$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: kkZ41enSWtu6bmG5B+GxxApQrpz/Aq5lWDgfa5wJQbY= Subject key identifier: CF:D2:0F:03:3F:2D:92:2D:CB:C3:72:4C:A4:D1:EB:42:9D:89:0C:DC Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 1287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1ABA Signing time: Sat 18 Oct 2025 17:36:23 +0000 Manifest this update: Sat 18 Oct 2025 17:36:23 +0000 Manifest next update: Sat 25 Oct 2025 17:36:23 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: JFz+flwpW6Ryh4MYRj3/d3JLfZ61Xbu7iGHx3YLanPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4743 (0x1287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: Oct 18 17:36:23 2025 GMT Not After : Oct 25 17:36:23 2025 GMT Subject: CN=68f3d017-b232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:f8:08:2e:1d:94:4f:db:63:71:d3:d8:e1: b4:b8:9f:fa:6a:3e:4a:dc:af:53:3e:d7:9f:5b:d4: 75:d3:cd:63:17:ea:89:45:7b:3e:ef:a3:81:5c:68: fa:58:58:15:90:8c:fb:35:d0:78:25:95:c6:49:9a: 6d:62:5d:3b:fb:9d:6d:76:54:a7:e1:6e:b0:ad:9b: 87:44:bb:4a:af:04:fe:31:78:2d:11:8b:e3:92:70: 6b:86:5a:da:03:fd:4a:7c:1a:2e:16:f5:90:44:06: 90:41:f6:e6:2b:8b:90:be:04:07:d5:f1:87:6a:a8: 62:db:57:95:3a:3d:a6:b0:b3:47:e3:00:78:6c:71: 56:a6:a3:d9:30:96:af:5e:01:e8:aa:32:f6:60:0c: 3d:39:29:11:09:17:50:31:1f:b5:20:b9:2e:a2:50: 8d:6d:91:a2:20:f8:b1:ca:02:fd:0a:27:2a:59:32: 70:36:51:44:69:ab:26:20:9c:e2:67:21:be:3d:e5: 2a:79:d2:77:d1:5e:01:f9:6b:99:5c:27:e5:48:61: 47:e0:d1:77:ff:aa:c8:81:16:85:1a:c4:1d:5d:ea: c7:2a:d2:8e:d2:57:34:f8:b7:94:aa:1c:39:41:62: 67:1a:3c:fa:e4:36:ce:38:e1:74:30:f1:23:a6:f8: d6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D2:0F:03:3F:2D:92:2D:CB:C3:72:4C:A4:D1:EB:42:9D:89:0C:DC X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:14:47:f0:46:30:bb:8d:f2:91:cd:6f:85:c0:f9:8d:7b:19: c8:cc:d3:5e:9d:1b:a3:65:66:88:3d:cb:26:54:85:85:5b:bc: 40:47:23:f4:84:b2:5a:93:91:92:0a:29:27:75:8f:25:55:27: a1:6a:9f:73:9b:42:e3:bb:24:59:41:04:ba:ed:b6:79:b4:49: 8a:01:82:d1:8a:3f:d2:c3:55:8a:f7:43:99:5b:16:7b:54:8f: 51:09:84:88:26:6f:80:05:a9:10:40:5d:72:91:e4:69:c0:da: 4e:31:3e:c0:9f:3e:00:24:12:e0:35:40:65:d3:ce:15:fc:e2: eb:6d:c6:8a:a6:a6:08:8f:79:9b:c3:7f:04:b6:ab:07:91:a5: 77:97:f7:d5:2f:8b:e6:dc:ba:82:34:cd:be:d5:a2:7a:9f:9c: ea:ec:61:61:9a:9b:e4:9e:c0:00:29:aa:34:1a:9b:dc:82:c0: 9b:4a:a6:f3:43:15:55:df:42:1d:c2:04:b7:18:1e:98:20:4d: b5:bb:a0:4a:82:f0:43:4d:35:60:e8:23:d6:20:12:d3:a0:9f: 8b:01:65:2b:97:06:7c:5c:e9:9f:4a:c9:35:72:b3:d5:00:f7: b6:31:f9:05:5e:7b:fa:4a:27:4b:b7:f9:ec:21:f6:bd:f1:40: cc:41:32:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjUxMDE4MTczNjIzWhcNMjUxMDI1MTczNjIzWjAYMRYwFAYD VQQDEw02OGYzZDAxNy1iMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmx74CC4dlE/bY3HT2OG0uJ/6aj5K3K9TPtefW9R1081jF+qJRXs+76OBXGj6 WFgVkIz7NdB4JZXGSZptYl07+51tdlSn4W6wrZuHRLtKrwT+MXgtEYvjknBrhlra A/1KfBouFvWQRAaQQfbmK4uQvgQH1fGHaqhi21eVOj2msLNH4wB4bHFWpqPZMJav XgHoqjL2YAw9OSkRCRdQMR+1ILkuolCNbZGiIPixygL9CicqWTJwNlFEaasmIJzi ZyG+PeUqedJ30V4B+WuZXCflSGFH4NF3/6rIgRaFGsQdXerHKtKO0lc0+LeUqhw5 QWJnGjz65DbOOOF0MPEjpvjWuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/SDwM/ LZIty8NyTKTR60KdiQzcMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByFEfwRjC7jfKRzW+FwPmNexnIzNNenRujZWaIPcsmVIWFW7xARyP0 hLJak5GSCikndY8lVSehap9zm0LjuyRZQQS67bZ5tEmKAYLRij/Sw1WK90OZWxZ7 VI9RCYSIJm+ABakQQF1ykeRpwNpOMT7Anz4AJBLgNUBl084V/OLrbcaKpqYIj3mb w38EtqsHkaV3l/fVL4vm3LqCNM2+1aJ6n5zq7GFhmpvknsAAKao0GpvcgsCbSqbz QxVV30IdwgS3GB6YIE21u6BKgvBDTTVg6CPWIBLToJ+LAWUrlwZ8XOmfSsk1crPV APe2MfkFXnv6SidLt/nsIfa98UDMQTKW -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:51 2025 by rpki-client