$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: f5Yg3OPi4lP4QuIEj9XrGO1u1PeJvGuVnSgM6ITKJbM= Subject key identifier: 88:B5:BA:8D:69:96:68:7E:68:8A:44:56:A1:D7:39:D0:0B:C0:FC:34 Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 07C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 07BF Signing time: Thu 24 Apr 2025 20:56:52 +0000 Manifest this update: Thu 24 Apr 2025 20:56:52 +0000 Manifest next update: Thu 01 May 2025 20:56:52 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: L42/hNJf0w11/XtgMUkYv0uTMpJu3JW/OTxxsNlrDJ4=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: cQ3kSdVpmJNxckwfYojLBqgPBczRQd1WG2pNa7wN9U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1989 (0x7c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: Apr 24 20:56:52 2025 GMT Not After : May 1 20:56:52 2025 GMT Subject: CN=680aa594-1f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:a2:8c:6e:f3:14:e8:9a:fb:43:4f:62:75: 9b:5c:91:de:e3:a0:69:68:34:9c:52:74:a7:31:c5: 7c:b3:d6:87:e9:9e:68:59:92:e5:8a:0c:f0:41:e6: 3f:50:ca:ce:e1:92:24:e4:e7:e2:ad:22:1f:94:e6: 4d:53:e2:c8:c8:36:11:a4:79:9f:63:be:81:81:a6: e7:9a:74:79:06:99:b4:4a:d2:75:97:ef:07:26:42: 0b:65:f8:31:64:12:96:a9:bf:22:1a:b2:94:16:d6: 72:17:2b:95:1a:f1:39:dd:87:49:d4:f6:8e:a5:cb: 30:7c:20:a5:81:5c:6c:9c:55:5c:0c:6c:b2:ea:4c: de:07:ba:60:64:6d:df:e4:3a:1c:5b:72:e2:05:eb: 46:75:ba:ca:98:2a:fc:69:69:71:86:fb:c7:90:96: 27:bc:99:2a:7a:b6:c6:ce:7b:ed:41:9c:e5:bd:0d: ac:28:49:aa:de:50:07:7c:63:69:19:57:1a:1c:26: e5:df:e0:fd:c7:09:48:28:d8:c7:cd:6d:42:70:de: 62:54:6b:2f:45:7d:ce:f9:2b:51:91:fa:0b:28:e9: 0d:67:c1:59:ac:f7:e7:5e:a4:4d:38:22:98:ba:eb: ba:2f:75:dd:5c:3c:36:47:4f:b1:df:38:9d:b6:86: d9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B5:BA:8D:69:96:68:7E:68:8A:44:56:A1:D7:39:D0:0B:C0:FC:34 X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:c9:d4:07:35:13:78:1a:3a:a5:84:53:91:dd:68:7f:bf:53: c5:08:89:18:22:b8:6a:20:67:dc:1e:99:fc:78:ea:b3:43:6a: 4e:32:05:fb:31:d0:2e:77:d3:82:4c:4b:cb:e9:d2:82:99:ff: 74:8f:5b:5f:85:aa:68:70:4e:8d:3a:2c:72:d0:49:aa:c2:30: 41:b3:3c:a4:30:ed:d1:91:5d:5b:4c:d2:b5:2f:08:38:68:6b: a1:07:66:29:6b:1e:55:98:14:71:3c:d4:e0:27:5a:bd:08:39: 2c:b4:85:3a:ce:7a:68:7d:10:58:fe:00:1c:8e:d9:4e:04:09: ab:a9:94:bc:52:d7:b2:1d:25:20:c0:44:f7:82:5a:93:78:e1: fe:ed:28:b6:8f:c1:fa:bd:1d:fb:22:5f:c7:92:9a:49:ca:0c: 03:ff:b5:c5:bd:32:c9:1d:e9:d3:fd:7c:d3:97:c1:2b:0b:ff: cf:4f:7b:47:00:a2:5b:14:84:b7:c0:2c:12:52:1e:c9:b6:5f: 2e:08:1a:0e:82:d5:f5:25:2c:9e:fb:69:d7:c3:57:84:64:d2: 17:71:e6:a6:13:20:af:82:8b:3f:14:8f:65:40:ed:f9:dd:a0: f7:c1:f0:31:68:0f:e5:d4:0f:22:f4:b9:4c:7c:f2:9f:ab:89: fa:32:fb:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjUwNDI0MjA1NjUyWhcNMjUwNTAxMjA1NjUyWjAYMRYwFAYD VQQDEw02ODBhYTU5NC0xZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3OijG7zFOia+0NPYnWbXJHe46BpaDScUnSnMcV8s9aH6Z5oWZLligzwQeY/ UMrO4ZIk5OfirSIflOZNU+LIyDYRpHmfY76BgabnmnR5Bpm0StJ1l+8HJkILZfgx ZBKWqb8iGrKUFtZyFyuVGvE53YdJ1PaOpcswfCClgVxsnFVcDGyy6kzeB7pgZG3f 5DocW3LiBetGdbrKmCr8aWlxhvvHkJYnvJkqerbGznvtQZzlvQ2sKEmq3lAHfGNp GVcaHCbl3+D9xwlIKNjHzW1CcN5iVGsvRX3O+StRkfoLKOkNZ8FZrPfnXqRNOCKY uuu6L3XdXDw2R0+x3zidtobZRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIi1uo1p lmh+aIpEVqHXOdALwPw0MB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCydQHNRN4GjqlhFOR3Wh/v1PFCIkYIrhqIGfcHpn8eOqzQ2pOMgX7 MdAud9OCTEvL6dKCmf90j1tfhapocE6NOixy0EmqwjBBszykMO3RkV1bTNK1Lwg4 aGuhB2Ypax5VmBRxPNTgJ1q9CDkstIU6znpofRBY/gAcjtlOBAmrqZS8UteyHSUg wET3glqTeOH+7Si2j8H6vR37Il/HkppJygwD/7XFvTLJHenT/XzTl8ErC//PT3tH AKJbFIS3wCwSUh7Jtl8uCBoOgtX1JSye+2nXw1eEZNIXceamEyCvgos/FI9lQO35 3aD3wfAxaA/l1A8i9LlMfPKfq4n6Mvve -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:21 2025 by rpki-client