$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: 17CU3lNFg/clix925THYoo+linohKCx3zz/4Z7EhtdM= Subject key identifier: 6F:93:DE:32:7B:C0:F0:9F:81:93:E6:4C:28:C8:D8:B0:00:41:E8:3F Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 1671 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 1668 Signing time: Sat 18 Oct 2025 17:08:13 +0000 Manifest this update: Sat 18 Oct 2025 17:08:12 +0000 Manifest next update: Sat 25 Oct 2025 17:08:12 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: JGSY99p7di4ShYJzNZOi8m1oUETYHxd7yvIRdAAlDUQ=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: mykXr6ve/cwvr+LfcirysCKrHVhRt9J9fVkHn/0QFbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5745 (0x1671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Oct 18 17:08:12 2025 GMT Not After : Oct 25 17:08:12 2025 GMT Subject: CN=68f3c97d-31ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:05:40:01:0f:cd:63:68:df:19:58:f5:0d:7a: c5:a8:a5:de:9c:cd:ea:5e:3e:14:c8:32:46:77:00: da:c6:f1:3d:e0:9b:9d:47:84:5f:a1:53:4c:5c:b0: 1a:df:b2:a4:23:52:c7:dd:a6:27:81:2d:63:10:21: ec:0a:be:fd:78:55:05:6d:8f:e9:0e:dd:6f:c4:d3: dc:db:a7:35:61:35:4e:d7:8c:17:cb:95:16:82:17: e7:e8:b9:46:c4:98:4c:a7:00:0d:65:ce:19:5a:4a: 2c:bb:11:62:9f:d7:61:b3:ba:92:42:4c:13:fd:df: 9d:3d:0f:ac:3e:9a:e6:7a:c7:36:5c:4a:73:b3:07: d6:ce:6c:c9:9e:6f:80:f5:a1:f3:3a:d6:ad:78:f4: 5e:c1:9b:0d:d8:ba:dd:d6:aa:70:2d:80:83:0f:83: ae:ae:3c:7e:3b:ac:68:c9:6f:37:f4:09:26:65:1d: 54:88:6c:65:fd:07:01:14:6c:43:5d:c4:19:02:c0: 09:09:d6:e4:1f:c2:76:33:b8:65:9e:51:07:a6:4f: 11:f2:b6:9d:d8:bd:6a:10:f6:8f:4e:27:92:0d:d5: 2c:d4:67:a8:c2:4b:a9:10:9d:1b:22:b3:63:a5:f4: f7:21:3b:8c:db:fd:ac:9a:10:df:ae:ad:a7:7c:ee: 91:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:93:DE:32:7B:C0:F0:9F:81:93:E6:4C:28:C8:D8:B0:00:41:E8:3F X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:41:7c:85:df:4b:dc:c9:19:5f:01:d6:8d:6b:93:d1:be:04: 04:32:66:5e:46:44:c4:80:29:c4:e6:f7:bb:49:1e:ee:86:fd: e0:51:c5:c8:1b:ea:d6:8c:96:1b:d4:d2:36:19:59:e2:03:9e: 5b:57:a5:db:fc:be:59:9d:7f:fd:3f:b9:01:ba:66:34:89:23: 52:4f:35:24:9c:83:1b:56:34:7c:5e:8f:7e:1f:e4:a6:05:41: f5:2a:5b:76:aa:77:b7:ea:e6:da:1e:7f:c5:3c:1e:5f:b8:03: 77:53:64:dc:e6:45:f4:c8:c1:a5:81:ba:a6:bc:20:83:ac:1f: 12:9e:e0:02:b5:bc:23:0f:8b:ce:e9:65:c7:34:88:d8:01:da: 75:10:b1:61:aa:4e:54:b0:96:9e:6c:ac:df:3e:c4:65:8b:b4: 14:f5:2e:ba:b5:d1:ea:a8:a9:0c:c3:8e:93:d3:e9:10:39:45: 05:5d:33:87:67:0e:47:63:54:9a:f6:91:cb:7a:f4:b9:76:fe: d1:11:a0:0d:70:bd:c0:e1:04:7e:94:c8:fc:e1:a2:f6:90:17: 10:fa:38:93:40:ff:1e:81:71:79:fd:87:dc:b2:1e:d2:59:d6: f9:2d:ef:48:bc:fc:92:ab:77:5c:f5:d0:49:a3:b1:2a:d5:dd: b4:cf:38:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUxMDE4MTcwODEyWhcNMjUxMDI1MTcwODEyWjAYMRYwFAYD VQQDEw02OGYzYzk3ZC0zMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgVAAQ/NY2jfGVj1DXrFqKXenM3qXj4UyDJGdwDaxvE94JudR4RfoVNMXLAa 37KkI1LH3aYngS1jECHsCr79eFUFbY/pDt1vxNPc26c1YTVO14wXy5UWghfn6LlG xJhMpwANZc4ZWkosuxFin9dhs7qSQkwT/d+dPQ+sPprmesc2XEpzswfWzmzJnm+A 9aHzOtatePRewZsN2Lrd1qpwLYCDD4Ourjx+O6xoyW839AkmZR1UiGxl/QcBFGxD XcQZAsAJCdbkH8J2M7hlnlEHpk8R8rad2L1qEPaPTieSDdUs1GeowkupEJ0bIrNj pfT3ITuM2/2smhDfrq2nfO6RpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+T3jJ7 wPCfgZPmTCjI2LAAQeg/MB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkQXyF30vcyRlfAdaNa5PRvgQEMmZeRkTEgCnE5ve7SR7uhv3gUcXI G+rWjJYb1NI2GVniA55bV6Xb/L5ZnX/9P7kBumY0iSNSTzUknIMbVjR8Xo9+H+Sm BUH1Klt2qne36ubaHn/FPB5fuAN3U2Tc5kX0yMGlgbqmvCCDrB8SnuACtbwjD4vO 6WXHNIjYAdp1ELFhqk5UsJaebKzfPsRli7QU9S66tdHqqKkMw46T0+kQOUUFXTOH Zw5HY1Sa9pHLevS5dv7REaANcL3A4QR+lMj84aL2kBcQ+jiTQP8egXF5/Yfcsh7S Wdb5Le9IvPySq3dc9dBJo7Eq1d20zzhF -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:23 2025 by rpki-client