$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: aFERoPI7vyEQUcTY7nI130ppfoMIuAx5nPDpSV/gpIo= Subject key identifier: C2:87:28:30:B4:E2:F7:C0:F6:FE:BE:AF:A2:DC:67:12:A3:F4:8E:C2 Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 1681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 1676 Signing time: Fri 30 May 2025 16:52:59 +0000 Manifest this update: Fri 30 May 2025 16:52:59 +0000 Manifest next update: Fri 06 Jun 2025 16:52:59 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: 5jemBv5McDtxKvj5ogzINifGNGiSq+dUkDIH5GOFZbY=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: v3sjoQSpuFWRMhTWonBiueiIp4Y61jfzrKe4k2e0JcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5761 (0x1681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: May 30 16:52:59 2025 GMT Not After : Jun 6 16:52:59 2025 GMT Subject: CN=6839e26b-124a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b8:3b:76:a7:bb:1e:6b:28:bb:89:15:15:d4: 4e:e2:c4:f1:01:93:cc:d1:86:5d:1b:05:95:ce:de: 7d:9e:09:02:08:d5:6d:0d:20:86:4a:20:eb:b8:c8: 62:a2:b6:02:4b:bc:0e:5c:f6:05:e8:e6:d2:fd:0e: b9:96:f9:02:ab:6c:c8:e0:de:d1:36:2a:d8:96:96: 38:9d:f5:41:d7:ca:66:34:7a:31:eb:74:71:40:b6: d1:51:65:b4:03:06:97:57:7f:f5:71:68:f9:4d:fd: f5:c6:8e:92:f9:b5:cb:87:ab:ad:f6:62:2d:d1:d1: 3e:b6:45:83:03:27:ea:77:00:4b:1e:45:df:42:b1: 55:b6:87:3a:21:f3:c8:ff:1a:78:42:77:da:ee:87: 98:73:ee:9c:be:4c:75:5f:30:4f:ae:28:cb:2a:81: a3:be:cd:e1:2d:62:df:39:5b:1b:ed:ef:71:b9:38: 81:88:f0:93:55:dd:fa:67:88:1e:52:4b:aa:f9:11: 41:70:e2:9a:ee:39:e6:cf:d7:0f:a1:9d:ca:0a:c7: 35:13:c8:ac:56:82:45:0b:e3:32:d2:46:bf:78:26: b9:42:43:63:c6:18:b0:f5:d1:3b:89:33:ea:63:88: b8:01:39:d8:93:16:2f:1e:1e:5c:36:c2:d7:8a:b4: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:87:28:30:B4:E2:F7:C0:F6:FE:BE:AF:A2:DC:67:12:A3:F4:8E:C2 X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:63:70:c6:bd:86:a6:cd:3c:41:5b:4b:1e:0b:1c:1e:87:e1: 55:f9:6b:9c:10:7c:ca:df:bd:83:29:13:30:90:18:72:31:03: f8:c5:bb:56:9e:29:49:3d:10:5f:44:71:e2:23:fa:a6:d8:b6: 1e:09:09:7a:e2:3e:cd:86:bf:1d:7c:bd:02:1d:b5:a7:01:3a: 18:80:8c:8f:64:c4:21:02:2f:e9:6f:a5:20:29:79:1d:46:63: 47:36:27:ce:f9:67:5a:c3:a0:52:80:38:42:01:cc:c7:06:c3: d3:10:c1:69:c1:4d:d0:23:1a:21:a2:46:68:22:bc:d7:ce:f4: 88:56:9e:7f:cf:34:72:8c:03:72:8b:51:fb:f9:b5:51:eb:45: 73:d8:9c:c8:98:e7:a6:ef:c0:d8:02:51:c9:1a:76:c1:63:b4: 40:aa:22:a6:b6:c0:2b:b2:c8:a8:7b:a9:ee:9b:24:00:e5:11: 29:c3:67:85:d5:e0:64:b4:ac:9f:f4:91:45:f4:d7:75:a3:12: 48:8f:0f:0f:7c:6b:47:a3:a9:62:44:2a:cf:66:24:63:37:9c: 1f:79:dd:35:82:30:75:57:e4:1d:3f:4a:2e:3d:94:28:35:f3: 37:f5:f6:7d:3d:44:48:06:84:45:86:eb:8b:f1:04:c7:d3:b9: 5a:e9:d2:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjUwNTMwMTY1MjU5WhcNMjUwNjA2MTY1MjU5WjAYMRYwFAYD VQQDEw02ODM5ZTI2Yi0xMjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbg7dqe7Hmsou4kVFdRO4sTxAZPM0YZdGwWVzt59ngkCCNVtDSCGSiDruMhi orYCS7wOXPYF6ObS/Q65lvkCq2zI4N7RNirYlpY4nfVB18pmNHox63RxQLbRUWW0 AwaXV3/1cWj5Tf31xo6S+bXLh6ut9mIt0dE+tkWDAyfqdwBLHkXfQrFVtoc6IfPI /xp4Qnfa7oeYc+6cvkx1XzBPrijLKoGjvs3hLWLfOVsb7e9xuTiBiPCTVd36Z4ge Ukuq+RFBcOKa7jnmz9cPoZ3KCsc1E8isVoJFC+My0ka/eCa5QkNjxhiw9dE7iTPq Y4i4ATnYkxYvHh5cNsLXirSDcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKHKDC0 4vfA9v6+r6LcZxKj9I7CMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByY3DGvYamzTxBW0seCxweh+FV+WucEHzK372DKRMwkBhyMQP4xbtW nilJPRBfRHHiI/qm2LYeCQl64j7Nhr8dfL0CHbWnAToYgIyPZMQhAi/pb6UgKXkd RmNHNifO+Wdaw6BSgDhCAczHBsPTEMFpwU3QIxohokZoIrzXzvSIVp5/zzRyjANy i1H7+bVR60Vz2JzImOem78DYAlHJGnbBY7RAqiKmtsArssioe6numyQA5REpw2eF 1eBktKyf9JFF9Nd1oxJIjw8PfGtHo6liRCrPZiRjN5wfed01gjB1V+QdP0ouPZQo NfM39fZ9PURIBoRFhuuL8QTH07la6dKC -----END CERTIFICATE-----Generated at Sat May 31 16:00:16 2025 by rpki-client