$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: WbKrgeHbWAW7FxUdr7cX7BQCdt43tVyZS1eEio8t0EQ= Subject key identifier: 04:0A:F6:AD:35:DD:9D:3B:B4:70:78:FC:DC:7D:B3:D8:D5:19:5B:6A Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 0995 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 0970 Signing time: Sat 18 Oct 2025 21:18:42 +0000 Manifest this update: Sat 18 Oct 2025 21:18:42 +0000 Manifest next update: Sat 25 Oct 2025 21:18:42 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: r1OavWpZtBtByP4x6nVjcJUUYVK16Uk1I8eX56WRDzc=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: lb657OxiZdu7OS/rkuzqIPL5kfvM5EeZVQrmP0Hrb44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2453 (0x995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: Oct 18 21:18:42 2025 GMT Not After : Oct 25 21:18:42 2025 GMT Subject: CN=68f40432-ddea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:4a:fa:a6:ba:9a:7d:df:e2:00:29:b2:f1: 73:6e:56:00:67:58:3f:d2:d2:15:4f:af:46:f3:9e: e5:be:f4:fe:c3:bb:be:5e:a8:fa:1a:24:0b:7c:42: 81:50:97:61:4d:c7:53:35:c6:b3:6f:7b:71:eb:f6: 19:8c:22:f3:29:9d:c5:b1:07:2e:0d:77:73:a2:dd: 5e:9c:e7:4f:6c:3c:36:68:5d:3a:57:b6:fe:31:b7: 9a:65:85:bc:6d:71:14:ee:6e:bb:ba:ab:34:b8:42: 21:b7:88:a6:8b:6a:46:8e:c8:03:8b:c0:5a:93:a6: 3a:ec:57:7f:10:ef:d3:1f:7c:75:2a:f7:b2:09:27: a0:1c:e7:bd:e5:81:30:e5:53:7c:29:57:b6:48:b4: 99:09:ce:50:75:98:23:b1:b8:49:2e:b5:c1:af:55: e4:36:66:62:b6:ab:ee:45:b6:cd:09:d8:26:3c:5d: 6a:99:1c:b9:ba:f4:09:8c:ab:ec:fc:98:e5:df:b0: dd:be:ca:62:d2:17:60:ee:6a:89:71:32:81:4f:42: 76:10:e4:dd:90:2a:14:5c:1a:d6:d4:7e:21:89:06: 1e:cb:13:97:d7:c5:86:71:a3:54:f9:5c:5e:1f:b6: 07:99:1a:77:18:f8:8e:87:64:57:25:ab:0d:bc:18: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0A:F6:AD:35:DD:9D:3B:B4:70:78:FC:DC:7D:B3:D8:D5:19:5B:6A X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:34:db:a3:d2:d7:4d:c8:cd:8b:ca:f6:ba:38:1a:93:a3:d8: df:2e:1a:6b:30:26:11:b7:8e:2b:bc:22:85:2b:d3:33:88:32: 25:ec:b8:26:32:72:81:df:3d:47:ef:96:bf:42:36:9c:79:40: ea:47:84:f1:84:10:99:0b:1a:77:57:f5:2f:06:c6:fe:d0:ae: a9:cd:bf:31:35:01:c3:b6:ca:8b:10:cd:fe:c5:83:62:da:bb: 74:e3:c9:ff:ca:d5:37:54:3e:31:5e:f5:80:bb:f5:e1:c4:23: 0b:87:16:00:3b:4f:82:c2:9f:de:7c:31:5b:48:29:06:39:aa: 6a:22:cf:80:da:f8:69:fa:5a:9f:58:e6:aa:a2:5e:3f:ef:7f: b5:4b:33:7b:9a:21:92:94:34:a6:24:91:a3:aa:3d:95:cb:89: 4c:29:93:dd:a9:69:d5:00:a7:08:85:c6:25:3b:7c:d3:d5:78: 38:57:b3:e8:7b:1d:60:11:ec:b7:1f:a4:23:da:32:7d:74:46: 78:b4:d1:a4:40:e6:61:d3:fd:75:96:8a:71:f1:2e:a0:4d:ea: 69:3f:1a:ae:e2:c2:d9:34:5b:30:65:0e:80:ea:f1:e4:89:cc: df:60:e1:b3:51:47:57:e1:c3:a4:09:98:28:ee:d0:83:ac:ea: e6:2b:9a:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjUxMDE4MjExODQyWhcNMjUxMDI1MjExODQyWjAYMRYwFAYD VQQDEw02OGY0MDQzMi1kZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwepK+qa6mn3f4gApsvFzblYAZ1g/0tIVT69G857lvvT+w7u+Xqj6GiQLfEKB UJdhTcdTNcazb3tx6/YZjCLzKZ3FsQcuDXdzot1enOdPbDw2aF06V7b+MbeaZYW8 bXEU7m67uqs0uEIht4imi2pGjsgDi8Bak6Y67Fd/EO/TH3x1KveyCSegHOe95YEw 5VN8KVe2SLSZCc5QdZgjsbhJLrXBr1XkNmZitqvuRbbNCdgmPF1qmRy5uvQJjKvs /Jjl37Ddvspi0hdg7mqJcTKBT0J2EOTdkCoUXBrW1H4hiQYeyxOX18WGcaNU+Vxe H7YHmRp3GPiOh2RXJasNvBiZGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQK9q01 3Z07tHB4/Nx9s9jVGVtqMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBONNuj0tdNyM2Lyva6OBqTo9jfLhprMCYRt44rvCKFK9MziDIl7Lgm MnKB3z1H75a/QjaceUDqR4TxhBCZCxp3V/UvBsb+0K6pzb8xNQHDtsqLEM3+xYNi 2rt048n/ytU3VD4xXvWAu/XhxCMLhxYAO0+Cwp/efDFbSCkGOapqIs+A2vhp+lqf WOaqol4/73+1SzN7miGSlDSmJJGjqj2Vy4lMKZPdqWnVAKcIhcYlO3zT1Xg4V7Po ex1gEey3H6Qj2jJ9dEZ4tNGkQOZh0/11lopx8S6gTeppPxqu4sLZNFswZQ6A6vHk iczfYOGzUUdX4cOkCZgo7tCDrOrmK5p4 -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:14 2025 by rpki-client