$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft File: cx5XsN_ep5G6TV1xly2oEF3JPos.mft (raw, json) Hash identifier: cxtrSQfbTyNt9TK5G0DDv380bOdTAL7K/68VxVCvskQ= Subject key identifier: 56:71:DE:66:C7:A7:E6:F6:8D:CF:83:2F:CC:8F:C9:12:CB:0C:BA:98 Authority key identifier: 73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B Certificate issuer: /CN=A91AA444/serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft Manifest number: 010C Signing time: Fri 13 Jun 2025 03:56:47 +0000 Manifest this update: Fri 13 Jun 2025 03:56:46 +0000 Manifest next update: Fri 20 Jun 2025 03:56:46 +0000 Files and hashes: 1: cx5XsN_ep5G6TV1xly2oEF3JPos.crl (hash: 86hYcKBL4cDIvc3BXESuHQic4ESKidqaH5WMlCBUP6w=) 2: 24DD519CEEA311EFA5EDDD76C4F9AE02.roa (hash: +mEj5z+agEcnRzWZMjR0oYobGLfQGCXmi+n1VzU085s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA444, serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Validity Not Before: Jun 13 03:56:46 2025 GMT Not After : Jun 20 03:56:46 2025 GMT Subject: CN=684ba17f-2893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:14:c7:85:45:4d:de:ce:87:03:8e:95:ea:9e: 9a:51:43:54:90:ed:5f:75:31:2f:87:f3:44:8f:23: 2a:70:eb:12:ee:c1:07:ec:0c:f2:32:b9:f8:73:22: a7:48:02:08:95:2e:14:5f:8c:82:49:ce:09:9a:a0: 6b:26:5b:e9:5b:73:6a:32:70:f9:3c:4c:38:b4:a0: 1a:a7:ac:8a:f7:8b:42:34:77:62:e1:fc:d3:60:1e: b9:b8:ee:4c:17:e1:b5:0d:f8:a0:b6:ba:6b:6d:28: 5a:f4:08:4f:a2:eb:54:a7:10:7b:3f:d9:13:3d:c8: 7d:f0:43:11:12:8c:0b:45:d1:03:91:5f:ac:91:98: 08:aa:68:f3:41:ab:06:ed:34:f9:81:20:36:19:98: 19:46:54:8d:48:89:6a:77:54:c1:f2:8b:79:19:57: c7:2c:49:13:74:44:c7:8a:9b:d6:d9:c5:a6:02:4c: c8:53:b6:12:9a:97:70:8f:39:4c:fd:11:44:57:5a: e8:25:e7:70:9c:ac:ad:29:c7:78:53:a0:c8:12:a0: 48:7a:0e:75:a9:7f:10:1b:75:68:17:7b:aa:06:20: d5:7a:0b:f1:94:5c:ee:1f:7f:41:03:ad:2c:99:e5: e5:4b:b0:37:a9:fe:67:a2:af:53:12:2a:be:14:76: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:71:DE:66:C7:A7:E6:F6:8D:CF:83:2F:CC:8F:C9:12:CB:0C:BA:98 X509v3 Authority Key Identifier: keyid:73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:bd:d0:e7:71:62:72:11:5e:bd:ad:c4:40:87:dc:22:73:2d: 11:76:34:69:2e:68:14:83:8c:97:84:45:63:f6:cb:cb:0b:4a: eb:ca:14:41:1e:b2:59:b4:0e:4a:01:da:46:38:cb:f6:20:2c: 66:3e:ff:e8:64:5f:be:e9:70:af:3c:d7:41:14:ef:7b:4e:74: 43:31:11:c3:d4:8d:43:93:d9:a5:59:11:73:fb:8d:e4:01:1b: 1c:a8:6f:b3:bc:17:35:4a:90:ca:2a:69:78:21:76:f1:eb:d3: eb:94:27:67:42:18:9c:fd:59:3f:d3:d5:38:45:74:f2:b4:b3: 90:8e:67:3d:f1:47:96:f7:32:43:27:d0:d6:62:05:4e:76:3b: 74:8e:e4:0f:27:e4:37:f5:4c:78:5f:00:e7:b3:83:cc:52:e8: 12:73:23:30:d0:c4:4b:bc:0f:58:82:ac:72:82:c3:78:08:98: f9:d6:70:c2:68:cb:8d:b6:7b:72:a1:d4:04:1a:d6:d6:c4:94: 39:e2:29:b5:89:49:8e:47:14:64:36:79:0f:eb:af:0a:da:8a: 8d:71:f9:d4:53:a8:0c:55:dd:d0:34:5a:6a:0e:a8:81:e5:87: 1a:00:b4:4f:af:0f:b3:01:20:bc:11:86:17:1c:9c:2d:8f:47: 15:09:15:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0NDQxMTAvBgNVBAUTKDczMUU1N0IwREZERUE3OTFCQTRENUQ3MTk3MkRBODEw NURDOTNFOEIwHhcNMjUwNjEzMDM1NjQ2WhcNMjUwNjIwMDM1NjQ2WjAYMRYwFAYD VQQDEw02ODRiYTE3Zi0yODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BTHhUVN3s6HA46V6p6aUUNUkO1fdTEvh/NEjyMqcOsS7sEH7AzyMrn4cyKn SAIIlS4UX4yCSc4JmqBrJlvpW3NqMnD5PEw4tKAap6yK94tCNHdi4fzTYB65uO5M F+G1DfigtrprbSha9AhPoutUpxB7P9kTPch98EMREowLRdEDkV+skZgIqmjzQasG 7TT5gSA2GZgZRlSNSIlqd1TB8ot5GVfHLEkTdETHipvW2cWmAkzIU7YSmpdwjzlM /RFEV1roJedwnKytKcd4U6DIEqBIeg51qX8QG3VoF3uqBiDVegvxlFzuH39BA60s meXlS7A3qf5noq9TEiq+FHafpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZx3mbH p+b2jc+DL8yPyRLLDLqYMB8GA1UdIwQYMBaAFHMeV7Df3qeRuk1dcZctqBBdyT6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ0NC84RENFMjc0QUIx MUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1RzZUVjF4bHkyb0VGM0pQ b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NVhzTl9lcDVHNlRWMXhseTJvRUYzSlBvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ0NC84RENFMjc0QUIxMUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1 RzZUVjF4bHkyb0VGM0pQb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFvdDncWJyEV69rcRAh9wicy0RdjRpLmgUg4yXhEVj9svLC0rryhRB HrJZtA5KAdpGOMv2ICxmPv/oZF++6XCvPNdBFO97TnRDMRHD1I1Dk9mlWRFz+43k ARscqG+zvBc1SpDKKml4IXbx69PrlCdnQhic/Vk/09U4RXTytLOQjmc98UeW9zJD J9DWYgVOdjt0juQPJ+Q39Ux4XwDns4PMUugScyMw0MRLvA9YgqxygsN4CJj51nDC aMuNtntyodQEGtbWxJQ54im1iUmORxRkNnkP668K2oqNcfnUU6gMVd3QNFpqDqiB 5YcaALRPrw+zASC8EYYXHJwtj0cVCRXz -----END CERTIFICATE-----Generated at Sat Jun 14 19:11:05 2025 by rpki-client