$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: 2PiGE7Pxy2zwo2WaN9ciz6nxkBFapst1fOIIJy5NrMg= Subject key identifier: DD:C7:43:27:ED:C8:45:8C:54:9B:D1:22:D7:47:91:75:7E:F3:FB:68 Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0F02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0EF2 Signing time: Fri 30 May 2025 17:50:47 +0000 Manifest this update: Fri 30 May 2025 17:50:46 +0000 Manifest next update: Fri 06 Jun 2025 17:50:46 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: FrXFAGaSqNDntUuX01x7+UOiVSYBlDe6yfCnzDdsX44=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: Wv9uMY+WdEAX81GX6NeGlpR1t2a7ig+R8eOluIMlrac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3842 (0xf02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: May 30 17:50:46 2025 GMT Not After : Jun 6 17:50:46 2025 GMT Subject: CN=6839eff7-fdb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f2:bc:3d:c4:6f:18:c8:49:12:8c:fe:96:f5: ab:17:53:f3:0b:5f:b6:34:7b:41:b4:a8:0d:13:e3: 6b:0d:0b:7e:ef:5b:4c:85:7b:b1:91:13:5f:8c:ed: 8b:77:2d:ce:63:c7:ab:d7:56:b4:55:53:3f:7c:75: 8d:5e:61:5e:cc:fc:b3:92:d0:8c:41:86:70:6d:e3: d7:42:fc:22:01:af:e3:2d:cf:c5:8b:13:92:4f:0f: 75:9e:bc:2d:18:49:d5:c5:6b:92:81:99:f4:7a:d3: 7c:9e:88:00:a2:8c:66:74:d0:f0:4b:95:65:6b:96: 74:25:44:75:42:0c:46:ea:da:a6:06:19:ed:ff:c7: fc:c6:d7:a6:be:aa:e8:d8:3f:ff:26:76:14:20:96: 0b:43:5f:3d:8b:dd:b4:a7:73:dc:39:8a:4b:0e:3e: ab:0e:a8:b7:07:39:2b:99:03:45:15:d6:a4:63:94: 52:ad:2b:50:cf:35:2c:c4:a8:03:42:63:7f:80:bc: 44:ec:23:3b:1f:4d:aa:73:bc:0f:b6:c8:1a:7b:57: 19:df:79:51:37:4f:f4:c6:18:76:8f:38:c6:33:9d: be:bf:ed:da:ec:10:c3:d7:94:50:12:08:fd:63:f6: ea:6c:ec:ea:1a:f3:b2:77:eb:07:b3:3a:33:27:fc: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C7:43:27:ED:C8:45:8C:54:9B:D1:22:D7:47:91:75:7E:F3:FB:68 X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d2:70:2b:c9:73:5d:4d:e6:8e:70:f8:af:42:6d:bd:c1:7b: c7:eb:c5:9a:df:f7:f3:25:a5:6d:f7:43:0d:f3:ee:0d:f8:c0: c2:aa:8c:86:3f:27:04:db:db:3d:49:71:74:3d:92:c5:b3:27: 64:e1:20:91:95:56:cc:1b:f9:fe:fa:e8:f1:3d:31:81:6b:c2: 2f:19:29:8d:b9:fd:58:d3:25:ce:6a:d5:0e:ac:bf:d9:b0:cd: a3:a4:b4:f7:05:c1:ce:9f:6d:55:39:b2:2f:5b:90:0c:a7:7d: 84:54:77:c4:35:9b:46:e9:33:02:a0:19:e9:26:7c:2a:3f:a2: ac:5b:c8:2f:c8:b9:20:6e:cd:b6:74:65:83:71:0c:7e:fb:27: e0:dc:9d:c6:3e:72:9e:a2:36:2f:d3:95:32:a1:eb:1e:b0:37: 14:d8:86:91:dd:16:58:1e:32:c1:60:65:05:0f:5d:30:da:b0: cc:7b:e2:03:c2:6d:17:7a:5d:84:49:ae:f3:78:96:2d:12:69: e9:a6:bd:54:86:6d:db:5c:cc:f6:db:91:06:20:21:f7:24:03: 18:04:2c:d8:1f:ad:ec:ef:55:dd:f4:ab:86:48:ae:a2:9e:a5: bd:c8:4b:40:8c:1b:48:d8:8e:eb:87:83:b4:8f:39:25:2a:d8: 07:46:e4:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjUwNTMwMTc1MDQ2WhcNMjUwNjA2MTc1MDQ2WjAYMRYwFAYD VQQDEw02ODM5ZWZmNy1mZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvK8PcRvGMhJEoz+lvWrF1PzC1+2NHtBtKgNE+NrDQt+71tMhXuxkRNfjO2L dy3OY8er11a0VVM/fHWNXmFezPyzktCMQYZwbePXQvwiAa/jLc/FixOSTw91nrwt GEnVxWuSgZn0etN8nogAooxmdNDwS5Vla5Z0JUR1QgxG6tqmBhnt/8f8xtemvqro 2D//JnYUIJYLQ189i920p3PcOYpLDj6rDqi3BzkrmQNFFdakY5RSrStQzzUsxKgD QmN/gLxE7CM7H02qc7wPtsgae1cZ33lRN0/0xhh2jzjGM52+v+3a7BDD15RQEgj9 Y/bqbOzqGvOyd+sHszozJ/yYbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3HQyft yEWMVJvRItdHkXV+8/toMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW0nAryXNdTeaOcPivQm29wXvH68Wa3/fzJaVt90MN8+4N+MDCqoyG PycE29s9SXF0PZLFsydk4SCRlVbMG/n++ujxPTGBa8IvGSmNuf1Y0yXOatUOrL/Z sM2jpLT3BcHOn21VObIvW5AMp32EVHfENZtG6TMCoBnpJnwqP6KsW8gvyLkgbs22 dGWDcQx++yfg3J3GPnKeojYv05UyoesesDcU2IaR3RZYHjLBYGUFD10w2rDMe+ID wm0Xel2ESa7zeJYtEmnppr1Uhm3bXMz225EGICH3JAMYBCzYH63s71Xd9KuGSK6i nqW9yEtAjBtI2I7rh4O0jzklKtgHRuSw -----END CERTIFICATE-----Generated at Sat May 31 17:54:58 2025 by rpki-client