$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: OVN83OZWH74g43LSzoZ9qbzHas+FPtZQFr1IA+g8lmE= Subject key identifier: AC:30:11:F8:58:54:C6:28:E3:04:32:F6:AE:76:3F:B5:BB:5D:7D:7D Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 164E Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 1645 Signing time: Sun 10 Aug 2025 16:42:21 +0000 Manifest this update: Sun 10 Aug 2025 16:42:20 +0000 Manifest next update: Sun 17 Aug 2025 16:42:20 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: PFkqGhdMRcPRphREOWtQkzJo+mHcI0Dga9I0Tcbl/DU=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: mykXr6ve/cwvr+LfcirysCKrHVhRt9J9fVkHn/0QFbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5710 (0x164e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Aug 10 16:42:20 2025 GMT Not After : Aug 17 16:42:20 2025 GMT Subject: CN=6898cbec-32e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:bb:d3:7c:4e:8a:2a:86:b9:bc:e0:3c:d2: bf:4c:42:b1:5f:62:2d:29:98:22:9f:25:0f:f8:8f: a8:fe:24:ea:cf:f5:98:3d:d2:7b:7e:3b:ab:7c:3f: b2:d4:be:eb:ed:64:38:d8:14:44:a0:c4:69:79:82: 23:5a:ff:43:cb:9d:ae:0a:ef:ab:7e:fb:d7:12:ed: 4c:f2:9c:95:ae:54:2e:3a:a7:c6:58:2f:c6:65:04: 60:65:cd:80:bf:50:da:cc:fe:46:cf:82:03:e1:f3: 32:22:f9:55:12:6b:cc:71:75:5b:84:eb:ac:21:4d: 4b:4e:03:38:30:df:57:0a:f3:a5:f2:59:0d:8c:f8: 96:cf:9f:af:b2:f0:16:9f:7f:63:d3:c8:1e:6e:ab: d7:ce:48:5a:61:c3:49:c7:33:41:5f:3f:e8:1a:30: 59:a9:21:13:24:80:fb:1c:5e:87:7c:6f:4b:db:45: 2f:18:1c:18:41:80:39:6c:d5:5c:1a:91:fc:4a:78: f8:37:58:01:d1:d8:6f:37:7f:43:1f:47:c6:4e:a8: 2d:dd:7b:b6:53:11:5a:4b:bc:bf:e8:b1:27:f1:54: ad:e3:d5:90:66:2e:e5:a3:9d:8c:0d:24:2f:b2:7f: 7f:dc:34:53:17:31:f3:5f:bd:18:4c:55:ac:12:b2: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:30:11:F8:58:54:C6:28:E3:04:32:F6:AE:76:3F:B5:BB:5D:7D:7D X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:da:19:c0:52:de:75:e7:90:34:67:d4:dd:c8:6a:f6:0e:0f: 39:e7:26:ca:23:d3:2d:c9:74:a1:df:cf:05:13:31:a8:72:9d: 0e:18:aa:60:d7:b2:60:c2:85:62:e5:46:cb:6e:d1:73:ed:21: 6c:6a:3b:0d:f0:7f:cc:60:86:8d:73:6b:e4:ba:9e:a1:3e:d1: 5c:7a:50:8f:32:2c:e3:0c:1c:da:23:b3:70:37:2c:3e:c8:1a: 16:78:c8:14:1f:ea:13:0b:da:55:d3:0f:d8:58:8d:b3:19:49: a4:a9:fb:1c:12:fe:64:5d:90:2f:24:6d:29:11:aa:76:37:86: 17:2e:04:e9:aa:6a:ba:f8:29:4d:cc:70:b2:43:2a:4d:13:9d: 83:8f:66:10:8d:93:e9:be:e8:91:88:41:48:dc:e8:36:7f:52: d5:3b:7e:65:1a:06:b1:6e:0b:d5:51:4e:c7:a9:f2:95:13:04: e3:da:fb:5c:ad:18:52:a9:9f:34:31:cf:92:0a:8f:c5:f9:41: ff:8d:e9:5b:b3:f1:b0:cf:e6:02:7b:81:af:f1:dd:be:5d:98: ee:51:1f:c6:1a:e0:e1:87:b5:d3:a6:3a:99:18:d1:ef:fd:62: 08:66:66:33:a5:6f:d1:2b:17:ae:e7:e3:49:bb:71:57:27:40: 41:cb:d0:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUwODEwMTY0MjIwWhcNMjUwODE3MTY0MjIwWjAYMRYwFAYD VQQDEw02ODk4Y2JlYy0zMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOm703xOiiqGubzgPNK/TEKxX2ItKZginyUP+I+o/iTqz/WYPdJ7fjurfD+y 1L7r7WQ42BREoMRpeYIjWv9Dy52uCu+rfvvXEu1M8pyVrlQuOqfGWC/GZQRgZc2A v1DazP5Gz4ID4fMyIvlVEmvMcXVbhOusIU1LTgM4MN9XCvOl8lkNjPiWz5+vsvAW n39j08gebqvXzkhaYcNJxzNBXz/oGjBZqSETJID7HF6HfG9L20UvGBwYQYA5bNVc GpH8Snj4N1gB0dhvN39DH0fGTqgt3Xu2UxFaS7y/6LEn8VSt49WQZi7lo52MDSQv sn9/3DRTFzHzX70YTFWsErJ/iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwwEfhY VMYo4wQy9q52P7W7XX19MB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA22hnAUt5155A0Z9TdyGr2Dg855ybKI9MtyXSh388FEzGocp0OGKpg 17JgwoVi5UbLbtFz7SFsajsN8H/MYIaNc2vkup6hPtFcelCPMizjDBzaI7NwNyw+ yBoWeMgUH+oTC9pV0w/YWI2zGUmkqfscEv5kXZAvJG0pEap2N4YXLgTpqmq6+ClN zHCyQypNE52Dj2YQjZPpvuiRiEFI3Og2f1LVO35lGgaxbgvVUU7HqfKVEwTj2vtc rRhSqZ80Mc+SCo/F+UH/jelbs/Gwz+YCe4Gv8d2+XZjuUR/GGuDhh7XTpjqZGNHv /WIIZmYzpW/RKxeu5+NJu3FXJ0BBy9D1 -----END CERTIFICATE-----Generated at Mon Aug 11 13:11:41 2025 by rpki-client