$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: Qu2GxR9LFdeze5OABJCH/hecnxSW0eUmyF1N57DkgJA= Subject key identifier: C4:89:05:C9:67:40:6E:32:BC:9C:B9:D9:36:1B:FD:5C:09:51:33:1A Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 07D0 Signing time: Fri 30 May 2025 21:18:22 +0000 Manifest this update: Fri 30 May 2025 21:18:21 +0000 Manifest next update: Fri 06 Jun 2025 21:18:21 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: EDaau7UPqXqJc+QCIeuqa+BAdRcSVTjfBW2DHEc4fdI=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: cQ3kSdVpmJNxckwfYojLBqgPBczRQd1WG2pNa7wN9U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: May 30 21:18:21 2025 GMT Not After : Jun 6 21:18:21 2025 GMT Subject: CN=683a209e-29b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:39:b9:24:1d:09:d6:6d:fa:ed:d9:19:a5:19: 92:57:b8:35:5f:56:c5:06:ef:89:42:be:36:0f:47: 8f:90:d1:4a:3a:1c:80:77:fc:59:75:e3:44:a1:ef: 39:91:2c:c8:36:09:8f:46:c5:da:e0:a7:8e:18:72: 08:77:14:f4:f7:44:b8:39:6a:17:32:05:34:11:a8: 23:71:84:21:72:47:98:63:41:71:95:f7:92:1c:a0: b6:34:a7:0a:3e:f2:2d:54:a3:61:aa:13:0f:b6:e8: a4:e0:4a:bf:76:81:c8:a6:ec:df:43:ad:e7:ee:b9: ca:f0:34:51:8d:3b:73:f7:72:9c:ab:49:3a:53:c9: 5e:80:67:91:14:0c:53:a1:5c:50:91:2a:a2:3c:7e: 0c:16:ab:bf:f3:53:bf:e3:e4:14:ab:c9:19:05:e8: 11:00:fc:25:b6:88:b8:9f:d4:15:53:4d:04:3d:a3: 90:64:ca:ee:60:f9:10:30:7c:f5:e1:11:85:d3:1f: 7e:9d:c1:87:10:97:5f:c6:a2:84:8d:e1:72:a2:ed: e3:fe:16:61:e9:0d:19:df:81:02:28:e7:95:5a:ae: f1:2d:b7:bc:8b:ae:f9:9a:4d:cf:0b:ef:14:4c:2e: ba:77:a4:1e:0e:e7:0d:eb:95:fd:ef:12:9e:9c:bc: 64:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:89:05:C9:67:40:6E:32:BC:9C:B9:D9:36:1B:FD:5C:09:51:33:1A X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:78:fd:cb:96:ab:bd:85:75:6d:12:33:1b:fb:5b:2f:56:43: 21:4d:ea:7a:3e:6c:4d:aa:9e:79:6e:9f:bc:7b:76:7c:d0:19: 2c:91:6b:fd:cb:2a:51:ec:5f:b3:63:17:32:6b:f8:c8:b2:71: ea:7b:54:1e:89:1c:93:ef:1e:e5:af:72:97:54:ba:61:60:9c: 57:66:b3:67:4d:e5:22:80:55:11:f8:b2:09:db:68:e3:c6:1e: 4d:ab:d4:0b:2e:7d:39:ea:25:f8:0d:72:4d:a3:32:8c:34:94: e3:80:3f:0b:68:41:1e:10:4e:06:1d:ea:9a:20:80:f6:33:31: a9:79:26:4f:9f:f4:98:25:0c:f3:35:db:c6:3d:43:16:1f:72: a6:44:fb:ee:44:84:00:13:bb:f0:42:2a:ec:67:49:14:91:42: d5:83:d8:17:23:75:76:ad:8b:50:ff:f5:c5:5b:c4:ab:32:fc: f3:a8:c2:4e:09:a0:35:8f:04:2c:95:5d:08:95:fb:27:5e:80: 5a:08:ab:fa:bb:4e:9a:ad:b7:ec:8b:50:4e:d3:0e:1b:4e:e1: 59:b1:5d:59:96:03:64:a2:61:bc:37:e3:a5:8c:5e:bd:12:e3: 49:6c:ee:5c:3e:c0:87:7b:ae:d2:54:a7:ca:d4:93:41:97:d3: e3:b4:3d:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjUwNTMwMjExODIxWhcNMjUwNjA2MjExODIxWjAYMRYwFAYD VQQDEw02ODNhMjA5ZS0yOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jm5JB0J1m367dkZpRmSV7g1X1bFBu+JQr42D0ePkNFKOhyAd/xZdeNEoe85 kSzINgmPRsXa4KeOGHIIdxT090S4OWoXMgU0EagjcYQhckeYY0FxlfeSHKC2NKcK PvItVKNhqhMPtuik4Eq/doHIpuzfQ63n7rnK8DRRjTtz93Kcq0k6U8legGeRFAxT oVxQkSqiPH4MFqu/81O/4+QUq8kZBegRAPwltoi4n9QVU00EPaOQZMruYPkQMHz1 4RGF0x9+ncGHEJdfxqKEjeFyou3j/hZh6Q0Z34ECKOeVWq7xLbe8i675mk3PC+8U TC66d6QeDucN65X97xKenLxkmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSJBcln QG4yvJy52TYb/VwJUTMaMB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKeP3Llqu9hXVtEjMb+1svVkMhTep6PmxNqp55bp+8e3Z80BkskWv9 yypR7F+zYxcya/jIsnHqe1QeiRyT7x7lr3KXVLphYJxXZrNnTeUigFUR+LIJ22jj xh5Nq9QLLn056iX4DXJNozKMNJTjgD8LaEEeEE4GHeqaIID2MzGpeSZPn/SYJQzz NdvGPUMWH3KmRPvuRIQAE7vwQirsZ0kUkULVg9gXI3V2rYtQ//XFW8SrMvzzqMJO CaA1jwQslV0IlfsnXoBaCKv6u06arbfsi1BO0w4bTuFZsV1ZlgNkomG8N+OljF69 EuNJbO5cPsCHe67SVKfK1JNBl9PjtD2h -----END CERTIFICATE-----Generated at Sat May 31 17:30:14 2025 by rpki-client