$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: VaEymsP6q6o8+F9SnRnqj5yMVWb9ZyeipnXLGpd1Cno= Subject key identifier: AF:0C:9C:27:1C:A0:0E:76:D2:2B:26:0F:F9:46:97:53:41:F2:B8:DD Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 1689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 167E Signing time: Sat 14 Jun 2025 16:38:57 +0000 Manifest this update: Sat 14 Jun 2025 16:38:56 +0000 Manifest next update: Sat 21 Jun 2025 16:38:56 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: EMLlIZQGsElxucUHxkNq/HQKqD7Pi4mOk7X9tp/WJBA=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: v3sjoQSpuFWRMhTWonBiueiIp4Y61jfzrKe4k2e0JcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5769 (0x1689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Jun 14 16:38:56 2025 GMT Not After : Jun 21 16:38:56 2025 GMT Subject: CN=684da5a1-11a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:79:a0:0c:a6:96:3b:a6:ba:35:2a:0b:ec: 82:0d:94:2a:1c:2c:b4:be:3f:4a:d8:e2:a9:29:6a: aa:99:90:2e:3f:c9:57:e1:d8:11:ef:40:22:2a:24: 8b:d9:ce:e5:57:48:ef:d1:2c:ae:82:9f:95:02:5c: d8:13:00:ef:1e:42:39:15:43:62:91:73:cb:8e:44: 38:5f:a0:a9:b8:c2:51:d1:b2:ab:3b:11:f4:94:38: 55:2d:e7:1c:8a:b7:22:0b:34:c5:f8:dc:ea:e4:6a: 22:68:00:fb:b6:b1:86:4e:50:ba:a7:12:74:27:e8: cd:4a:b9:d8:b4:e0:70:d8:15:61:c0:2e:8a:5e:6c: b1:0e:68:74:23:57:b3:59:d2:4f:43:4d:29:73:bd: be:5f:54:81:f9:9d:01:10:a0:da:c7:de:bf:89:58: db:00:65:05:4b:3c:7b:c5:31:66:68:1b:87:ef:d9: 29:5a:57:45:95:58:d8:a2:73:6a:7d:98:c8:a2:63: 34:48:12:28:34:3d:8d:6a:7b:de:e4:6c:67:c3:dd: 1b:59:22:80:09:60:64:77:c0:d1:bb:7d:e1:1c:6a: 7a:f2:42:df:f1:8a:c0:0a:a8:a5:79:2f:06:8f:c7: 06:e6:b4:12:32:12:91:7a:79:a2:cb:34:42:af:fa: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0C:9C:27:1C:A0:0E:76:D2:2B:26:0F:F9:46:97:53:41:F2:B8:DD X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3f:0c:55:89:6a:68:ff:67:13:fb:55:b0:d7:b7:36:df:6f: 50:5b:e0:e4:ab:43:a2:d2:64:5d:80:f5:13:0b:b6:f1:3b:d1: 2b:86:82:fc:8d:ca:4e:2b:67:22:7a:0a:e5:31:b3:0d:d7:26: 62:59:ca:03:f7:c1:66:de:5e:b3:7c:2c:49:dd:6b:76:f2:36: 94:eb:24:dd:84:a2:b3:4d:b4:20:ad:96:66:55:f1:78:88:7e: 71:20:29:fe:76:41:2f:92:8b:9f:21:6b:d9:3d:dd:95:83:c5: ac:e1:0f:06:01:52:06:c6:0a:c4:d9:b7:b7:94:19:28:58:c0: 6a:fb:b5:1c:91:0b:8e:a4:18:c0:05:c8:88:69:d3:fe:e4:55: 4b:aa:c5:77:38:90:8d:f0:e3:cf:6c:92:99:46:8d:cf:e6:4a: af:65:c4:0a:28:46:33:bf:2c:48:3a:36:99:a9:0b:08:4c:77: 71:14:5c:8e:d5:91:d7:12:46:79:06:4e:57:6c:11:78:14:45: 92:b7:74:9d:e3:75:7d:c5:0c:c8:d6:9b:27:a1:7e:2b:16:08: 9e:34:b7:5c:7b:26:88:b9:34:e4:51:f2:7f:ec:4f:9e:a2:10: 1d:ef:6b:8f:98:6e:3b:55:92:a2:46:de:45:7f:2e:fa:77:9e: c3:a4:18:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjUwNjE0MTYzODU2WhcNMjUwNjIxMTYzODU2WjAYMRYwFAYD VQQDEw02ODRkYTVhMS0xMWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyp5oAymljumujUqC+yCDZQqHCy0vj9K2OKpKWqqmZAuP8lX4dgR70AiKiSL 2c7lV0jv0Syugp+VAlzYEwDvHkI5FUNikXPLjkQ4X6CpuMJR0bKrOxH0lDhVLecc irciCzTF+Nzq5GoiaAD7trGGTlC6pxJ0J+jNSrnYtOBw2BVhwC6KXmyxDmh0I1ez WdJPQ00pc72+X1SB+Z0BEKDax96/iVjbAGUFSzx7xTFmaBuH79kpWldFlVjYonNq fZjIomM0SBIoND2Nanve5Gxnw90bWSKACWBkd8DRu33hHGp68kLf8YrACqileS8G j8cG5rQSMhKRenmiyzRCr/qQrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8MnCcc oA520ismD/lGl1NB8rjdMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcPwxViWpo/2cT+1Ww17c2329QW+Dkq0Oi0mRdgPUTC7bxO9ErhoL8 jcpOK2ciegrlMbMN1yZiWcoD98Fm3l6zfCxJ3Wt28jaU6yTdhKKzTbQgrZZmVfF4 iH5xICn+dkEvkoufIWvZPd2Vg8Ws4Q8GAVIGxgrE2be3lBkoWMBq+7UckQuOpBjA BciIadP+5FVLqsV3OJCN8OPPbJKZRo3P5kqvZcQKKEYzvyxIOjaZqQsITHdxFFyO 1ZHXEkZ5Bk5XbBF4FEWSt3Sd43V9xQzI1psnoX4rFgieNLdceyaIuTTkUfJ/7E+e ohAd72uPmG47VZKiRt5Ffy76d57DpBiV -----END CERTIFICATE-----Generated at Sat Jun 14 18:21:53 2025 by rpki-client