$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft File: cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json) Hash identifier: d9JTZlaFXYg+N8XmEftx6OLAh2srdFrbnftn2vtopGY= Subject key identifier: BC:42:C5:89:BD:32:76:F5:E4:64:5C:E5:6F:EA:29:09:4F:A4:EF:C1 Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE Certificate issuer: /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Certificate serial: 09A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft Manifest number: 098E Signing time: Mon 30 Jun 2025 20:18:54 +0000 Manifest this update: Mon 30 Jun 2025 20:18:54 +0000 Manifest next update: Mon 07 Jul 2025 20:18:54 +0000 Files and hashes: 1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: Vfod59uPnIhiwz1uKPOF+LAUghCWKRE+D0j6UR88hqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2467 (0x9a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143C5C, serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Validity Not Before: Jun 30 20:18:54 2025 GMT Not After : Jul 7 20:18:54 2025 GMT Subject: CN=6862f12e-a933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:9c:6c:c2:9c:dc:53:e7:fd:ea:dd:db:17: 64:f7:50:dc:a4:22:d5:f7:cb:19:c7:71:2e:c1:3a: c3:71:08:14:f8:24:f8:84:4e:b1:e7:81:e9:29:93: 0b:4d:43:5c:8e:56:96:37:b8:a4:ff:f3:d9:e0:8d: d6:90:4c:5d:25:7a:f5:42:70:02:e7:36:04:62:b2: e6:be:c5:77:58:9b:37:f1:79:69:ca:7c:8a:54:6d: 61:cf:d4:01:fa:fa:f7:2c:4b:88:66:e1:d3:d8:c0: 75:ac:70:30:d1:7e:a9:9d:67:6b:5f:f9:3f:7e:56: 84:66:09:ce:1a:72:56:2a:d4:6e:20:ee:d3:9d:22: 06:d0:e8:7c:4f:32:fb:16:42:0e:30:0d:4f:f4:04: 62:a9:0a:f8:0a:b8:25:d0:47:f9:d7:90:ac:c9:da: 5b:90:ea:e2:3c:a9:2f:de:2a:8f:61:2a:bc:91:b9: 6b:48:38:cc:6f:68:27:c5:ae:c2:96:0d:c5:ac:d1: 89:92:a8:cc:3e:4e:5b:b5:7d:91:ea:3d:de:62:f8: 68:a8:fc:a6:9e:20:dc:f5:c1:d1:5b:0b:91:cb:a2: ea:7e:bd:ae:c7:db:b7:30:96:c8:84:6f:97:e9:93: 2c:e7:ba:d7:4c:54:2f:78:ef:0e:ea:cf:73:77:d8: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:42:C5:89:BD:32:76:F5:E4:64:5C:E5:6F:EA:29:09:4F:A4:EF:C1 X509v3 Authority Key Identifier: keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4b:98:ac:81:d4:76:58:15:85:3e:10:79:e9:28:06:60:11: 9e:ec:16:35:c9:83:80:a5:d6:2e:d4:62:7e:7d:97:42:c2:cc: bb:7e:b6:0f:20:78:69:54:cd:84:0c:cc:8c:be:b3:76:e9:cf: 88:7b:32:0d:0e:68:55:72:3d:02:90:5f:33:bb:1f:cf:27:1e: c3:10:09:70:a8:9d:d5:57:7d:ca:16:58:be:22:50:38:d4:55: 37:78:75:32:74:17:eb:9c:bf:64:dd:ed:ed:5e:d9:39:c0:b7: 5a:0e:90:23:db:2c:7a:e2:3f:f7:db:08:1e:4e:49:0a:3c:c8: 6b:fb:77:b3:4d:87:bf:27:25:d5:ae:fd:cc:ff:07:98:bb:83: 12:6b:83:7d:a2:99:a7:61:c5:2f:af:15:8e:de:c6:21:8e:52: 0e:a4:7c:0e:6d:5b:cd:25:00:7e:c3:52:61:96:d1:cf:c0:05: f7:2c:a2:2f:1e:1b:f0:17:11:d6:c3:d5:47:55:e4:60:53:1b: b6:b8:2b:ec:2d:18:43:74:1a:cc:3e:79:37:7d:55:c2:06:16: 04:c8:85:07:9d:b6:de:e6:c3:71:37:86:36:62:3f:fc:de:ad: 8f:4f:f7:5c:9f:94:73:92:9a:8b:f4:76:92:9a:35:77:64:ee: ab:53:d9:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDNUMxMTAvBgNVBAUTKDcyRjJDQjMzRDc3QzE2Mzg5OUU1MzUwRDhFODAxRTcx NzBFNDg0REUwHhcNMjUwNjMwMjAxODU0WhcNMjUwNzA3MjAxODU0WjAYMRYwFAYD VQQDEw02ODYyZjEyZS1hOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcOcbMKc3FPn/erd2xdk91DcpCLV98sZx3EuwTrDcQgU+CT4hE6x54HpKZML TUNcjlaWN7ik//PZ4I3WkExdJXr1QnAC5zYEYrLmvsV3WJs38XlpynyKVG1hz9QB +vr3LEuIZuHT2MB1rHAw0X6pnWdrX/k/flaEZgnOGnJWKtRuIO7TnSIG0Oh8TzL7 FkIOMA1P9ARiqQr4Crgl0Ef515CsydpbkOriPKkv3iqPYSq8kblrSDjMb2gnxa7C lg3FrNGJkqjMPk5btX2R6j3eYvhoqPymniDc9cHRWwuRy6Lqfr2ux9u3MJbIhG+X 6ZMs57rXTFQveO8O6s9zd9igVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxCxYm9 Mnb15GRc5W/qKQlPpO/BMB8GA1UdIwQYMBaAFHLyyzPXfBY4meU1DY6AHnFw5ITe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0M1Qy9GNjUyRUZGODk0 RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZqaVo1VFVOam9BZWNYRGto TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N2TExNOWQ4RmppWjVUVU5qb0FlY1hEa2hONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0M1Qy9GNjUyRUZGODk0RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZq aVo1VFVOam9BZWNYRGtoTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfS5isgdR2WBWFPhB56SgGYBGe7BY1yYOApdYu1GJ+fZdCwsy7frYP IHhpVM2EDMyMvrN26c+IezINDmhVcj0CkF8zux/PJx7DEAlwqJ3VV33KFli+IlA4 1FU3eHUydBfrnL9k3e3tXtk5wLdaDpAj2yx64j/32wgeTkkKPMhr+3ezTYe/JyXV rv3M/weYu4MSa4N9opmnYcUvrxWO3sYhjlIOpHwObVvNJQB+w1JhltHPwAX3LKIv HhvwFxHWw9VHVeRgUxu2uCvsLRhDdBrMPnk3fVXCBhYEyIUHnbbe5sNxN4Y2Yj/8 3q2PT/dcn5RzkpqL9HaSmjV3ZO6rU9mI -----END CERTIFICATE-----Generated at Tue Jul 1 03:16:42 2025 by rpki-client