$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: k/aXIpTHMEFWkw+zDcEcukd9EwGt8zfiubhfQorH9Vo= Subject key identifier: CB:8D:4C:C6:04:B5:8A:39:D0:31:05:2A:C2:A8:35:B6:F5:0D:01:A8 Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 163B Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 1632 Signing time: Fri 04 Jul 2025 16:59:49 +0000 Manifest this update: Fri 04 Jul 2025 16:59:48 +0000 Manifest next update: Fri 11 Jul 2025 16:59:48 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: P6PsNOOFVm8hTJ504Xxwh9rGulBagnR7OvX/JUNMSEQ=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: mykXr6ve/cwvr+LfcirysCKrHVhRt9J9fVkHn/0QFbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5691 (0x163b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Jul 4 16:59:48 2025 GMT Not After : Jul 11 16:59:48 2025 GMT Subject: CN=68680885-6314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:5f:5a:f5:eb:28:f4:7c:a1:bd:f4:d8:8c: ad:52:33:84:79:44:33:ab:f9:e2:99:76:51:c0:92: 4f:59:a5:63:09:cd:30:e8:48:2b:b2:67:b1:a5:a6: 37:e6:d0:20:89:3d:d1:a8:46:cf:5d:22:fe:86:20: 00:7d:81:b6:0f:ab:29:1b:dd:57:89:b9:49:23:cb: bb:17:19:f0:aa:f5:c6:0f:06:7d:9f:de:1c:76:fa: 52:98:64:f2:24:60:07:6c:79:36:85:7a:64:f1:74: 7d:35:fa:41:98:8a:a1:f3:6c:66:15:3b:ec:44:cd: f1:61:ae:f3:dd:8b:62:be:ff:e8:20:69:81:a3:3f: c7:c9:6c:1a:12:42:ac:72:6a:2f:93:47:55:a9:c0: b5:8c:93:d0:e8:6e:0c:0d:48:d3:ba:07:79:a4:92: 05:bb:d2:7c:bd:69:9b:39:5e:5e:c1:53:77:24:7f: 4c:c2:4b:5d:b7:b1:1a:9e:db:ff:52:ef:b2:58:ef: 32:0a:db:f6:ae:80:51:a8:ac:11:f6:88:64:30:2c: f2:e9:98:c5:80:d2:96:50:34:04:63:8f:42:df:ac: e6:70:c5:f5:01:c1:8b:a3:4b:4e:e2:d4:73:44:c2: 2b:19:be:c7:34:df:e2:4b:a1:ae:da:25:0a:d8:a4: 0d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8D:4C:C6:04:B5:8A:39:D0:31:05:2A:C2:A8:35:B6:F5:0D:01:A8 X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4d:a4:47:13:15:00:01:1b:84:96:3a:bd:2f:de:5b:16:e2: da:f8:26:82:25:20:20:72:c2:6d:3e:61:c9:fa:ac:d6:93:be: ed:50:c3:01:b7:c1:1a:a1:06:9c:8c:9d:e2:61:fa:1c:b3:78: 88:99:10:4c:6e:a8:28:7f:02:4c:14:86:a8:55:e1:fa:09:14: 83:2d:4c:a3:a8:0d:6f:72:76:5c:ce:42:bc:e2:13:e3:dd:55: 44:e2:1c:6c:3c:f1:c3:a3:a6:a1:6e:a7:99:9b:ed:7a:3d:e0: e3:e1:ef:45:5c:be:cf:60:6a:2e:40:4b:f7:2f:9a:23:27:2e: b5:92:b2:23:81:db:4b:52:51:c8:4d:8f:17:ca:86:86:7a:81: 61:58:58:84:c1:f4:24:fd:e1:a7:c4:28:8b:8a:b4:76:32:8a: 38:08:b1:69:5f:68:44:f0:cf:d9:26:75:23:cc:d9:c0:af:ac: 42:9c:8c:5f:7c:07:c2:66:19:81:05:6e:09:54:14:ff:51:7a: 4d:ce:6d:17:d6:2e:9b:54:7b:26:69:8e:11:3b:fd:d3:56:0d: 7b:16:88:4a:7e:e4:89:67:13:05:94:9f:be:bb:72:03:3d:24: f5:e7:38:42:51:37:6e:28:78:a2:52:c9:b9:1e:67:2d:60:56: 58:ae:5d:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUwNzA0MTY1OTQ4WhcNMjUwNzExMTY1OTQ4WjAYMRYwFAYD VQQDEw02ODY4MDg4NS02MzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNRfWvXrKPR8ob302IytUjOEeUQzq/nimXZRwJJPWaVjCc0w6EgrsmexpaY3 5tAgiT3RqEbPXSL+hiAAfYG2D6spG91XiblJI8u7FxnwqvXGDwZ9n94cdvpSmGTy JGAHbHk2hXpk8XR9NfpBmIqh82xmFTvsRM3xYa7z3Ytivv/oIGmBoz/HyWwaEkKs cmovk0dVqcC1jJPQ6G4MDUjTugd5pJIFu9J8vWmbOV5ewVN3JH9Mwktdt7Eantv/ Uu+yWO8yCtv2roBRqKwR9ohkMCzy6ZjFgNKWUDQEY49C36zmcMX1AcGLo0tO4tRz RMIrGb7HNN/iS6Gu2iUK2KQNdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuNTMYE tYo50DEFKsKoNbb1DQGoMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3TaRHExUAARuEljq9L95bFuLa+CaCJSAgcsJtPmHJ+qzWk77tUMMB t8EaoQacjJ3iYfocs3iImRBMbqgofwJMFIaoVeH6CRSDLUyjqA1vcnZczkK84hPj 3VVE4hxsPPHDo6ahbqeZm+16PeDj4e9FXL7PYGouQEv3L5ojJy61krIjgdtLUlHI TY8XyoaGeoFhWFiEwfQk/eGnxCiLirR2Moo4CLFpX2hE8M/ZJnUjzNnAr6xCnIxf fAfCZhmBBW4JVBT/UXpNzm0X1i6bVHsmaY4RO/3TVg17FohKfuSJZxMFlJ++u3ID PST15zhCUTduKHiiUsm5HmctYFZYrl3V -----END CERTIFICATE-----Generated at Fri Jul 4 18:37:04 2025 by rpki-client