$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: qZmzuNs0DdWxCMkRpZGw9c/1ZGlukLLl+buslfKyECQ= Subject key identifier: D1:CA:20:5E:CE:69:84:F6:A2:A7:4B:1D:F1:C1:83:A5:BC:98:BF:EB Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 134C Signing time: Fri 22 Aug 2025 18:39:56 +0000 Manifest this update: Fri 22 Aug 2025 18:39:55 +0000 Manifest next update: Fri 29 Aug 2025 18:39:55 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: q1ZDmmDwL4s2xxGdanl/YgHNRi2lR7mYHGlUVvdP5zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: Aug 22 18:39:55 2025 GMT Not After : Aug 29 18:39:55 2025 GMT Subject: CN=68a8b97c-0ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:fd:9a:55:70:19:83:5f:76:b5:1e:e2:cb: 28:af:bd:18:42:e4:c5:f3:f8:15:e3:74:21:03:b7: c6:7d:5e:08:c8:36:28:d2:6e:97:62:4c:10:91:af: 51:50:7c:2f:45:c7:8b:fb:38:af:3d:c9:52:b9:42: 15:7c:85:87:fc:9a:b1:d9:8d:4e:5f:09:d5:63:6b: d0:53:a5:18:46:1a:ed:21:e6:d1:f9:e1:f1:23:46: 41:67:df:74:6e:9c:82:e9:63:e4:e4:ee:65:1d:30: 50:cc:97:ee:a3:19:46:df:c5:b4:f2:fc:79:ba:1b: 51:f9:63:44:8c:72:2d:c4:52:22:f3:50:3c:58:84: da:da:f3:03:64:81:5d:36:0f:cf:4b:89:c4:5b:cf: a8:90:89:f2:9c:f3:97:8d:36:d6:ca:75:19:bc:f9: e9:8a:d0:6a:b7:00:93:90:c2:19:fa:e1:94:60:fd: 16:41:61:7e:f2:16:52:e6:00:a7:1a:1c:68:e7:6a: 38:4e:c9:c5:a8:a6:62:93:66:68:96:3e:90:cd:d5: 79:7c:e5:c2:6e:2a:58:c0:3f:0e:2b:30:f2:62:e3: 2b:0b:bd:02:4d:7d:18:04:8e:bb:78:28:9d:d6:2f: c2:27:16:89:ad:f6:4b:bd:7b:ed:4c:08:8a:af:73: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CA:20:5E:CE:69:84:F6:A2:A7:4B:1D:F1:C1:83:A5:BC:98:BF:EB X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:1b:a9:74:cc:27:d8:d5:07:27:95:7a:7d:cd:04:cc:00:43: 8a:62:ab:2a:ee:6d:ce:55:9e:e3:a9:1d:9a:4c:ef:6a:1b:f0: 5e:ee:85:00:9c:8f:3b:85:89:6e:27:27:cc:46:f6:14:3f:02: 45:dd:b6:2f:6b:de:4b:e0:8c:05:a1:76:71:16:f6:65:ea:47: d4:0d:c4:c2:08:82:3e:84:0e:5a:dd:f4:92:2a:6f:7a:87:f8: 0d:5d:b6:31:6a:0e:b1:01:8d:99:89:6e:3f:a1:94:38:04:47: 5e:a9:23:a1:e2:1b:63:9a:f5:e1:8c:06:cd:a5:24:4c:3b:98: b6:f4:ba:75:a3:01:9a:e6:70:00:5d:8b:2b:f1:0a:b4:fb:c7: 98:88:5c:a1:58:14:10:52:75:1a:92:03:b6:3f:5a:9c:c4:a6: 4a:6c:08:93:a4:a2:95:f4:cd:81:5d:a8:49:0d:bf:68:6a:d3: 47:dc:b9:f0:23:92:c9:22:ec:93:8c:dd:3f:fc:3d:50:da:99: 08:b9:24:18:28:d6:73:7c:f6:fb:6f:14:80:8c:3f:31:18:d8: e6:c4:e9:73:ba:ab:85:c1:dd:79:03:74:67:06:26:86:fc:66: 1a:66:ad:f6:51:6d:93:98:3c:ad:6b:48:6f:8d:ee:1f:a6:89: 6a:d9:89:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjUwODIyMTgzOTU1WhcNMjUwODI5MTgzOTU1WjAYMRYwFAYD VQQDEw02OGE4Yjk3Yy0wYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mf9mlVwGYNfdrUe4ssor70YQuTF8/gV43QhA7fGfV4IyDYo0m6XYkwQka9R UHwvRceL+zivPclSuUIVfIWH/Jqx2Y1OXwnVY2vQU6UYRhrtIebR+eHxI0ZBZ990 bpyC6WPk5O5lHTBQzJfuoxlG38W08vx5uhtR+WNEjHItxFIi81A8WITa2vMDZIFd Ng/PS4nEW8+okInynPOXjTbWynUZvPnpitBqtwCTkMIZ+uGUYP0WQWF+8hZS5gCn Ghxo52o4TsnFqKZik2Zolj6QzdV5fOXCbipYwD8OKzDyYuMrC70CTX0YBI67eCid 1i/CJxaJrfZLvXvtTAiKr3Oj7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHKIF7O aYT2oqdLHfHBg6W8mL/rMB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPG6l0zCfY1QcnlXp9zQTMAEOKYqsq7m3OVZ7jqR2aTO9qG/Be7oUA nI87hYluJyfMRvYUPwJF3bYva95L4IwFoXZxFvZl6kfUDcTCCII+hA5a3fSSKm96 h/gNXbYxag6xAY2ZiW4/oZQ4BEdeqSOh4htjmvXhjAbNpSRMO5i29Lp1owGa5nAA XYsr8Qq0+8eYiFyhWBQQUnUakgO2P1qcxKZKbAiTpKKV9M2BXahJDb9oatNH3Lnw I5LJIuyTjN0//D1Q2pkIuSQYKNZzfPb7bxSAjD8xGNjmxOlzuquFwd15A3RnBiaG /GYaZq32UW2TmDyta0hvje4fpolq2Ymt -----END CERTIFICATE-----Generated at Sat Aug 23 22:42:18 2025 by rpki-client