$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft File: cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json) Hash identifier: +FGMCjqTtVkrDy8boebcvoo6+dV4imd8sxCUmWUz8Uk= Subject key identifier: 2B:79:3C:78:29:B1:E1:BC:F5:24:45:46:1F:87:59:43:DA:05:04:B4 Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 Certificate issuer: /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Certificate serial: 1657 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft Manifest number: 2632 Signing time: Tue 12 Aug 2025 16:48:08 +0000 Manifest this update: Tue 12 Aug 2025 16:48:07 +0000 Manifest next update: Tue 19 Aug 2025 16:48:07 +0000 Files and hashes: 1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: qUsXKgGEi801PI7L1E/obe4h2aM9YVAK6x0vG4Q6BSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5719 (0x1657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Validity Not Before: Aug 12 16:48:07 2025 GMT Not After : Aug 19 16:48:07 2025 GMT Subject: CN=689b7047-22b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:f6:9d:42:b8:58:6f:34:88:97:36:10:76: 5a:9f:1a:bd:56:13:87:89:00:66:5e:28:98:d4:b0: 9e:30:7d:f8:45:d7:b4:56:55:2d:9b:c7:1b:26:31: 70:28:86:99:c7:7c:64:4f:1d:2c:1e:51:95:fb:68: a6:72:36:a8:94:de:da:82:7d:86:bd:d7:51:58:fc: a5:de:45:3e:04:3e:b1:31:b3:96:53:e9:fa:aa:c7: 2e:d7:d5:e3:7a:76:d0:0b:aa:26:18:47:1e:88:29: cc:ad:43:40:92:f7:72:82:43:ec:78:f9:eb:52:44: 3f:7c:b1:6d:30:b8:29:13:50:4d:09:45:35:7c:7c: 10:11:dd:8a:5c:cf:33:40:a9:6a:a2:ea:19:38:e1: 1f:48:14:76:bb:37:2f:d1:77:84:24:45:04:20:94: 48:77:fd:e9:00:11:c8:15:a0:0b:46:11:84:d2:7c: 1e:4f:7b:42:2a:63:be:85:c0:f4:ca:81:22:92:9e: db:6b:93:4f:cc:78:35:56:ee:ca:fb:35:52:49:82: 2c:26:ba:e8:fc:60:83:a0:4a:0e:ee:31:a8:73:33: a2:76:dc:96:bc:18:89:1e:34:b7:87:26:b2:de:5d: 8b:be:8c:0d:57:80:60:a3:33:74:e2:43:94:32:db: a0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:79:3C:78:29:B1:E1:BC:F5:24:45:46:1F:87:59:43:DA:05:04:B4 X509v3 Authority Key Identifier: keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:83:b9:29:5a:01:5a:96:da:f5:3b:f1:62:76:18:39:91:c4: c4:a8:f0:a5:61:52:20:9a:0a:bd:9d:a7:9f:32:e6:e5:47:6b: 86:7b:62:88:b3:0f:19:ab:64:82:16:15:27:08:af:58:d9:35: cb:d0:7b:be:3e:46:b1:d9:d0:7f:d8:89:98:d2:d4:ef:7f:c7: de:0c:4f:92:c6:41:34:08:70:50:8c:cb:b0:66:70:8e:f1:ad: db:d8:54:4a:68:b8:2c:7f:f1:95:95:03:5e:76:7d:88:41:72: 9c:e3:7e:4a:eb:2d:52:af:2d:e0:7d:a1:03:16:7b:74:91:ba: e4:17:b2:75:2f:f3:6c:19:a4:9c:40:58:46:de:13:2e:cd:55: 2d:22:75:7b:b1:e9:a6:7b:3f:0e:d1:f2:55:13:ed:e8:dd:42: 9e:fb:9e:9c:22:b1:d1:8e:38:f7:78:f5:e3:ac:52:8d:d9:08: 9a:ae:e1:e8:b2:cc:12:38:ff:cc:3b:a8:a0:9e:16:29:46:c3: fe:85:99:df:70:ab:7c:74:22:25:56:57:98:87:42:3a:1f:1a: 99:16:2a:31:19:d3:91:2e:5e:75:d2:0b:31:6e:96:f8:de:88: fa:13:ef:cc:f4:9f:67:95:3d:2b:c3:21:f8:05:bc:6f:24:74: c0:d8:51:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIzMkFDOUFBM0U4 RDJBRUJGNDEwHhcNMjUwODEyMTY0ODA3WhcNMjUwODE5MTY0ODA3WjAYMRYwFAYD VQQDEw02ODliNzA0Ny0yMmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmT2nUK4WG80iJc2EHZanxq9VhOHiQBmXiiY1LCeMH34Rde0VlUtm8cbJjFw KIaZx3xkTx0sHlGV+2imcjaolN7agn2GvddRWPyl3kU+BD6xMbOWU+n6qscu19Xj enbQC6omGEceiCnMrUNAkvdygkPsePnrUkQ/fLFtMLgpE1BNCUU1fHwQEd2KXM8z QKlqouoZOOEfSBR2uzcv0XeEJEUEIJRId/3pABHIFaALRhGE0nweT3tCKmO+hcD0 yoEikp7ba5NPzHg1Vu7K+zVSSYIsJrro/GCDoEoO7jGoczOidtyWvBiJHjS3hyay 3l2LvowNV4BgozN04kOUMtugvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCt5PHgp seG89SRFRh+HWUPaBQS0MB8GA1UdIwQYMBaAFHDNApYKcRTh/X/bMqyao+jSrr9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZPSDlmOXN5ckpxajZOS3V2 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMENsZ3B4Rk9IOWY5c3lySnFqNk5LdXYwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZP SDlmOXN5ckpxajZOS3V2MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhg7kpWgFaltr1O/Fidhg5kcTEqPClYVIgmgq9naefMublR2uGe2KI sw8Zq2SCFhUnCK9Y2TXL0Hu+Pkax2dB/2ImY0tTvf8feDE+SxkE0CHBQjMuwZnCO 8a3b2FRKaLgsf/GVlQNedn2IQXKc435K6y1Sry3gfaEDFnt0kbrkF7J1L/NsGaSc QFhG3hMuzVUtInV7semmez8O0fJVE+3o3UKe+56cIrHRjjj3ePXjrFKN2QiaruHo sswSOP/MO6ignhYpRsP+hZnfcKt8dCIlVleYh0I6HxqZFioxGdORLl510gsxbpb4 3oj6E+/M9J9nlT0rwyH4BbxvJHTA2FHB -----END CERTIFICATE-----Generated at Wed Aug 13 05:56:27 2025 by rpki-client