$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json) Hash identifier: Smque5i+IodrokMwVUORixxWjBgxLC2oavRfSMkSA+I= Subject key identifier: 3C:B5:42:5E:8D:64:0D:4B:E8:87:7B:51:88:E4:63:1C:28:46:B4:52 Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Certificate serial: 0BCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft Manifest number: 0BCA Signing time: Wed 06 Aug 2025 19:09:23 +0000 Manifest this update: Wed 06 Aug 2025 19:09:22 +0000 Manifest next update: Wed 13 Aug 2025 19:09:22 +0000 Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: xJRDxj2mjCYTJa5uv2q90hTl1tkY3WImaFQfv5PX02w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3023 (0xbcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Validity Not Before: Aug 6 19:09:22 2025 GMT Not After : Aug 13 19:09:22 2025 GMT Subject: CN=6893a863-846a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6a:1c:ec:07:fc:bf:af:1e:77:55:37:fe:f1: 48:33:8a:c0:98:c1:cf:ce:fe:53:ad:df:34:ec:e2: ca:c8:e2:e3:e5:32:53:4f:02:30:9a:c3:14:a5:a3: 34:61:89:01:74:6f:c5:94:b8:60:b0:9c:3e:c6:2d: 07:a7:a5:a2:d6:8b:10:03:f2:82:79:b8:bc:11:04: 33:71:92:ab:77:8f:cd:72:85:7d:2f:64:7b:e5:95: f5:2d:52:01:b5:41:09:10:c3:24:49:82:3b:1a:1c: d1:dc:d8:a6:47:4b:5a:74:08:2d:90:38:86:68:84: de:98:a1:b6:24:26:ed:16:2b:85:7a:e0:02:2e:26: e6:b2:53:ea:3a:f0:35:9a:6a:d0:15:b2:b0:0f:eb: 92:ac:91:e5:63:4a:93:50:b1:35:7f:0f:9c:4e:4d: 4e:c6:6b:87:ee:ca:b0:9f:be:bd:2f:26:0d:53:31: 29:d5:83:be:7c:c8:b0:f8:ad:11:35:f0:e6:df:41: a0:8a:7e:b3:0d:32:92:43:7f:19:d4:ed:38:18:91: e9:ca:cf:9b:92:b7:4f:da:f0:37:24:12:1b:90:a8: 00:0a:5f:f3:e3:e2:32:77:fc:16:26:70:98:f4:49: be:ad:9d:22:18:7d:f2:54:1c:e3:e4:73:cc:4d:8d: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B5:42:5E:8D:64:0D:4B:E8:87:7B:51:88:E4:63:1C:28:46:B4:52 X509v3 Authority Key Identifier: keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:04:a4:cd:52:94:66:6e:ba:e0:ee:30:20:8a:c3:2d:40:12: 2d:a3:97:93:13:eb:fa:a6:07:dd:58:e2:1e:46:c1:96:99:9d: 68:06:66:27:85:00:ff:8b:d5:01:1e:c7:34:ba:66:96:a7:dd: 33:6f:ab:a8:fc:d9:63:cc:ae:15:21:87:01:0b:12:b6:5a:b8: c1:39:2e:84:c4:de:02:21:12:57:9b:0d:f6:84:50:9c:4d:8e: 86:a8:9d:58:2c:e0:f8:26:35:a4:a6:f2:64:c0:ce:85:2c:b5: 88:5f:57:5e:7e:08:81:13:44:fc:f7:81:17:28:c9:ab:f2:d6: 65:dd:06:be:01:2b:b3:22:9e:d1:eb:83:05:7c:37:16:be:9a: 33:6c:98:31:58:b1:5f:9c:72:b2:74:24:99:a1:ed:25:bd:e5: 7d:1c:3f:b8:aa:b0:c7:0b:7f:a8:63:07:72:3d:82:a6:76:d5: 7b:36:2a:f1:8f:65:ee:5d:74:28:4d:0b:c1:19:94:10:85:6c: be:5c:38:71:44:f7:97:d8:26:37:ab:b1:19:1c:ee:6b:34:d7: e2:10:50:cb:61:e6:5e:cc:b1:4f:3d:fc:3f:dd:21:9d:5b:05: 05:31:c2:97:4a:22:9f:31:45:9f:6c:ba:71:2c:8d:4e:aa:44: db:43:16:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC QTY5RTQ0M0QwHhcNMjUwODA2MTkwOTIyWhcNMjUwODEzMTkwOTIyWjAYMRYwFAYD VQQDEw02ODkzYTg2My04NDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWoc7Af8v68ed1U3/vFIM4rAmMHPzv5Trd807OLKyOLj5TJTTwIwmsMUpaM0 YYkBdG/FlLhgsJw+xi0Hp6Wi1osQA/KCebi8EQQzcZKrd4/NcoV9L2R75ZX1LVIB tUEJEMMkSYI7GhzR3NimR0tadAgtkDiGaITemKG2JCbtFiuFeuACLibmslPqOvA1 mmrQFbKwD+uSrJHlY0qTULE1fw+cTk1OxmuH7sqwn769LyYNUzEp1YO+fMiw+K0R NfDm30Ggin6zDTKSQ38Z1O04GJHpys+bkrdP2vA3JBIbkKgACl/z4+Iyd/wWJnCY 9Em+rZ0iGH3yVBzj5HPMTY27jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy1Ql6N ZA1L6Id7UYjkYxwoRrRSMB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0 ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxBKTNUpRmbrrg7jAgisMtQBIto5eTE+v6pgfdWOIeRsGWmZ1oBmYn hQD/i9UBHsc0umaWp90zb6uo/NljzK4VIYcBCxK2WrjBOS6ExN4CIRJXmw32hFCc TY6GqJ1YLOD4JjWkpvJkwM6FLLWIX1defgiBE0T894EXKMmr8tZl3Qa+ASuzIp7R 64MFfDcWvpozbJgxWLFfnHKydCSZoe0lveV9HD+4qrDHC3+oYwdyPYKmdtV7Nirx j2XuXXQoTQvBGZQQhWy+XDhxRPeX2CY3q7EZHO5rNNfiEFDLYeZezLFPPfw/3SGd WwUFMcKXSiKfMUWfbLpxLI1OqkTbQxZ+ -----END CERTIFICATE-----Generated at Thu Aug 7 05:06:19 2025 by rpki-client