$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: 5tKffqjNvliVHyZAtEoQYKWb5OY8hBY1DLaEXf6Q4NM= Subject key identifier: C8:48:20:DD:48:A9:74:1C:A3:F2:2A:05:A8:5E:1F:3D:54:DC:2D:AF Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0C0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 12DB Signing time: Thu 12 Jun 2025 18:26:00 +0000 Manifest this update: Thu 12 Jun 2025 18:25:59 +0000 Manifest next update: Thu 19 Jun 2025 18:25:59 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: 5aXtAW8HPzwwCRrUBnSjmYeQcOlj/mYKymCxjBO1fiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3082 (0xc0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: Jun 12 18:25:59 2025 GMT Not After : Jun 19 18:25:59 2025 GMT Subject: CN=684b1bb8-1fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:78:2b:f7:c7:2e:12:97:44:88:e1:00:d1: 41:f1:95:74:1b:96:a4:47:2e:45:6f:10:3a:1f:74: f1:5a:4f:6b:0d:cc:02:4b:02:6a:2f:5c:88:6d:f9: 6a:be:2b:89:1a:54:ef:58:49:69:0b:cb:f9:71:a4: 37:29:0c:e9:ea:a1:05:93:ce:69:33:8a:95:fa:75: eb:55:f7:e9:ce:61:50:69:51:ff:2f:a8:65:b0:9c: d4:36:d6:db:49:96:51:79:0d:74:be:e2:cc:88:b5: 5c:e2:61:cd:2b:30:1e:00:11:56:8d:11:1f:4b:f5: 71:9e:55:d2:d0:81:3c:19:bc:f4:31:11:af:3a:ab: 1b:be:62:18:37:58:76:d1:03:ec:97:01:5f:31:b2: 22:8b:46:6c:a8:97:d5:94:d3:e6:58:ca:64:92:ee: d0:71:17:d9:b5:12:63:a7:ec:0d:4c:00:1f:5a:02: f7:c1:c3:10:9b:51:38:a1:4d:23:05:3f:d9:34:74: 19:c8:63:00:f8:56:81:b6:fa:67:2e:c7:5a:91:d7: ef:8a:1c:0d:1f:3b:6a:92:a7:9c:5c:59:dc:fb:5d: 0a:13:64:72:2c:ae:4b:fd:81:d7:f4:6c:76:26:25: 3a:c6:0e:24:cb:2b:f7:12:60:f8:14:95:a0:cd:63: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:48:20:DD:48:A9:74:1C:A3:F2:2A:05:A8:5E:1F:3D:54:DC:2D:AF X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:47:0e:6e:5b:44:d2:ce:02:87:67:d8:c5:e6:3e:42:0b:5f: eb:9e:0e:30:33:97:83:c9:af:21:7b:78:b6:4d:c4:dc:79:82: 62:3c:ca:9c:ef:09:d2:8c:30:3f:1b:00:cc:c4:23:7e:ac:8f: 16:d8:62:7c:ad:d1:bc:8e:91:46:a2:08:93:84:aa:30:b7:85: 77:89:6e:80:c3:86:be:24:2f:db:98:57:ad:e1:6a:ff:d5:f4: 11:03:59:6a:60:2c:46:b8:e1:66:cd:0b:e0:84:d0:04:3d:ea: 00:8d:97:89:4a:c6:c0:10:50:cf:d8:b3:13:12:ad:b7:4d:b9: 8c:9e:e4:38:78:0b:24:20:8d:53:3b:ff:80:c1:84:64:cd:43: 3b:22:d4:f5:d5:d3:7a:83:5c:26:44:5a:6a:7c:66:d7:4d:74: c6:41:4a:c5:b4:50:8b:98:41:e7:db:2d:be:fc:d2:68:cb:7f: 0a:ea:82:c9:f3:72:f7:18:bf:23:e6:c4:c3:c8:f9:1b:ad:20: bb:36:cb:84:0a:7a:ae:68:32:d5:99:20:8a:89:02:7c:aa:9c: b9:ff:e2:3b:21:bc:85:85:59:06:f8:a7:9c:00:c1:a2:79:3f: 18:0a:e9:f4:12:1f:a9:c2:1f:ea:88:e6:3c:dd:73:39:d5:87: 53:3b:27:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjUwNjEyMTgyNTU5WhcNMjUwNjE5MTgyNTU5WjAYMRYwFAYD VQQDEw02ODRiMWJiOC0xZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyN4K/fHLhKXRIjhANFB8ZV0G5akRy5FbxA6H3TxWk9rDcwCSwJqL1yIbflq viuJGlTvWElpC8v5caQ3KQzp6qEFk85pM4qV+nXrVffpzmFQaVH/L6hlsJzUNtbb SZZReQ10vuLMiLVc4mHNKzAeABFWjREfS/VxnlXS0IE8Gbz0MRGvOqsbvmIYN1h2 0QPslwFfMbIii0ZsqJfVlNPmWMpkku7QcRfZtRJjp+wNTAAfWgL3wcMQm1E4oU0j BT/ZNHQZyGMA+FaBtvpnLsdakdfvihwNHztqkqecXFnc+10KE2RyLK5L/YHX9Gx2 JiU6xg4kyyv3EmD4FJWgzWO9twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhIIN1I qXQco/IqBaheHz1U3C2vMB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuRw5uW0TSzgKHZ9jF5j5CC1/rng4wM5eDya8he3i2TcTceYJiPMqc 7wnSjDA/GwDMxCN+rI8W2GJ8rdG8jpFGogiThKowt4V3iW6Aw4a+JC/bmFet4Wr/ 1fQRA1lqYCxGuOFmzQvghNAEPeoAjZeJSsbAEFDP2LMTEq23TbmMnuQ4eAskII1T O/+AwYRkzUM7ItT11dN6g1wmRFpqfGbXTXTGQUrFtFCLmEHn2y2+/NJoy38K6oLJ 83L3GL8j5sTDyPkbrSC7NsuECnquaDLVmSCKiQJ8qpy5/+I7IbyFhVkG+KecAMGi eT8YCun0Eh+pwh/qiOY83XM51YdTOye1 -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:35 2025 by rpki-client