$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: AWAF0mUoajXaCCKOKA6N5lwfk5RxBLcjv+Xkvp4o/vI= Subject key identifier: A2:F1:AF:88:A0:B1:74:12:6A:50:E1:55:D7:BD:11:C4:1F:1A:60:8E Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 1259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1A5E Signing time: Sun 20 Jul 2025 17:08:46 +0000 Manifest this update: Sun 20 Jul 2025 17:08:46 +0000 Manifest next update: Sun 27 Jul 2025 17:08:46 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: oKcmmM2vOsSONo1dg7hY778yrhz9GBCxIOHhfTnpa78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4697 (0x1259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: Jul 20 17:08:46 2025 GMT Not After : Jul 27 17:08:46 2025 GMT Subject: CN=687d229e-fdd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:39:17:37:f0:d3:ab:a7:b4:fb:18:55:b0:35: 4d:36:a4:a3:ce:e3:61:56:18:82:7c:48:fa:a2:8e: 29:10:44:7c:de:f0:67:f3:10:3b:6a:14:d0:2a:8d: dc:84:ae:4c:5e:a2:3c:9a:5b:58:b1:73:a2:bc:fe: dc:24:96:07:63:6d:fc:62:ba:7e:d9:ea:0c:a5:d0: 04:f1:4c:5c:57:3e:84:af:e0:28:ac:f9:4c:cc:00: 99:a7:c2:30:ec:de:a7:80:51:6e:01:76:d9:67:3d: 13:17:a0:c9:c0:f3:ea:af:fb:8e:87:c4:5e:01:f6: 09:47:43:cc:0f:82:6b:e9:59:2a:10:8d:82:e4:46: c9:c0:1e:21:a9:d4:82:3b:99:0e:c3:17:0e:93:81: bb:85:e4:6a:74:f2:c8:62:56:10:c4:82:28:e3:c1: 0f:44:40:de:af:d9:52:42:fd:c0:00:40:6c:96:57: 5c:9b:1b:88:d1:62:b3:f3:3d:80:1e:bb:20:fb:b1: 66:3a:4b:64:38:aa:a5:68:3d:eb:e9:2b:3c:72:64: 57:bf:b3:aa:6e:9f:76:8b:fb:62:76:2d:cc:25:c0: 39:66:7c:34:99:28:c1:eb:15:43:e2:2e:b2:73:2d: 67:65:c4:d5:6d:2b:50:9e:09:84:10:e4:ae:7e:78: b5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F1:AF:88:A0:B1:74:12:6A:50:E1:55:D7:BD:11:C4:1F:1A:60:8E X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c2:18:8a:44:d2:99:3b:7a:be:4c:52:bf:cc:53:9e:02:68: 43:76:59:d3:03:9f:39:ba:58:b9:7d:81:b6:b5:0b:a2:31:5c: 2b:bd:4f:7e:63:a8:d3:27:52:5b:29:7d:90:d8:d8:25:04:a2: 1c:05:e6:31:33:7d:19:74:88:73:93:a8:1e:b2:2d:53:19:54: 33:46:a8:8a:e6:fc:4e:f2:72:d5:b5:59:e3:25:d8:34:ab:5d: 3a:11:5d:c3:ec:16:12:c8:62:f3:73:63:0e:df:9a:48:d1:df: d3:c8:21:b3:58:80:48:ed:56:7b:2b:49:b8:f5:85:f9:4c:04: 8d:3d:a2:1d:77:f6:81:f9:1b:23:94:e2:ca:b3:68:f3:92:b0: aa:15:82:92:e9:39:68:c6:14:30:a6:55:f5:58:9a:91:3d:e5: 11:d2:01:9a:e5:85:c8:e7:8f:c4:75:90:6b:25:be:6b:3c:2f: af:e5:92:20:aa:0e:5a:f1:21:2d:2c:36:e6:a6:ac:2b:d5:01: 6c:94:80:98:ae:db:f7:7f:f3:d3:9c:79:2b:b1:4b:af:b7:db: 7e:20:9b:69:2b:e1:2e:d6:ad:30:7e:52:b9:39:a2:f3:7b:ae: bc:8d:9f:64:75:2f:cf:2c:29:bd:6e:2c:fc:fb:c6:da:cb:ee: b3:ff:da:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICElkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjUwNzIwMTcwODQ2WhcNMjUwNzI3MTcwODQ2WjAYMRYwFAYD VQQDEw02ODdkMjI5ZS1mZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DkXN/DTq6e0+xhVsDVNNqSjzuNhVhiCfEj6oo4pEER83vBn8xA7ahTQKo3c hK5MXqI8mltYsXOivP7cJJYHY238Yrp+2eoMpdAE8UxcVz6Er+AorPlMzACZp8Iw 7N6ngFFuAXbZZz0TF6DJwPPqr/uOh8ReAfYJR0PMD4Jr6VkqEI2C5EbJwB4hqdSC O5kOwxcOk4G7heRqdPLIYlYQxIIo48EPREDer9lSQv3AAEBslldcmxuI0WKz8z2A Hrsg+7FmOktkOKqlaD3r6Ss8cmRXv7Oqbp92i/tidi3MJcA5Znw0mSjB6xVD4i6y cy1nZcTVbStQngmEEOSufni1GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLxr4ig sXQSalDhVde9EcQfGmCOMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArwhiKRNKZO3q+TFK/zFOeAmhDdlnTA585uli5fYG2tQuiMVwrvU9+ Y6jTJ1JbKX2Q2NglBKIcBeYxM30ZdIhzk6gesi1TGVQzRqiK5vxO8nLVtVnjJdg0 q106EV3D7BYSyGLzc2MO35pI0d/TyCGzWIBI7VZ7K0m49YX5TASNPaIdd/aB+Rsj lOLKs2jzkrCqFYKS6TloxhQwplX1WJqRPeUR0gGa5YXI54/EdZBrJb5rPC+v5ZIg qg5a8SEtLDbmpqwr1QFslICYrtv3f/PTnHkrsUuvt9t+IJtpK+Eu1q0wflK5OaLz e668jZ9kdS/PLCm9biz8+8bay+6z/9rm -----END CERTIFICATE-----Generated at Mon Jul 21 07:14:06 2025 by rpki-client