$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft File: CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json) Hash identifier: 6U8KOms17FHA6N9EmCYi+tLbndmB+Eoe2g8tgwHT3cE= Subject key identifier: EF:F4:A2:54:D8:E0:FC:2D:29:2E:23:E6:15:E2:32:89:B0:C7:6D:A2 Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 Certificate issuer: /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft Manifest number: 78 Signing time: Sat 05 Jul 2025 07:03:42 +0000 Manifest this update: Sat 05 Jul 2025 07:03:42 +0000 Manifest next update: Sat 12 Jul 2025 07:03:42 +0000 Files and hashes: 1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: +YLMSbiDl1oGJS/kX+Da/K3ZDXEtzFQ5tBkRIAmAeqw=) 2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: ZgB4/zOUlrbnr+66F7inM4U41pNR0yS6V1N2ZkRjXXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164164, serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Validity Not Before: Jul 5 07:03:42 2025 GMT Not After : Jul 12 07:03:42 2025 GMT Subject: CN=6868ce4e-511e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:6f:06:d4:8f:5f:c8:1b:a5:40:9d:e8:2b: 20:81:c4:1b:68:b3:b7:02:51:27:ac:7f:d8:74:43: 0e:3e:5f:eb:19:69:49:21:8e:8b:2e:22:88:73:b8: 06:99:f7:f8:fb:d4:48:fb:66:6f:d1:75:14:a7:37: 9a:1a:33:aa:d4:7d:b3:9d:a3:5c:37:e4:38:ba:68: a4:34:1b:60:c1:a8:7b:9e:d6:39:cf:17:2f:d0:2b: 0a:1c:8a:82:f3:0b:c2:de:53:5c:90:ec:e3:d1:2a: 3d:06:46:39:ec:e1:92:13:4d:45:c7:ad:ab:24:48: 29:31:4a:de:1e:81:e6:49:08:5b:9b:81:cb:4a:b7: d9:89:3f:f4:64:39:ac:8b:bb:a9:69:14:00:97:cc: c4:c0:74:8c:d1:5a:9d:24:3e:28:08:8b:25:4f:d4: 54:1f:23:bb:49:92:f0:38:44:44:b7:c5:fc:da:1a: ff:62:97:7f:bf:61:3f:ad:c5:f8:3f:2a:c0:e4:95: c4:7c:d9:78:3e:d0:3b:51:bb:88:90:cd:e3:0e:bb: 87:ff:16:92:6c:3d:b7:03:29:46:3c:9a:ca:c1:7c: 08:fb:be:74:e6:f5:01:fd:03:be:68:4e:d5:f2:60: f7:47:17:8d:19:fb:40:2d:a9:1f:66:1c:15:a1:8b: 2a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F4:A2:54:D8:E0:FC:2D:29:2E:23:E6:15:E2:32:89:B0:C7:6D:A2 X509v3 Authority Key Identifier: keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:87:c2:7c:c7:ec:4b:5c:cf:12:5b:eb:bc:26:55:9d:37:25: 98:49:fe:36:b4:8e:86:54:af:ef:eb:bc:d7:73:6b:68:40:d5: 76:8d:15:dd:77:04:76:4a:ab:78:c5:38:e9:f9:47:b6:bd:b8: 7d:df:77:35:78:87:d0:3f:b9:30:65:89:11:96:a4:5f:bc:bc: 76:8b:87:c3:01:9a:38:ff:cd:a2:4d:7d:3e:81:1d:a7:57:91: 0d:c6:b9:17:d3:6f:58:bf:5a:c9:13:73:65:1f:ac:b5:d2:41: b4:56:08:1b:a3:f3:7c:82:3e:a4:30:cc:8a:f3:c0:c8:30:47: 3a:38:1e:19:52:ec:09:b4:c3:bd:5f:e3:8d:0f:3f:7b:9b:d0: 20:b3:59:fc:1b:2d:84:e2:30:61:e9:ba:86:1d:ef:77:8f:8b: 65:7f:f5:34:7a:5d:f5:c1:07:8a:7e:d3:8e:64:ae:bf:e1:5c: 08:04:a9:f4:81:58:de:df:f8:41:fa:92:cf:00:bf:a3:c6:b6: ad:b2:c1:a3:ab:67:47:7d:22:aa:ca:84:79:d5:24:fc:f3:87: 8c:4f:9a:60:3f:8c:0a:5e:c0:23:da:d1:25:a6:d5:07:c4:29: 02:3a:73:44:87:e3:8d:41:47:07:51:ad:7b:54:bd:06:90:85: 87:d4:9e:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDE2NDExMC8GA1UEBRMoMDk0QzhCQzVEQURDQ0Q5QzJGQjNDRjQ1RDE0NjRERUVD RjNBMUM2MDAeFw0yNTA3MDUwNzAzNDJaFw0yNTA3MTIwNzAzNDJaMBgxFjAUBgNV BAMTDTY4NjhjZTRlLTUxMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIk28G1I9fyBulQJ3oKyCBxBtos7cCUSesf9h0Qw4+X+sZaUkhjosuIohzuAaZ 9/j71Ej7Zm/RdRSnN5oaM6rUfbOdo1w35Di6aKQ0G2DBqHue1jnPFy/QKwocioLz C8LeU1yQ7OPRKj0GRjns4ZITTUXHraskSCkxSt4egeZJCFubgctKt9mJP/RkOayL u6lpFACXzMTAdIzRWp0kPigIiyVP1FQfI7tJkvA4RES3xfzaGv9il3+/YT+txfg/ KsDklcR82Xg+0DtRu4iQzeMOu4f/FpJsPbcDKUY8msrBfAj7vnTm9QH9A75oTtXy YPdHF40Z+0AtqR9mHBWhiyo1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7/SiVNjg /C0pLiPmFeIyibDHbaIwHwYDVR0jBBgwFoAUCUyLxdrczZwvs89F0UZN7s86HGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0MTY0L0FFNzIyODlDQTE4 MjExRUY4RjRFMTYyM0M0RjlBRTAyL0NVeUx4ZHJjelp3dnM4OUYwVVpON3M4NkhH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1V5THhkcmN6Wnd2czg5RjBVWk43czg2SEdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 MTY0L0FFNzIyODlDQTE4MjExRUY4RjRFMTYyM0M0RjlBRTAyL0NVeUx4ZHJjelp3 dnM4OUYwVVpON3M4NkhHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJKHwnzH7EtczxJb67wmVZ03JZhJ/ja0joZUr+/rvNdza2hA1XaNFd13 BHZKq3jFOOn5R7a9uH3fdzV4h9A/uTBliRGWpF+8vHaLh8MBmjj/zaJNfT6BHadX kQ3GuRfTb1i/WskTc2UfrLXSQbRWCBuj83yCPqQwzIrzwMgwRzo4HhlS7Am0w71f 440PP3ub0CCzWfwbLYTiMGHpuoYd73ePi2V/9TR6XfXBB4p+045krr/hXAgEqfSB WN7f+EH6ks8Av6PGtq2ywaOrZ0d9IqrKhHnVJPzzh4xPmmA/jApewCPa0SWm1QfE KQI6c0SH441BRwdRrXtUvQaQhYfUnp4= -----END CERTIFICATE-----Generated at Sun Jul 6 07:15:39 2025 by rpki-client