$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: 12JcZa3IDgY0GZWmkLhtzcn+aDSAIgTRjowcRfW5L3k= Subject key identifier: 62:E7:BE:61:6F:0A:CD:68:94:12:60:43:D6:B4:E7:D7:E5:31:54:3F Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 16BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 16B1 Signing time: Thu 18 Sep 2025 16:48:15 +0000 Manifest this update: Thu 18 Sep 2025 16:48:14 +0000 Manifest next update: Thu 25 Sep 2025 16:48:14 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: AHKlbON6K6AXBiCP73ZwTd2lCpIVCHx++bvDYeZ21lQ=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: ASMLpEvsvu5fZiBYK5kv36WlKk7sSJJC1YfYG/Sqc/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5821 (0x16bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Sep 18 16:48:14 2025 GMT Not After : Sep 25 16:48:14 2025 GMT Subject: CN=68cc37cf-c89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ab:93:91:b4:7a:5a:1e:2b:49:ea:1e:eb:0e: 9b:43:34:49:c2:70:9f:3b:32:30:66:3e:2b:a5:b4: d1:43:c4:b8:a6:86:41:97:19:fd:a7:07:55:27:11: f6:d7:dd:1d:83:db:57:67:62:ed:98:6f:ae:b6:e1: d1:84:74:7e:01:d4:8b:97:d4:9e:c8:56:48:55:49: 28:ba:01:97:b4:76:98:40:5a:c4:77:2a:9a:7b:97: f1:9e:ac:b3:6d:11:df:d1:b8:28:4e:8e:3e:57:2f: 9d:3d:43:4f:58:5f:59:67:56:cf:9b:14:c5:12:31: ea:43:87:e4:97:48:78:97:9a:7c:8e:45:7e:e6:2a: 46:f6:43:0f:ca:01:e8:32:34:b5:59:34:2c:5f:43: 4f:5b:57:c9:ed:2c:cc:39:a6:c8:bb:8f:dc:7c:b6: 94:b3:47:63:31:1d:ed:76:8b:92:e2:b3:37:ae:4f: f1:31:61:43:0a:7b:4b:84:cd:f8:eb:af:a3:57:12: 63:75:2f:49:df:79:a7:98:0a:0c:7e:76:2e:28:c5: 86:4c:53:8b:9a:20:d9:a5:0d:13:9e:a8:c9:12:db: dd:98:c5:f1:24:a3:05:22:a9:9a:d0:e7:31:97:d8: ed:45:34:6d:13:a6:1e:c2:09:a8:b7:6b:87:ae:d8: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E7:BE:61:6F:0A:CD:68:94:12:60:43:D6:B4:E7:D7:E5:31:54:3F X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:53:37:a2:07:60:ec:2a:f4:c6:2c:56:d2:b7:4c:62:be:a8: d8:fa:be:5a:19:77:a7:ce:11:14:92:12:7a:0b:e8:c6:94:13: 95:80:81:d7:ae:3e:d8:07:b2:75:dd:00:db:3c:ff:ae:ac:fc: 7f:3a:b1:99:11:05:c9:9d:48:ea:60:e4:09:33:b6:49:89:3a: f8:bf:38:21:61:39:3c:69:df:5e:c6:e4:97:44:4b:46:37:dd: 20:23:b0:28:50:c9:00:17:43:f4:0b:e4:2e:db:f8:63:26:74: 5d:04:40:4f:44:71:06:97:99:6d:a4:31:3a:8d:3b:d6:e3:04: b8:b2:5b:41:fa:18:74:89:f4:f8:78:09:7d:80:76:8e:34:1f: a5:1c:87:33:36:7f:b5:18:70:96:8b:fe:94:bc:35:33:98:91: ba:04:d4:16:2c:f1:96:93:5b:4d:ae:f8:db:e1:82:fd:f8:9e: 97:58:13:f1:9a:b9:b0:9f:7f:28:74:70:56:04:fc:0c:a9:fa: 3e:18:3a:01:e7:07:83:ab:b5:78:fe:1a:97:57:ee:9f:ef:0b: 73:21:40:f4:c5:56:77:1c:36:f4:ae:60:26:4d:a8:c7:07:0a: 96:ec:fa:54:3e:96:b5:f1:c5:62:29:78:7b:72:46:6e:80:be: fa:16:6d:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjUwOTE4MTY0ODE0WhcNMjUwOTI1MTY0ODE0WjAYMRYwFAYD VQQDEw02OGNjMzdjZi1jODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36uTkbR6Wh4rSeoe6w6bQzRJwnCfOzIwZj4rpbTRQ8S4poZBlxn9pwdVJxH2 190dg9tXZ2LtmG+utuHRhHR+AdSLl9SeyFZIVUkougGXtHaYQFrEdyqae5fxnqyz bRHf0bgoTo4+Vy+dPUNPWF9ZZ1bPmxTFEjHqQ4fkl0h4l5p8jkV+5ipG9kMPygHo MjS1WTQsX0NPW1fJ7SzMOabIu4/cfLaUs0djMR3tdouS4rM3rk/xMWFDCntLhM34 66+jVxJjdS9J33mnmAoMfnYuKMWGTFOLmiDZpQ0TnqjJEtvdmMXxJKMFIqma0Ocx l9jtRTRtE6Yewgmot2uHrtj2dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLnvmFv Cs1olBJgQ9a059flMVQ/MB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHUzeiB2DsKvTGLFbSt0xivqjY+r5aGXenzhEUkhJ6C+jGlBOVgIHX rj7YB7J13QDbPP+urPx/OrGZEQXJnUjqYOQJM7ZJiTr4vzghYTk8ad9exuSXREtG N90gI7AoUMkAF0P0C+Qu2/hjJnRdBEBPRHEGl5ltpDE6jTvW4wS4sltB+hh0ifT4 eAl9gHaONB+lHIczNn+1GHCWi/6UvDUzmJG6BNQWLPGWk1tNrvjb4YL9+J6XWBPx mrmwn38odHBWBPwMqfo+GDoB5weDq7V4/hqXV+6f7wtzIUD0xVZ3HDb0rmAmTajH BwqW7PpUPpa18cViKXh7ckZugL76Fm38 -----END CERTIFICATE-----Generated at Fri Sep 19 05:29:24 2025 by rpki-client