$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: eEIiYqrusKvqNpUJo27pcSYFEuyzbuTVUZGeR4kff7I= Subject key identifier: 2C:8C:EC:3C:E3:B6:54:58:DB:6C:2D:AE:3E:1C:51:AE:52:E7:5F:D3 Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 126A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1A80 Signing time: Fri 22 Aug 2025 17:14:31 +0000 Manifest this update: Fri 22 Aug 2025 17:14:31 +0000 Manifest next update: Fri 29 Aug 2025 17:14:31 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: SHBPc3sY+V05/6WOuSb3xiPekzgegJRXlPYVBzp/9Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4714 (0x126a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: Aug 22 17:14:31 2025 GMT Not After : Aug 29 17:14:31 2025 GMT Subject: CN=68a8a577-1ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:04:42:14:51:72:09:ba:ed:c7:0c:49:38: 35:88:d3:c6:c6:c2:5b:d8:c9:ac:bb:84:60:0e:69: c7:2b:41:92:43:b7:b0:10:52:85:f9:8e:52:50:04: f4:cb:f5:cb:c6:18:3c:49:1b:9c:05:93:b1:3a:76: 11:f8:46:15:aa:72:e0:c6:a8:41:ea:17:70:db:fd: a8:76:ea:b9:5d:1c:f8:03:2a:5d:c5:4b:32:1d:94: 3a:92:74:75:7e:51:b8:ff:0e:5d:04:57:78:e9:d9: cf:47:b0:4f:02:91:9a:6c:3c:88:d3:42:1f:63:fa: 0d:e6:21:88:d7:3d:26:7f:5d:55:c9:37:c3:ab:d8: 4f:4e:54:d1:0a:54:6f:3f:5a:44:76:b4:34:ed:e1: 69:c3:5d:ad:c5:53:e1:1e:e2:d5:40:d7:98:ee:bc: c7:50:f6:a2:d4:1a:db:f1:61:b2:32:0d:6c:62:da: 6d:79:16:e2:6e:26:7e:6d:03:33:de:12:f2:f3:c0: 4a:60:d6:21:2d:2f:46:0d:d6:e4:f5:65:cc:fe:3e: f5:17:a3:8f:08:e7:29:e6:a0:06:71:c3:64:1e:31: 3a:17:2d:bb:95:db:39:fa:fc:13:75:a5:cc:82:d4: 9f:c4:3e:61:4e:d6:4c:5e:f4:5f:ef:02:d0:33:5d: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8C:EC:3C:E3:B6:54:58:DB:6C:2D:AE:3E:1C:51:AE:52:E7:5F:D3 X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b3:26:79:a6:be:58:a2:c0:a4:be:c8:01:9d:f2:8b:b0:17: ba:55:e5:52:ab:58:ad:57:b3:c2:d8:70:7c:3f:61:f1:0e:ce: 87:7c:ae:31:ae:a8:42:d4:18:5d:64:7a:14:f7:4d:f7:f3:97: 50:db:28:67:17:74:4b:1a:0a:8a:c1:4b:87:0b:0b:1a:a9:2e: ac:22:b0:43:52:aa:f8:af:3c:b2:d6:f4:86:75:a3:d8:93:44: 52:43:ad:cb:74:a2:47:a5:fc:fe:22:89:9f:b0:7e:62:3d:25: f2:df:a3:9a:40:f7:7c:55:cf:23:8d:bf:93:0e:68:67:1c:57: 78:5e:f7:37:6f:77:e5:94:63:66:a7:62:43:73:7a:03:75:7f: ed:0a:10:60:c1:92:db:ee:29:e6:6d:5e:aa:5c:3f:b1:b2:ec: 0d:5d:16:a3:e2:e5:60:8b:c4:73:21:88:e7:a5:be:1c:3a:e6: b7:e1:fb:8e:e4:fd:20:96:33:71:16:3d:03:42:06:ea:35:ca: 81:fa:6c:31:31:46:a1:0d:f0:87:57:39:a1:7c:39:f7:bc:0d: ef:a3:60:1d:6c:ca:77:39:cc:68:d0:e5:50:bc:09:71:3a:08: b0:69:a5:ed:cf:db:fd:dd:ff:c0:0a:b0:57:7a:a3:32:16:da: 30:20:66:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjUwODIyMTcxNDMxWhcNMjUwODI5MTcxNDMxWjAYMRYwFAYD VQQDEw02OGE4YTU3Ny0xYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolsEQhRRcgm67ccMSTg1iNPGxsJb2Mmsu4RgDmnHK0GSQ7ewEFKF+Y5SUAT0 y/XLxhg8SRucBZOxOnYR+EYVqnLgxqhB6hdw2/2oduq5XRz4AypdxUsyHZQ6knR1 flG4/w5dBFd46dnPR7BPApGabDyI00IfY/oN5iGI1z0mf11VyTfDq9hPTlTRClRv P1pEdrQ07eFpw12txVPhHuLVQNeY7rzHUPai1Brb8WGyMg1sYtpteRbibiZ+bQMz 3hLy88BKYNYhLS9GDdbk9WXM/j71F6OPCOcp5qAGccNkHjE6Fy27lds5+vwTdaXM gtSfxD5hTtZMXvRf7wLQM11S5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyM7Dzj tlRY22wtrj4cUa5S51/TMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+syZ5pr5YosCkvsgBnfKLsBe6VeVSq1itV7PC2HB8P2HxDs6HfK4x rqhC1BhdZHoU903385dQ2yhnF3RLGgqKwUuHCwsaqS6sIrBDUqr4rzyy1vSGdaPY k0RSQ63LdKJHpfz+IomfsH5iPSXy36OaQPd8Vc8jjb+TDmhnHFd4Xvc3b3fllGNm p2JDc3oDdX/tChBgwZLb7inmbV6qXD+xsuwNXRaj4uVgi8RzIYjnpb4cOua34fuO 5P0gljNxFj0DQgbqNcqB+mwxMUahDfCHVzmhfDn3vA3vo2AdbMp3Ocxo0OVQvAlx OgiwaaXtz9v93f/ACrBXeqMyFtowIGaS -----END CERTIFICATE-----Generated at Sun Aug 24 00:42:42 2025 by rpki-client