$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: BlIzhf0s9LrSIjrRaVbYzNrb5WMx8XJdga60Na92Hag= Subject key identifier: 34:68:23:EE:0D:0E:C1:41:BA:D8:10:6C:03:63:71:79:4C:7B:1C:1F Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: 69 Signing time: Sat 31 May 2025 06:31:25 +0000 Manifest this update: Sat 31 May 2025 06:31:25 +0000 Manifest next update: Sat 07 Jun 2025 06:31:25 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: Pr/y+GVo+r1w0dHO2m42Uin8nbFKC87Zm0nVpvQoIEY=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: May 31 06:31:25 2025 GMT Not After : Jun 7 06:31:25 2025 GMT Subject: CN=683aa23d-8e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ed:cd:2c:2c:e6:67:87:b7:34:3c:88:37:17: 2e:a3:b4:84:32:3b:90:96:9c:9c:e0:8a:c3:29:f8: b6:7b:c6:35:30:cb:e9:b6:3a:28:a8:df:12:cc:88: 34:95:af:a1:de:81:34:28:d6:47:46:b9:3d:22:43: fa:ef:0d:45:9a:05:10:8a:02:bf:25:89:e8:25:38: 6d:12:3e:7c:ae:c5:7b:a2:b7:43:a9:81:9f:4e:77: 63:dd:62:2d:ca:ba:1f:60:ac:df:f6:36:17:66:a7: 2e:f4:3e:ce:ae:5f:c7:1e:d9:ed:e6:31:ca:8a:57: 50:9b:0e:32:eb:5c:47:aa:76:8f:4c:38:5a:46:80: 5e:d5:1c:dc:d7:e0:61:a0:8f:e4:d2:ef:ea:e6:76: 68:2b:1d:8a:56:58:89:e0:31:90:a3:e3:0b:db:e0: 19:bf:30:3c:dc:f9:6d:d5:cb:d2:3e:93:bd:ad:8e: 99:b7:e2:e5:8c:6b:c2:17:73:9a:8e:f0:3e:7e:ec: 48:72:ef:b7:d2:ca:73:9c:3c:f4:69:06:9b:9c:15: 3e:84:c2:87:f3:76:06:7c:af:5e:1c:6c:3a:0b:a6: aa:30:fa:1b:9a:22:1f:86:fc:96:58:f4:7c:5d:4c: 04:11:23:44:0a:30:c9:51:9b:13:ef:25:1c:7d:3d: 1f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:68:23:EE:0D:0E:C1:41:BA:D8:10:6C:03:63:71:79:4C:7B:1C:1F X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:7d:10:90:6a:8d:ad:6e:4d:b5:e3:27:0d:b5:3b:28:9b:02: 04:7e:aa:4b:3c:8a:80:fc:21:d4:01:da:1d:09:28:51:d2:a1: a8:52:d4:11:bf:c1:36:37:19:d1:1e:b2:b1:97:05:a5:50:1c: 42:17:30:16:09:55:af:1f:b3:44:da:51:bf:67:17:d0:15:34: 93:2a:a0:a3:e0:a3:a5:f1:3d:f9:59:bd:0c:b0:bc:4e:cc:44: bc:98:eb:66:a9:a3:66:98:25:26:d2:8a:99:97:15:f4:65:12: 7f:2d:1d:61:41:a6:cc:c7:20:14:07:e4:53:b3:5d:b7:db:7d: 97:ac:d4:14:d9:36:9a:8e:04:97:3d:d7:01:db:d0:c8:ab:8c: d8:a0:88:00:f6:ed:62:e0:d0:5a:6e:a5:fa:17:c6:ab:2d:5f: 7b:d1:09:cf:e5:af:ee:dc:a2:96:f6:1a:16:db:98:a3:2b:fb: 70:10:18:d1:c1:3e:f3:28:e2:a0:ef:a2:d6:85:e0:24:33:b3: 44:44:f7:15:d3:2e:b7:23:0b:9c:c7:2b:77:49:ab:f5:ca:ec: 7e:6d:3e:05:53:2d:5d:ad:52:0b:77:a7:0e:f1:b0:91:86:dc: 2f:2e:c9:c2:d9:b2:b0:6d:a3:e2:92:23:20:69:b6:8f:2e:8d: 49:5e:c0:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjdDNzExMC8GA1UEBRMoNzE3MkVEMENGNDQ3MDVFQ0VCMTk2MUQxM0EwNTdFQ0ZG MzA3Qzg2RjAeFw0yNTA1MzEwNjMxMjVaFw0yNTA2MDcwNjMxMjVaMBgxFjAUBgNV BAMTDTY4M2FhMjNkLThlN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf7c0sLOZnh7c0PIg3Fy6jtIQyO5CWnJzgisMp+LZ7xjUwy+m2Oiio3xLMiDSV r6HegTQo1kdGuT0iQ/rvDUWaBRCKAr8lieglOG0SPnyuxXuit0OpgZ9Od2PdYi3K uh9grN/2Nhdmpy70Ps6uX8ce2e3mMcqKV1CbDjLrXEeqdo9MOFpGgF7VHNzX4GGg j+TS7+rmdmgrHYpWWIngMZCj4wvb4Bm/MDzc+W3Vy9I+k72tjpm34uWMa8IXc5qO 8D5+7Ehy77fSynOcPPRpBpucFT6EwofzdgZ8r14cbDoLpqow+huaIh+G/JZY9Hxd TAQRI0QKMMlRmxPvJRx9PR8fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNGgj7g0O wUG62BBsA2NxeUx7HB8wHwYDVR0jBBgwFoAUcXLtDPRHBezrGWHROgV+z/MHyG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCN0M3L0FBMkE3ODRDOUQ5 QjExRUY4NjA1MDQ2OUM0RjlBRTAyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY1hMdERQUkhCZXpyR1dIUk9nVi16X01IeUc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC N0M3L0FBMkE3ODRDOUQ5QjExRUY4NjA1MDQ2OUM0RjlBRTAyL2NYTHREUFJIQmV6 ckdXSFJPZ1Ytel9NSHlHOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHd9EJBqja1uTbXjJw21OyibAgR+qks8ioD8IdQB2h0JKFHSoahS1BG/ wTY3GdEesrGXBaVQHEIXMBYJVa8fs0TaUb9nF9AVNJMqoKPgo6XxPflZvQywvE7M RLyY62apo2aYJSbSipmXFfRlEn8tHWFBpszHIBQH5FOzXbfbfZes1BTZNpqOBJc9 1wHb0MirjNigiAD27WLg0FpupfoXxqstX3vRCc/lr+7copb2GhbbmKMr+3AQGNHB PvMo4qDvotaF4CQzs0RE9xXTLrcjC5zHK3dJq/XK7H5tPgVTLV2tUgt3pw7xsJGG 3C8uycLZsrBto+KSIyBpto8ujUlewBM= -----END CERTIFICATE-----Generated at Sat May 31 15:09:33 2025 by rpki-client