$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: yzcy+aH0tDUOlfPq45luUuq9A8wZ/TuyRF0UwEtrGrM= Subject key identifier: 5E:01:E1:2F:BC:9B:E7:2A:13:A6:36:9E:6A:6D:78:71:45:70:C3:03 Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0F2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0F1A Signing time: Sun 10 Aug 2025 17:38:54 +0000 Manifest this update: Sun 10 Aug 2025 17:38:53 +0000 Manifest next update: Sun 17 Aug 2025 17:38:53 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: CDvvQbcmSlqm9/GufvB2r05pz4QA7J+AwYEmuPsvAPc=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: 4nfL4JBKGiookOgEUtMY2He+i4zGwZxLBLPzmr/3qA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3883 (0xf2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: Aug 10 17:38:53 2025 GMT Not After : Aug 17 17:38:53 2025 GMT Subject: CN=6898d92d-77d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:50:a3:b3:f9:0a:5b:8d:dd:8f:f9:9b:cf: e4:d1:a4:6e:1e:6b:3f:8b:97:c3:96:bb:f6:78:d6: 8b:47:57:85:4b:55:fd:c7:70:3b:d3:44:46:49:42: 49:79:30:de:27:de:5f:a2:8c:4f:73:0a:34:0c:8f: 00:c9:f9:a9:23:4a:da:6a:8e:41:55:fd:08:b8:39: 06:91:b5:bb:5c:fb:10:9e:f0:f5:f1:c3:9d:da:1b: b8:31:4c:26:53:3a:9f:78:08:24:6f:73:85:a4:9c: b9:40:7f:a6:c5:3c:ef:07:b1:d8:16:af:ff:c8:0e: 79:27:7a:40:bc:d6:14:17:fa:35:8e:8f:3c:d9:64: b4:0e:cd:ad:9b:f4:d9:dd:36:79:ec:df:f4:c0:bb: 17:7e:7c:af:fc:8d:13:59:1a:79:8c:6b:db:87:a8: 88:2e:ed:f2:63:21:56:e5:a4:0d:d5:42:cc:c7:f0: 66:2f:4c:c6:02:59:e7:e2:c5:bb:f6:31:b2:48:d3: e0:2c:35:e5:07:e4:ed:6d:68:a0:0f:8c:83:9a:c3: dd:eb:89:be:70:f2:93:23:98:95:d3:54:ba:ed:da: 51:be:93:93:76:a0:04:f0:d7:a0:60:65:f4:3f:57: 84:b6:1b:c2:a7:84:45:f9:7b:ac:ad:45:7b:0b:6e: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:01:E1:2F:BC:9B:E7:2A:13:A6:36:9E:6A:6D:78:71:45:70:C3:03 X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:11:48:72:9b:6a:df:60:86:62:e0:a9:e7:bc:c7:4a:ce:d0: 08:2e:15:52:fa:cc:38:18:bf:36:d8:0a:e5:09:8d:d8:95:6f: 28:7b:3c:e3:32:f7:e2:f7:84:cb:0d:8d:2d:ff:f8:5a:4e:bd: dc:17:f9:45:8d:93:c5:a9:02:0e:0c:2c:5e:e2:1e:9e:84:06: fc:70:b6:be:6a:8a:f9:8f:2b:86:2c:7d:62:81:f3:92:7a:cf: e0:f7:69:f6:35:57:b7:86:24:49:6c:74:7b:33:0f:ef:45:be: 0d:64:d5:12:a0:8b:d6:2e:05:83:00:72:b3:51:54:34:76:62: ef:89:4f:2d:87:3e:82:f1:ef:38:9c:ab:82:ff:f8:41:c4:e8: a5:b0:94:0d:b6:ca:7b:00:9f:52:29:c2:a6:9b:b0:e6:6c:a2: 3c:9b:e3:f7:13:58:be:de:24:f5:de:6f:45:d2:44:95:fe:4f: 1a:d2:dd:18:37:b7:8a:d9:fb:4c:02:e5:57:d8:19:0b:c2:d1: 6a:00:e4:76:5e:fc:02:14:61:b4:4f:70:5b:a3:54:50:c9:1d: 3c:42:04:ba:59:c5:5b:36:71:0b:dc:a1:7b:b8:4e:ab:a4:db: 86:c5:59:81:82:2f:3d:63:5d:58:52:2a:cb:61:48:41:da:f9: 6d:de:65:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjUwODEwMTczODUzWhcNMjUwODE3MTczODUzWjAYMRYwFAYD VQQDEw02ODk4ZDkyZC03N2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygZQo7P5CluN3Y/5m8/k0aRuHms/i5fDlrv2eNaLR1eFS1X9x3A700RGSUJJ eTDeJ95fooxPcwo0DI8AyfmpI0raao5BVf0IuDkGkbW7XPsQnvD18cOd2hu4MUwm UzqfeAgkb3OFpJy5QH+mxTzvB7HYFq//yA55J3pAvNYUF/o1jo882WS0Ds2tm/TZ 3TZ57N/0wLsXfnyv/I0TWRp5jGvbh6iILu3yYyFW5aQN1ULMx/BmL0zGAlnn4sW7 9jGySNPgLDXlB+TtbWigD4yDmsPd64m+cPKTI5iV01S67dpRvpOTdqAE8NegYGX0 P1eEthvCp4RF+XusrUV7C266gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4B4S+8 m+cqE6Y2nmpteHFFcMMDMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkEUhym2rfYIZi4KnnvMdKztAILhVS+sw4GL822ArlCY3YlW8oezzj Mvfi94TLDY0t//haTr3cF/lFjZPFqQIODCxe4h6ehAb8cLa+aor5jyuGLH1igfOS es/g92n2NVe3hiRJbHR7Mw/vRb4NZNUSoIvWLgWDAHKzUVQ0dmLviU8thz6C8e84 nKuC//hBxOilsJQNtsp7AJ9SKcKmm7DmbKI8m+P3E1i+3iT13m9F0kSV/k8a0t0Y N7eK2ftMAuVX2BkLwtFqAOR2XvwCFGG0T3Bbo1RQyR08QgS6WcVbNnEL3KF7uE6r pNuGxVmBgi89Y11YUirLYUhB2vlt3mWI -----END CERTIFICATE-----Generated at Mon Aug 11 07:46:04 2025 by rpki-client