$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: wiaeS3GK60tgSBswzbiAJxvRp6v3tXx1iRfW1tTaYds= Subject key identifier: F4:2C:D0:A2:62:DC:9A:AE:1A:51:C2:4C:EB:01:D0:50:35:34:06:D6 Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: FC Signing time: Tue 17 Jun 2025 02:35:55 +0000 Manifest this update: Tue 17 Jun 2025 02:35:55 +0000 Manifest next update: Tue 24 Jun 2025 02:35:55 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: yrZzBaQYEsSNT1Wpy8Y23qXAPreAWZwJvz5hVj9J3T0=) 2: 21212316C5FF11EF8E8D5A6AC4F9AE02.roa (hash: V6Fl4BJJ1t3UeNpBGfvNyvLgQid8VzH7z9vWNtCcihc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Jun 17 02:35:55 2025 GMT Not After : Jun 24 02:35:55 2025 GMT Subject: CN=6850d48b-2764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:17:b5:58:c2:dc:19:5f:8f:32:78:4f:b4: 9f:53:6a:29:46:23:27:88:09:a1:1a:fc:fc:0f:15: a0:47:cc:00:5c:5c:63:fe:a5:c7:b5:3b:0b:8e:a9: a7:1f:aa:20:5c:b2:2a:36:6d:77:39:f4:00:35:ed: 09:17:85:b3:08:b6:7f:90:33:05:44:74:73:10:2f: 9d:8f:8c:55:90:47:7a:21:93:e4:df:02:a9:45:b7: 37:a1:67:01:d2:be:4d:15:22:6b:68:4f:e6:23:d9: 81:92:af:17:52:98:6e:65:4e:e3:ca:c3:66:dc:95: 05:9e:18:2f:7b:c7:47:5e:bc:8f:b4:02:5d:3e:e0: dc:4a:19:1e:8d:d7:99:cd:50:53:d5:1d:63:bb:df: c9:c6:61:fc:e3:fa:66:11:fc:c9:b6:12:74:b2:94: a2:eb:0f:b9:65:02:04:4d:84:f1:e6:e8:47:46:96: 99:de:58:ae:67:c3:3e:67:e1:3e:72:8d:a3:34:98: 6a:13:60:68:3d:9e:2c:32:b6:ad:80:15:df:a9:70: d1:14:e7:23:1a:33:f4:95:88:02:27:41:77:fb:cb: 9a:12:c8:9a:d2:f9:58:db:f2:8a:9b:03:e4:a7:25: 4f:95:e6:db:76:aa:f0:d3:6b:08:b7:99:c2:78:7e: ab:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2C:D0:A2:62:DC:9A:AE:1A:51:C2:4C:EB:01:D0:50:35:34:06:D6 X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:10:fb:8f:ba:72:c2:6f:55:ee:2e:4b:09:77:ad:98:39:69: 76:7a:67:d3:57:e3:92:18:e8:1a:c9:14:30:20:60:d4:42:4e: a5:fb:1d:2a:2c:5a:fa:73:fc:8a:fd:2f:4a:25:84:aa:9f:01: ad:74:4a:86:02:08:4a:79:c0:53:10:c3:87:6a:6d:a3:e0:b5: a2:f9:66:dc:ef:3b:44:81:a2:8d:e9:c7:1a:30:ff:c6:0c:b0: 52:51:eb:7d:66:58:0e:07:9b:9d:83:c4:ec:b3:ca:75:75:9e: d7:2b:29:de:b7:3e:d2:a3:bd:cf:6a:e1:ce:71:e8:be:98:8e: 30:2c:90:b6:cb:54:89:20:ea:6e:77:04:1f:c8:b3:b3:5d:de: 82:43:59:31:a9:77:c5:8d:f4:71:f0:6c:b5:7d:7e:f8:e5:a4: 55:7b:f9:8b:50:11:37:b9:69:36:8b:ce:09:a7:f6:3d:ad:66: 50:8f:1f:4e:2b:26:83:a9:fb:22:d6:2a:32:7c:f7:08:48:ca: 1a:08:6b:14:c1:fe:d2:bf:d8:e7:f8:18:3d:57:5a:85:b7:da: ec:fb:e7:6b:5a:00:7e:08:d6:fb:46:0e:2e:eb:1c:1e:24:4d: 8e:51:3a:b5:82:60:33:47:96:e7:97:c3:f7:38:4b:4b:f1:24: 7e:8b:22:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUwNjE3MDIzNTU1WhcNMjUwNjI0MDIzNTU1WjAYMRYwFAYD VQQDEw02ODUwZDQ4Yi0yNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxysXtVjC3BlfjzJ4T7SfU2opRiMniAmhGvz8DxWgR8wAXFxj/qXHtTsLjqmn H6ogXLIqNm13OfQANe0JF4WzCLZ/kDMFRHRzEC+dj4xVkEd6IZPk3wKpRbc3oWcB 0r5NFSJraE/mI9mBkq8XUphuZU7jysNm3JUFnhgve8dHXryPtAJdPuDcShkejdeZ zVBT1R1ju9/JxmH84/pmEfzJthJ0spSi6w+5ZQIETYTx5uhHRpaZ3liuZ8M+Z+E+ co2jNJhqE2BoPZ4sMratgBXfqXDRFOcjGjP0lYgCJ0F3+8uaEsia0vlY2/KKmwPk pyVPlebbdqrw02sIt5nCeH6rywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQs0KJi 3JquGlHCTOsB0FA1NAbWMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBREPuPunLCb1XuLksJd62YOWl2emfTV+OSGOgayRQwIGDUQk6l+x0q LFr6c/yK/S9KJYSqnwGtdEqGAghKecBTEMOHam2j4LWi+Wbc7ztEgaKN6ccaMP/G DLBSUet9ZlgOB5udg8Tss8p1dZ7XKynetz7So73PauHOcei+mI4wLJC2y1SJIOpu dwQfyLOzXd6CQ1kxqXfFjfRx8Gy1fX745aRVe/mLUBE3uWk2i84Jp/Y9rWZQjx9O KyaDqfsi1ioyfPcISMoaCGsUwf7Sv9jn+Bg9V1qFt9rs++drWgB+CNb7Rg4u6xwe JE2OUTq1gmAzR5bnl8P3OEtL8SR+iyII -----END CERTIFICATE-----Generated at Thu Jun 19 05:15:43 2025 by rpki-client