$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: IJGByZSBo0wwgMHVcbcraRn0vcjeRCLYAcz4nTHcXZQ= Subject key identifier: CD:3E:FA:7F:6E:E9:21:C6:F6:65:3D:DD:70:02:44:9D:DB:62:17:CC Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 0956 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 0933 Signing time: Sat 28 Jun 2025 20:03:17 +0000 Manifest this update: Sat 28 Jun 2025 20:03:17 +0000 Manifest next update: Sat 05 Jul 2025 20:03:17 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: 6m0oNtzoEzCeKIp0p0z+swP5BL3qHojRWc01vB4Wihw=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: D1MytX8PFSoPgxFDgyjmvW8kj3dmc3d5kXRVH2UDjTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2390 (0x956) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: Jun 28 20:03:17 2025 GMT Not After : Jul 5 20:03:17 2025 GMT Subject: CN=68604a85-784d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a2:3a:e9:51:cb:82:a9:19:cc:a2:aa:92:2a: f2:16:46:f1:ef:db:5a:8e:3e:a2:52:45:98:be:57: 40:68:11:b1:65:f7:3f:45:d7:53:85:40:fb:22:61: ce:4e:d6:44:2e:6d:bf:32:64:23:8c:79:9a:64:6a: 2a:79:9f:ca:75:03:b9:5c:08:4c:9a:13:26:2c:30: 78:8a:67:ae:76:6f:3e:42:82:c7:ac:97:7d:00:6c: d6:e8:3d:4f:cf:1f:6a:d7:06:d8:75:ce:b9:1e:77: a3:7a:4e:d8:06:8d:a0:04:a6:4b:3d:cc:4d:e6:52: a5:6c:0b:64:0f:c9:b5:ec:53:25:d4:3d:cc:dd:c5: bd:30:e7:33:09:f7:ff:e1:35:9c:90:4c:e6:64:e8: 09:10:b5:53:ec:84:f7:59:cc:53:18:16:8b:63:e0: 8b:6f:b7:7f:ab:3d:d0:e1:9b:2e:fb:b7:20:25:12: 57:b7:33:31:c6:19:36:d1:6d:fa:8c:c3:98:57:a1: 40:f4:7d:a6:24:42:1f:9b:8e:a0:8e:cb:cb:ec:4c: 4d:95:ce:cc:3a:6f:2f:ba:96:44:13:bc:4e:67:b9: f7:08:3a:86:c4:b9:28:e7:f4:e2:65:0a:3e:1a:9f: 3e:92:19:25:2b:29:42:60:77:44:80:58:d2:37:92: a7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3E:FA:7F:6E:E9:21:C6:F6:65:3D:DD:70:02:44:9D:DB:62:17:CC X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:16:3f:12:10:19:21:d0:38:48:76:4b:a8:4d:93:74:8a:db: 9b:64:07:b5:5c:ef:62:fa:c8:74:6c:c2:5a:c4:1e:12:9d:41: fa:e5:26:ef:45:a9:3c:74:f9:9d:65:74:62:ce:fa:02:ad:f4: bb:33:4e:02:b4:7e:50:e7:03:a2:ca:bf:44:ca:88:29:ec:6c: cb:25:63:a4:1f:52:f3:3e:10:d5:65:2f:c7:99:6d:c0:cc:27: 3f:ee:5a:01:ee:70:f4:27:2a:47:cd:5d:17:4c:a4:70:dd:51: b6:12:ed:38:38:47:5a:f5:7f:fd:6e:ec:d2:58:ce:bf:cb:e4: ae:cf:1f:0e:75:f4:14:47:1a:be:ee:78:6a:a7:ba:dd:b9:48: ef:e6:5d:92:7e:1f:28:11:34:92:d5:2f:b2:54:61:66:89:18: e9:d2:94:85:90:89:c9:47:57:f8:2f:7c:c4:e5:d0:74:6e:fe: f4:ac:ce:b5:59:b0:72:7a:86:03:d1:fe:4d:5f:fb:32:6f:a0: b8:7b:d7:47:56:00:37:d4:bf:7d:1e:ee:c9:25:c9:4a:71:44: a7:92:3c:8f:14:10:b9:0b:04:73:47:81:d8:a2:b5:94:82:fd: 6a:ec:28:7e:53:66:44:cc:cc:23:f1:80:75:80:02:b2:af:69: ff:c7:0e:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjUwNjI4MjAwMzE3WhcNMjUwNzA1MjAwMzE3WjAYMRYwFAYD VQQDEw02ODYwNGE4NS03ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA96I66VHLgqkZzKKqkiryFkbx79tajj6iUkWYvldAaBGxZfc/RddThUD7ImHO TtZELm2/MmQjjHmaZGoqeZ/KdQO5XAhMmhMmLDB4imeudm8+QoLHrJd9AGzW6D1P zx9q1wbYdc65Hnejek7YBo2gBKZLPcxN5lKlbAtkD8m17FMl1D3M3cW9MOczCff/ 4TWckEzmZOgJELVT7IT3WcxTGBaLY+CLb7d/qz3Q4Zsu+7cgJRJXtzMxxhk20W36 jMOYV6FA9H2mJEIfm46gjsvL7ExNlc7MOm8vupZEE7xOZ7n3CDqGxLko5/TiZQo+ Gp8+khklKylCYHdEgFjSN5Kn7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0++n9u 6SHG9mU93XACRJ3bYhfMMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvFj8SEBkh0DhIdkuoTZN0itubZAe1XO9i+sh0bMJaxB4SnUH65Sbv Rak8dPmdZXRizvoCrfS7M04CtH5Q5wOiyr9Eyogp7GzLJWOkH1LzPhDVZS/HmW3A zCc/7loB7nD0JypHzV0XTKRw3VG2Eu04OEda9X/9buzSWM6/y+Suzx8OdfQURxq+ 7nhqp7rduUjv5l2Sfh8oETSS1S+yVGFmiRjp0pSFkInJR1f4L3zE5dB0bv70rM61 WbByeoYD0f5NX/syb6C4e9dHVgA31L99Hu7JJclKcUSnkjyPFBC5CwRzR4HYorWU gv1q7Ch+U2ZEzMwj8YB1gAKyr2n/xw4/ -----END CERTIFICATE-----Generated at Mon Jun 30 18:12:16 2025 by rpki-client