$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json) Hash identifier: eZ6hCHK5xLNm6DDMM0iLX6BfJYtd+t8rQMIJx4X9rHw= Subject key identifier: 66:8F:67:BA:23:F2:AA:07:E4:8A:DB:B4:C3:9F:F1:E2:B2:61:6D:DA Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft Manifest number: 013F Signing time: Sat 09 Aug 2025 04:45:54 +0000 Manifest this update: Sat 09 Aug 2025 04:45:54 +0000 Manifest next update: Sat 16 Aug 2025 04:45:54 +0000 Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: p/M2pzyYNfjT80BjJjNO0P1Rj+F4k/JB5mXpNmUvGnA=) 2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: lfBaqProMut7Uby4sm5sXFCXR+BzVB4lKdYH7qIjDTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Validity Not Before: Aug 9 04:45:54 2025 GMT Not After : Aug 16 04:45:54 2025 GMT Subject: CN=6896d282-3daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:b4:87:0c:8f:fa:04:85:84:4b:d4:5a:a8: ca:69:75:d1:2b:50:5a:27:cc:4e:f5:69:0e:9a:3a: d5:39:09:90:6d:1b:e1:21:3f:f9:23:1f:3e:bd:45: 17:dc:9b:ea:eb:78:11:b3:25:ff:a8:3c:84:8b:f2: d0:a4:f5:04:f7:2d:86:19:38:a5:12:7c:27:58:38: b9:6b:12:91:e4:58:bb:91:21:08:33:14:33:31:53: a3:de:56:5e:90:4d:f4:dc:95:f2:27:81:b8:15:ca: fa:70:9c:b6:21:2e:b0:10:70:80:94:89:c7:d4:8e: 7a:b3:b7:96:ec:54:42:cd:9c:86:a9:d8:38:2d:94: 4e:d3:15:12:0a:53:cb:8d:9e:d0:79:e2:55:bf:a1: 70:1d:aa:54:ae:ac:26:5f:0d:03:36:7a:0a:2b:b0: a8:87:11:2e:33:4a:12:13:1b:8f:4c:89:bf:c5:08: 2b:d1:23:25:72:ec:18:96:0d:7c:ae:21:2c:2d:38: 1e:0b:ee:ec:12:4d:1e:7b:6c:e7:6b:b1:af:09:9a: 3c:5c:c6:2c:b7:85:78:7e:fc:db:27:95:39:89:5e: 16:a5:fd:57:d2:7d:27:20:10:74:ca:5e:ba:10:d5: fb:cd:80:80:4f:0f:a1:df:db:3d:27:85:21:26:c4: 58:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8F:67:BA:23:F2:AA:07:E4:8A:DB:B4:C3:9F:F1:E2:B2:61:6D:DA X509v3 Authority Key Identifier: keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:75:4b:2d:2f:d9:7a:7b:a1:e4:bd:70:2f:b6:6f:f9:c9:a5: 3b:62:db:04:70:6d:1b:61:b1:5c:50:f1:84:9a:2c:39:c0:b7: f4:4f:6b:0f:cf:02:d1:c4:99:06:0a:33:d9:6c:6a:d5:ba:7b: 3d:30:bf:9e:6c:1c:d8:7c:86:95:89:18:e2:03:bb:0a:da:03: fe:35:39:c4:b5:8e:bf:99:2d:e4:56:c8:e1:1b:5b:03:e6:c0: f8:0f:30:1d:86:cd:7e:0a:83:9a:e7:76:72:36:27:6b:3f:58: 70:36:73:2e:4c:1a:9e:77:04:9e:7d:a5:b0:e0:4e:5c:fd:91: c6:d7:28:d1:98:8a:85:35:5e:fe:83:c0:4f:cf:d1:a3:bb:0e: e0:b9:51:68:bb:b3:18:7f:64:49:44:b2:a9:c3:9d:b5:3f:1e: 6a:af:b0:32:8a:11:b4:ab:54:55:58:c2:75:90:e5:17:e8:df: 62:5a:e0:8a:20:74:5b:d7:fa:ed:8b:37:40:91:45:32:b1:1b: 3e:ec:50:7a:d8:12:a4:96:28:a3:6e:f5:c3:ab:47:8f:60:ad: 07:03:f2:39:29:e6:a4:83:55:0c:42:93:c9:4e:28:93:11:61: 34:df:ae:81:ae:70:da:2d:4d:d5:1d:55:9d:00:3c:49:45:e9: a9:b7:47:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE NzU1RUQwQzAwHhcNMjUwODA5MDQ0NTU0WhcNMjUwODE2MDQ0NTU0WjAYMRYwFAYD VQQDEw02ODk2ZDI4Mi0zZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVa0hwyP+gSFhEvUWqjKaXXRK1BaJ8xO9WkOmjrVOQmQbRvhIT/5Ix8+vUUX 3Jvq63gRsyX/qDyEi/LQpPUE9y2GGTilEnwnWDi5axKR5Fi7kSEIMxQzMVOj3lZe kE303JXyJ4G4Fcr6cJy2IS6wEHCAlInH1I56s7eW7FRCzZyGqdg4LZRO0xUSClPL jZ7QeeJVv6FwHapUrqwmXw0DNnoKK7CohxEuM0oSExuPTIm/xQgr0SMlcuwYlg18 riEsLTgeC+7sEk0ee2zna7GvCZo8XMYst4V4fvzbJ5U5iV4Wpf1X0n0nIBB0yl66 ENX7zYCATw+h39s9J4UhJsRYeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaPZ7oj 8qoH5IrbtMOf8eKyYW3aMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP aTJtdFBER25OaG5YVmUwTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkdUstL9l6e6HkvXAvtm/5yaU7YtsEcG0bYbFcUPGEmiw5wLf0T2sP zwLRxJkGCjPZbGrVuns9ML+ebBzYfIaViRjiA7sK2gP+NTnEtY6/mS3kVsjhG1sD 5sD4DzAdhs1+CoOa53ZyNidrP1hwNnMuTBqedwSefaWw4E5c/ZHG1yjRmIqFNV7+ g8BPz9Gjuw7guVFou7MYf2RJRLKpw521Px5qr7AyihG0q1RVWMJ1kOUX6N9iWuCK IHRb1/rtizdAkUUysRs+7FB62BKkliijbvXDq0ePYK0HA/I5Keakg1UMQpPJTiiT EWE0366BrnDaLU3VHVWdADxJRempt0dr -----END CERTIFICATE-----Generated at Sat Aug 9 15:13:33 2025 by rpki-client