$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft File: cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json) Hash identifier: Vvo4tS85v/1yByW6bxJV1HsW3d5b5lRDO015Cooc2Rw= Subject key identifier: 23:AC:A6:BF:99:B7:FE:06:56:C9:C8:42:C9:E9:70:0A:0F:E4:C0:B3 Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE Certificate issuer: /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft Manifest number: 09A9 Signing time: Fri 22 Aug 2025 20:13:50 +0000 Manifest this update: Fri 22 Aug 2025 20:13:50 +0000 Manifest next update: Fri 29 Aug 2025 20:13:49 +0000 Files and hashes: 1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: vo5177b2+3fCDlm9ilJ5AQhOloUqhw4o+obB7LuDcIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143C5C, serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Validity Not Before: Aug 22 20:13:50 2025 GMT Not After : Aug 29 20:13:49 2025 GMT Subject: CN=68a8cf7e-0f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0f:f4:aa:2b:39:99:dd:c2:fb:5c:28:4e:f1: 84:ef:30:d4:aa:72:c8:c5:12:74:db:ca:cc:39:8e: eb:7b:4e:34:7e:5c:38:31:ab:cd:6d:fb:0f:72:b5: 49:fa:dd:8e:b5:75:1c:05:a1:73:c5:d3:b0:76:cf: 51:cc:d5:a4:6b:9b:dc:9b:b3:66:c5:9d:d2:e7:03: 7e:b2:a1:f2:b8:62:47:c7:e0:6b:4a:5b:62:64:bd: e1:97:dc:ed:91:75:aa:34:69:b7:8e:9c:29:d3:df: c0:cd:0f:41:dd:47:f3:fc:0d:3b:6b:76:53:67:a4: e0:05:1d:17:49:63:42:81:fa:02:87:ee:da:c3:1a: 31:4b:8e:9b:fd:28:6b:15:88:b0:87:1c:12:1b:a5: 75:7e:bd:48:1c:5f:39:c3:dc:df:2c:25:9d:a6:6a: 44:33:ce:6b:7b:c2:03:ee:26:8b:a7:d8:66:97:bb: 67:16:79:af:19:cf:17:51:57:45:f3:42:25:e8:73: 74:1c:91:10:58:14:39:73:6d:3c:07:c5:3e:31:73: 6b:f7:7d:2b:ab:f8:d9:76:2a:53:86:b2:83:f7:f7: 58:77:8f:eb:aa:80:6d:03:d6:dd:f9:f0:f9:27:02: 1f:11:57:11:a0:d7:0d:66:9c:90:87:61:17:da:c2: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AC:A6:BF:99:B7:FE:06:56:C9:C8:42:C9:E9:70:0A:0F:E4:C0:B3 X509v3 Authority Key Identifier: keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:fd:80:e2:a9:ea:dc:21:86:17:83:73:dc:41:e3:93:eb:76: fc:29:4e:59:9d:78:5d:cc:70:7e:9e:59:fc:6b:28:24:e3:65: 37:ea:ec:3c:e4:4c:54:32:1e:9f:5c:9e:48:b0:06:d1:28:54: 1c:4b:3b:78:8b:42:32:14:0c:5d:fb:4d:f9:01:6c:9b:65:df: 30:de:c7:1a:b4:4c:e3:a7:07:c5:20:db:09:2f:f3:7e:f8:85: c3:07:25:55:71:8f:25:ea:bd:de:57:ec:1c:38:24:7c:d5:50: 43:f5:e8:2b:9b:1d:46:f7:9b:a8:a2:bd:2a:36:dd:85:fd:7c: 09:f6:28:dc:8c:6a:89:df:05:38:77:0b:fb:7f:a8:42:a6:b3: 27:ca:10:7b:3a:a3:33:e8:f4:70:73:74:fe:aa:74:ff:ed:32: a2:fd:a2:ee:6a:d5:cf:04:40:91:c2:3c:81:90:e6:be:b0:96: a6:89:1b:c0:d1:bb:e8:2d:71:7d:3a:b2:b2:2d:4e:29:16:fe: de:33:5f:27:53:58:c9:62:fe:95:0c:b5:37:d3:60:6e:23:ea: cc:44:13:d4:9f:37:54:08:58:73:95:39:7f:3f:56:33:84:d4: 89:81:26:25:f4:27:67:6a:07:b8:96:d0:4f:b2:91:80:c1:3c: b3:14:6d:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDNUMxMTAvBgNVBAUTKDcyRjJDQjMzRDc3QzE2Mzg5OUU1MzUwRDhFODAxRTcx NzBFNDg0REUwHhcNMjUwODIyMjAxMzUwWhcNMjUwODI5MjAxMzQ5WjAYMRYwFAYD VQQDEw02OGE4Y2Y3ZS0wZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxA/0qis5md3C+1woTvGE7zDUqnLIxRJ028rMOY7re040flw4MavNbfsPcrVJ +t2OtXUcBaFzxdOwds9RzNWka5vcm7NmxZ3S5wN+sqHyuGJHx+BrSltiZL3hl9zt kXWqNGm3jpwp09/AzQ9B3Ufz/A07a3ZTZ6TgBR0XSWNCgfoCh+7awxoxS46b/Shr FYiwhxwSG6V1fr1IHF85w9zfLCWdpmpEM85re8ID7iaLp9hml7tnFnmvGc8XUVdF 80Il6HN0HJEQWBQ5c208B8U+MXNr930rq/jZdipThrKD9/dYd4/rqoBtA9bd+fD5 JwIfEVcRoNcNZpyQh2EX2sJOgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOspr+Z t/4GVsnIQsnpcAoP5MCzMB8GA1UdIwQYMBaAFHLyyzPXfBY4meU1DY6AHnFw5ITe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0M1Qy9GNjUyRUZGODk0 RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZqaVo1VFVOam9BZWNYRGto TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N2TExNOWQ4RmppWjVUVU5qb0FlY1hEa2hONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0M1Qy9GNjUyRUZGODk0RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZq aVo1VFVOam9BZWNYRGtoTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC/YDiqercIYYXg3PcQeOT63b8KU5ZnXhdzHB+nln8aygk42U36uw8 5ExUMh6fXJ5IsAbRKFQcSzt4i0IyFAxd+035AWybZd8w3scatEzjpwfFINsJL/N+ +IXDByVVcY8l6r3eV+wcOCR81VBD9egrmx1G95uoor0qNt2F/XwJ9ijcjGqJ3wU4 dwv7f6hCprMnyhB7OqMz6PRwc3T+qnT/7TKi/aLuatXPBECRwjyBkOa+sJamiRvA 0bvoLXF9OrKyLU4pFv7eM18nU1jJYv6VDLU302BuI+rMRBPUnzdUCFhzlTl/P1Yz hNSJgSYl9Cdnage4ltBPspGAwTyzFG3O -----END CERTIFICATE-----Generated at Sat Aug 23 20:13:30 2025 by rpki-client