$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: G7MW49OcDlfljVxl//YY0EWrLWnZjYEXSxZbb1tlJ2Y= Subject key identifier: FC:B9:D0:77:0C:54:85:FF:A5:38:77:D6:40:B0:24:6B:4C:82:DB:B1 Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 16A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 169C Signing time: Fri 08 Aug 2025 16:51:14 +0000 Manifest this update: Fri 08 Aug 2025 16:51:14 +0000 Manifest next update: Fri 15 Aug 2025 16:51:14 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: Qk1lAN1sSEKql5LsryZS26ujsMLFjsukvpM3qdvFMWw=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: ASMLpEvsvu5fZiBYK5kv36WlKk7sSJJC1YfYG/Sqc/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5800 (0x16a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Aug 8 16:51:14 2025 GMT Not After : Aug 15 16:51:14 2025 GMT Subject: CN=68962b02-6158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:7e:2f:c8:cf:ec:65:bd:98:61:45:44:4d: c6:36:a6:fd:ab:8a:07:51:69:f1:08:5a:ca:28:d5: 0a:9f:6a:97:e5:ed:82:8a:c4:52:fb:4d:e5:a8:ec: f2:f8:c9:a0:29:10:c8:a6:30:b1:b9:b9:2c:cf:56: d9:c3:16:75:56:fe:19:db:82:83:ac:50:ac:83:57: 65:96:f7:67:c8:a9:04:53:73:38:8d:7e:ce:51:00: 41:a8:9a:ca:88:0d:4c:c9:a4:98:71:e2:26:53:f9: 32:a6:c7:82:11:e4:5d:c5:c2:15:06:b4:57:39:3b: ed:cc:ab:f6:fa:55:70:0b:21:96:4f:b5:41:69:18: 1a:08:80:9d:2a:85:86:4c:7a:3a:75:c2:22:6d:e6: 3d:08:7b:53:1f:b4:99:b6:c4:c1:c0:d1:15:24:cc: ad:ec:84:60:22:ca:1f:47:e9:56:53:00:1e:e8:c0: 14:de:60:f0:db:09:40:96:a4:3a:f3:a4:6f:07:43: 16:79:c1:e4:41:f5:ac:89:4d:ff:02:67:5b:7e:79: 4d:2a:00:ae:ad:09:49:76:b8:68:04:d0:76:0c:55: d5:fc:a3:9d:46:ba:df:b7:6e:0a:16:7a:61:6c:c9: 2f:7f:ab:12:27:b5:96:6b:d9:92:60:4a:28:ac:d4: 11:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B9:D0:77:0C:54:85:FF:A5:38:77:D6:40:B0:24:6B:4C:82:DB:B1 X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d1:cb:4e:00:95:6d:79:17:15:35:79:31:ba:1e:dd:3e:7d: c9:9c:7e:bf:af:6a:b2:cc:7a:aa:3d:a8:ae:96:3f:be:ea:06: 2e:05:e9:d8:18:e7:0c:b6:4e:b6:d9:de:34:56:01:98:c6:01: 6d:1e:35:d1:62:16:27:65:da:1c:a7:fc:05:66:1f:77:3e:a4: 40:1f:8c:82:76:56:c2:d2:cd:29:64:95:20:e2:e6:82:2e:4d: 5c:8f:c4:b3:cc:c2:52:41:a9:7b:86:46:55:e6:2b:f6:7d:39: a3:28:1d:bb:37:ec:08:61:bd:ad:bd:6b:0d:2c:3b:48:61:0f: 8e:bd:2e:41:78:25:f8:14:0d:55:f1:1c:42:2f:59:9e:c2:d3: 85:6a:30:6c:cf:b6:9d:34:6f:63:53:bb:0b:70:82:dd:d8:1a: 82:c2:46:60:f5:48:7e:06:94:8b:f5:1b:9b:ec:04:09:96:44: 6a:21:3d:e9:c9:1d:48:b6:3d:57:a7:17:e6:b4:e2:61:5e:36: 4c:a8:72:4e:fc:46:0d:7c:b4:62:20:00:d8:35:63:47:d1:f7: fa:fb:49:c4:4b:f6:d0:73:78:ac:6c:ac:32:4f:5e:66:f2:19: e3:4f:05:c6:fd:a2:0a:d4:4c:95:d6:03:10:f0:e6:1f:de:3b: b2:8c:7b:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjUwODA4MTY1MTE0WhcNMjUwODE1MTY1MTE0WjAYMRYwFAYD VQQDEw02ODk2MmIwMi02MTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoT1+L8jP7GW9mGFFRE3GNqb9q4oHUWnxCFrKKNUKn2qX5e2CisRS+03lqOzy +MmgKRDIpjCxubksz1bZwxZ1Vv4Z24KDrFCsg1dllvdnyKkEU3M4jX7OUQBBqJrK iA1MyaSYceImU/kypseCEeRdxcIVBrRXOTvtzKv2+lVwCyGWT7VBaRgaCICdKoWG THo6dcIibeY9CHtTH7SZtsTBwNEVJMyt7IRgIsofR+lWUwAe6MAU3mDw2wlAlqQ6 86RvB0MWecHkQfWsiU3/AmdbfnlNKgCurQlJdrhoBNB2DFXV/KOdRrrft24KFnph bMkvf6sSJ7WWa9mSYEoorNQRxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPy50HcM VIX/pTh31kCwJGtMgtuxMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw0ctOAJVteRcVNXkxuh7dPn3JnH6/r2qyzHqqPaiulj++6gYuBenY GOcMtk622d40VgGYxgFtHjXRYhYnZdocp/wFZh93PqRAH4yCdlbC0s0pZJUg4uaC Lk1cj8SzzMJSQal7hkZV5iv2fTmjKB27N+wIYb2tvWsNLDtIYQ+OvS5BeCX4FA1V 8RxCL1mewtOFajBsz7adNG9jU7sLcILd2BqCwkZg9Uh+BpSL9Rub7AQJlkRqIT3p yR1Itj1XpxfmtOJhXjZMqHJO/EYNfLRiIADYNWNH0ff6+0nES/bQc3isbKwyT15m 8hnjTwXG/aIK1EyV1gMQ8OYf3juyjHuz -----END CERTIFICATE-----Generated at Sun Aug 10 16:03:32 2025 by rpki-client