$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json) Hash identifier: 934sOtv57+BUBWwfOv9tVnfIPy9IrBK2BAlsO+wzeYM= Subject key identifier: 9B:19:82:FE:B8:8C:1A:EB:6E:15:EB:07:89:47:75:6B:CC:DF:09:75 Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft Manifest number: 0163 Signing time: Sun 19 Oct 2025 06:40:07 +0000 Manifest this update: Sun 19 Oct 2025 06:40:07 +0000 Manifest next update: Sun 26 Oct 2025 06:40:07 +0000 Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: 7CMn+vVWnGRGIqMHGwHDYelX62z+DSH8orPWQBqWe9k=) 2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: lfBaqProMut7Uby4sm5sXFCXR+BzVB4lKdYH7qIjDTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Validity Not Before: Oct 19 06:40:07 2025 GMT Not After : Oct 26 06:40:07 2025 GMT Subject: CN=68f487c7-e4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:42:ed:47:e0:50:31:79:4f:6f:1a:b1:3f:7d: 25:b3:36:0c:53:53:50:3e:f4:36:ab:67:fe:2c:2d: 9a:69:0a:e7:f5:5c:31:34:6d:64:95:a5:22:1d:15: dc:91:84:98:46:7c:3c:5e:3d:bf:e2:bf:3e:f2:0f: 4d:07:67:55:70:5e:ec:13:2f:eb:83:1e:6d:85:ea: e2:0c:cf:ed:7b:a5:4b:e9:71:c8:fd:73:a4:33:b2: 92:cb:f7:c4:fa:b9:dd:63:b3:c5:a1:12:02:e8:99: 4f:96:43:dd:4e:b7:d3:15:ce:db:10:12:12:4b:a6: b2:58:5c:ed:1a:87:b3:a5:71:49:21:c2:ff:b0:b0: 35:77:26:ea:79:51:b7:d7:e9:93:39:9f:eb:17:31: b4:cd:8a:4e:49:78:a1:e2:29:7d:d1:4b:5c:bf:23: 92:66:9c:c3:d3:23:31:d1:1c:c3:78:d2:08:92:5d: 15:bf:c2:65:a3:fa:ab:86:ab:8d:f7:a4:5d:50:00: 6a:2e:3f:86:ee:e2:e7:e7:76:26:64:63:d1:06:51: 98:1a:8d:4f:bf:91:d6:eb:15:a9:c5:15:1d:18:c7: 60:fd:4e:c9:fd:60:1b:dd:17:47:ee:2c:16:f0:86: 98:ef:3c:cb:d6:ef:28:ab:fa:89:9d:16:bf:54:a1: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:19:82:FE:B8:8C:1A:EB:6E:15:EB:07:89:47:75:6B:CC:DF:09:75 X509v3 Authority Key Identifier: keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:19:4c:8d:02:c0:0e:4b:73:98:0c:f5:41:41:cc:5d:fe:77: e3:c0:68:0d:70:b2:7d:8a:8b:29:d9:72:51:0a:ff:08:cc:76: ee:3d:0b:ce:a8:8a:b6:6a:b6:21:87:9a:1e:f4:78:0a:b8:a9: 1b:75:b2:91:5b:b3:e7:12:56:f3:66:8a:12:2d:5a:e3:9f:b2: f4:0d:7e:b1:c8:55:3c:31:f3:a2:94:e3:bb:96:12:c4:a8:8b: 38:46:62:df:68:cd:96:44:bd:d2:a4:64:bb:66:6c:80:b3:f5: bc:1d:da:ae:6c:c0:0b:bb:6e:07:51:5b:2a:ec:b2:13:9a:47: 80:d1:59:6f:68:9c:8a:7d:80:b3:b2:2e:8c:8e:39:80:54:aa: 32:0b:e4:e8:3f:99:17:96:e7:05:4f:4e:5d:15:ac:65:51:d2: 88:9a:b0:80:cf:ea:3e:60:69:50:88:59:d6:91:93:38:b0:38: 68:fa:8f:46:04:40:c6:8c:93:13:4c:95:02:dd:40:83:6e:cf: c9:75:82:57:d1:c0:7e:88:93:89:38:d0:4d:c4:ca:0c:bb:64: 82:1f:36:0f:9d:5b:7c:96:8f:b6:69:e7:1f:29:c3:72:46:c9: 28:ca:6c:d7:98:b6:c0:43:ed:1b:5b:11:0d:6a:68:83:b4:58: 78:10:73:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE NzU1RUQwQzAwHhcNMjUxMDE5MDY0MDA3WhcNMjUxMDI2MDY0MDA3WjAYMRYwFAYD VQQDEw02OGY0ODdjNy1lNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ELtR+BQMXlPbxqxP30lszYMU1NQPvQ2q2f+LC2aaQrn9VwxNG1klaUiHRXc kYSYRnw8Xj2/4r8+8g9NB2dVcF7sEy/rgx5theriDM/te6VL6XHI/XOkM7KSy/fE +rndY7PFoRIC6JlPlkPdTrfTFc7bEBISS6ayWFztGoezpXFJIcL/sLA1dybqeVG3 1+mTOZ/rFzG0zYpOSXih4il90UtcvyOSZpzD0yMx0RzDeNIIkl0Vv8Jlo/qrhquN 96RdUABqLj+G7uLn53YmZGPRBlGYGo1Pv5HW6xWpxRUdGMdg/U7J/WAb3RdH7iwW 8IaY7zzL1u8oq/qJnRa/VKEvBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsZgv64 jBrrbhXrB4lHdWvM3wl1MB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP aTJtdFBER25OaG5YVmUwTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEGUyNAsAOS3OYDPVBQcxd/nfjwGgNcLJ9iosp2XJRCv8IzHbuPQvO qIq2arYhh5oe9HgKuKkbdbKRW7PnElbzZooSLVrjn7L0DX6xyFU8MfOilOO7lhLE qIs4RmLfaM2WRL3SpGS7ZmyAs/W8HdqubMALu24HUVsq7LITmkeA0VlvaJyKfYCz si6MjjmAVKoyC+ToP5kXlucFT05dFaxlUdKImrCAz+o+YGlQiFnWkZM4sDho+o9G BEDGjJMTTJUC3UCDbs/JdYJX0cB+iJOJONBNxMoMu2SCHzYPnVt8lo+2aecfKcNy RskoymzXmLbAQ+0bWxENamiDtFh4EHNP -----END CERTIFICATE-----Generated at Mon Oct 20 04:45:36 2025 by rpki-client