$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: 1liJYhZ95SaO47jijNOpbqgCHMoc6V5/T33Pj9XqjTg= Subject key identifier: B2:BE:C5:64:58:47:D8:14:D4:5E:C8:9B:CF:3C:DC:A0:AC:EC:D7:84 Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: 0117 Signing time: Sat 09 Aug 2025 03:33:22 +0000 Manifest this update: Sat 09 Aug 2025 03:33:22 +0000 Manifest next update: Sat 16 Aug 2025 03:33:22 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: iIjVFdXSFmtGYwiGSwTFn1NVOc7My1CchvnKgZTD1io=) 2: 21212316C5FF11EF8E8D5A6AC4F9AE02.roa (hash: V6Fl4BJJ1t3UeNpBGfvNyvLgQid8VzH7z9vWNtCcihc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Aug 9 03:33:22 2025 GMT Not After : Aug 16 03:33:22 2025 GMT Subject: CN=6896c182-e42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:e0:94:f0:52:cd:0c:3d:61:ec:88:87:bb: 0f:25:4e:f3:bd:aa:b6:5e:2e:67:17:eb:f3:82:84: be:c7:a8:c4:86:da:d5:c9:e8:76:05:ab:a4:09:ef: 86:5e:f9:95:ed:e8:ee:be:7c:7f:50:2d:ba:f5:10: 11:13:33:81:d1:12:82:9e:6f:dd:85:f4:ea:da:42: ea:d9:69:5e:4b:6f:d1:d4:c7:4f:d0:e0:75:4c:e2: 9d:fc:fb:c5:ab:d7:e3:28:c6:e9:38:23:8d:f1:e5: ae:eb:8e:89:17:da:64:1b:b4:9a:b6:9e:de:04:7f: 22:9a:b8:cc:87:a4:7b:2b:56:43:09:39:fe:4e:9d: 7d:16:7b:b9:69:c7:6d:d7:61:a4:80:a0:00:68:22: 79:01:02:93:0c:41:6b:7a:04:20:df:d3:3e:36:82: f7:68:a3:3b:ac:dc:bc:be:b1:9d:03:32:ed:b7:5d: cf:b8:db:33:20:41:e8:b2:44:af:ba:b4:ac:87:f6: b8:16:ae:be:ad:3c:42:95:f0:25:85:f4:71:9a:0c: 0b:04:57:8d:df:37:c2:d5:69:b8:97:79:bd:4f:a3: ab:16:72:80:25:d7:e0:6f:72:61:0c:62:da:7f:92: 6f:9e:49:b7:bb:73:14:6b:f9:79:d5:e5:e7:61:3b: 9e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BE:C5:64:58:47:D8:14:D4:5E:C8:9B:CF:3C:DC:A0:AC:EC:D7:84 X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:c9:bd:c2:3a:2a:17:00:ea:f7:bb:23:05:e1:ea:bc:10:bd: 1e:9c:8e:b6:1a:ea:a3:45:52:72:e8:e0:92:b6:64:c8:2c:a4: 76:88:dd:ba:34:16:89:88:ff:b7:57:3f:ef:60:d1:61:07:b6: 90:1a:47:12:15:42:27:52:b1:f9:f7:ef:a1:c6:ed:c6:c6:09: 20:f0:20:57:c7:4f:ee:09:bc:43:3e:c3:89:48:6d:7b:25:40: 7d:1d:a7:d7:fe:32:48:4f:4a:b0:73:3d:9c:ec:97:b3:a0:9d: 22:d3:c9:ef:11:f0:8a:73:bb:51:98:f6:17:33:65:ba:10:d3: 24:4f:b8:a8:cf:46:90:da:35:51:d8:05:62:17:27:2f:b6:bb: 0f:c9:ab:c4:f9:c4:a2:04:a3:15:8c:db:b7:80:bf:cd:1c:90: 28:65:d8:cd:f3:45:70:d1:cf:73:a7:37:b0:ef:df:e5:e7:90: 60:d3:d7:30:cd:01:06:b2:6a:24:a9:c9:b4:86:80:49:72:c6: f9:d3:a0:b1:6d:9c:c2:56:a1:7c:48:cb:1a:d5:ab:a3:b5:ee: 6d:3a:00:e6:b2:94:43:1a:f7:72:27:ef:83:30:18:7d:79:c9: 14:ea:a1:13:f4:f3:dd:da:74:23:ad:c8:8f:9e:68:4a:b0:fc: 8d:c0:d6:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUwODA5MDMzMzIyWhcNMjUwODE2MDMzMzIyWjAYMRYwFAYD VQQDEw02ODk2YzE4Mi1lNDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8HglPBSzQw9YeyIh7sPJU7zvaq2Xi5nF+vzgoS+x6jEhtrVyeh2BaukCe+G XvmV7ejuvnx/UC269RAREzOB0RKCnm/dhfTq2kLq2WleS2/R1MdP0OB1TOKd/PvF q9fjKMbpOCON8eWu646JF9pkG7Satp7eBH8imrjMh6R7K1ZDCTn+Tp19Fnu5acdt 12GkgKAAaCJ5AQKTDEFregQg39M+NoL3aKM7rNy8vrGdAzLtt13PuNszIEHoskSv urSsh/a4Fq6+rTxClfAlhfRxmgwLBFeN3zfC1Wm4l3m9T6OrFnKAJdfgb3JhDGLa f5Jvnkm3u3MUa/l51eXnYTue0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK+xWRY R9gU1F7Im8883KCs7NeEMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAByb3COioXAOr3uyMF4eq8EL0enI62GuqjRVJy6OCStmTILKR2iN26 NBaJiP+3Vz/vYNFhB7aQGkcSFUInUrH59++hxu3Gxgkg8CBXx0/uCbxDPsOJSG17 JUB9HafX/jJIT0qwcz2c7JezoJ0i08nvEfCKc7tRmPYXM2W6ENMkT7ioz0aQ2jVR 2AViFycvtrsPyavE+cSiBKMVjNu3gL/NHJAoZdjN80Vw0c9zpzew79/l55Bg09cw zQEGsmokqcm0hoBJcsb506CxbZzCVqF8SMsa1aujte5tOgDmspRDGvdyJ++DMBh9 eckU6qET9PPd2nQjrciPnmhKsPyNwNZy -----END CERTIFICATE-----Generated at Sat Aug 9 23:15:57 2025 by rpki-client