$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: b3SrnC496KzJkWGq3UYwWpgAGCoerGvDEFiZwwDQaZA= Subject key identifier: 25:3E:BA:D6:E9:F6:77:80:97:47:26:9D:F9:60:40:60:5E:0F:14:26 Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: 9D Signing time: Tue 09 Sep 2025 06:26:16 +0000 Manifest this update: Tue 09 Sep 2025 06:26:15 +0000 Manifest next update: Tue 16 Sep 2025 06:26:15 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: bXyz/pp297+yHJOI2wfjoUx0JclVERMpLzuZ6bLWRvM=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: hV0+1IwRiq4hHk9yI+8OcLJdXek+Jfs+77Mer9xXqoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: Sep 9 06:26:15 2025 GMT Not After : Sep 16 06:26:15 2025 GMT Subject: CN=68bfc887-8a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6d:92:51:f0:9d:02:da:93:43:43:c9:5a:47: 0f:cc:0d:88:b4:66:4d:2d:0e:9f:a2:0e:c7:e1:31: 96:55:ea:d0:ec:70:5f:a5:c7:a2:a7:03:a6:de:0c: 4b:7d:b3:bd:7f:35:87:18:5a:87:fa:f9:3d:3c:74: 72:34:28:49:3d:42:f9:23:5b:67:41:f9:ba:65:32: 1e:a1:93:6a:45:00:b4:96:f5:a1:79:53:59:70:92: 24:ec:bc:45:5c:d7:ec:23:f8:79:bc:0f:77:1b:d0: 86:7c:c2:ff:5d:ae:81:3e:ef:b9:21:53:fe:5a:c6: 73:e4:d1:6c:db:ba:e5:9f:43:a5:ff:97:3d:4d:fb: 58:e9:36:34:79:ae:3c:98:de:de:e7:39:de:e0:d8: 37:cf:08:ba:ac:a7:6a:dd:a7:e9:8e:b5:0d:c3:7e: e5:be:85:2e:3c:67:d8:d7:3d:91:ff:8b:7b:27:3e: f3:74:36:a9:54:b2:b4:ea:1c:43:94:cc:68:c6:3a: f8:b3:db:7c:3f:55:69:eb:e2:5c:d1:76:91:cf:17: 1f:46:4a:5a:db:9a:cb:d3:f7:bb:cf:ad:3f:21:70: 87:95:0d:b9:c7:60:96:5f:9e:f1:59:e7:30:d4:a5: c6:3a:de:9b:0c:b3:19:3c:48:d4:6f:b3:58:bc:e9: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3E:BA:D6:E9:F6:77:80:97:47:26:9D:F9:60:40:60:5E:0F:14:26 X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:31:9e:d7:e0:03:29:4a:25:44:a1:eb:b0:0d:76:be:f3:b5: c7:f9:43:93:28:bb:36:de:a1:3c:2e:d6:50:6b:06:a3:65:55: 45:96:5f:69:76:43:c3:b5:d7:60:56:25:33:7d:1b:9c:55:3d: 1c:0a:54:55:7c:00:ae:03:7d:f0:16:6c:8f:a2:24:e0:05:37: de:5a:55:8c:b9:77:5e:61:74:06:1f:0e:22:12:6d:3e:88:98: ac:cd:00:b8:cb:33:f2:bf:ea:99:ea:e7:22:08:e9:e4:04:6b: 56:df:50:45:79:3d:be:44:47:f7:af:b7:fb:d6:04:cf:40:3d: 3f:ce:43:20:bd:5f:37:5c:59:0d:80:31:e4:be:5a:2b:db:11: 64:29:f4:70:c8:0e:08:04:73:50:74:38:3b:9e:47:27:57:97: e6:a5:80:51:a0:86:bd:12:7b:10:07:80:7b:df:aa:e3:0c:da: dd:a7:03:50:93:88:fd:bd:a8:b0:6d:ad:f2:b2:d0:a3:32:f2: 10:92:81:03:83:44:03:d7:b6:1f:45:f3:84:73:ad:79:02:93: de:ef:0e:2f:63:d6:16:99:84:37:b3:58:64:58:ce:a1:a3:af: b3:9a:87:9e:5a:22:6b:bc:c2:de:f3:b6:49:8d:35:78:46:a9: 34:5a:9e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFEMTNBMDU3RUNG RjMwN0M4NkYwHhcNMjUwOTA5MDYyNjE1WhcNMjUwOTE2MDYyNjE1WjAYMRYwFAYD VQQDEw02OGJmYzg4Ny04YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnW2SUfCdAtqTQ0PJWkcPzA2ItGZNLQ6fog7H4TGWVerQ7HBfpceipwOm3gxL fbO9fzWHGFqH+vk9PHRyNChJPUL5I1tnQfm6ZTIeoZNqRQC0lvWheVNZcJIk7LxF XNfsI/h5vA93G9CGfML/Xa6BPu+5IVP+WsZz5NFs27rln0Ol/5c9TftY6TY0ea48 mN7e5zne4Ng3zwi6rKdq3afpjrUNw37lvoUuPGfY1z2R/4t7Jz7zdDapVLK06hxD lMxoxjr4s9t8P1Vp6+Jc0XaRzxcfRkpa25rL0/e7z60/IXCHlQ25x2CWX57xWecw 1KXGOt6bDLMZPEjUb7NYvOkd8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCU+utbp 9neAl0cmnflgQGBeDxQmMB8GA1UdIwQYMBaAFHFy7Qz0RwXs6xlh0ToFfs/zB8hv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BQTJBNzg0QzlE OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJlenJHV0hST2dWLXpfTUh5 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJl enJHV0hST2dWLXpfTUh5RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmMZ7X4AMpSiVEoeuwDXa+87XH+UOTKLs23qE8LtZQawajZVVFll9p dkPDtddgViUzfRucVT0cClRVfACuA33wFmyPoiTgBTfeWlWMuXdeYXQGHw4iEm0+ iJiszQC4yzPyv+qZ6uciCOnkBGtW31BFeT2+REf3r7f71gTPQD0/zkMgvV83XFkN gDHkvlor2xFkKfRwyA4IBHNQdDg7nkcnV5fmpYBRoIa9EnsQB4B736rjDNrdpwNQ k4j9vaiwba3ystCjMvIQkoEDg0QD17YfRfOEc615ApPe7w4vY9YWmYQ3s1hkWM6h o6+zmoeeWiJrvMLe87ZJjTV4Rqk0Wp7c -----END CERTIFICATE-----Generated at Tue Sep 9 13:32:11 2025 by rpki-client