$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: g3xOP/RETslE08qgmCear38LJrSiU8uU6VJ9HrbQoDM= Subject key identifier: 67:4A:48:5D:94:C9:64:5B:8E:A0:E0:9A:3F:92:CD:3A:3A:55:75:A5 Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: 0145 Signing time: Wed 05 Nov 2025 02:52:57 +0000 Manifest this update: Wed 05 Nov 2025 02:52:56 +0000 Manifest next update: Wed 12 Nov 2025 02:52:56 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: SyLD7H9PQCWYw0yRX7neg+FZqwU5u0XVZropmiIOBAk=) 2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: rMIYciZYzQpQ3or6eVOdlG8b1B7jrOe8q89C97qwQ6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Nov 5 02:52:56 2025 GMT Not After : Nov 12 02:52:56 2025 GMT Subject: CN=690abc08-c1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:51:af:16:83:ed:c1:a8:73:02:98:01:89: b5:e4:6c:3d:23:11:24:7d:a7:a2:d0:1a:58:ff:5e: 8f:7d:94:40:7f:0a:12:13:6d:16:4f:10:cf:cd:2b: cb:9a:af:c8:25:fc:e1:82:1a:22:02:db:f0:54:b4: 6c:10:12:57:8d:0c:44:cc:5e:ca:49:3b:39:a7:ab: 9d:11:bd:a2:a8:7a:eb:e0:86:ac:1f:34:6e:10:b6: fb:ba:ee:7d:ff:ab:36:51:b4:74:01:f2:2b:33:c0: 08:c2:aa:fc:8e:5b:5e:82:26:f2:ac:e2:e6:e9:86: 7b:2b:38:c6:8a:a0:5f:e0:55:92:fc:c3:03:e5:0a: 3b:45:5e:a2:ab:80:d6:92:51:43:95:96:72:3a:8d: 62:d3:c3:9b:f1:cf:5c:f1:af:d9:a7:76:07:c3:78: f6:e4:47:8a:b0:f6:36:42:ec:e5:3b:a5:c5:2d:8f: 56:f9:5e:ab:95:aa:e2:ad:38:c1:58:62:a1:6f:cf: 8d:15:01:2e:30:e5:0e:94:c0:d3:2d:45:1a:5a:0c: 5b:03:7d:73:04:2d:11:c4:6b:41:e8:a2:17:79:6a: ef:b4:e8:47:48:8a:51:f0:7f:f4:b8:69:eb:48:49: 2e:01:d8:ac:61:00:9d:f8:06:b8:fe:0b:00:51:5a: 48:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4A:48:5D:94:C9:64:5B:8E:A0:E0:9A:3F:92:CD:3A:3A:55:75:A5 X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3d:c1:a9:81:c9:e4:c3:58:ea:92:03:92:de:24:ea:ab:2a: 6e:db:d0:c9:61:a0:0f:77:35:be:d2:be:fb:13:4b:e4:00:17: 6c:19:16:a1:59:05:7b:d4:b5:b8:d6:f0:27:8f:91:44:12:eb: a9:57:f7:77:d4:37:da:19:40:48:6e:07:21:65:34:33:80:04: a7:43:ed:96:3e:31:4d:56:20:2d:ce:be:e8:9b:b2:c9:4b:89: f8:53:b4:3f:f5:93:27:29:2f:2d:84:92:53:74:0e:1b:ff:ab: 70:c8:4f:8b:a4:e2:16:c2:26:50:5f:a1:01:6e:c1:91:ab:7d: cb:95:38:6a:bc:5a:33:39:8c:9a:98:fe:5c:2f:fd:f5:06:d4: 7c:93:15:73:6d:0f:7c:25:53:4f:d7:33:6e:e1:6a:1d:be:f8: 4b:bd:c9:7e:9f:f4:48:b5:58:c1:a6:5f:58:db:d9:50:b6:36: 47:5d:a1:14:3c:38:e8:ae:99:4d:d5:f8:04:aa:4c:1c:92:70: 16:2f:c0:f0:12:03:4b:92:3c:47:fd:8e:2b:ba:76:93:66:fa: f9:4c:ef:04:df:1e:91:7c:bd:7d:ea:71:12:70:ae:c9:6a:6e: 58:84:89:82:ff:1c:3b:c1:85:a0:89:ea:c7:8d:59:fe:6a:f5: 9b:97:e7:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUxMTA1MDI1MjU2WhcNMjUxMTEyMDI1MjU2WjAYMRYwFAYD VQQDEw02OTBhYmMwOC1jMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XVRrxaD7cGocwKYAYm15Gw9IxEkfaei0BpY/16PfZRAfwoSE20WTxDPzSvL mq/IJfzhghoiAtvwVLRsEBJXjQxEzF7KSTs5p6udEb2iqHrr4IasHzRuELb7uu59 /6s2UbR0AfIrM8AIwqr8jltegibyrOLm6YZ7KzjGiqBf4FWS/MMD5Qo7RV6iq4DW klFDlZZyOo1i08Ob8c9c8a/Zp3YHw3j25EeKsPY2QuzlO6XFLY9W+V6rlarirTjB WGKhb8+NFQEuMOUOlMDTLUUaWgxbA31zBC0RxGtB6KIXeWrvtOhHSIpR8H/0uGnr SEkuAdisYQCd+Aa4/gsAUVpIewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdKSF2U yWRbjqDgmj+SzTo6VXWlMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtPcGpgcnkw1jqkgOS3iTqqypu29DJYaAPdzW+0r77E0vkABdsGRah WQV71LW41vAnj5FEEuupV/d31DfaGUBIbgchZTQzgASnQ+2WPjFNViAtzr7om7LJ S4n4U7Q/9ZMnKS8thJJTdA4b/6twyE+LpOIWwiZQX6EBbsGRq33LlThqvFozOYya mP5cL/31BtR8kxVzbQ98JVNP1zNu4WodvvhLvcl+n/RItVjBpl9Y29lQtjZHXaEU PDjorplN1fgEqkwcknAWL8DwEgNLkjxH/Y4runaTZvr5TO8E3x6RfL196nEScK7J am5YhImC/xw7wYWgierHjVn+avWbl+d2 -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:19 2025 by rpki-client