$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft File: CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json) Hash identifier: ILqRgenJYtvC3El7y2AizKsGc+brbjg8HHv4zsd2FS4= Subject key identifier: 2F:71:DB:91:AE:06:4A:28:73:1C:BD:5C:60:D9:70:26:87:AC:B6:25 Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 Certificate issuer: /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft Manifest number: B6 Signing time: Wed 05 Nov 2025 06:12:43 +0000 Manifest this update: Wed 05 Nov 2025 06:12:42 +0000 Manifest next update: Wed 12 Nov 2025 06:12:42 +0000 Files and hashes: 1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: rWD0YCGnA3Mqi6hCI0g/m54N5OWZoSlN1/xP+cksG+w=) 2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: ZgB4/zOUlrbnr+66F7inM4U41pNR0yS6V1N2ZkRjXXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164164, serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Validity Not Before: Nov 5 06:12:42 2025 GMT Not After : Nov 12 06:12:42 2025 GMT Subject: CN=690aeadb-647d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:a8:28:fe:f2:1e:da:36:01:c5:ab:3a:b1: 1f:45:c5:49:12:7a:7b:7b:08:80:3a:52:ad:4d:e1: 69:56:ed:27:2c:49:74:05:d8:11:c1:e3:49:e4:62: d0:92:18:33:91:f2:83:04:ac:88:b0:15:7e:39:48: f5:99:53:2c:e6:ee:e9:51:07:e5:e0:42:1f:2b:aa: aa:b1:18:eb:88:ca:0e:fc:08:a8:b4:d1:9e:92:ee: fa:ce:0b:44:5b:b8:b4:6e:00:bb:c1:da:60:f7:57: 9d:50:a3:ac:11:36:54:81:89:d3:4e:3b:0e:6f:31: b0:9b:e8:5f:af:96:b7:b9:ae:cf:7f:62:51:10:53: ba:43:d3:37:04:8d:f7:ef:e5:d3:bf:5e:1b:33:9d: a1:07:9c:74:a7:d6:2e:3a:39:93:2d:05:c3:97:05: 4e:30:5c:dd:48:d7:d2:4b:d8:af:d1:b8:77:71:8f: 34:16:20:35:c7:aa:24:87:74:05:ee:19:ee:ea:e8: 4a:c8:f9:d9:3e:c7:49:89:09:f9:5c:20:1c:a9:a9: 8b:18:27:fb:34:a5:dd:dc:24:cc:6b:e1:25:92:d5: 73:b9:4f:6d:33:e9:3e:3f:db:76:97:08:a3:fe:7f: 8c:6b:59:c2:76:ac:d3:05:bf:6a:e1:2a:2b:31:b0: 26:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:71:DB:91:AE:06:4A:28:73:1C:BD:5C:60:D9:70:26:87:AC:B6:25 X509v3 Authority Key Identifier: keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:64:f2:4d:a9:ce:ae:8a:d9:cb:f0:5d:ba:8f:2a:4f:20:69: 5d:a4:94:e0:a9:5c:8e:e3:e3:8f:01:fa:d0:ee:7a:dc:a5:7e: e2:a6:a1:96:76:a5:c2:e8:52:ac:2e:5b:ca:bb:7f:53:3e:b1: 2d:46:40:04:97:ec:f3:52:69:1d:4e:c8:87:d9:f4:96:7f:1a: 10:a3:57:04:a3:17:ee:31:20:41:f8:01:73:a8:12:54:a8:12: b3:55:59:58:5b:68:54:9a:26:95:8f:02:f1:5c:d5:00:8b:54: c1:e5:24:5f:85:11:97:ec:18:8c:6d:4c:1e:e3:19:90:98:cf: a2:00:af:64:66:20:23:b8:88:3c:e7:ae:ee:e0:64:dd:69:68: 86:8d:a0:64:75:7d:61:e9:c3:a0:e1:6a:e9:6b:20:d1:a4:7a: e0:b1:e1:11:2d:df:72:9c:7a:a2:d1:e7:3f:4f:3c:a6:cb:e1: f6:03:ee:61:d4:72:2f:dd:cc:89:17:3d:3d:b0:70:c8:23:8b: a0:ae:ef:8f:ab:82:f1:22:6b:19:21:4f:33:9d:7a:0d:dd:be: 2b:7a:48:6c:03:da:6d:5f:50:d8:79:15:85:8d:1a:3c:4d:5f: a3:5d:8c:30:37:7e:44:b5:82:7a:89:59:7f:85:61:09:c2:95: c6:05:1c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQxNjQxMTAvBgNVBAUTKDA5NEM4QkM1REFEQ0NEOUMyRkIzQ0Y0NUQxNDY0REVF Q0YzQTFDNjAwHhcNMjUxMTA1MDYxMjQyWhcNMjUxMTEyMDYxMjQyWjAYMRYwFAYD VQQDEw02OTBhZWFkYi02NDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqemoKP7yHto2AcWrOrEfRcVJEnp7ewiAOlKtTeFpVu0nLEl0BdgRweNJ5GLQ khgzkfKDBKyIsBV+OUj1mVMs5u7pUQfl4EIfK6qqsRjriMoO/AiotNGeku76zgtE W7i0bgC7wdpg91edUKOsETZUgYnTTjsObzGwm+hfr5a3ua7Pf2JREFO6Q9M3BI33 7+XTv14bM52hB5x0p9YuOjmTLQXDlwVOMFzdSNfSS9iv0bh3cY80FiA1x6okh3QF 7hnu6uhKyPnZPsdJiQn5XCAcqamLGCf7NKXd3CTMa+ElktVzuU9tM+k+P9t2lwij /n+Ma1nCdqzTBb9q4SorMbAmBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9x25Gu Bkoocxy9XGDZcCaHrLYlMB8GA1UdIwQYMBaAFAlMi8Xa3M2cL7PPRdFGTe7POhxg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDE2NC9BRTcyMjg5Q0Ex ODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9DVXlMeGRyY3pad3ZzODlGMFVaTjdzODZI R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVeUx4ZHJjelp3dnM4OUYwVVpON3M4NkhHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDE2NC9BRTcyMjg5Q0ExODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9DVXlMeGRyY3pa d3ZzODlGMFVaTjdzODZIR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLZPJNqc6uitnL8F26jypPIGldpJTgqVyO4+OPAfrQ7nrcpX7ipqGW dqXC6FKsLlvKu39TPrEtRkAEl+zzUmkdTsiH2fSWfxoQo1cEoxfuMSBB+AFzqBJU qBKzVVlYW2hUmiaVjwLxXNUAi1TB5SRfhRGX7BiMbUwe4xmQmM+iAK9kZiAjuIg8 567u4GTdaWiGjaBkdX1h6cOg4WrpayDRpHrgseERLd9ynHqi0ec/Tzymy+H2A+5h 1HIv3cyJFz09sHDII4ugru+Pq4LxImsZIU8znXoN3b4rekhsA9ptX1DYeRWFjRo8 TV+jXYwwN35EtYJ6iVl/hWEJwpXGBRwY -----END CERTIFICATE-----Generated at Wed Nov 5 19:49:46 2025 by rpki-client