$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: uUWw+d+rpiH3Ado/5SHpPI7h4csy2G0OGxFy6paCkXE= Subject key identifier: 5C:21:8D:69:CA:55:0F:D1:20:B2:29:1C:A5:F6:72:F5:5D:0B:35:8C Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 1654 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 164B Signing time: Fri 22 Aug 2025 16:49:56 +0000 Manifest this update: Fri 22 Aug 2025 16:49:56 +0000 Manifest next update: Fri 29 Aug 2025 16:49:56 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: MoAs04168ApVvljZjcoN6zhQDqW07IlpKTCqTVuhAWE=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: mykXr6ve/cwvr+LfcirysCKrHVhRt9J9fVkHn/0QFbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5716 (0x1654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Aug 22 16:49:56 2025 GMT Not After : Aug 29 16:49:56 2025 GMT Subject: CN=68a89fb4-5e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7c:2f:0c:28:d8:4d:1f:3e:cf:06:57:fb:cb: c0:44:24:a7:19:bb:4c:8a:3d:c5:9c:0c:42:27:da: aa:0e:a8:c7:98:d6:a4:48:9c:1f:f1:62:a3:aa:6f: da:e3:22:cd:ed:79:55:57:61:2b:e7:3f:a1:62:b9: b3:9f:b2:95:a7:a4:6a:aa:80:d3:c3:90:32:d6:bb: 5d:77:93:74:0f:2f:15:6a:a9:75:7b:ce:99:30:fc: 0e:f9:89:29:2f:77:2b:97:19:61:88:e8:27:e8:d1: 33:15:e7:a5:4e:0b:b2:9d:c1:19:b4:4c:d7:24:eb: df:7c:15:58:42:64:2a:66:d8:2a:53:2c:fc:11:aa: 36:16:4f:84:9e:54:e7:7a:4c:a1:46:8c:ab:ab:29: 51:d2:87:9e:57:09:d2:15:1a:7b:aa:3b:d7:b0:da: 23:2e:5c:45:76:7b:98:af:b4:00:f1:66:19:04:5f: 76:6f:62:40:fc:d1:be:82:2c:c8:37:28:2f:c7:24: 03:35:c1:5f:b2:97:64:b8:d1:ca:74:00:e8:4c:c0: 9f:3c:70:74:2f:e6:3f:f3:fc:77:d7:57:e8:35:d3: 25:14:36:d2:81:7f:52:54:83:64:9f:b8:67:30:1a: 1e:70:3b:66:e1:4c:73:10:ae:6c:a5:dd:42:9f:e3: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:21:8D:69:CA:55:0F:D1:20:B2:29:1C:A5:F6:72:F5:5D:0B:35:8C X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:fb:54:00:e0:a1:b6:a7:4e:78:dd:f4:b9:15:46:14:37:4a: 66:e6:6a:a8:83:d3:b5:b8:ef:59:bd:66:0a:ec:5f:16:18:2a: 3a:65:eb:17:b5:53:80:60:70:c4:f9:6f:c2:f4:29:22:1d:b7: f9:08:e6:94:4b:0d:d8:bd:45:57:0d:21:96:35:2f:8b:9e:60: 4b:ad:8a:a3:ce:93:f4:b6:80:db:d2:77:de:aa:ba:8b:e0:4e: 4b:a4:d7:05:9d:ac:76:95:c3:b6:4e:c5:5e:4f:7c:53:0b:63: 75:0c:c2:68:54:92:bf:98:9b:4f:70:6b:ae:d0:2b:b4:91:34: 3e:c5:03:d1:a3:73:d5:47:5f:02:a9:c7:1d:f0:e5:4b:4a:8a: 1c:b9:1e:de:7f:89:ee:dc:3e:f2:2d:35:30:94:57:cc:2b:45: f8:56:04:52:e5:5f:ec:7b:6f:39:13:1b:6d:d8:6f:54:f9:f2: 92:08:45:60:3b:b2:eb:46:0b:78:e4:d6:4e:b1:e1:89:30:92: bc:b5:b8:ac:61:e1:4f:bf:de:88:e7:01:8f:6e:11:5f:26:3f: 4e:f2:1f:cd:ed:b8:40:fe:d2:e7:fd:94:f9:ca:5d:a9:4f:17: 8f:51:7c:97:1b:fb:44:f5:65:fa:5f:d1:43:b3:80:b1:10:ee: 53:af:df:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUwODIyMTY0OTU2WhcNMjUwODI5MTY0OTU2WjAYMRYwFAYD VQQDEw02OGE4OWZiNC01ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XwvDCjYTR8+zwZX+8vARCSnGbtMij3FnAxCJ9qqDqjHmNakSJwf8WKjqm/a 4yLN7XlVV2Er5z+hYrmzn7KVp6RqqoDTw5Ay1rtdd5N0Dy8Vaql1e86ZMPwO+Ykp L3crlxlhiOgn6NEzFeelTguyncEZtEzXJOvffBVYQmQqZtgqUyz8Eao2Fk+EnlTn ekyhRoyrqylR0oeeVwnSFRp7qjvXsNojLlxFdnuYr7QA8WYZBF92b2JA/NG+gizI NygvxyQDNcFfspdkuNHKdADoTMCfPHB0L+Y/8/x311foNdMlFDbSgX9SVINkn7hn MBoecDtm4UxzEK5spd1Cn+OdJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwhjWnK VQ/RILIpHKX2cvVdCzWMMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0+1QA4KG2p0543fS5FUYUN0pm5mqog9O1uO9ZvWYK7F8WGCo6ZesX tVOAYHDE+W/C9CkiHbf5COaUSw3YvUVXDSGWNS+LnmBLrYqjzpP0toDb0nfeqrqL 4E5LpNcFnax2lcO2TsVeT3xTC2N1DMJoVJK/mJtPcGuu0Cu0kTQ+xQPRo3PVR18C qccd8OVLSoocuR7ef4nu3D7yLTUwlFfMK0X4VgRS5V/se285Extt2G9U+fKSCEVg O7LrRgt45NZOseGJMJK8tbisYeFPv96I5wGPbhFfJj9O8h/N7bhA/tLn/ZT5yl2p TxePUXyXG/tE9WX6X9FDs4CxEO5Tr98I -----END CERTIFICATE-----Generated at Sun Aug 24 09:39:36 2025 by rpki-client