$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: DCT+tVXG9CsbQ9ZyAOe4nn2UKGw7WxSsf4ko2jz1Ino= Subject key identifier: DC:8C:4E:A1:4D:6A:AF:49:6A:D6:17:7A:08:55:1C:49:1F:4B:53:75 Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 0975 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 0951 Signing time: Fri 22 Aug 2025 20:25:44 +0000 Manifest this update: Fri 22 Aug 2025 20:25:43 +0000 Manifest next update: Fri 29 Aug 2025 20:25:43 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: 0DflmYaU+92dztEgxALJcDGzjK/JiXgtzmYZoC5G0po=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: +5v/UPyW3dQ/0rVuztf81a9oZSnTgo/JoecluNMVK0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2421 (0x975) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: Aug 22 20:25:43 2025 GMT Not After : Aug 29 20:25:43 2025 GMT Subject: CN=68a8d248-6c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:e7:26:e3:53:02:c3:9b:94:32:10:d6:63: e4:ea:91:f1:97:9a:dd:10:ea:ed:1c:91:8b:bd:da: 4f:76:f2:67:f9:cb:fb:08:bc:58:91:9f:51:e5:1c: ac:25:9c:0a:75:2c:87:0e:6d:ac:62:81:db:b3:03: e5:bb:f0:bc:30:26:03:2b:5e:08:13:76:e1:4e:4a: 97:24:33:19:9a:ff:e1:ef:f2:0d:90:7b:3b:fb:b3: 1b:9d:f2:f1:9e:f9:f5:3e:69:98:be:6c:b3:ab:be: 44:f7:c2:dd:d9:5a:c3:d5:c9:e6:2e:79:8e:50:d7: 6c:00:d0:29:6c:bf:b1:df:66:bc:80:56:23:eb:7b: b6:2d:df:f2:ff:c2:4c:e3:91:d8:74:de:6c:17:dd: 45:8f:21:03:1d:2f:03:87:cf:00:39:f4:0e:27:11: 6d:d3:d1:8a:8d:4d:62:40:11:ce:29:8b:da:5a:f5: 38:7e:7e:01:0a:0b:90:6b:26:67:23:e5:e9:b5:1b: 9a:57:7c:53:cb:a9:43:60:a6:5f:fc:95:c2:b9:f7: d5:e2:c3:2e:4c:e5:f7:b1:d0:c8:d8:36:f7:c6:ca: e6:d6:38:ef:de:38:97:a8:3d:45:8c:26:55:b1:85: c4:e9:ed:99:78:62:85:6c:0e:de:bb:80:e6:fa:41: 21:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8C:4E:A1:4D:6A:AF:49:6A:D6:17:7A:08:55:1C:49:1F:4B:53:75 X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6f:e7:0e:ca:3b:5b:19:f4:7d:6d:63:81:ad:ee:81:5b:2f: 6c:78:9e:b5:8f:6a:d3:78:5c:e3:69:d6:2b:23:49:e4:f8:09: 30:b1:d5:88:aa:0b:87:51:0f:41:fa:b2:f4:e7:da:bb:ab:08: f0:a9:2b:ab:99:77:cf:7a:7f:ee:7b:7a:61:a0:cf:8a:c9:01: fa:69:f3:c8:fe:a2:eb:5f:ae:38:34:d6:ca:ed:da:4c:e2:e1: 13:53:3b:14:48:e7:7f:22:6f:77:88:81:5f:25:7b:e8:f7:70: 34:fc:fa:70:5f:28:48:90:a1:40:27:97:d6:db:9f:eb:2f:18: 75:7e:b3:18:9c:22:80:93:a1:da:a5:52:3d:31:d6:b1:fc:45: f7:1e:fb:b8:97:cb:6f:a8:1d:ee:a1:bf:6f:43:cc:10:ee:e6: be:62:3d:71:44:9d:f6:5d:75:0b:c5:e4:4e:2a:74:30:d3:a0: eb:ed:09:fe:f2:9b:40:f5:46:2f:e6:dd:c3:2a:d0:2e:7a:fe: 78:66:ce:e8:76:92:80:ac:97:97:b1:d9:d6:85:f9:7c:e5:bb: aa:3e:b9:fa:bc:e3:ef:2c:fa:40:2e:6f:6c:21:d0:e0:43:bc: 14:fe:32:cb:ce:2d:f0:5e:fa:5d:6e:58:47:a2:10:dd:56:ed: 0c:6f:dc:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjUwODIyMjAyNTQzWhcNMjUwODI5MjAyNTQzWjAYMRYwFAYD VQQDEw02OGE4ZDI0OC02YzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tLnJuNTAsOblDIQ1mPk6pHxl5rdEOrtHJGLvdpPdvJn+cv7CLxYkZ9R5Rys JZwKdSyHDm2sYoHbswPlu/C8MCYDK14IE3bhTkqXJDMZmv/h7/INkHs7+7MbnfLx nvn1PmmYvmyzq75E98Ld2VrD1cnmLnmOUNdsANApbL+x32a8gFYj63u2Ld/y/8JM 45HYdN5sF91FjyEDHS8Dh88AOfQOJxFt09GKjU1iQBHOKYvaWvU4fn4BCguQayZn I+XptRuaV3xTy6lDYKZf/JXCuffV4sMuTOX3sdDI2Db3xsrm1jjv3jiXqD1FjCZV sYXE6e2ZeGKFbA7eu4Dm+kEhuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyMTqFN aq9JatYXeghVHEkfS1N1MB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPb+cOyjtbGfR9bWOBre6BWy9seJ61j2rTeFzjadYrI0nk+AkwsdWI qguHUQ9B+rL059q7qwjwqSurmXfPen/ue3phoM+KyQH6afPI/qLrX644NNbK7dpM 4uETUzsUSOd/Im93iIFfJXvo93A0/PpwXyhIkKFAJ5fW25/rLxh1frMYnCKAk6Ha pVI9Mdax/EX3Hvu4l8tvqB3uob9vQ8wQ7ua+Yj1xRJ32XXULxeROKnQw06Dr7Qn+ 8ptA9UYv5t3DKtAuev54Zs7odpKArJeXsdnWhfl85buqPrn6vOPvLPpALm9sIdDg Q7wU/jLLzi3wXvpdblhHohDdVu0Mb9z6 -----END CERTIFICATE-----Generated at Sat Aug 23 18:13:45 2025 by rpki-client