$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: vI/hc8eOODUn96uULJ+4g3ypaVIGl5RacPyoboWm+vk= Subject key identifier: B2:AB:0E:3D:D0:74:43:18:07:C5:29:18:D4:23:97:07:77:2B:9B:BD Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: 0125 Signing time: Fri 05 Sep 2025 03:22:21 +0000 Manifest this update: Fri 05 Sep 2025 03:22:20 +0000 Manifest next update: Fri 12 Sep 2025 03:22:20 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: z2n7Yc0W5kvEffVCLWFriX0RzuwInkNNwc/VMwDaxOQ=) 2: 21212316C5FF11EF8E8D5A6AC4F9AE02.roa (hash: V6Fl4BJJ1t3UeNpBGfvNyvLgQid8VzH7z9vWNtCcihc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Sep 5 03:22:20 2025 GMT Not After : Sep 12 03:22:20 2025 GMT Subject: CN=68ba576c-4d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:c1:fa:a8:27:c7:01:27:e2:1f:b1:71:28: 25:18:c7:93:f2:f1:d9:94:72:56:6c:1d:68:74:79: 28:c3:4a:56:72:85:24:23:f5:62:a7:49:ea:a0:a1: cb:94:30:c3:a5:c1:6b:b8:ab:41:76:d0:33:3d:8b: ee:48:71:5d:71:b0:c4:94:4b:55:c4:ae:31:0c:b0: 31:2e:86:4e:c1:c3:6b:e6:08:09:52:21:eb:f1:0a: 76:81:dd:3d:1b:81:36:e6:62:ba:fc:5a:8e:b4:e1: fd:59:7c:e9:7e:73:b4:85:52:17:60:f9:ee:fb:c8: b5:11:c7:87:f0:8a:08:f7:54:bc:ec:72:d2:05:34: 97:e3:bd:52:5c:be:ed:45:3d:73:fd:b2:e2:8c:48: ec:ff:de:b8:13:57:77:8f:fe:fe:a6:ed:80:ec:ba: ad:64:7f:88:76:46:73:1e:ff:e5:b6:21:88:5b:58: 7b:82:c2:3e:36:5d:11:7a:e2:a1:6f:31:f8:a6:63: 91:0d:a2:0b:2e:f1:37:62:51:89:b4:e1:a0:6a:e8: 02:7c:5b:d8:3f:13:b5:c6:0f:e6:c7:b7:34:49:cd: 8c:69:4f:e2:0b:ce:53:f8:5c:20:46:48:48:93:a1: f6:e2:b7:9e:85:9e:eb:dc:2e:ea:5f:da:5b:88:57: 57:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AB:0E:3D:D0:74:43:18:07:C5:29:18:D4:23:97:07:77:2B:9B:BD X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:81:e4:05:c9:f4:cd:87:32:a1:cb:bc:66:53:2a:d9:09:1e: 3d:aa:f2:40:21:86:eb:55:fd:a4:d8:5b:0a:62:a0:fa:77:a1: 46:bb:af:2b:96:bc:77:15:aa:51:21:d6:08:54:3b:ac:e2:58: 84:6d:15:f2:14:e7:6d:32:46:d5:72:e6:6c:0e:96:b3:e5:f7: c2:1a:37:03:39:19:bd:c5:cb:4f:18:4c:a3:80:32:35:82:45: 8f:db:cc:ff:d8:fd:a8:4e:ba:c4:2d:b9:2c:c1:d7:2a:77:8b: 01:ec:e9:15:16:c2:4d:db:38:77:68:ce:aa:bf:f4:80:ff:a1: 9f:8a:b0:f8:6f:42:ad:3a:f1:22:1f:ca:09:f2:0a:0a:f1:90: e7:52:69:14:f0:a8:c4:32:c3:95:fd:a6:f3:d6:2f:e2:b3:bc: a0:9e:f3:35:30:d0:a2:ee:a0:59:6f:fd:f2:cd:dc:6f:ea:6d: 0f:a2:43:0f:47:3f:20:a5:fa:1a:56:6c:72:6f:8b:8c:c2:65: e4:bd:2e:67:8b:2c:b8:31:9b:92:1f:aa:f2:c8:dd:23:42:62: 60:a6:c3:c9:0b:8c:01:cc:5f:06:b4:02:57:64:5c:ad:7a:7b: 34:64:40:d4:c6:9b:28:81:37:62:87:62:b8:c9:3a:9a:3f:5b: 79:62:cb:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUwOTA1MDMyMjIwWhcNMjUwOTEyMDMyMjIwWjAYMRYwFAYD VQQDEw02OGJhNTc2Yy00ZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIvB+qgnxwEn4h+xcSglGMeT8vHZlHJWbB1odHkow0pWcoUkI/Vip0nqoKHL lDDDpcFruKtBdtAzPYvuSHFdcbDElEtVxK4xDLAxLoZOwcNr5ggJUiHr8Qp2gd09 G4E25mK6/FqOtOH9WXzpfnO0hVIXYPnu+8i1EceH8IoI91S87HLSBTSX471SXL7t RT1z/bLijEjs/964E1d3j/7+pu2A7LqtZH+IdkZzHv/ltiGIW1h7gsI+Nl0ReuKh bzH4pmORDaILLvE3YlGJtOGgaugCfFvYPxO1xg/mx7c0Sc2MaU/iC85T+FwgRkhI k6H24reehZ7r3C7qX9pbiFdXlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKrDj3Q dEMYB8UpGNQjlwd3K5u9MB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLgeQFyfTNhzKhy7xmUyrZCR49qvJAIYbrVf2k2FsKYqD6d6FGu68r lrx3FapRIdYIVDus4liEbRXyFOdtMkbVcuZsDpaz5ffCGjcDORm9xctPGEyjgDI1 gkWP28z/2P2oTrrELbkswdcqd4sB7OkVFsJN2zh3aM6qv/SA/6GfirD4b0KtOvEi H8oJ8goK8ZDnUmkU8KjEMsOV/abz1i/is7ygnvM1MNCi7qBZb/3yzdxv6m0PokMP Rz8gpfoaVmxyb4uMwmXkvS5niyy4MZuSH6ryyN0jQmJgpsPJC4wBzF8GtAJXZFyt ens0ZEDUxpsogTdih2K4yTqaP1t5Ysvh -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:08 2025 by rpki-client