$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft File: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft (raw, json) Hash identifier: xp9cjnCj03+OOOjQlsOfO2b+BHNEh2+poOqRK8uk/Es= Subject key identifier: 8E:CD:E2:A1:26:1A:D5:12:E6:BA:6B:13:5B:74:F2:7B:98:C9:FD:2C Authority key identifier: 09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21 Certificate issuer: /CN=A919C203/serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft Manifest number: 011F Signing time: Sat 23 Aug 2025 04:52:59 +0000 Manifest this update: Sat 23 Aug 2025 04:52:58 +0000 Manifest next update: Sat 30 Aug 2025 04:52:58 +0000 Files and hashes: 1: CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl (hash: 0bTpVJHndVB0+PS+sdN/6bzNRKYyny/xdplP+yLHQrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C203, serialNumber=09E2C758141C0144F462B9F0F8FBE748AA05CB21 Validity Not Before: Aug 23 04:52:58 2025 GMT Not After : Aug 30 04:52:58 2025 GMT Subject: CN=68a9492a-2d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:11:8e:4b:25:5b:4f:4a:26:7e:fb:20:df:20: 3b:04:d7:ee:80:38:82:6e:73:12:be:ef:72:ce:a3: 81:28:de:c1:84:6f:db:19:72:9d:1a:21:6f:99:44: ab:f9:d6:91:2e:eb:9b:e0:61:9c:09:c4:f9:84:3a: db:9a:e4:85:2d:64:0a:10:a6:c5:d3:4e:60:b7:96: f5:0a:e1:3b:97:0e:ab:f9:40:04:7d:58:2a:ec:dc: 5a:e1:32:ef:c8:e4:dc:e3:5f:ff:58:0e:ba:df:22: 51:7f:46:9e:05:08:f4:50:74:dd:22:78:fa:75:de: 3d:ed:62:02:d0:24:29:cc:9d:9e:87:a4:cc:28:08: f8:f2:c3:4c:db:d7:0d:a1:3c:4e:4a:ee:3c:d9:72: d1:f4:e4:b4:99:59:1d:63:65:d9:dc:94:c0:d0:41: 1d:8e:30:86:17:78:ae:16:d9:ea:a4:22:c4:15:71: d8:88:bf:2a:2e:ef:a0:b4:53:60:ea:60:df:17:ca: fd:6e:db:7b:9a:c7:cc:3a:15:30:3f:fd:62:c1:6f: f8:cd:a8:c4:bc:c4:5a:a7:d0:6f:6a:e2:5d:a1:f1: 3a:3e:30:1d:94:38:15:aa:98:73:6b:1d:ec:a3:62: 69:6e:2f:69:3f:7f:c6:74:b4:54:e3:da:45:39:09: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CD:E2:A1:26:1A:D5:12:E6:BA:6B:13:5B:74:F2:7B:98:C9:FD:2C X509v3 Authority Key Identifier: keyid:09:E2:C7:58:14:1C:01:44:F4:62:B9:F0:F8:FB:E7:48:AA:05:CB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/CEC122CAC58611EE91166B83C4F9AE02/CeLHWBQcAUT0Yrnw-PvnSKoFyyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:b8:98:a3:73:92:14:c4:74:24:21:8a:73:ca:c3:be:a8:13: 0c:64:41:84:0c:0f:4f:e3:12:7f:8a:57:64:ad:64:0c:a3:09: 32:e8:38:ac:23:60:da:36:d8:87:f5:a1:e9:e2:24:74:3f:97: a9:98:db:6c:c4:88:37:77:c7:17:cb:a0:d8:db:57:59:cf:13: 58:c9:e3:ac:d7:fe:19:e1:00:4a:fa:3b:36:e4:94:9d:e7:9b: b7:d7:2e:19:1d:e3:55:ec:82:82:66:13:cb:cc:75:ca:19:7c: ec:c8:81:2f:d7:d0:42:05:09:85:fb:25:b5:ed:cb:fd:81:af: 8e:79:e6:99:0d:cb:4a:4b:98:ba:0e:47:ad:30:82:f9:3c:13: 2e:0d:64:c0:d7:3f:07:91:2f:92:87:6a:90:04:29:7c:48:85: 4d:19:f9:dd:42:a9:98:05:92:99:f6:70:4b:5f:f0:bf:3c:21: ba:cc:b8:60:9d:68:18:75:68:f3:d5:49:aa:12:21:47:b6:60: 25:7f:23:85:e9:7f:ef:12:c8:e7:5b:60:12:bf:1f:94:d9:93: fc:90:33:74:15:f9:af:1d:26:e6:f4:80:5f:93:4a:b3:71:b6: 18:1a:88:13:c2:36:3f:20:81:98:fa:46:f1:d6:0e:ad:3c:9a: 0c:25:bb:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMDMxMTAvBgNVBAUTKDA5RTJDNzU4MTQxQzAxNDRGNDYyQjlGMEY4RkJFNzQ4 QUEwNUNCMjEwHhcNMjUwODIzMDQ1MjU4WhcNMjUwODMwMDQ1MjU4WjAYMRYwFAYD VQQDEw02OGE5NDkyYS0yZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhGOSyVbT0omfvsg3yA7BNfugDiCbnMSvu9yzqOBKN7BhG/bGXKdGiFvmUSr +daRLuub4GGcCcT5hDrbmuSFLWQKEKbF005gt5b1CuE7lw6r+UAEfVgq7Nxa4TLv yOTc41//WA663yJRf0aeBQj0UHTdInj6dd497WIC0CQpzJ2eh6TMKAj48sNM29cN oTxOSu482XLR9OS0mVkdY2XZ3JTA0EEdjjCGF3iuFtnqpCLEFXHYiL8qLu+gtFNg 6mDfF8r9btt7msfMOhUwP/1iwW/4zajEvMRap9BvauJdofE6PjAdlDgVqphzax3s o2Jpbi9pP3/GdLRU49pFOQkyXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7N4qEm GtUS5rprE1t08nuYyf0sMB8GA1UdIwQYMBaAFAnix1gUHAFE9GK58Pj750iqBcsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIwMy9DRUMxMjJDQUM1 ODYxMUVFOTExNjZCODNDNEY5QUUwMi9DZUxIV0JRY0FVVDBZcm53LVB2blNLb0Z5 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NlTEhXQlFjQVVUMFlybnctUHZuU0tvRnl5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIwMy9DRUMxMjJDQUM1ODYxMUVFOTExNjZCODNDNEY5QUUwMi9DZUxIV0JRY0FV VDBZcm53LVB2blNLb0Z5eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0uJijc5IUxHQkIYpzysO+qBMMZEGEDA9P4xJ/ildkrWQMowky6Dis I2DaNtiH9aHp4iR0P5epmNtsxIg3d8cXy6DY21dZzxNYyeOs1/4Z4QBK+js25JSd 55u31y4ZHeNV7IKCZhPLzHXKGXzsyIEv19BCBQmF+yW17cv9ga+OeeaZDctKS5i6 DketMIL5PBMuDWTA1z8HkS+Sh2qQBCl8SIVNGfndQqmYBZKZ9nBLX/C/PCG6zLhg nWgYdWjz1UmqEiFHtmAlfyOF6X/vEsjnW2ASvx+U2ZP8kDN0FfmvHSbm9IBfk0qz cbYYGogTwjY/IIGY+kbx1g6tPJoMJbvm -----END CERTIFICATE-----Generated at Sun Aug 24 03:12:35 2025 by rpki-client