$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: D2nDpZ0nZtBQIyX9iW0GwzlX+T6QzQWvDf9yA6SwCDU= Subject key identifier: 17:31:89:EC:3C:4E:9B:E2:C1:93:CA:2A:9D:B2:B7:4D:B6:90:D2:51 Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 169B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 1690 Signing time: Sun 20 Jul 2025 16:42:45 +0000 Manifest this update: Sun 20 Jul 2025 16:42:45 +0000 Manifest next update: Sun 27 Jul 2025 16:42:45 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: EDvxrYG/GRajCd4iYcA332HsivfOkZStjQQ62gXSsBQ=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: v3sjoQSpuFWRMhTWonBiueiIp4Y61jfzrKe4k2e0JcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5787 (0x169b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Jul 20 16:42:45 2025 GMT Not After : Jul 27 16:42:45 2025 GMT Subject: CN=687d1c85-02b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:6e:e2:22:7f:6e:90:9d:2d:b5:f4:29:9f: 25:f1:7e:1a:33:a3:51:be:07:49:44:61:01:e6:8a: 72:e9:bd:ef:d7:61:28:41:27:43:18:24:de:16:d3: 59:fa:c5:eb:96:91:6a:18:77:93:d3:b9:32:28:0a: a2:e8:96:28:11:54:e6:af:ef:a9:37:77:9b:02:4f: 60:d9:fc:73:b6:21:14:d1:2d:fc:3a:c3:b3:df:36: da:89:9f:11:00:cb:63:f3:1e:3c:3d:fc:0a:b3:58: 2c:51:52:7b:1d:fd:9f:9f:df:41:68:1d:32:9e:d1: 32:6d:7b:a9:23:23:30:dc:02:57:11:4b:a5:3c:00: 75:ad:a6:d6:d2:d3:04:4d:18:5c:a7:e2:f6:eb:b3: 6c:02:39:8b:dd:01:99:20:c7:db:bc:f5:7c:a6:fd: 81:cb:9c:ab:e0:7d:a0:78:2f:ee:a0:bf:91:c2:1d: c1:8d:8e:7d:aa:ac:ac:89:dd:19:d7:94:10:5e:40: fd:b7:ed:c2:fc:1c:a3:9a:67:ee:d7:2b:1d:6b:06: ca:c6:ee:2d:ca:8f:99:06:99:d8:95:46:e0:d7:a1: 61:56:f6:e3:8d:ca:8a:19:e7:00:d7:66:56:39:ce: f1:11:d1:bb:6b:3b:6a:e6:79:11:4e:05:ad:1a:a6: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:31:89:EC:3C:4E:9B:E2:C1:93:CA:2A:9D:B2:B7:4D:B6:90:D2:51 X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:07:81:01:b2:5b:ac:95:e8:85:34:b5:db:9f:7b:c9:67:fc: 64:9c:82:80:d2:07:8a:76:00:2b:7f:c3:e5:96:62:b5:67:f2: 2d:d2:b8:f0:61:69:cb:c3:e5:9c:86:47:58:bb:a5:2c:97:23: 13:af:6c:15:d4:73:be:bb:38:31:8b:55:68:50:c3:b0:a9:b1: 2f:d1:d5:d3:85:ad:a6:11:f7:56:96:99:31:f4:24:ba:1d:52: 39:69:0f:4e:7d:f8:d6:a9:49:bb:73:b4:f0:79:25:3e:35:bd: 4d:90:59:06:76:62:f4:3b:6e:72:22:5b:02:f4:91:e6:58:12: 14:96:d2:6a:0a:17:ab:1e:9e:96:b7:e1:68:0c:fc:2b:84:97: d3:9b:b7:bf:93:5a:32:e1:ca:52:af:49:a6:54:0e:40:6e:51: 14:a3:0f:98:3b:95:3a:3d:90:63:70:94:a8:38:ae:9c:be:30: 48:93:6c:0e:17:68:50:d9:0e:ab:85:c2:a9:b0:41:ad:d5:f1: 3d:f3:5b:ff:eb:f8:bd:17:ee:04:c5:0c:ee:8a:6a:63:2a:32: 47:01:aa:bd:66:a9:25:35:24:ad:9c:31:36:06:f3:c6:fe:5f: e7:18:3d:35:5b:21:fa:85:b3:03:f1:cb:0b:e8:d8:7b:8a:68: 71:92:7b:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjUwNzIwMTY0MjQ1WhcNMjUwNzI3MTY0MjQ1WjAYMRYwFAYD VQQDEw02ODdkMWM4NS0wMmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNVu4iJ/bpCdLbX0KZ8l8X4aM6NRvgdJRGEB5opy6b3v12EoQSdDGCTeFtNZ +sXrlpFqGHeT07kyKAqi6JYoEVTmr++pN3ebAk9g2fxztiEU0S38OsOz3zbaiZ8R AMtj8x48PfwKs1gsUVJ7Hf2fn99BaB0yntEybXupIyMw3AJXEUulPAB1rabW0tME TRhcp+L267NsAjmL3QGZIMfbvPV8pv2By5yr4H2geC/uoL+Rwh3BjY59qqysid0Z 15QQXkD9t+3C/Byjmmfu1ysdawbKxu4tyo+ZBpnYlUbg16FhVvbjjcqKGecA12ZW Oc7xEdG7aztq5nkRTgWtGqZNfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcxiew8 TpviwZPKKp2yt022kNJRMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+B4EBslusleiFNLXbn3vJZ/xknIKA0geKdgArf8PllmK1Z/It0rjw YWnLw+WchkdYu6UslyMTr2wV1HO+uzgxi1VoUMOwqbEv0dXTha2mEfdWlpkx9CS6 HVI5aQ9OffjWqUm7c7TweSU+Nb1NkFkGdmL0O25yIlsC9JHmWBIUltJqCherHp6W t+FoDPwrhJfTm7e/k1oy4cpSr0mmVA5AblEUow+YO5U6PZBjcJSoOK6cvjBIk2wO F2hQ2Q6rhcKpsEGt1fE981v/6/i9F+4ExQzuimpjKjJHAaq9ZqklNSStnDE2BvPG /l/nGD01WyH6hbMD8csL6Nh7imhxknsc -----END CERTIFICATE-----Generated at Mon Jul 21 07:06:54 2025 by rpki-client