$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json) Hash identifier: t53ue6fNWgzLNuquG94S4zqs2x6ACrCnKzBhPwdhweM= Subject key identifier: 9D:2B:31:39:CC:63:85:9A:CF:EA:E0:2D:4C:55:7B:90:8B:89:2F:12 Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1BCE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft Manifest number: 1BCC Signing time: Mon 02 Jun 2025 16:24:12 +0000 Manifest this update: Mon 02 Jun 2025 16:24:11 +0000 Manifest next update: Mon 09 Jun 2025 16:24:11 +0000 Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: fh28sBrpgP7r/vqG55+bdd8z2gKoAGBgVGXGfPzqDZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7118 (0x1bce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Jun 2 16:24:11 2025 GMT Not After : Jun 9 16:24:11 2025 GMT Subject: CN=683dd02c-dbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6b:3f:38:d2:a7:2d:c0:d9:8f:b6:f0:ea:a5: 75:e0:e8:e2:30:3e:f6:a0:22:47:04:07:b5:04:5c: a4:1d:fe:57:d8:d3:8d:b0:ad:d2:33:ab:e1:59:d7: 9a:20:c0:18:3b:15:16:32:4d:2f:ee:a2:07:70:f8: 58:fc:2b:6a:20:1c:4d:9c:93:66:4d:66:b6:a1:5c: 03:1d:c2:95:c9:b9:78:49:6f:b6:38:4d:69:51:10: 7c:cf:42:0d:09:8b:7d:69:45:3f:07:88:6b:ee:a7: c2:a3:c1:ee:88:fd:a9:eb:8a:48:03:cf:b6:dd:d4: 4c:67:79:fd:fc:f2:49:df:aa:b7:28:ab:93:ed:de: 2e:1e:b5:72:1e:33:39:32:98:52:60:1c:4d:85:d9: d9:99:a9:61:09:cd:a5:22:cf:a0:aa:35:f8:9d:e0: d2:d6:74:7f:fa:35:5e:86:d4:61:6e:13:f6:93:37: 10:b7:81:eb:8b:0f:d1:4e:a6:32:eb:98:47:0f:2c: 64:30:e9:fd:32:bc:63:6f:ec:ac:26:9c:15:64:1c: 81:24:46:3a:c2:31:14:b8:e6:7f:2e:50:b9:88:af: 29:ac:9e:20:69:28:a3:36:1e:d7:33:cf:02:05:4f: e7:1c:f4:15:84:c0:45:6d:7a:56:70:79:80:11:bb: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2B:31:39:CC:63:85:9A:CF:EA:E0:2D:4C:55:7B:90:8B:89:2F:12 X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:69:e4:9f:63:03:ee:bb:d9:aa:e0:e2:19:ac:d8:50:cb:25: ce:31:e2:d1:ee:d5:8f:33:41:a1:2c:3a:25:ad:dc:ed:08:5b: 48:aa:8e:3d:00:b3:3f:d6:25:09:b4:1b:ab:a9:85:72:dc:6f: ae:fe:2c:f8:48:45:87:a9:49:aa:32:59:02:0a:7d:d1:cf:9e: 71:19:5f:9e:db:4d:51:68:9b:21:a3:4b:59:89:d8:65:5d:b3: 6e:74:86:4f:aa:ad:88:03:7c:5f:71:d5:37:89:5e:03:39:31: 2c:41:ba:e8:91:fc:41:8d:64:65:bd:1b:1b:67:86:65:bc:5a: 46:f0:65:48:25:99:98:19:99:3e:3d:d4:ab:2d:03:01:d9:b7: 82:39:29:c2:f2:48:d9:f8:fc:d9:62:a5:86:d3:ac:0a:4b:07: d4:ec:8f:13:b7:65:d9:0c:28:09:52:2f:f4:96:80:1f:e5:a3: 71:aa:0b:cc:60:3a:e4:25:3e:bf:52:e4:bc:09:84:f2:92:e0: c9:e2:2d:77:78:35:eb:ed:46:43:4e:6d:f3:44:95:46:52:ae: d7:10:1b:a4:2f:0b:05:76:aa:09:7d:6a:65:47:eb:43:87:a9: e7:af:c5:cd:ae:15:60:c9:2c:c7:1f:38:e6:d3:46:4c:c2:42: be:dd:9b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjUwNjAyMTYyNDExWhcNMjUwNjA5MTYyNDExWjAYMRYwFAYD VQQDEw02ODNkZDAyYy1kYmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA92s/ONKnLcDZj7bw6qV14OjiMD72oCJHBAe1BFykHf5X2NONsK3SM6vhWdea IMAYOxUWMk0v7qIHcPhY/CtqIBxNnJNmTWa2oVwDHcKVybl4SW+2OE1pURB8z0IN CYt9aUU/B4hr7qfCo8HuiP2p64pIA8+23dRMZ3n9/PJJ36q3KKuT7d4uHrVyHjM5 MphSYBxNhdnZmalhCc2lIs+gqjX4neDS1nR/+jVehtRhbhP2kzcQt4Hriw/RTqYy 65hHDyxkMOn9Mrxjb+ysJpwVZByBJEY6wjEUuOZ/LlC5iK8prJ4gaSijNh7XM88C BU/nHPQVhMBFbXpWcHmAEbu5mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0rMTnM Y4Waz+rgLUxVe5CLiS8SMB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8yQjBCRkQ5OEY2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBY ZlVXU3hEUzgtV0s4Q294bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAraeSfYwPuu9mq4OIZrNhQyyXOMeLR7tWPM0GhLDolrdztCFtIqo49 ALM/1iUJtBurqYVy3G+u/iz4SEWHqUmqMlkCCn3Rz55xGV+e201RaJsho0tZidhl XbNudIZPqq2IA3xfcdU3iV4DOTEsQbrokfxBjWRlvRsbZ4ZlvFpG8GVIJZmYGZk+ PdSrLQMB2beCOSnC8kjZ+PzZYqWG06wKSwfU7I8Tt2XZDCgJUi/0loAf5aNxqgvM YDrkJT6/UuS8CYTykuDJ4i13eDXr7UZDTm3zRJVGUq7XEBukLwsFdqoJfWplR+tD h6nnr8XNrhVgySzHHzjm00ZMwkK+3ZtO -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:23 2025 by rpki-client