$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: oK3sd2gVb9VoC++++8Y4B2WL5BZhqgbIqFhE3R/vy4w= Subject key identifier: 6E:7F:DE:7B:86:1A:7F:84:C7:78:77:BD:58:35:35:24:EE:46:F9:8B Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 133A Signing time: Sun 10 Aug 2025 18:33:53 +0000 Manifest this update: Sun 10 Aug 2025 18:33:52 +0000 Manifest next update: Sun 17 Aug 2025 18:33:52 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: fWmMb5Owk2iuXDsQAbE81sAvCL6CQSzxR/HFyoHh1Fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: Aug 10 18:33:52 2025 GMT Not After : Aug 17 18:33:52 2025 GMT Subject: CN=6898e611-0669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:95:20:3e:de:2b:3b:6d:7d:25:3b:6e:8a: 16:f8:50:8f:82:f6:b1:cd:f3:51:60:8e:6b:9b:1b: 7b:63:09:e1:2b:33:09:4c:49:53:aa:f5:62:d0:1a: 44:27:1b:58:55:78:a1:ae:87:57:50:0d:45:98:be: b8:82:db:1a:e5:7a:fe:5e:57:03:a7:aa:48:00:76: 7c:22:cf:a8:81:d9:f6:8e:ff:86:39:e4:09:ad:15: a4:df:fc:2e:bf:87:e1:02:cb:4f:4c:df:c7:d9:c7: 96:d1:c8:9b:5f:08:0a:e1:85:f7:77:5a:ca:fa:25: 78:69:87:03:c9:06:85:3a:3c:5b:3d:b4:31:5c:35: 97:43:f1:06:d4:36:c5:ef:35:b5:01:fb:06:59:d1: ca:0e:21:dc:3d:e5:03:7c:84:36:0e:29:13:cd:76: 5b:74:40:f1:41:c3:4b:eb:66:38:63:77:a4:a4:eb: 31:67:c1:29:9f:93:43:39:6f:5e:02:6e:96:e7:a5: 39:ff:e8:56:3e:e0:b2:45:33:26:02:f8:a5:62:22: 3d:5e:b5:ff:00:a7:0d:27:1e:de:fd:bd:cb:76:b1: 8c:4f:38:b1:1b:38:85:2c:b5:79:6f:29:6d:42:d0: c9:43:57:bf:59:b2:e5:04:0f:8f:40:de:d8:28:9a: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7F:DE:7B:86:1A:7F:84:C7:78:77:BD:58:35:35:24:EE:46:F9:8B X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:26:31:a5:4a:63:af:4a:04:be:a9:56:80:67:55:92:22:68: 6d:8e:31:80:c5:fe:7b:6d:fb:e7:05:68:f6:e7:99:57:1a:3a: d9:dd:27:67:5d:db:f6:d3:9e:3e:09:cf:60:00:7e:d6:5f:e2: 20:fa:82:dd:d5:9a:cb:35:87:18:f8:a5:1a:fa:44:d9:f1:bd: 70:de:47:5b:92:3a:e0:d8:e9:17:b8:3c:cb:1d:83:a6:dd:97: 35:a5:6b:1f:7e:d9:f9:89:24:30:e1:7c:94:a0:9a:a2:f6:72: 4c:f5:d7:d5:0e:e8:0c:37:4a:a8:b1:ea:76:84:46:94:42:e2: 6c:be:1a:df:3a:0a:8f:2e:a1:a9:69:e7:76:7d:98:3d:bb:0b: 2b:53:94:0c:3a:6b:50:a9:e1:5b:a9:6b:c6:fd:af:b0:e0:6e: 62:4f:20:ee:07:f5:01:ec:f2:85:6d:ac:fc:e4:b4:45:e0:cb: 84:f7:2f:9a:8c:a7:a1:15:e8:74:f7:8a:98:ec:ea:1c:bf:e5: 20:a8:c9:c7:67:f1:80:b8:21:54:69:c4:f0:8d:72:34:1b:a7: 18:ef:05:1f:97:b6:45:e4:bd:1a:1a:5b:2c:57:89:7f:9b:c0: 4d:ee:9f:a7:3b:55:70:d5:14:f8:63:88:f2:85:06:67:1c:d5: fc:fe:81:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjUwODEwMTgzMzUyWhcNMjUwODE3MTgzMzUyWjAYMRYwFAYD VQQDEw02ODk4ZTYxMS0wNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhGVID7eKzttfSU7booW+FCPgvaxzfNRYI5rmxt7YwnhKzMJTElTqvVi0BpE JxtYVXihrodXUA1FmL64gtsa5Xr+XlcDp6pIAHZ8Is+ogdn2jv+GOeQJrRWk3/wu v4fhAstPTN/H2ceW0cibXwgK4YX3d1rK+iV4aYcDyQaFOjxbPbQxXDWXQ/EG1DbF 7zW1AfsGWdHKDiHcPeUDfIQ2DikTzXZbdEDxQcNL62Y4Y3ekpOsxZ8Epn5NDOW9e Am6W56U5/+hWPuCyRTMmAvilYiI9XrX/AKcNJx7e/b3LdrGMTzixGziFLLV5bylt QtDJQ1e/WbLlBA+PQN7YKJoHqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5/3nuG Gn+Ex3h3vVg1NSTuRvmLMB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhJjGlSmOvSgS+qVaAZ1WSImhtjjGAxf57bfvnBWj255lXGjrZ3Sdn Xdv2054+Cc9gAH7WX+Ig+oLd1ZrLNYcY+KUa+kTZ8b1w3kdbkjrg2OkXuDzLHYOm 3Zc1pWsfftn5iSQw4XyUoJqi9nJM9dfVDugMN0qosep2hEaUQuJsvhrfOgqPLqGp aed2fZg9uwsrU5QMOmtQqeFbqWvG/a+w4G5iTyDuB/UB7PKFbaz85LRF4MuE9y+a jKehFeh094qY7Oocv+UgqMnHZ/GAuCFUacTwjXI0G6cY7wUfl7ZF5L0aGlssV4l/ m8BN7p+nO1Vw1RT4Y4jyhQZnHNX8/oHE -----END CERTIFICATE-----Generated at Mon Aug 11 07:34:17 2025 by rpki-client