$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json) Hash identifier: CNWQibEhUjDn2plImRXqxDZj0BlRKleAwHXgNxcJriw= Subject key identifier: A7:42:33:58:63:8C:20:70:30:9B:EE:61:CD:98:63:4A:35:E6:70:0A Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft Manifest number: 016B Signing time: Wed 05 Nov 2025 04:02:57 +0000 Manifest this update: Wed 05 Nov 2025 04:02:57 +0000 Manifest next update: Wed 12 Nov 2025 04:02:57 +0000 Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: 37JLsLQMU+yd5aciVa7l2zzagARnaJGJh0QRNZuY0fE=) 2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: lfBaqProMut7Uby4sm5sXFCXR+BzVB4lKdYH7qIjDTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Validity Not Before: Nov 5 04:02:57 2025 GMT Not After : Nov 12 04:02:57 2025 GMT Subject: CN=690acc71-154f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:7c:1b:32:3a:0c:d4:1a:28:6f:00:fc:3f: a2:8d:cb:64:8b:f7:30:04:65:26:e0:9e:37:8a:a0: 05:54:5b:69:4e:6e:f8:a5:84:03:57:86:2b:56:c7: 89:36:3f:a1:72:7e:65:25:fa:45:8b:4b:9b:11:56: 9c:d4:46:e7:c6:f8:94:51:66:d4:13:7e:1c:35:32: 1f:b6:06:84:78:67:26:50:34:05:24:2e:04:9c:e7: 09:3d:67:5f:db:e3:41:7c:f8:e2:6e:bd:15:09:83: 21:94:fa:8b:05:33:de:52:0f:c5:c7:b2:64:ca:3b: 94:88:f9:7f:78:79:f9:9e:dc:90:35:61:ea:1b:0c: 08:ff:0f:5e:aa:d5:4b:f5:cd:5d:be:35:20:a8:89: 04:a9:d1:66:b7:9a:8e:e1:51:a4:48:c6:f7:de:d4: 70:e7:fd:e5:43:97:6a:97:9b:3f:dc:bf:4d:c2:03: 14:b4:f8:54:e7:81:1a:88:86:26:18:d1:ed:09:d0: d2:38:da:51:cf:2a:fd:d0:99:ab:1e:5e:5f:c8:6d: 4d:f7:97:fd:e7:15:43:45:ff:7c:a1:7f:2a:3e:e3: c5:69:b9:90:85:a6:85:8b:9e:6e:9d:ef:97:79:d2: 6b:ee:28:30:51:5e:1f:a1:f3:4e:ac:90:84:f0:86: 64:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:42:33:58:63:8C:20:70:30:9B:EE:61:CD:98:63:4A:35:E6:70:0A X509v3 Authority Key Identifier: keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3d:4b:53:7d:6a:b0:40:7c:c6:f3:17:8f:0e:28:ba:3f:f0: ac:ac:62:8a:63:2d:dd:a0:ba:ea:37:55:74:ad:1e:95:85:02: 41:0b:4b:e6:c1:23:7d:1a:33:d1:d8:f9:f8:26:e3:f0:0d:b3: fb:2a:18:87:69:55:ad:cb:11:00:0f:15:f2:5f:2f:8a:e7:1b: 1f:18:ee:08:de:aa:eb:b4:2e:38:5c:86:3e:9d:79:dc:47:53: 11:50:05:f1:80:70:74:45:18:22:10:6c:76:3c:25:58:41:73: 8d:1b:14:19:7d:55:6f:d5:69:5b:aa:da:58:c0:50:38:c3:dc: 80:ec:2c:bc:ba:8d:15:1e:81:2b:47:dd:5f:d2:80:da:50:19: 5b:e4:39:af:3c:69:ea:06:89:27:c6:71:71:a6:2d:11:7b:1e: af:ef:0e:b1:89:56:0c:7e:25:8c:ee:85:fb:36:a3:4a:f3:59: 0a:c2:fd:ad:ed:f5:7c:7e:ee:2f:36:77:85:eb:61:0b:d0:50: a3:c2:22:42:fa:37:3d:7b:8e:cd:8b:71:ea:f3:ed:12:15:19: d9:dc:56:66:66:f7:a5:44:e2:e0:ca:7b:10:54:fa:78:c8:6d: ba:ab:77:bb:9c:5b:ac:39:f3:84:d7:9f:a9:65:69:8d:31:76: b0:54:03:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE NzU1RUQwQzAwHhcNMjUxMTA1MDQwMjU3WhcNMjUxMTEyMDQwMjU3WjAYMRYwFAYD VQQDEw02OTBhY2M3MS0xNTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GZ8GzI6DNQaKG8A/D+ijctki/cwBGUm4J43iqAFVFtpTm74pYQDV4YrVseJ Nj+hcn5lJfpFi0ubEVac1EbnxviUUWbUE34cNTIftgaEeGcmUDQFJC4EnOcJPWdf 2+NBfPjibr0VCYMhlPqLBTPeUg/Fx7JkyjuUiPl/eHn5ntyQNWHqGwwI/w9eqtVL 9c1dvjUgqIkEqdFmt5qO4VGkSMb33tRw5/3lQ5dql5s/3L9NwgMUtPhU54EaiIYm GNHtCdDSONpRzyr90JmrHl5fyG1N95f95xVDRf98oX8qPuPFabmQhaaFi55une+X edJr7igwUV4fofNOrJCE8IZkHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdCM1hj jCBwMJvuYc2YY0o15nAKMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP aTJtdFBER25OaG5YVmUwTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuPUtTfWqwQHzG8xePDii6P/CsrGKKYy3doLrqN1V0rR6VhQJBC0vm wSN9GjPR2Pn4JuPwDbP7KhiHaVWtyxEADxXyXy+K5xsfGO4I3qrrtC44XIY+nXnc R1MRUAXxgHB0RRgiEGx2PCVYQXONGxQZfVVv1WlbqtpYwFA4w9yA7Cy8uo0VHoEr R91f0oDaUBlb5DmvPGnqBoknxnFxpi0Rex6v7w6xiVYMfiWM7oX7NqNK81kKwv2t 7fV8fu4vNneF62EL0FCjwiJC+jc9e47Ni3Hq8+0SFRnZ3FZmZvelROLgynsQVPp4 yG26q3e7nFusOfOE15+pZWmNMXawVAON -----END CERTIFICATE-----Generated at Wed Nov 5 17:55:42 2025 by rpki-client