$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json) Hash identifier: em9wbV7YiSt5aMVkFgBDDax8xyiK5Ws1cMBwR9OwrLU= Subject key identifier: B5:D4:A7:4C:52:79:44:6D:6D:3A:97:F6:19:D6:FB:4C:0A:77:ED:1B Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Certificate serial: 0BF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft Manifest number: 0BEF Signing time: Sat 18 Oct 2025 19:40:48 +0000 Manifest this update: Sat 18 Oct 2025 19:40:47 +0000 Manifest next update: Sat 25 Oct 2025 19:40:47 +0000 Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: N2iNToNvT2VYtsQiuKuxqmu7ShreYNYPN6jhmz5zarI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3060 (0xbf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Validity Not Before: Oct 18 19:40:47 2025 GMT Not After : Oct 25 19:40:47 2025 GMT Subject: CN=68f3ed3f-9c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:46:8a:08:73:94:0a:de:37:9e:6b:fa:e3: 5d:2e:51:84:91:d9:07:08:1c:9c:fd:d3:8d:31:7a: 85:36:ee:47:42:51:22:53:31:de:53:5e:0b:e9:ab: 15:ae:89:41:9b:44:9b:f4:30:70:c4:95:03:67:16: 11:2c:08:bb:de:97:b3:bb:ec:a4:e9:e5:34:a5:fd: 6c:31:e2:60:9c:e1:47:d4:ec:2e:85:44:43:0c:05: b5:1e:f2:51:20:35:22:30:d1:71:34:6b:98:be:7c: 89:d8:1f:d9:20:c7:f4:53:af:6f:27:d3:63:f5:a3: c1:a2:57:e7:a4:1a:92:3c:eb:05:ec:e5:16:47:42: fe:a9:a5:c0:00:44:68:fb:25:40:eb:9d:d2:f6:5a: de:84:00:c2:e3:3c:4f:87:0e:3b:b4:ff:ec:4c:3c: 66:c7:e0:b3:21:35:7f:73:cf:48:46:b0:a2:0f:88: 92:5e:ad:9b:6b:50:17:3a:bd:5d:31:d5:dd:4f:bd: e6:62:5c:82:bd:a7:1f:19:89:c4:dc:12:34:2c:58: 89:14:b3:7c:f2:b4:86:b6:5e:7d:b9:e2:7e:1b:45: b2:c2:e4:ea:2e:19:c3:c6:4d:20:0f:d6:04:e2:a0: d2:2a:20:23:62:e1:73:92:db:2f:cf:51:e4:1e:3c: ea:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D4:A7:4C:52:79:44:6D:6D:3A:97:F6:19:D6:FB:4C:0A:77:ED:1B X509v3 Authority Key Identifier: keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:47:03:02:e5:80:47:9e:72:ef:53:52:d5:30:93:f0:91:2c: 37:8d:4f:b4:08:8f:e7:61:92:b7:cc:a0:4a:28:ff:d7:00:fd: 58:66:56:70:14:c1:3b:1e:12:ab:80:78:c2:72:99:39:97:df: 8a:28:df:0c:c6:c1:b2:09:dc:2d:05:67:b4:50:f2:c0:bd:41: ea:5e:9a:97:3b:69:40:8c:ce:30:a4:33:7c:30:b2:a3:75:b0: e0:0f:ac:c5:97:0d:95:02:b1:22:7b:48:d4:68:5a:43:14:1f: 38:75:8e:16:26:6a:93:22:7d:a7:cd:c8:7e:4e:d4:74:43:5b: d4:2e:cd:f5:ea:aa:c0:7c:c3:3d:c9:7c:c9:02:0e:67:f3:8c: b7:f0:12:65:56:dc:92:4d:cc:52:f8:ff:76:57:82:10:a7:93: 0c:ab:95:33:81:ed:52:1f:3c:02:18:bb:e8:de:63:02:b0:e9: 4c:d7:48:37:b6:77:05:e0:7f:f0:25:02:9d:15:de:ea:4c:35: b7:3f:f4:41:7f:0c:45:da:fb:57:2b:91:83:a3:39:7f:61:2e: a7:54:3f:c9:ae:2a:57:5b:28:7d:87:eb:3f:b9:44:2f:81:f3: 5b:37:0c:ba:0d:bb:39:de:7b:18:98:7b:2d:5c:f0:78:22:eb: 4c:45:ee:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC QTY5RTQ0M0QwHhcNMjUxMDE4MTk0MDQ3WhcNMjUxMDI1MTk0MDQ3WjAYMRYwFAYD VQQDEw02OGYzZWQzZi05YzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjpGighzlAreN55r+uNdLlGEkdkHCByc/dONMXqFNu5HQlEiUzHeU14L6asV rolBm0Sb9DBwxJUDZxYRLAi73pezu+yk6eU0pf1sMeJgnOFH1OwuhURDDAW1HvJR IDUiMNFxNGuYvnyJ2B/ZIMf0U69vJ9Nj9aPBolfnpBqSPOsF7OUWR0L+qaXAAERo +yVA653S9lrehADC4zxPhw47tP/sTDxmx+CzITV/c89IRrCiD4iSXq2ba1AXOr1d MdXdT73mYlyCvacfGYnE3BI0LFiJFLN88rSGtl59ueJ+G0WywuTqLhnDxk0gD9YE 4qDSKiAjYuFzktsvz1HkHjzqbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXUp0xS eURtbTqX9hnW+0wKd+0bMB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0 ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMRwMC5YBHnnLvU1LVMJPwkSw3jU+0CI/nYZK3zKBKKP/XAP1YZlZw FME7HhKrgHjCcpk5l9+KKN8MxsGyCdwtBWe0UPLAvUHqXpqXO2lAjM4wpDN8MLKj dbDgD6zFlw2VArEie0jUaFpDFB84dY4WJmqTIn2nzch+TtR0Q1vULs316qrAfMM9 yXzJAg5n84y38BJlVtySTcxS+P92V4IQp5MMq5Uzge1SHzwCGLvo3mMCsOlM10g3 tncF4H/wJQKdFd7qTDW3P/RBfwxF2vtXK5GDozl/YS6nVD/JripXWyh9h+s/uUQv gfNbNwy6Dbs53nsYmHstXPB4IutMRe6A -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:18 2025 by rpki-client