$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: hx9e3TN81/6Tls/hQAOAviUuFDA0SfHoDXVHVDms6FQ= Subject key identifier: 08:89:52:70:6A:E6:B0:0A:A7:DC:EE:43:EB:49:F9:E6:87:41:DD:12 Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 167A Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 1671 Signing time: Tue 04 Nov 2025 16:47:52 +0000 Manifest this update: Tue 04 Nov 2025 16:47:52 +0000 Manifest next update: Tue 11 Nov 2025 16:47:52 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: jSWC1Tst93d0LNmDaIwykivcoGq9BPN+8s7mc6+iRXI=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: mykXr6ve/cwvr+LfcirysCKrHVhRt9J9fVkHn/0QFbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5754 (0x167a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Nov 4 16:47:52 2025 GMT Not After : Nov 11 16:47:52 2025 GMT Subject: CN=690a2e38-a8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:8b:20:cb:e7:e9:35:56:6c:5d:4e:01:b0: e2:71:ac:8a:78:e6:d7:d6:6d:b6:ed:d1:49:00:2b: 01:0a:bd:8b:3b:e3:11:62:09:d8:ad:06:2d:63:de: bf:12:59:06:38:8c:dd:b5:fc:86:8e:a6:91:a8:d3: 2d:cd:49:95:44:c4:32:6a:a1:8e:79:f1:87:18:1c: 3e:3d:79:80:f0:77:9c:22:3f:f0:e0:b5:3d:02:9e: a1:36:be:4a:74:81:54:db:de:8f:26:93:ae:27:44: 67:5b:ca:f3:87:5a:a6:20:98:58:18:21:22:d1:1e: 9c:0d:df:fb:dc:8a:00:fa:88:bf:ce:1f:fd:fc:20: 8d:73:cb:0b:f2:63:cb:ea:e2:3d:81:e7:05:9d:69: ff:a2:8f:50:c6:e2:7f:9a:12:3c:9c:71:27:30:9f: c2:c5:ad:e5:da:2b:18:11:66:84:70:26:7d:8b:07: 5c:66:7f:ca:c5:65:c0:76:e3:ef:f5:3d:b7:4d:01: 2b:40:01:62:3b:ac:e1:8c:ae:87:cc:84:a0:e5:0f: 88:3b:80:b0:c6:9b:a7:5b:40:f2:b7:a0:23:69:84: 47:7e:d9:f3:6f:72:c3:b1:1c:06:a1:30:e6:5b:a7: 1f:12:e9:e4:50:70:4e:b4:36:fd:d4:fa:4a:92:97: 2b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:89:52:70:6A:E6:B0:0A:A7:DC:EE:43:EB:49:F9:E6:87:41:DD:12 X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b2:4c:66:2c:f7:5d:c2:16:32:a1:0c:e9:d3:66:60:ee:4f: c2:15:cc:51:e5:30:ac:83:f9:3b:fc:ae:19:09:32:e5:7a:2c: 6c:3f:63:fa:86:44:1e:18:87:88:e9:d7:45:ea:81:53:53:ae: de:31:f7:51:67:76:3d:da:65:3d:0a:b2:92:b8:f3:74:b7:3b: c7:32:44:04:31:dd:01:9b:7b:19:3a:ed:db:17:c1:b0:96:d9: fe:4f:6a:0b:c8:78:ab:41:4f:e5:eb:34:9a:33:83:99:eb:23: c3:fc:f7:a2:ad:6d:67:11:78:17:80:da:50:8d:68:b1:34:91: 5f:65:aa:45:ed:55:34:50:8d:76:67:19:b9:83:91:fe:05:2e: 4c:a6:02:ec:df:ae:1c:42:7e:c2:1a:ed:75:dd:1d:0b:4b:9d: 1f:1c:59:67:f1:63:fe:2c:ab:53:57:a2:ac:22:3f:c1:75:1d: e3:3f:86:f6:ae:61:b7:16:3c:80:1b:37:df:52:7a:c4:eb:e1: 39:cd:fc:e5:9b:8b:54:c0:4a:ac:5f:e3:45:e0:03:ff:79:bc: c0:be:c4:8c:d7:41:12:33:96:95:86:af:29:ca:be:42:9e:48: e1:ed:0a:3a:31:b1:9c:12:69:22:93:d7:9e:27:ac:54:8d:ee: cf:c9:94:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUxMTA0MTY0NzUyWhcNMjUxMTExMTY0NzUyWjAYMRYwFAYD VQQDEw02OTBhMmUzOC1hOGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYWLIMvn6TVWbF1OAbDicayKeObX1m227dFJACsBCr2LO+MRYgnYrQYtY96/ ElkGOIzdtfyGjqaRqNMtzUmVRMQyaqGOefGHGBw+PXmA8HecIj/w4LU9Ap6hNr5K dIFU296PJpOuJ0RnW8rzh1qmIJhYGCEi0R6cDd/73IoA+oi/zh/9/CCNc8sL8mPL 6uI9gecFnWn/oo9QxuJ/mhI8nHEnMJ/Cxa3l2isYEWaEcCZ9iwdcZn/KxWXAduPv 9T23TQErQAFiO6zhjK6HzISg5Q+IO4CwxpunW0Dyt6AjaYRHftnzb3LDsRwGoTDm W6cfEunkUHBOtDb91PpKkpcrxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiJUnBq 5rAKp9zuQ+tJ+eaHQd0SMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYskxmLPddwhYyoQzp02Zg7k/CFcxR5TCsg/k7/K4ZCTLleixsP2P6 hkQeGIeI6ddF6oFTU67eMfdRZ3Y92mU9CrKSuPN0tzvHMkQEMd0Bm3sZOu3bF8Gw ltn+T2oLyHirQU/l6zSaM4OZ6yPD/PeirW1nEXgXgNpQjWixNJFfZapF7VU0UI12 Zxm5g5H+BS5MpgLs364cQn7CGu113R0LS50fHFln8WP+LKtTV6KsIj/BdR3jP4b2 rmG3FjyAGzffUnrE6+E5zfzlm4tUwEqsX+NF4AP/ebzAvsSM10ESM5aVhq8pyr5C nkjh7Qo6MbGcEmkik9eeJ6xUje7PyZSJ -----END CERTIFICATE-----Generated at Wed Nov 5 20:02:26 2025 by rpki-client