$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: Crx2q331KBxErl5F2qnYxrL1Dn+Gsk7VOFqLPdKqOlE= Subject key identifier: 7A:07:2D:F3:F0:28:CC:F9:1F:7E:25:87:D8:C1:9B:BA:E7:33:63:2B Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 19 Signing time: Sun 19 Oct 2025 11:24:26 +0000 Manifest this update: Sun 19 Oct 2025 11:24:25 +0000 Manifest next update: Sun 26 Oct 2025 11:24:25 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: wd0VK7Kfw8cC6LQpThh1KcaF4JHGNZwHsa8aS75qlvw=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: vMZkY4LJvSskuTqDy/+VGXHXuUJS0EC4VIR/FgkiiB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Oct 19 11:24:25 2025 GMT Not After : Oct 26 11:24:25 2025 GMT Subject: CN=68f4ca69-0979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d5:74:e3:bd:61:15:34:fc:df:ed:07:62:cd: 57:f8:6c:95:93:0a:f8:07:88:38:79:7d:1f:67:e8: 2d:b9:4d:61:26:37:2b:08:ed:05:0c:f0:da:18:a9: 3a:91:16:0c:20:27:38:b6:c4:bd:8a:71:0b:1a:50: f8:53:6a:86:69:b1:34:b3:f0:bf:6c:03:d4:e1:68: 34:4c:84:c6:2c:80:0e:89:51:f2:6a:82:ca:b3:15: 3b:58:b9:49:5a:e5:bf:e2:00:d7:84:d3:c1:0b:ba: 49:f5:bf:df:20:37:44:7d:6f:2e:d5:96:29:cc:89: e9:38:94:9f:0d:06:36:98:3b:fd:b2:72:9f:65:24: 67:05:5b:f5:b1:b9:d9:db:5c:1f:4f:5c:ca:24:48: 58:dd:24:12:1d:77:2a:95:f6:1d:be:94:c3:0c:ae: 00:5d:60:a1:28:81:37:1b:74:27:91:aa:46:7f:85: c1:2b:ee:e8:c9:5a:cc:2d:6a:dd:56:23:81:5a:db: 1c:6e:25:22:ae:59:1e:50:d1:9e:ac:e8:d8:44:06: 52:89:c1:a0:37:ad:c7:27:72:55:87:20:86:92:96: cd:00:94:db:44:37:c4:09:6b:35:c4:e9:4e:99:3f: 0b:3f:86:1d:36:07:88:66:98:cd:44:81:9c:65:c8: 7f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:07:2D:F3:F0:28:CC:F9:1F:7E:25:87:D8:C1:9B:BA:E7:33:63:2B X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ff:a2:5e:37:89:2c:e9:9c:a9:9b:4c:2e:9e:48:08:59:85: c7:1e:39:e0:a8:58:c9:c5:ee:35:ad:1a:17:e8:32:0c:a2:23: e0:91:d4:c4:59:2b:76:65:ae:d0:22:88:02:8c:e5:97:5d:70: 4d:c5:78:47:80:f2:fb:cc:7b:da:1b:06:43:e2:23:dd:55:62: 0c:0d:c0:56:6c:52:55:89:20:26:b0:57:c2:18:34:e9:9a:bb: f2:04:f4:af:d8:d4:66:df:8e:9e:bf:55:08:cd:c6:fc:98:cf: 86:c7:a0:19:33:84:e9:c6:59:2d:34:6d:c6:b1:95:f7:b0:e0: 24:97:1f:0c:5f:a7:b9:5e:be:83:93:70:d8:66:1d:41:13:c4: 63:7d:06:d9:bb:d0:d5:ef:92:41:75:fc:2e:21:c1:43:cf:9e: 6d:1a:da:98:35:3c:d8:4c:ab:17:c5:67:ff:3e:0a:2a:4d:fb: 51:9d:57:71:a1:f3:36:63:ef:e1:ad:5f:a9:09:2a:47:9c:55: 22:05:50:a2:d2:de:93:be:a8:ce:12:29:c2:32:85:8c:67:09: e6:b6:4d:88:f2:a0:68:90:3f:2c:e3:8e:9e:a0:4e:c0:6e:0b: 79:94:08:1d:b6:58:c4:10:06:f8:6a:5f:d8:c4:df:7f:f7:a5: 07:c7:32:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3 MDNFNDM2OTAeFw0yNTEwMTkxMTI0MjVaFw0yNTEwMjYxMTI0MjVaMBgxFjAUBgNV BAMTDTY4ZjRjYTY5LTA5NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDu1XTjvWEVNPzf7QdizVf4bJWTCvgHiDh5fR9n6C25TWEmNysI7QUM8NoYqTqR FgwgJzi2xL2KcQsaUPhTaoZpsTSz8L9sA9ThaDRMhMYsgA6JUfJqgsqzFTtYuUla 5b/iANeE08ELukn1v98gN0R9by7VlinMiek4lJ8NBjaYO/2ycp9lJGcFW/Wxudnb XB9PXMokSFjdJBIddyqV9h2+lMMMrgBdYKEogTcbdCeRqkZ/hcEr7ujJWswtat1W I4Fa2xxuJSKuWR5Q0Z6s6NhEBlKJwaA3rccnclWHIIaSls0AlNtEN8QJazXE6U6Z Pws/hh02B4hmmM1EgZxlyH9ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUegct8/Ao zPkffiWH2MGbuuczYyswHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0VDLzI1NjM1N0M4ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1O UEsxcFJ3ejZPa25BLVEyay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHP/ol43iSzpnKmbTC6eSAhZhcceOeCoWMnF7jWtGhfoMgyiI+CR1MRZ K3ZlrtAiiAKM5ZddcE3FeEeA8vvMe9obBkPiI91VYgwNwFZsUlWJICawV8IYNOma u/IE9K/Y1Gbfjp6/VQjNxvyYz4bHoBkzhOnGWS00bcaxlfew4CSXHwxfp7levoOT cNhmHUETxGN9Btm70NXvkkF1/C4hwUPPnm0a2pg1PNhMqxfFZ/8+CipN+1GdV3Gh 8zZj7+GtX6kJKkecVSIFUKLS3pO+qM4SKcIyhYxnCea2TYjyoGiQPyzjjp6gTsBu C3mUCB22WMQQBvhqX9jE33/3pQfHMis= -----END CERTIFICATE-----Generated at Tue Oct 21 01:32:48 2025 by rpki-client