$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: ipH5GFAqt3ZOca7bqY2za8QEdSMIVUlxHVMng/BSgco= Subject key identifier: F2:B6:2D:34:86:5E:09:8E:BF:BF:18:D6:6F:2D:94:49:EE:D3:91:A5 Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 07D8 Signing time: Sat 14 Jun 2025 20:49:30 +0000 Manifest this update: Sat 14 Jun 2025 20:49:29 +0000 Manifest next update: Sat 21 Jun 2025 20:49:29 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: uNBj5tO9zrzXGzonrHr//EfiCdUtSiLtHl/c0vhV+LA=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: cQ3kSdVpmJNxckwfYojLBqgPBczRQd1WG2pNa7wN9U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: Jun 14 20:49:29 2025 GMT Not After : Jun 21 20:49:29 2025 GMT Subject: CN=684de059-012f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:e9:d7:f6:2e:1d:95:4a:6c:19:1c:22:b9: 98:47:b1:f2:41:1a:e2:94:4f:78:28:b0:b3:b7:77: 80:95:3c:80:7d:86:8f:47:01:40:7e:a3:b6:33:0a: 94:fe:f8:17:2c:3f:ae:8e:7d:3e:98:79:23:89:f7: a1:9e:c0:e8:a5:5a:78:05:f1:e5:b1:b1:ae:1f:d3: b8:5f:52:46:1f:26:d4:53:ff:a4:92:6d:76:8f:cf: a4:a6:45:69:ff:87:cb:58:db:89:b0:90:e2:b1:33: 1b:0f:4d:bf:c8:f2:73:42:95:f2:45:13:a8:25:8e: 25:a9:ea:b1:a2:1e:87:01:36:11:ef:23:61:63:dd: b3:ae:80:5d:92:25:69:5a:75:39:51:54:fe:81:04: 0e:3b:ca:22:e6:32:97:91:c2:40:a8:ea:89:34:50: 87:c9:8b:82:d3:97:4d:02:37:6b:b9:f9:fa:90:46: c5:fb:bf:39:51:a0:30:92:c0:52:30:28:b5:e8:3e: a9:ff:33:78:c6:a6:a4:f9:ad:21:84:d0:1c:56:c8: 20:2b:29:cf:e4:8f:df:b9:3c:38:ee:23:a4:ce:67: a5:78:72:d6:01:76:dd:07:dc:24:82:81:54:44:15: 7e:d0:19:d3:ea:e8:ce:7a:7d:f7:42:7d:5a:e4:d3: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B6:2D:34:86:5E:09:8E:BF:BF:18:D6:6F:2D:94:49:EE:D3:91:A5 X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a2:9f:c2:a7:14:8f:d5:7e:74:0f:74:76:be:a5:d7:a4:55: ba:4f:e9:6b:59:bf:55:77:16:76:cb:b0:d3:aa:46:32:dd:2d: 42:25:46:d3:6e:ac:ce:a6:40:e2:6e:db:a5:6d:3a:85:1d:64: c8:3c:78:5a:81:7d:70:30:a2:d4:1a:19:53:73:73:37:05:2a: b0:d8:f9:99:50:9e:dd:1a:17:60:7f:ae:57:ec:fe:71:a0:d8: 90:fc:4c:b8:3c:21:14:f8:02:de:d2:c7:17:f0:df:74:c6:e1: 9d:58:93:2f:51:57:f3:f8:2b:24:67:f7:b0:06:1d:bc:88:cf: c7:bc:7a:95:44:0b:4b:b0:a4:db:95:1c:fb:db:f9:c2:02:e5: 27:87:58:90:78:3d:9f:aa:bc:fe:92:7e:78:a2:50:21:21:41: 46:a3:b2:7f:88:50:00:5a:66:b9:94:2b:e0:cb:84:d1:36:34: 03:46:86:0f:79:5b:a9:5f:f3:af:80:5d:10:d9:13:d8:9b:c9: 8c:b6:e3:ae:75:4a:17:6e:4a:af:1b:d9:07:3d:f1:1b:5e:c5: 0c:9c:91:94:67:f3:1f:c4:50:15:9a:a1:95:df:e6:1a:05:ea: 0e:a7:9c:26:6c:fc:72:fc:29:44:76:34:76:c3:ce:30:d6:00: ed:23:73:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjUwNjE0MjA0OTI5WhcNMjUwNjIxMjA0OTI5WjAYMRYwFAYD VQQDEw02ODRkZTA1OS0wMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8Tp1/YuHZVKbBkcIrmYR7HyQRrilE94KLCzt3eAlTyAfYaPRwFAfqO2MwqU /vgXLD+ujn0+mHkjifehnsDopVp4BfHlsbGuH9O4X1JGHybUU/+kkm12j8+kpkVp /4fLWNuJsJDisTMbD02/yPJzQpXyRROoJY4lqeqxoh6HATYR7yNhY92zroBdkiVp WnU5UVT+gQQOO8oi5jKXkcJAqOqJNFCHyYuC05dNAjdrufn6kEbF+785UaAwksBS MCi16D6p/zN4xqak+a0hhNAcVsggKynP5I/fuTw47iOkzmeleHLWAXbdB9wkgoFU RBV+0BnT6ujOen33Qn1a5NMehwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK2LTSG XgmOv78Y1m8tlEnu05GlMB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvop/CpxSP1X50D3R2vqXXpFW6T+lrWb9VdxZ2y7DTqkYy3S1CJUbT bqzOpkDibtulbTqFHWTIPHhagX1wMKLUGhlTc3M3BSqw2PmZUJ7dGhdgf65X7P5x oNiQ/Ey4PCEU+ALe0scX8N90xuGdWJMvUVfz+CskZ/ewBh28iM/HvHqVRAtLsKTb lRz72/nCAuUnh1iQeD2fqrz+kn54olAhIUFGo7J/iFAAWma5lCvgy4TRNjQDRoYP eVupX/OvgF0Q2RPYm8mMtuOudUoXbkqvG9kHPfEbXsUMnJGUZ/MfxFAVmqGV3+Ya BeoOp5wmbPxy/ClEdjR2w84w1gDtI3NZ -----END CERTIFICATE-----Generated at Sun Jun 15 10:05:49 2025 by rpki-client