$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: gVHlLo7JDvtk2xGPQkzqafTBBWRk5mv0AWzRMrnIt98= Subject key identifier: 42:43:D2:97:4E:91:D6:E7:5C:A5:24:E1:FC:37:C8:30:26:18:73:3E Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: F4 Signing time: Sun 01 Jun 2025 03:17:43 +0000 Manifest this update: Sun 01 Jun 2025 03:17:42 +0000 Manifest next update: Sun 08 Jun 2025 03:17:42 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: s6FrRYauK3x+1lJKNs5coADf7IFqAXBedMWKilq2IC4=) 2: 21212316C5FF11EF8E8D5A6AC4F9AE02.roa (hash: V6Fl4BJJ1t3UeNpBGfvNyvLgQid8VzH7z9vWNtCcihc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 03:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Jun 1 03:17:42 2025 GMT Not After : Jun 8 03:17:42 2025 GMT Subject: CN=683bc656-1219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3f:07:e6:cf:76:31:96:51:12:9c:93:36:f2: 03:36:cf:cc:5c:4e:b3:20:3d:e6:df:f9:8b:36:08: 3f:42:49:42:ac:ea:30:41:23:03:c9:47:f2:d7:f0: 78:87:31:32:0a:56:30:30:b7:a6:d0:b5:a8:3c:ce: a0:5e:94:b6:1f:ea:7e:28:9d:7c:31:92:27:b8:2b: b1:79:34:45:8a:49:81:6a:ff:ce:1b:de:05:83:7b: f0:e8:d6:69:f9:25:a0:85:10:56:e8:4e:d4:7d:85: 3a:9b:f9:c0:33:b6:d6:07:12:83:0e:64:5b:b9:34: 1d:49:1e:65:dc:5a:6d:05:41:c5:c1:f4:81:2d:63: 0b:e8:bb:0a:41:d9:1e:65:42:41:47:b7:59:bc:5e: 91:22:70:58:fb:d7:3b:73:82:4a:98:44:61:54:3d: 1a:4c:3a:81:43:a8:b1:96:5d:2d:96:4e:37:d2:dc: 05:02:64:18:d5:c8:18:6f:a4:ba:1f:63:6d:1f:37: 43:39:fc:e0:a5:f3:4f:ad:10:fc:26:ce:84:6b:02: 0a:c6:9c:6c:fb:40:bc:48:14:df:6d:e0:3f:6e:35: a8:d0:cf:f2:be:fd:9f:7f:ba:52:b7:1e:d7:67:a0: 29:46:33:c1:b8:a2:27:1d:9f:be:a0:ac:2f:da:20: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:43:D2:97:4E:91:D6:E7:5C:A5:24:E1:FC:37:C8:30:26:18:73:3E X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:80:a5:aa:9e:57:0c:a7:28:ce:e4:da:62:0d:90:b4:39:d3: e9:7a:44:bc:9c:e6:4e:b5:58:cd:13:a2:71:5d:16:85:55:70: 56:d2:0d:8d:79:3f:34:ea:5b:f8:91:3b:13:ff:7f:99:8f:75: be:fe:63:1d:8f:81:84:c3:ad:99:f5:48:83:de:c6:10:de:e4: e2:fc:23:0a:ea:48:4b:22:13:74:db:58:c6:33:25:89:4b:5c: 98:03:45:75:13:3e:e3:67:6c:c5:ec:e6:da:5e:6b:74:fa:2d: c3:2b:ec:1c:2a:76:08:a7:7c:ba:34:5e:f5:a2:75:2a:83:81: 07:88:9b:e3:1c:4d:bb:49:31:28:cd:74:e4:51:07:14:d3:ac: 70:5c:60:84:b0:66:f0:32:82:81:06:0f:2f:91:77:6d:8e:24: 56:60:e5:24:7d:51:d8:d9:ba:22:7e:73:1a:1d:c5:1c:86:db: 4b:73:da:fc:ee:eb:2a:be:dc:dc:84:f6:95:e9:63:23:8e:f7: b5:10:d5:57:0f:28:b3:69:85:e8:4d:cb:dc:29:95:06:09:93: a4:36:11:7b:e9:29:84:d7:a2:3a:4c:74:8e:42:ec:9e:f5:4c: 8c:5a:93:59:0c:2f:84:6d:b1:9e:55:f7:1d:7f:13:af:3a:fa: 8c:b0:af:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUwNjAxMDMxNzQyWhcNMjUwNjA4MDMxNzQyWjAYMRYwFAYD VQQDEw02ODNiYzY1Ni0xMjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4T8H5s92MZZREpyTNvIDNs/MXE6zID3m3/mLNgg/QklCrOowQSMDyUfy1/B4 hzEyClYwMLem0LWoPM6gXpS2H+p+KJ18MZInuCuxeTRFikmBav/OG94Fg3vw6NZp +SWghRBW6E7UfYU6m/nAM7bWBxKDDmRbuTQdSR5l3FptBUHFwfSBLWML6LsKQdke ZUJBR7dZvF6RInBY+9c7c4JKmERhVD0aTDqBQ6ixll0tlk430twFAmQY1cgYb6S6 H2NtHzdDOfzgpfNPrRD8Js6EawIKxpxs+0C8SBTfbeA/bjWo0M/yvv2ff7pStx7X Z6ApRjPBuKInHZ++oKwv2iAodwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJD0pdO kdbnXKUk4fw3yDAmGHM+MB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABgKWqnlcMpyjO5NpiDZC0OdPpekS8nOZOtVjNE6JxXRaFVXBW0g2N eT806lv4kTsT/3+Zj3W+/mMdj4GEw62Z9UiD3sYQ3uTi/CMK6khLIhN021jGMyWJ S1yYA0V1Ez7jZ2zF7ObaXmt0+i3DK+wcKnYIp3y6NF71onUqg4EHiJvjHE27STEo zXTkUQcU06xwXGCEsGbwMoKBBg8vkXdtjiRWYOUkfVHY2boifnMaHcUchttLc9r8 7usqvtzchPaV6WMjjve1ENVXDyizaYXoTcvcKZUGCZOkNhF76SmE16I6THSOQuye 9UyMWpNZDC+EbbGeVfcdfxOvOvqMsK/0 -----END CERTIFICATE-----Generated at Mon Jun 2 20:15:17 2025 by rpki-client