$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: hlVm+u9QyFLrEqNJ5drEOgdrc6lQ+5vdCkgqwAx7EtM= Subject key identifier: 20:E4:99:A7:09:80:58:36:92:D1:A9:7F:7A:5B:4A:24:AF:D1:12:56 Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: 010D Signing time: Mon 21 Jul 2025 03:22:14 +0000 Manifest this update: Mon 21 Jul 2025 03:22:13 +0000 Manifest next update: Mon 28 Jul 2025 03:22:13 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: 7qu5yvQlKyO5R2Z5z++0V3UXPvPenVpwghFZYQg2Jwo=) 2: 21212316C5FF11EF8E8D5A6AC4F9AE02.roa (hash: V6Fl4BJJ1t3UeNpBGfvNyvLgQid8VzH7z9vWNtCcihc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Jul 21 03:22:13 2025 GMT Not After : Jul 28 03:22:13 2025 GMT Subject: CN=687db265-9888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:5c:1d:c3:3b:5f:18:9f:9f:34:a9:93:28: 9f:55:7e:4d:ac:19:04:74:39:6d:bb:20:53:1e:68: 31:dc:4f:69:82:f0:7d:82:5d:3f:74:7d:38:56:8f: 75:ee:48:b8:d8:82:9f:8b:33:c4:49:e8:ff:1c:2d: 0b:2f:de:e2:b8:b1:d5:14:57:5a:8a:0b:33:20:eb: 5e:79:c6:fd:5f:bf:d0:7d:8f:28:c8:14:00:6e:7e: 9c:a9:76:65:2b:d7:d9:6d:e5:3b:34:dc:10:e1:be: c4:4d:bf:47:3f:a7:89:b7:93:76:59:b4:f0:4f:0b: 65:d4:2e:71:a2:b8:87:b1:07:69:95:b6:ca:5b:f6: 35:8b:4e:38:35:7a:ca:46:92:67:79:2a:b3:67:93: d0:ef:c2:79:38:ed:e0:d4:eb:04:2c:10:59:99:3f: 89:50:2a:25:5b:ca:fc:11:97:26:25:a1:96:1b:b5: 6c:cf:5d:f4:96:e7:ae:0b:75:5e:02:68:17:d9:8c: 7b:b7:99:bb:7d:a4:f7:ea:34:9e:98:4c:1b:bf:9c: bb:e0:73:47:90:58:1e:e3:07:c5:99:f8:da:c2:bf: 38:89:24:e0:30:19:bc:aa:cc:5c:cf:7a:23:81:17: d9:08:61:c8:17:60:23:17:4e:2c:47:08:b8:be:03: 28:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E4:99:A7:09:80:58:36:92:D1:A9:7F:7A:5B:4A:24:AF:D1:12:56 X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:9b:b0:52:e7:b8:32:1d:e4:f2:b8:3e:0d:97:7d:20:46:e4: 73:01:37:2e:11:84:37:e6:22:64:f8:9a:2e:38:42:03:3f:70: fe:ae:05:b2:61:45:fb:86:c9:36:9c:55:be:53:cb:17:33:f5: 0a:f5:68:36:3b:2d:c1:f5:49:b4:00:08:62:c3:4f:c2:a5:7d: bf:14:0e:d3:69:9d:05:c1:c6:6b:83:c1:84:fd:26:b4:6a:40: ef:08:0d:9d:8c:d5:0a:91:c8:a1:57:e7:75:3d:19:53:3e:24: 90:6a:ab:0f:f6:d6:46:4e:15:99:78:13:5f:03:d0:0d:d5:47: 4f:c0:5f:22:f8:21:43:54:18:95:8f:5c:37:d1:ba:61:d2:3e: 9e:7a:b5:a1:07:ae:68:4c:31:d8:4f:4f:15:0f:a4:d4:56:9d: 80:69:13:71:7c:55:7c:5b:2e:c9:b3:0f:55:9a:e5:47:fb:8d: 29:2d:94:23:cf:e3:21:dc:c3:b2:45:5e:78:17:7c:b8:d4:88: dd:ea:28:16:5f:81:b9:a1:1f:70:57:78:09:30:15:9f:6a:3d: 95:11:63:e1:2f:fc:d2:bc:8b:c5:c3:53:e2:64:00:99:e4:87: 6e:17:1e:cc:5d:66:80:5c:3f:e3:61:c2:b5:41:8a:2e:68:98: 4d:1d:e4:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUwNzIxMDMyMjEzWhcNMjUwNzI4MDMyMjEzWjAYMRYwFAYD VQQDEw02ODdkYjI2NS05ODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOpcHcM7XxifnzSpkyifVX5NrBkEdDltuyBTHmgx3E9pgvB9gl0/dH04Vo91 7ki42IKfizPESej/HC0LL97iuLHVFFdaigszIOteecb9X7/QfY8oyBQAbn6cqXZl K9fZbeU7NNwQ4b7ETb9HP6eJt5N2WbTwTwtl1C5xoriHsQdplbbKW/Y1i044NXrK RpJneSqzZ5PQ78J5OO3g1OsELBBZmT+JUColW8r8EZcmJaGWG7Vsz130lueuC3Ve AmgX2Yx7t5m7faT36jSemEwbv5y74HNHkFge4wfFmfjawr84iSTgMBm8qsxcz3oj gRfZCGHIF2AjF04sRwi4vgMogwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDkmacJ gFg2ktGpf3pbSiSv0RJWMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3m7BS57gyHeTyuD4Nl30gRuRzATcuEYQ35iJk+JouOEIDP3D+rgWy YUX7hsk2nFW+U8sXM/UK9Wg2Oy3B9Um0AAhiw0/CpX2/FA7TaZ0FwcZrg8GE/Sa0 akDvCA2djNUKkcihV+d1PRlTPiSQaqsP9tZGThWZeBNfA9AN1UdPwF8i+CFDVBiV j1w30bph0j6eerWhB65oTDHYT08VD6TUVp2AaRNxfFV8Wy7Jsw9VmuVH+40pLZQj z+Mh3MOyRV54F3y41Ijd6igWX4G5oR9wV3gJMBWfaj2VEWPhL/zSvIvFw1PiZACZ 5IduFx7MXWaAXD/jYcK1QYouaJhNHeSN -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:18 2025 by rpki-client