$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: CfkAKuthw6zTQSu+MA8r1uwlhQqZuYBuPvcKlYALdBo= Subject key identifier: 11:FF:B6:16:1E:E3:57:56:D8:0F:0C:55:01:B4:52:92:43:C9:1B:51 Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0F0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0EFB Signing time: Sat 14 Jun 2025 17:34:51 +0000 Manifest this update: Sat 14 Jun 2025 17:34:51 +0000 Manifest next update: Sat 21 Jun 2025 17:34:51 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: w+RLDXfmlLTdBjvmvlTOEMeLPlx0LbBStoYyK0IafzA=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: Wv9uMY+WdEAX81GX6NeGlpR1t2a7ig+R8eOluIMlrac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3851 (0xf0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: Jun 14 17:34:51 2025 GMT Not After : Jun 21 17:34:51 2025 GMT Subject: CN=684db2bb-91f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:29:80:b5:f7:ed:20:a2:c2:3d:12:34:ba: b0:0c:b4:9c:f6:be:41:45:3d:c9:34:83:c5:9c:83: 73:19:dc:5d:46:5f:a6:b9:08:d6:3a:2c:22:b8:0b: 52:88:df:b6:1e:4d:cf:54:d7:f0:d4:54:9e:87:c7: 82:2a:2e:34:2a:05:ee:ef:08:e9:9a:76:ca:e5:89: 74:78:d8:56:46:59:41:76:2a:bf:21:cb:ca:bf:88: 25:e3:63:94:cb:5b:be:f3:19:2e:94:84:93:51:4b: 92:ed:09:16:e7:d0:fc:5c:dd:fc:14:73:21:14:8f: 1a:5d:ce:f9:4b:c0:45:c4:bc:0f:9f:61:2d:8b:ba: 4a:78:ee:75:54:b5:6e:ac:3b:a1:df:20:53:d3:9b: 4c:44:3e:9c:37:98:54:00:d0:bd:d5:ea:8f:c8:59: 14:04:f9:56:5b:81:21:ca:9d:c7:71:00:ac:4f:b1: 33:b1:40:b2:60:9f:47:3f:a6:de:e1:0e:71:10:69: a9:b3:95:a2:8c:de:43:0c:63:85:79:d8:5a:e8:c7: 40:58:ad:44:df:e1:74:ee:31:b6:66:1e:a0:57:46: 66:88:f0:88:59:fb:83:07:79:4e:00:48:02:76:b4: bb:09:77:0a:e6:bb:6b:32:7d:7b:08:4f:28:83:ce: c4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FF:B6:16:1E:E3:57:56:D8:0F:0C:55:01:B4:52:92:43:C9:1B:51 X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:75:ed:2e:29:78:f1:ca:75:c8:cf:0f:1d:00:62:d2:e1:64: 1a:6d:60:dd:c4:99:eb:eb:4d:39:ef:15:b8:25:98:77:9f:d3: a0:a7:4a:f2:b6:7d:ed:11:bc:7b:ab:ae:87:cc:b2:f8:1e:c9: 12:5f:d6:a0:cd:fd:20:44:ec:a2:20:1a:20:09:bd:30:85:25: 56:a2:ee:63:a0:1b:21:91:cd:c1:cd:07:a2:45:72:97:b7:ed: 7d:94:ae:12:9b:54:5b:a7:34:15:59:77:df:e4:4b:eb:8a:c8: 4f:35:5e:39:96:7e:98:21:45:52:9a:47:9d:dd:53:2c:46:d9: b9:de:aa:24:4f:4b:83:5b:3c:3f:ce:06:04:e7:7e:f6:48:ac: 81:d7:29:b6:f7:9a:20:54:7b:3c:cc:e8:29:56:6b:91:36:3a: 9b:ae:c2:42:a7:29:a9:4e:fd:7b:0f:d9:84:ff:57:ac:fe:19: ec:cd:05:77:0d:4e:ce:f8:0b:03:78:3a:6a:31:ee:bc:c9:c2: 43:22:d7:0a:28:a4:00:5f:29:99:c1:4f:b5:60:0b:60:13:29: 65:88:ac:f8:b6:c7:7c:f1:91:ae:ac:1c:0b:d9:92:48:8e:e2: be:f7:62:98:0d:2d:ad:c8:c1:1a:50:9e:8d:b0:da:32:7b:d6: a7:20:6a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjUwNjE0MTczNDUxWhcNMjUwNjIxMTczNDUxWjAYMRYwFAYD VQQDEw02ODRkYjJiYi05MWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNQpgLX37SCiwj0SNLqwDLSc9r5BRT3JNIPFnINzGdxdRl+muQjWOiwiuAtS iN+2Hk3PVNfw1FSeh8eCKi40KgXu7wjpmnbK5Yl0eNhWRllBdiq/IcvKv4gl42OU y1u+8xkulISTUUuS7QkW59D8XN38FHMhFI8aXc75S8BFxLwPn2Eti7pKeO51VLVu rDuh3yBT05tMRD6cN5hUANC91eqPyFkUBPlWW4Ehyp3HcQCsT7EzsUCyYJ9HP6be 4Q5xEGmps5WijN5DDGOFedha6MdAWK1E3+F07jG2Zh6gV0ZmiPCIWfuDB3lOAEgC drS7CXcK5rtrMn17CE8og87EawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBH/thYe 41dW2A8MVQG0UpJDyRtRMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPde0uKXjxynXIzw8dAGLS4WQabWDdxJnr60057xW4JZh3n9Ogp0ry tn3tEbx7q66HzLL4HskSX9agzf0gROyiIBogCb0whSVWou5joBshkc3BzQeiRXKX t+19lK4Sm1RbpzQVWXff5EvrishPNV45ln6YIUVSmked3VMsRtm53qokT0uDWzw/ zgYE5372SKyB1ym295ogVHs8zOgpVmuRNjqbrsJCpympTv17D9mE/1es/hnszQV3 DU7O+AsDeDpqMe68ycJDItcKKKQAXymZwU+1YAtgEylliKz4tsd88ZGurBwL2ZJI juK+92KYDS2tyMEaUJ6NsNoye9anIGqt -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:54 2025 by rpki-client