$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft File: cx5XsN_ep5G6TV1xly2oEF3JPos.mft (raw, json) Hash identifier: aUF0ccudSovVHbveC5nRIEVXDAPqx7aDzLIPwX1R1g4= Subject key identifier: F1:F4:9A:4C:65:36:F7:34:F9:05:AC:65:24:83:AA:D8:A8:AA:42:6E Authority key identifier: 73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B Certificate issuer: /CN=A91AA444/serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft Manifest number: 0129 Signing time: Sat 09 Aug 2025 05:02:31 +0000 Manifest this update: Sat 09 Aug 2025 05:02:31 +0000 Manifest next update: Sat 16 Aug 2025 05:02:31 +0000 Files and hashes: 1: cx5XsN_ep5G6TV1xly2oEF3JPos.crl (hash: 3Z9Fx3jZKeKEg4e0tC3oqZGof9ee8TNyzjzZ0lmZSOw=) 2: 24DD519CEEA311EFA5EDDD76C4F9AE02.roa (hash: +mEj5z+agEcnRzWZMjR0oYobGLfQGCXmi+n1VzU085s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA444, serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Validity Not Before: Aug 9 05:02:31 2025 GMT Not After : Aug 16 05:02:31 2025 GMT Subject: CN=6896d667-54cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:df:66:60:15:de:90:14:38:46:40:76:97: 95:d2:61:cb:11:f5:9e:1f:42:af:1e:b9:98:49:7a: dd:57:82:10:ed:fe:d7:a9:1b:db:2d:c0:49:be:ef: a3:c4:9c:10:f3:9d:27:da:2f:4d:5c:1b:ad:b0:99: bf:49:fd:85:3e:36:b8:78:44:39:db:76:c2:5c:b2: 7e:2c:6e:65:2c:84:aa:10:1a:f5:d2:13:80:9c:97: 21:da:d1:16:91:a1:1e:af:21:4b:8a:69:9d:7f:98: 92:64:cb:f5:1d:b5:e9:b3:03:7c:82:12:30:6e:bf: 3b:2d:1a:39:78:b3:7e:6c:8c:0d:1d:4b:fa:5b:2b: 0c:46:95:ca:cb:5d:57:c7:a5:34:29:33:6b:5a:a6: a9:3d:55:df:f5:01:85:32:a1:26:24:b1:5d:d6:18: 17:e5:f8:62:7d:99:d1:bb:71:bc:b6:eb:b6:a7:3a: fd:5b:1c:85:aa:ca:32:26:e9:d9:2d:48:cc:8b:be: 44:a6:5e:4f:38:a8:2e:e1:f9:c4:94:26:e2:83:20: cf:f4:a2:a7:a5:bc:b7:43:8d:12:fb:28:88:cc:de: 8d:ef:3b:61:eb:fa:06:06:01:86:4b:bf:01:23:3f: 96:5d:4e:15:19:27:71:53:98:9b:01:d6:20:f5:56: 95:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F4:9A:4C:65:36:F7:34:F9:05:AC:65:24:83:AA:D8:A8:AA:42:6E X509v3 Authority Key Identifier: keyid:73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:92:97:e7:46:ff:e0:74:6e:e0:9e:49:c8:1a:ef:fd:18:7d: 6a:12:e0:9a:08:3c:0c:92:11:ec:68:81:4a:98:ae:9a:06:c8: 84:6f:4f:42:ef:32:bb:69:87:e6:a1:50:f7:c3:c3:d1:e6:b4: 39:48:d9:47:a3:15:e9:44:77:01:80:97:f4:f0:62:55:a9:d9: 11:28:1b:fd:c3:df:7b:f1:6c:35:56:a9:43:c6:18:38:f7:5b: 98:fb:0f:44:0a:da:96:b3:5b:98:37:99:df:37:90:40:b2:0b: 69:20:93:94:88:eb:a9:3c:3d:ba:c1:cc:2a:dd:19:4e:41:70: c2:d9:97:91:74:8c:9d:7a:08:1b:e5:4f:c5:0a:8a:08:24:8a: 44:f9:d6:d8:e5:90:ec:89:63:ec:ef:2f:a3:19:3c:48:06:b7: 78:21:65:a9:da:7a:b9:b5:96:89:59:3d:89:2a:14:89:61:f1: a4:68:94:12:29:76:a6:42:3a:bc:5b:16:25:39:bc:25:b6:8e: ca:00:84:aa:8c:20:b0:a3:6f:ae:55:7f:83:94:01:02:b0:61: 37:de:43:17:24:b8:0f:24:b6:ac:48:af:4a:4d:e6:33:1c:66: d7:e6:a5:33:21:14:af:a5:42:2c:4f:ec:50:3a:25:e9:f1:f5: 20:71:16:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0NDQxMTAvBgNVBAUTKDczMUU1N0IwREZERUE3OTFCQTRENUQ3MTk3MkRBODEw NURDOTNFOEIwHhcNMjUwODA5MDUwMjMxWhcNMjUwODE2MDUwMjMxWjAYMRYwFAYD VQQDEw02ODk2ZDY2Ny01NGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogrfZmAV3pAUOEZAdpeV0mHLEfWeH0KvHrmYSXrdV4IQ7f7XqRvbLcBJvu+j xJwQ850n2i9NXButsJm/Sf2FPja4eEQ523bCXLJ+LG5lLISqEBr10hOAnJch2tEW kaEeryFLimmdf5iSZMv1HbXpswN8ghIwbr87LRo5eLN+bIwNHUv6WysMRpXKy11X x6U0KTNrWqapPVXf9QGFMqEmJLFd1hgX5fhifZnRu3G8tuu2pzr9WxyFqsoyJunZ LUjMi75Epl5POKgu4fnElCbigyDP9KKnpby3Q40S+yiIzN6N7zth6/oGBgGGS78B Iz+WXU4VGSdxU5ibAdYg9VaVSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPH0mkxl Nvc0+QWsZSSDqtioqkJuMB8GA1UdIwQYMBaAFHMeV7Df3qeRuk1dcZctqBBdyT6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ0NC84RENFMjc0QUIx MUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1RzZUVjF4bHkyb0VGM0pQ b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NVhzTl9lcDVHNlRWMXhseTJvRUYzSlBvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ0NC84RENFMjc0QUIxMUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1 RzZUVjF4bHkyb0VGM0pQb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqkpfnRv/gdG7gnknIGu/9GH1qEuCaCDwMkhHsaIFKmK6aBsiEb09C 7zK7aYfmoVD3w8PR5rQ5SNlHoxXpRHcBgJf08GJVqdkRKBv9w9978Ww1VqlDxhg4 91uY+w9ECtqWs1uYN5nfN5BAsgtpIJOUiOupPD26wcwq3RlOQXDC2ZeRdIydeggb 5U/FCooIJIpE+dbY5ZDsiWPs7y+jGTxIBrd4IWWp2nq5tZaJWT2JKhSJYfGkaJQS KXamQjq8WxYlObwlto7KAISqjCCwo2+uVX+DlAECsGE33kMXJLgPJLasSK9KTeYz HGbX5qUzIRSvpUIsT+xQOiXp8fUgcRaP -----END CERTIFICATE-----Generated at Sat Aug 9 15:16:11 2025 by rpki-client