$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft File: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft (raw, json) Hash identifier: nAHY+tQh7N+X5Zp45tqljmlhwdsMgkM7Zlo66Lvco1o= Subject key identifier: 92:D0:8D:45:EF:79:4B:47:A4:E3:0D:CA:1B:69:18:77:78:F9:B5:98 Authority key identifier: 09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99 Certificate issuer: /CN=A918FA35/serialNumber=0958D7C7B57567D965E148048152E2B478FC4399 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft Manifest number: 0F Signing time: Sun 19 Oct 2025 11:33:11 +0000 Manifest this update: Sun 19 Oct 2025 11:33:10 +0000 Manifest next update: Sun 26 Oct 2025 11:33:10 +0000 Files and hashes: 1: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl (hash: s5CyAddkpbjrSeDEP3baMIE6T5gCEMfUNk9UPCs+trM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FA35, serialNumber=0958D7C7B57567D965E148048152E2B478FC4399 Validity Not Before: Oct 19 11:33:10 2025 GMT Not After : Oct 26 11:33:10 2025 GMT Subject: CN=68f4cc76-bb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:1c:71:3a:8f:0c:08:68:de:1d:e9:01:34: 60:77:22:1f:fd:ce:a4:5a:4f:2f:20:44:f7:49:3a: e1:6f:29:e8:83:6c:de:d2:82:0e:0c:81:04:eb:9a: 75:f3:58:e9:e5:d0:d2:67:33:7e:99:2d:fe:ab:7f: 04:d5:11:82:d2:95:95:6d:42:38:2c:31:45:de:6c: 4e:2b:da:52:fc:4a:45:c0:b7:0f:02:6f:f1:76:61: 52:7c:66:f9:a4:b3:dd:2e:3c:56:8c:2c:e5:15:5d: 4a:d6:cf:f0:08:89:f3:73:fa:54:36:76:07:4f:dc: d8:99:b6:36:a8:92:e7:26:03:fc:44:ac:f9:00:bc: d3:23:11:da:92:70:42:fd:85:9c:4f:5b:be:4c:f7: 9d:b3:10:e6:42:df:23:02:46:dc:3d:af:cd:83:ac: cd:5d:7a:6f:d4:20:5c:68:c5:5c:09:55:ff:77:f8: 6a:7a:be:b1:d9:74:4c:e6:7f:6a:0a:a2:19:20:85: f8:0b:e3:74:bd:33:5e:a1:38:9b:49:ca:13:48:df: 47:59:5b:ba:d6:2a:05:67:01:b5:89:69:4f:5b:88: 81:be:33:fc:56:c9:9c:85:c3:0a:01:ad:89:8e:8e: a5:52:30:b2:07:ac:29:b2:54:92:a7:00:ea:da:a9: a2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D0:8D:45:EF:79:4B:47:A4:E3:0D:CA:1B:69:18:77:78:F9:B5:98 X509v3 Authority Key Identifier: keyid:09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:1f:ff:fc:24:52:ce:6c:d7:21:37:d0:68:38:e6:80:f7:69: dc:5f:ba:cd:32:8c:aa:b7:97:7c:41:e7:36:30:9e:e9:f3:02: 06:b8:4f:9f:02:b6:2a:41:81:95:66:8f:4b:92:57:4d:2f:71: 5a:61:5c:2a:7a:63:c0:ae:20:90:53:3c:fb:9d:9b:ef:d8:9d: 6d:34:83:1e:a7:5a:26:06:58:64:74:d5:44:4a:2b:0e:69:07: 4a:39:3a:e7:ea:b2:91:89:05:a5:a9:e2:96:45:25:f6:c5:4c: 0c:b5:0e:b9:58:bb:7f:42:65:e3:98:3b:f9:ae:cc:78:2a:fb: 4d:44:3c:79:8a:14:8a:59:a4:da:23:50:86:3f:61:5a:ae:67: 33:a7:9a:83:42:2d:df:f1:bf:57:93:9e:23:99:bf:d7:3a:fa: 1b:76:21:53:b1:0f:66:76:d4:dd:59:6b:8a:9b:a3:f7:c0:b2: 52:21:25:3a:fd:a1:40:f6:27:c7:95:9c:52:9c:59:04:d6:ee: 0b:b6:7c:af:42:44:8f:32:bf:7f:b9:e7:bd:f7:b2:08:d7:49: 22:11:12:db:b8:c5:0c:45:a5:41:8a:3e:2f:bb:95:df:e5:7a: c7:47:62:d9:55:16:01:d9:19:25:1a:e4:16:33:3c:9c:9f:71: b2:87:36:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkEzNTExMC8GA1UEBRMoMDk1OEQ3QzdCNTc1NjdEOTY1RTE0ODA0ODE1MkUyQjQ3 OEZDNDM5OTAeFw0yNTEwMTkxMTMzMTBaFw0yNTEwMjYxMTMzMTBaMBgxFjAUBgNV BAMTDTY4ZjRjYzc2LWJiNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4YBxxOo8MCGjeHekBNGB3Ih/9zqRaTy8gRPdJOuFvKeiDbN7Sgg4MgQTrmnXz WOnl0NJnM36ZLf6rfwTVEYLSlZVtQjgsMUXebE4r2lL8SkXAtw8Cb/F2YVJ8Zvmk s90uPFaMLOUVXUrWz/AIifNz+lQ2dgdP3NiZtjaokucmA/xErPkAvNMjEdqScEL9 hZxPW75M952zEOZC3yMCRtw9r82DrM1dem/UIFxoxVwJVf93+Gp6vrHZdEzmf2oK ohkghfgL43S9M16hOJtJyhNI30dZW7rWKgVnAbWJaU9biIG+M/xWyZyFwwoBrYmO jqVSMLIHrCmyVJKnAOraqaJnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUktCNRe95 S0ek4w3KG2kYd3j5tZgwHwYDVR0jBBgwFoAUCVjXx7V1Z9ll4UgEgVLitHj8Q5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGQTM1LzVFNDAzNERFOThC OTExRjBCOTk2MEIyMEM0RjlBRTAyL0NWalh4N1YxWjlsbDRVZ0VnVkxpdEhqOFE1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1ZqWHg3VjFaOWxsNFVnRWdWTGl0SGo4UTVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG QTM1LzVFNDAzNERFOThCOTExRjBCOTk2MEIyMEM0RjlBRTAyL0NWalh4N1YxWjls bDRVZ0VnVkxpdEhqOFE1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN0f//wkUs5s1yE30Gg45oD3adxfus0yjKq3l3xB5zYwnunzAga4T58C tipBgZVmj0uSV00vcVphXCp6Y8CuIJBTPPudm+/YnW00gx6nWiYGWGR01URKKw5p B0o5OufqspGJBaWp4pZFJfbFTAy1DrlYu39CZeOYO/muzHgq+01EPHmKFIpZpNoj UIY/YVquZzOnmoNCLd/xv1eTniOZv9c6+ht2IVOxD2Z21N1Za4qbo/fAslIhJTr9 oUD2J8eVnFKcWQTW7gu2fK9CRI8yv3+55733sgjXSSIREtu4xQxFpUGKPi+7ld/l esdHYtlVFgHZGSUa5BYzPJyfcbKHNnY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:51:00 2025 by rpki-client