$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: RqMra3p7+r08+BjodyFQclcYMcQhDbfzvbLuReX82FA= Subject key identifier: D1:E3:AC:66:AA:8C:D9:AE:80:74:BA:85:3B:A9:FF:1A:34:BF:1A:5E Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: E2 Signing time: Fri 25 Apr 2025 02:59:51 +0000 Manifest this update: Fri 25 Apr 2025 02:59:50 +0000 Manifest next update: Fri 02 May 2025 02:59:50 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: /EV95UcbgDAsMhe3mGaaVFatFvDY1zuFIVXrdzAV9wM=) 2: 21212316C5FF11EF8E8D5A6AC4F9AE02.roa (hash: V6Fl4BJJ1t3UeNpBGfvNyvLgQid8VzH7z9vWNtCcihc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Apr 25 02:59:50 2025 GMT Not After : May 2 02:59:50 2025 GMT Subject: CN=680afaa6-3d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:a0:f8:a8:7e:2a:3f:24:c1:07:09:7e:df: 3a:f9:a1:9f:77:3f:71:65:f6:bb:dd:7e:7c:bc:20: 6f:31:08:9f:68:5e:ec:4d:5e:e6:cb:0d:6e:99:a1: 65:c8:c3:c4:94:5a:a9:51:7e:97:68:36:36:d8:5c: e7:da:6e:21:51:06:6e:b6:8f:5f:0c:ea:05:c9:c4: be:48:c5:b2:cd:57:8f:96:b1:60:68:7e:ca:b8:5f: a0:74:25:74:1d:7d:86:82:8f:b5:e6:a5:65:79:f7: ea:af:26:30:ff:ee:de:14:37:99:a4:df:71:29:b4: 98:3a:7e:9c:7c:dc:7c:cf:72:90:a0:1b:c0:81:2c: 85:7a:ca:18:c1:56:e4:f9:58:3f:8a:e0:53:f4:c2: dd:3b:c0:86:cc:e4:ad:6f:7d:be:03:e4:a7:0e:cc: 65:02:ad:4a:0a:29:14:c5:f0:97:03:a8:ed:53:80: b2:1c:92:0f:e0:d6:a0:74:d7:4b:8c:68:a7:1c:ad: d9:a2:b1:dc:04:b1:51:62:a3:fe:78:66:a0:2d:29: 6e:8c:0c:5c:95:d2:b3:c9:cf:d1:4c:cc:9b:1b:20: 41:3a:ec:02:19:6a:35:6c:23:0d:b7:c4:69:f2:eb: d0:7b:82:54:9f:34:90:9f:87:d6:61:3f:12:bb:36: 31:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E3:AC:66:AA:8C:D9:AE:80:74:BA:85:3B:A9:FF:1A:34:BF:1A:5E X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b6:a4:b3:16:07:68:5b:c7:ca:5b:12:c8:5b:0a:7a:4a:0c: 1c:7b:06:b8:53:6a:29:d4:9b:f2:35:f9:4f:20:2a:71:a8:b7: 11:4e:98:9a:d1:47:eb:7c:77:c8:f5:ab:c0:55:ac:0e:66:74: d0:77:bb:8b:98:57:e9:88:0d:a3:25:7c:f1:ad:0b:50:58:74: a4:94:28:2a:53:28:2f:e4:46:63:53:80:bb:aa:f3:1e:fc:86: 2b:34:00:d2:ad:f2:46:3e:63:d3:10:9b:62:5d:81:b2:4a:c1: 4d:bf:03:86:af:e3:dd:7f:8f:cb:85:18:eb:8b:4a:b5:1f:c7: 6a:1d:8c:e4:f1:a3:cf:24:59:4d:68:69:28:8c:5c:21:ea:43: 5f:fd:d7:fa:5b:0b:f5:cb:b8:b6:17:1d:d8:6d:5b:3a:1e:95: 7b:57:66:1a:0a:83:3a:91:6f:d1:84:82:1b:cc:ad:5d:1b:56: 28:a3:98:d8:13:94:92:45:fb:5b:fa:8a:49:23:48:7b:db:7d: b8:46:6e:04:e8:89:fe:25:a5:2c:59:44:3d:ce:fe:d2:b6:94: 04:87:b4:7c:5a:e9:22:36:a6:1d:af:06:9d:f1:93:84:29:bd: e8:c4:fd:b9:fb:55:34:74:80:c4:cc:e6:0e:d4:00:26:4d:16: 0d:87:ee:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUwNDI1MDI1OTUwWhcNMjUwNTAyMDI1OTUwWjAYMRYwFAYD VQQDEw02ODBhZmFhNi0zZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJig+Kh+Kj8kwQcJft86+aGfdz9xZfa73X58vCBvMQifaF7sTV7myw1umaFl yMPElFqpUX6XaDY22Fzn2m4hUQZuto9fDOoFycS+SMWyzVePlrFgaH7KuF+gdCV0 HX2Ggo+15qVleffqryYw/+7eFDeZpN9xKbSYOn6cfNx8z3KQoBvAgSyFesoYwVbk +Vg/iuBT9MLdO8CGzOStb32+A+SnDsxlAq1KCikUxfCXA6jtU4CyHJIP4NagdNdL jGinHK3ZorHcBLFRYqP+eGagLSlujAxcldKzyc/RTMybGyBBOuwCGWo1bCMNt8Rp 8uvQe4JUnzSQn4fWYT8SuzYxzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHjrGaq jNmugHS6hTup/xo0vxpeMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCStqSzFgdoW8fKWxLIWwp6Sgwcewa4U2op1JvyNflPICpxqLcRTpia 0UfrfHfI9avAVawOZnTQd7uLmFfpiA2jJXzxrQtQWHSklCgqUygv5EZjU4C7qvMe /IYrNADSrfJGPmPTEJtiXYGySsFNvwOGr+Pdf4/LhRjri0q1H8dqHYzk8aPPJFlN aGkojFwh6kNf/df6Wwv1y7i2Fx3YbVs6HpV7V2YaCoM6kW/RhIIbzK1dG1Yoo5jY E5SSRftb+opJI0h72324Rm4E6In+JaUsWUQ9zv7StpQEh7R8WukiNqYdrwad8ZOE Kb3oxP25+1U0dIDEzOYO1AAmTRYNh+7J -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:31 2025 by rpki-client