$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json) Hash identifier: /VLtMp8wzjKffN/KW+WURize/b3q+pFX9G3R09GEAkM= Subject key identifier: 5B:C6:66:D8:11:1C:3E:3B:00:C8:B6:3C:CA:16:03:47:75:85:7F:36 Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1BF1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft Manifest number: 1BEE Signing time: Wed 06 Aug 2025 16:18:23 +0000 Manifest this update: Wed 06 Aug 2025 16:18:23 +0000 Manifest next update: Wed 13 Aug 2025 16:18:23 +0000 Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: EtuqaBr+zWzw5Fp/iUvtI9v8g6lF5pFiKioS0YMGSF0=) 2: 88E0DEC8507F11F09A42640CC4F9AE02.roa (hash: DTqIm8GiZbV74uZenoKAP4tZvCOqkDCAtb7Ryg/Bt7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7153 (0x1bf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Aug 6 16:18:23 2025 GMT Not After : Aug 13 16:18:23 2025 GMT Subject: CN=6893804f-3363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:88:82:51:f9:c3:b2:5f:e7:58:21:62:7e: 61:01:d6:a0:05:b0:3c:f3:72:78:c4:0a:8f:81:7b: 91:ee:b3:9f:18:ad:f0:d7:40:00:b8:9d:d5:54:9e: 3a:fa:46:dd:ff:aa:eb:c0:90:1d:5e:e3:55:29:d3: 69:5f:19:64:8a:da:46:f4:66:ea:f5:44:f8:fd:28: 94:6b:2c:e1:e1:c9:bf:53:bb:7c:2c:91:db:ea:1c: 4d:dd:cf:86:07:a4:e4:c5:17:3f:9c:5b:3e:98:7d: 6e:4f:71:4a:2b:a2:bd:38:72:d8:70:85:e8:c9:1d: e3:66:c2:30:be:2a:77:a3:db:79:e6:ea:62:51:08: 34:f0:fd:72:fb:b0:ee:b9:bb:b5:13:47:b8:24:5e: de:d4:12:8e:4a:5c:33:7f:f5:2a:62:32:c3:b3:8d: 69:08:a0:79:ac:47:75:45:00:35:40:33:d5:26:90: ff:e4:0f:79:28:b9:59:56:1a:c9:9c:80:c4:fe:f2: 34:92:4d:6c:64:e2:c1:73:3a:73:e9:d4:ba:1b:f9: eb:83:48:66:fe:be:e3:57:ec:dc:35:59:d8:1b:34: 94:bc:8a:47:1a:3e:4d:d9:c5:e9:1d:09:f8:ae:f6: 74:a6:c8:b2:df:b5:86:e9:dc:8a:65:73:30:f4:0b: 9e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C6:66:D8:11:1C:3E:3B:00:C8:B6:3C:CA:16:03:47:75:85:7F:36 X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:2c:31:e6:49:38:24:57:b6:14:67:69:0c:1d:2d:73:cc:86: eb:a3:d8:63:fe:c2:26:65:87:8e:da:db:2e:e5:93:00:26:dd: 58:6e:35:53:47:64:c1:50:b4:2c:c8:69:9b:ab:83:ed:cd:ee: f9:97:0b:e7:a4:74:ac:e2:50:fc:a2:af:e9:13:cd:f0:b0:f2: 4f:8f:8c:40:17:8c:16:5d:fb:c2:76:b4:30:93:73:e4:ba:04: f2:c6:e7:7d:ff:a4:54:06:c2:b3:10:b0:8f:32:79:43:f2:a2: 62:99:bf:00:99:f2:76:aa:23:36:ba:3f:fc:86:71:d9:eb:79: 86:95:9f:1e:de:e3:b7:c9:49:ae:03:35:63:50:1c:4d:23:aa: 3c:ca:45:7b:68:81:e4:c1:29:43:ec:40:29:20:3f:b6:66:2b: 5e:54:d8:0a:7a:2d:b8:57:0f:62:5b:75:56:8c:40:6e:b1:01: c9:b3:52:9f:36:69:95:49:5f:f6:bc:ce:22:46:bc:9b:3a:ba: 31:55:58:86:17:91:93:b6:d4:f6:6d:4b:c8:c7:f0:26:30:1c: 90:da:4d:84:42:3e:bb:e4:63:80:d2:f8:79:d6:0f:14:5f:e6: 13:17:0c:96:cc:56:dd:16:aa:09:8e:cc:c6:0c:55:25:82:9f: 57:81:6c:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjUwODA2MTYxODIzWhcNMjUwODEzMTYxODIzWjAYMRYwFAYD VQQDEw02ODkzODA0Zi0zMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNmIglH5w7Jf51ghYn5hAdagBbA883J4xAqPgXuR7rOfGK3w10AAuJ3VVJ46 +kbd/6rrwJAdXuNVKdNpXxlkitpG9Gbq9UT4/SiUayzh4cm/U7t8LJHb6hxN3c+G B6TkxRc/nFs+mH1uT3FKK6K9OHLYcIXoyR3jZsIwvip3o9t55upiUQg08P1y+7Du ubu1E0e4JF7e1BKOSlwzf/UqYjLDs41pCKB5rEd1RQA1QDPVJpD/5A95KLlZVhrJ nIDE/vI0kk1sZOLBczpz6dS6G/nrg0hm/r7jV+zcNVnYGzSUvIpHGj5N2cXpHQn4 rvZ0psiy37WG6dyKZXMw9AuegQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvGZtgR HD47AMi2PMoWA0d1hX82MB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8yQjBCRkQ5OEY2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBY ZlVXU3hEUzgtV0s4Q294bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTLDHmSTgkV7YUZ2kMHS1zzIbro9hj/sImZYeO2tsu5ZMAJt1YbjVT R2TBULQsyGmbq4Ptze75lwvnpHSs4lD8oq/pE83wsPJPj4xAF4wWXfvCdrQwk3Pk ugTyxud9/6RUBsKzELCPMnlD8qJimb8AmfJ2qiM2uj/8hnHZ63mGlZ8e3uO3yUmu AzVjUBxNI6o8ykV7aIHkwSlD7EApID+2ZiteVNgKei24Vw9iW3VWjEBusQHJs1Kf NmmVSV/2vM4iRrybOroxVViGF5GTttT2bUvIx/AmMByQ2k2EQj675GOA0vh51g8U X+YTFwyWzFbdFqoJjszGDFUlgp9XgWz9 -----END CERTIFICATE-----Generated at Fri Aug 8 00:49:46 2025 by rpki-client