16 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 0656 Signing time: Sun 20 Jul 2025 22:45:43 +0000 Manifest this update: Sun 20 Jul 2025 22:45:43 +0000 Manifest next update: Sun 27 Jul 2025 22:45:43 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: Hv//wNUPxS/Y/8b4/FBNAcNe30ejIthFxRzvtWP5JWI=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: xnj1+DqNRGp1sU91Z+zGlbx4vpo9U2+YWkznSk4BLXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Jul 20 22:45:43 2025 GMT Not After : Jul 27 22:45:43 2025 GMT Subject: CN=687d7197-43c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2b:c2:4b:1d:47:3b:6a:fb:2f:10:81:67:e5: d1:07:c6:bb:7e:be:01:b6:b3:de:b6:7a:50:37:47: 3e:58:b8:e9:92:b2:c1:a2:0f:b2:ae:51:d7:ec:e0: 87:4a:c5:5e:1f:38:5b:8f:fa:5a:9c:d0:4e:4e:2c: 11:b3:6b:ed:37:14:ed:32:0e:29:e0:e9:86:08:b2: c7:a2:4d:c1:49:dd:4c:48:81:49:30:cb:3f:3f:73: ae:cd:d4:15:88:04:f8:9f:a5:04:78:37:e3:61:6a: ac:6a:59:02:9e:6d:2e:25:a6:8b:8b:ae:e1:37:2c: 5f:20:02:44:43:5b:2e:44:6a:3b:a8:d3:8f:31:01: 2a:e8:4f:8e:21:fc:10:5c:d5:1f:82:23:4e:ce:ab: b4:b0:ea:d0:fe:2f:47:82:88:b3:9e:ea:b1:ad:71: 8c:2d:01:e5:b3:40:16:06:64:ef:16:bd:e7:c7:91: cb:df:15:49:f2:ee:d6:d2:f9:0a:56:e6:a1:3e:37: 07:e5:f6:62:b7:b4:75:8f:a0:91:8f:1e:65:a6:1a: 5b:a6:5f:63:61:5b:6d:87:01:53:83:eb:05:72:77: a2:77:99:55:d1:85:bc:85:28:4e:20:02:c0:31:c5: d7:fc:bc:4d:28:92:5d:0c:48:29:b3:0e:b6:45:eb: f7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4F:8E:97:82:19:F8:FD:8D:0E:F9:91:46:1D:32:79:39:D7:7F:16 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:d4:4a:2d:f9:a2:63:0b:75:55:c7:6c:ff:8c:06:d8:c2:12: 83:47:c5:ea:df:13:fe:36:37:09:e1:62:68:0e:2a:4d:9c:49: 32:2a:e2:fd:03:88:f1:45:01:e8:ad:49:9d:c0:c0:58:76:e8: 60:46:3d:5d:c7:a7:77:18:06:63:7a:2a:8c:1c:7f:23:70:29: dd:da:d1:70:99:7d:d8:44:63:04:30:c6:87:61:7b:4f:f6:dc: c3:8d:11:2e:17:e5:9d:b8:61:02:8e:f9:dd:18:8a:b7:b6:30: 25:6d:1b:5c:8a:83:ed:29:4c:00:9d:d9:d3:91:db:23:cb:8c: a6:06:6d:23:6a:3a:ee:33:bb:33:02:c3:be:15:73:63:1e:70: 4f:35:a5:f5:84:5d:ef:4d:ee:b2:d5:6a:56:c7:67:0a:89:0a: 5c:74:3f:08:27:99:69:7e:b3:7b:84:21:d1:b1:68:b5:77:0a: b3:ee:ce:d3:e0:68:4a:fb:82:8f:f7:ed:b0:98:3d:f6:dd:34: 6b:b2:4d:04:27:7f:35:0f:c4:8c:fb:c0:e2:e1:45:9b:8d:76: a2:21:fb:b9:5b:53:24:d4:ec:67:4c:00:d0:13:49:ab:ae:22: 21:4a:a8:42:77:5d:4c:98:06:0b:89:bd:6e:76:49:21:44:8b: dc:35:96:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjUwNzIwMjI0NTQzWhcNMjUwNzI3MjI0NTQzWjAYMRYwFAYD VQQDEw02ODdkNzE5Ny00M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ivCSx1HO2r7LxCBZ+XRB8a7fr4BtrPetnpQN0c+WLjpkrLBog+yrlHX7OCH SsVeHzhbj/panNBOTiwRs2vtNxTtMg4p4OmGCLLHok3BSd1MSIFJMMs/P3OuzdQV iAT4n6UEeDfjYWqsalkCnm0uJaaLi67hNyxfIAJEQ1suRGo7qNOPMQEq6E+OIfwQ XNUfgiNOzqu0sOrQ/i9HgoiznuqxrXGMLQHls0AWBmTvFr3nx5HL3xVJ8u7W0vkK VuahPjcH5fZit7R1j6CRjx5lphpbpl9jYVtthwFTg+sFcneid5lV0YW8hShOIALA McXX/LxNKJJdDEgpsw62Rev3aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhPjpeC Gfj9jQ75kUYdMnk5138WMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA1Eot+aJjC3VVx2z/jAbYwhKDR8Xq3xP+NjcJ4WJoDipNnEkyKuL9 A4jxRQHorUmdwMBYduhgRj1dx6d3GAZjeiqMHH8jcCnd2tFwmX3YRGMEMMaHYXtP 9tzDjREuF+WduGECjvndGIq3tjAlbRtcioPtKUwAndnTkdsjy4ymBm0jajruM7sz AsO+FXNjHnBPNaX1hF3vTe6y1WpWx2cKiQpcdD8IJ5lpfrN7hCHRsWi1dwqz7s7T 4GhK+4KP9+2wmD323TRrsk0EJ381D8SM+8Di4UWbjXaiIfu5W1Mk1OxnTADQE0mr riIhSqhCd11MmAYLib1udkkhRIvcNZY1 -----END CERTIFICATE-----Generated at Mon Jul 21 07:23:39 2025 by rpki-client