$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json) Hash identifier: xsUc2CrOj+dR+d6YQJs1AO/m4rZRsAgW6IvbJDCXyMM= Subject key identifier: 19:8E:07:60:C5:2C:DB:97:10:AA:FC:A5:30:7C:79:59:85:56:AD:1A Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1BD5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft Manifest number: 1BD3 Signing time: Mon 16 Jun 2025 16:18:11 +0000 Manifest this update: Mon 16 Jun 2025 16:18:11 +0000 Manifest next update: Mon 23 Jun 2025 16:18:11 +0000 Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: lrNaKb5BUxMJegIxRQR8UMZausQFt4izUzCc2b8Ur1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7125 (0x1bd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Jun 16 16:18:11 2025 GMT Not After : Jun 23 16:18:11 2025 GMT Subject: CN=685043c3-ef19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:0d:54:d6:6b:15:d9:15:c3:87:0d:67:9d: b1:1b:57:e1:d0:aa:db:9f:da:04:c1:ed:1a:dc:b8: 1c:1c:18:13:8f:ca:1e:bd:a0:0e:01:d6:15:e4:c5: 92:36:79:37:54:a5:5b:8f:be:23:74:f0:f9:ac:23: ff:88:17:2e:af:88:73:aa:53:23:57:4c:1c:e8:0c: 2b:bb:d1:a1:f1:ac:45:39:51:43:a4:e8:fc:c8:b0: 1f:69:2f:3d:f0:5a:77:4f:22:9d:36:ee:1a:14:99: 38:12:93:0d:b4:4c:06:75:07:4b:a4:8d:60:3c:ae: 11:f1:0d:86:bb:01:2f:e1:3a:fc:51:28:97:cc:d2: d9:e7:79:71:ae:18:4f:ff:b5:00:e3:eb:fe:28:81: c0:d3:7a:ff:80:6c:7f:43:4f:db:01:a8:42:0e:84: 99:75:65:4b:c4:58:57:ae:a3:fc:56:c5:e9:02:57: eb:6a:85:ea:ca:9a:e4:5c:0e:db:43:64:9c:3f:b1: 15:d4:c0:d1:57:21:84:0e:a0:89:8b:5e:6d:02:06: 2d:58:16:04:28:ad:15:fb:6e:6a:65:93:38:20:ef: 43:ec:f1:6e:b7:a1:c5:ee:ae:71:75:e7:24:06:ab: 89:4c:5b:7b:8a:a2:ab:5c:0a:7c:35:56:4c:ad:5f: c3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8E:07:60:C5:2C:DB:97:10:AA:FC:A5:30:7C:79:59:85:56:AD:1A X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:24:b4:69:19:00:f1:2c:4d:20:d3:7b:c2:4e:27:c6:53:d4: ad:1e:9d:69:fb:ee:52:be:ac:8e:9b:1d:3c:c7:aa:af:8d:0a: d4:1e:2a:80:4c:af:af:70:11:ab:a9:04:4c:1b:75:78:e1:10: 0e:fb:e2:a0:23:fc:0a:de:4a:8f:71:6f:6a:bb:74:98:e8:4f: 1d:ab:9c:15:62:84:0d:f4:f9:8e:07:b4:c7:3b:2e:af:b0:af: 27:6c:9e:59:d7:ec:63:99:b3:4c:39:22:b8:76:7d:38:69:fd: c4:cd:d4:1f:4e:72:64:1a:b3:e4:c9:09:31:65:f6:79:90:7e: 12:32:cc:e1:9b:77:c4:bb:97:ba:d3:4d:2a:5e:9c:4f:27:49: 35:0e:a6:04:99:e5:09:22:c2:27:1e:ea:4e:99:98:4e:a3:57: f6:5a:a8:ed:c9:ae:b6:40:90:b0:69:e3:c3:26:26:66:4f:80: 4c:3f:ea:7e:a4:4f:dd:5f:82:78:51:f8:17:45:b2:da:55:89: 1b:07:2a:ed:c3:48:3f:9e:ec:b4:20:55:81:a9:d7:3e:3e:80: 2d:20:b4:05:14:1f:72:74:b7:9e:16:63:c0:52:39:4a:46:72: 0e:97:7a:eb:39:c2:19:45:33:d0:7f:a9:29:24:27:59:6e:46: 65:dd:41:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjUwNjE2MTYxODExWhcNMjUwNjIzMTYxODExWjAYMRYwFAYD VQQDEw02ODUwNDNjMy1lZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0INVNZrFdkVw4cNZ52xG1fh0Krbn9oEwe0a3LgcHBgTj8oevaAOAdYV5MWS Nnk3VKVbj74jdPD5rCP/iBcur4hzqlMjV0wc6Awru9Gh8axFOVFDpOj8yLAfaS89 8Fp3TyKdNu4aFJk4EpMNtEwGdQdLpI1gPK4R8Q2GuwEv4Tr8USiXzNLZ53lxrhhP /7UA4+v+KIHA03r/gGx/Q0/bAahCDoSZdWVLxFhXrqP8VsXpAlfraoXqyprkXA7b Q2ScP7EV1MDRVyGEDqCJi15tAgYtWBYEKK0V+25qZZM4IO9D7PFut6HF7q5xdeck BquJTFt7iqKrXAp8NVZMrV/D7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmOB2DF LNuXEKr8pTB8eVmFVq0aMB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8yQjBCRkQ5OEY2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBY ZlVXU3hEUzgtV0s4Q294bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsJLRpGQDxLE0g03vCTifGU9StHp1p++5SvqyOmx08x6qvjQrUHiqA TK+vcBGrqQRMG3V44RAO++KgI/wK3kqPcW9qu3SY6E8dq5wVYoQN9PmOB7THOy6v sK8nbJ5Z1+xjmbNMOSK4dn04af3EzdQfTnJkGrPkyQkxZfZ5kH4SMszhm3fEu5e6 000qXpxPJ0k1DqYEmeUJIsInHupOmZhOo1f2Wqjtya62QJCwaePDJiZmT4BMP+p+ pE/dX4J4UfgXRbLaVYkbByrtw0g/nuy0IFWBqdc+PoAtILQFFB9ydLeeFmPAUjlK RnIOl3rrOcIZRTPQf6kpJCdZbkZl3UGx -----END CERTIFICATE-----Generated at Wed Jun 18 12:49:32 2025 by rpki-client