$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json) Hash identifier: HHsIWOFW8tM1URYLqlsCJ1FjLu5okN00CCQVyjjjnVo= Subject key identifier: C1:36:F8:BB:5C:19:7A:9B:7B:5F:C1:9F:8A:5E:99:52:11:0B:43:3F Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft Manifest number: 0146 Signing time: Sat 23 Aug 2025 04:26:23 +0000 Manifest this update: Sat 23 Aug 2025 04:26:22 +0000 Manifest next update: Sat 30 Aug 2025 04:26:22 +0000 Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: loupmm1dDkEAw23nCfUdk5JlB0Cad4wB4CtoUPKa1/M=) 2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: lfBaqProMut7Uby4sm5sXFCXR+BzVB4lKdYH7qIjDTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Validity Not Before: Aug 23 04:26:22 2025 GMT Not After : Aug 30 04:26:22 2025 GMT Subject: CN=68a942ee-8129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:d4:1d:07:01:34:bd:80:8e:18:f6:29:9e: 7d:2b:46:dd:2e:88:d5:cb:77:40:a9:b3:d0:84:6f: 35:60:fb:82:fe:09:fc:56:f8:78:2c:e7:49:3c:be: 13:2b:62:fa:d6:aa:57:ef:cc:ef:c1:04:fc:4e:4d: cd:37:18:87:5e:0e:75:f2:87:b2:2b:d1:6d:85:d5: b2:19:02:6a:9a:28:ae:a0:3e:34:c8:a4:96:13:e5: da:28:cf:f3:bc:10:14:66:b4:90:be:85:05:40:4c: 03:31:e1:9a:97:46:56:30:a2:c4:fe:ec:dd:32:f0: e2:47:f1:8a:0e:72:23:3a:4a:87:3c:b8:b7:95:e1: 45:ce:75:a2:a9:2f:ca:8c:a8:2c:d6:70:e4:e3:38: e0:29:4a:5b:be:23:50:7d:e3:23:1d:48:77:86:0b: c1:cb:e6:f4:02:fa:fc:c3:71:7f:54:ea:0d:17:3b: b7:32:8e:a0:b7:37:9e:8b:54:cc:e1:e3:28:e3:e4: f4:c6:ed:e3:6f:3a:6f:78:45:34:59:aa:78:d2:90: 82:c5:fb:09:bf:85:54:91:25:99:ff:80:50:27:8c: 2d:e0:b5:db:c6:37:52:b1:7e:3b:f2:83:d0:4c:d9: ac:2b:ed:85:e5:98:05:0d:38:5b:93:e0:c0:df:10: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:36:F8:BB:5C:19:7A:9B:7B:5F:C1:9F:8A:5E:99:52:11:0B:43:3F X509v3 Authority Key Identifier: keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:27:f4:93:43:16:14:be:98:16:ce:91:eb:63:97:d6:18:77: 31:ee:cf:53:98:bb:9c:58:46:3c:c5:44:e8:e2:fb:1d:bb:95: bf:85:01:f2:2b:30:f0:25:2e:ed:81:ea:b1:64:21:13:4e:45: 4d:9d:df:f5:e1:95:35:c4:cd:38:53:ad:dc:07:6a:c3:9c:4a: 9e:15:be:1a:33:6c:4d:04:b6:cc:0e:f8:e6:9f:22:9b:2a:69: 3f:27:79:4e:66:21:7b:e7:64:a7:b8:dc:e0:44:05:c4:24:d7: 2f:0c:23:df:05:3c:03:6d:a6:a2:83:66:6a:03:54:12:5c:22: a1:23:fa:ac:61:c0:38:d5:3a:28:7a:ca:f2:4a:2f:de:dd:32: 8d:f3:87:2b:88:a1:46:a9:2e:0e:05:81:3d:09:19:60:2d:d0: 1e:36:77:9a:d5:e3:e7:86:e3:04:73:3a:22:d2:7b:56:58:0a: 07:70:a2:bb:d8:50:24:13:fe:ce:22:59:c9:24:8b:a9:8c:d9: f3:bb:50:7a:78:c1:64:32:31:0f:dc:ac:fa:48:07:37:8e:3b: be:0d:33:e9:11:88:c7:a1:34:24:62:02:4a:80:97:a6:d3:a5: 2f:56:e9:80:ff:a8:3d:dc:ff:50:b1:26:10:0d:af:96:d7:e1: 6e:d5:19:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE NzU1RUQwQzAwHhcNMjUwODIzMDQyNjIyWhcNMjUwODMwMDQyNjIyWjAYMRYwFAYD VQQDEw02OGE5NDJlZS04MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypzUHQcBNL2Ajhj2KZ59K0bdLojVy3dAqbPQhG81YPuC/gn8Vvh4LOdJPL4T K2L61qpX78zvwQT8Tk3NNxiHXg518oeyK9FthdWyGQJqmiiuoD40yKSWE+XaKM/z vBAUZrSQvoUFQEwDMeGal0ZWMKLE/uzdMvDiR/GKDnIjOkqHPLi3leFFznWiqS/K jKgs1nDk4zjgKUpbviNQfeMjHUh3hgvBy+b0Avr8w3F/VOoNFzu3Mo6gtzeei1TM 4eMo4+T0xu3jbzpveEU0Wap40pCCxfsJv4VUkSWZ/4BQJ4wt4LXbxjdSsX478oPQ TNmsK+2F5ZgFDThbk+DA3xDjMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFME2+Ltc GXqbe1/Bn4pemVIRC0M/MB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP aTJtdFBER25OaG5YVmUwTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACJ/STQxYUvpgWzpHrY5fWGHcx7s9TmLucWEY8xUTo4vsdu5W/hQHy KzDwJS7tgeqxZCETTkVNnd/14ZU1xM04U63cB2rDnEqeFb4aM2xNBLbMDvjmnyKb Kmk/J3lOZiF752SnuNzgRAXEJNcvDCPfBTwDbaaig2ZqA1QSXCKhI/qsYcA41Too esrySi/e3TKN84criKFGqS4OBYE9CRlgLdAeNnea1ePnhuMEczoi0ntWWAoHcKK7 2FAkE/7OIlnJJIupjNnzu1B6eMFkMjEP3Kz6SAc3jju+DTPpEYjHoTQkYgJKgJem 06UvVumA/6g93P9QsSYQDa+W1+Fu1Rlc -----END CERTIFICATE-----Generated at Sat Aug 23 17:18:58 2025 by rpki-client