$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft File: CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json) Hash identifier: 3vO+aOn3nwkZgcc6zmcoUQYIzAThMaPcvTu0sKUa55E= Subject key identifier: E4:C5:33:5A:79:B4:75:DF:D9:A5:E2:E9:A7:E6:B4:50:73:13:62:02 Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 Certificate issuer: /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft Manifest number: 8A Signing time: Sat 09 Aug 2025 06:59:40 +0000 Manifest this update: Sat 09 Aug 2025 06:59:39 +0000 Manifest next update: Sat 16 Aug 2025 06:59:39 +0000 Files and hashes: 1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: QNT/NZyR7AL0otgeF4BpcMlVpn9HT7yVbzetx2vGu1c=) 2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: ZgB4/zOUlrbnr+66F7inM4U41pNR0yS6V1N2ZkRjXXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164164, serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Validity Not Before: Aug 9 06:59:39 2025 GMT Not After : Aug 16 06:59:39 2025 GMT Subject: CN=6896f1db-e90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ba:13:17:71:82:18:1e:b3:cd:09:e5:0e:ad: 1c:a7:a8:8a:34:54:c4:ec:f1:74:5e:cb:81:c5:ed: 55:89:4a:6b:7b:c9:27:b9:46:3b:13:f8:41:0f:40: 75:e7:eb:b4:f4:05:bc:7f:dd:4a:83:d7:33:4c:84: dc:f6:b9:9b:40:00:1e:05:d2:bb:00:07:e2:56:1f: c3:2e:60:9b:81:e8:e8:e5:5d:c0:4d:72:b3:26:57: c3:45:c5:39:54:a7:a2:21:27:cc:ee:f8:31:ef:46: 26:20:a2:89:78:d9:61:57:c4:ce:6d:9f:b2:ae:d4: c3:0b:be:23:f9:93:80:32:3c:09:d1:1f:92:e5:a6: 15:56:48:41:f3:b2:95:13:cf:9d:7a:2e:2f:a2:f3: 02:66:6a:af:be:f6:55:d1:29:21:19:0d:8a:5a:9d: 9a:e9:2b:11:03:98:f6:07:eb:da:d5:02:06:e0:49: 3f:b5:37:a9:eb:b0:01:85:ef:d2:66:b5:0e:59:ff: c4:92:47:34:92:0a:45:49:e2:10:1f:fe:16:76:63: c4:76:be:55:c2:66:e1:a4:29:7e:23:ab:5e:fa:0e: 6b:cb:b6:e2:69:a8:8c:80:cb:bf:e5:e0:9b:a3:b9: 84:37:8d:0c:97:69:37:8d:22:c3:5b:45:a8:03:7f: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C5:33:5A:79:B4:75:DF:D9:A5:E2:E9:A7:E6:B4:50:73:13:62:02 X509v3 Authority Key Identifier: keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:c7:90:c2:54:32:9a:44:a8:18:b5:c9:6d:d7:3f:0b:45:71: 70:a2:99:52:13:76:b3:1d:1b:df:7e:7b:bb:a2:57:fb:83:de: 62:23:85:33:60:78:35:e0:12:6b:d3:a9:d9:e5:40:04:bf:9b: 59:ee:2e:07:d5:16:8e:4e:05:9c:13:0a:df:c0:78:87:9b:67: 33:0f:3d:33:7c:72:12:11:c3:70:f6:b6:71:a0:fe:1b:e1:c2: 57:1b:83:69:e9:f2:53:b6:7f:bf:3a:11:46:be:b8:9d:5b:6d: e6:28:6c:46:80:d3:4e:1a:17:f3:f5:aa:73:f0:9f:d2:45:ef: e7:ec:94:35:cb:f8:3a:5d:d1:82:bd:21:32:c5:1c:09:e5:a8: 16:30:86:57:a9:b2:74:98:b5:13:68:bf:df:f7:0e:3d:70:0f: 32:50:16:e7:6d:07:40:31:2a:63:90:ee:34:a6:e0:e7:85:8c: 46:4b:56:bf:30:bd:2a:4b:67:f6:08:c9:56:9f:10:49:92:c4: a9:fe:45:c2:9b:a2:cf:0f:e8:ce:20:13:17:ef:4f:83:4a:ff: 1f:54:72:ff:40:b8:21:6e:28:5e:0f:f9:4b:4d:e7:1a:8e:91: c2:e1:38:74:04:22:58:3d:56:53:7e:a1:0e:2e:1d:28:ec:ff: 1b:43:55:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQxNjQxMTAvBgNVBAUTKDA5NEM4QkM1REFEQ0NEOUMyRkIzQ0Y0NUQxNDY0REVF Q0YzQTFDNjAwHhcNMjUwODA5MDY1OTM5WhcNMjUwODE2MDY1OTM5WjAYMRYwFAYD VQQDEw02ODk2ZjFkYi1lOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7boTF3GCGB6zzQnlDq0cp6iKNFTE7PF0XsuBxe1ViUpre8knuUY7E/hBD0B1 5+u09AW8f91Kg9czTITc9rmbQAAeBdK7AAfiVh/DLmCbgejo5V3ATXKzJlfDRcU5 VKeiISfM7vgx70YmIKKJeNlhV8TObZ+yrtTDC74j+ZOAMjwJ0R+S5aYVVkhB87KV E8+dei4vovMCZmqvvvZV0SkhGQ2KWp2a6SsRA5j2B+va1QIG4Ek/tTep67ABhe/S ZrUOWf/Ekkc0kgpFSeIQH/4WdmPEdr5VwmbhpCl+I6te+g5ry7biaaiMgMu/5eCb o7mEN40Ml2k3jSLDW0WoA3/s9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTFM1p5 tHXf2aXi6afmtFBzE2ICMB8GA1UdIwQYMBaAFAlMi8Xa3M2cL7PPRdFGTe7POhxg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDE2NC9BRTcyMjg5Q0Ex ODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9DVXlMeGRyY3pad3ZzODlGMFVaTjdzODZI R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVeUx4ZHJjelp3dnM4OUYwVVpON3M4NkhHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDE2NC9BRTcyMjg5Q0ExODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9DVXlMeGRyY3pa d3ZzODlGMFVaTjdzODZIR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3x5DCVDKaRKgYtclt1z8LRXFwoplSE3azHRvffnu7olf7g95iI4Uz YHg14BJr06nZ5UAEv5tZ7i4H1RaOTgWcEwrfwHiHm2czDz0zfHISEcNw9rZxoP4b 4cJXG4Np6fJTtn+/OhFGvridW23mKGxGgNNOGhfz9apz8J/SRe/n7JQ1y/g6XdGC vSEyxRwJ5agWMIZXqbJ0mLUTaL/f9w49cA8yUBbnbQdAMSpjkO40puDnhYxGS1a/ ML0qS2f2CMlWnxBJksSp/kXCm6LPD+jOIBMX70+DSv8fVHL/QLghbiheD/lLTeca jpHC4Th0BCJYPVZTfqEOLh0o7P8bQ1Xp -----END CERTIFICATE-----Generated at Sun Aug 10 05:46:48 2025 by rpki-client