$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: Q0U+QCtHNgK2JLVnfz8nXXW8LucaGD2xqN6I8CJ96KI= Subject key identifier: 39:4E:65:9B:AD:27:1E:5F:5C:00:B6:42:94:AF:3C:B6:6D:5A:FE:5D Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 0963 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 093F Signing time: Fri 18 Jul 2025 20:34:26 +0000 Manifest this update: Fri 18 Jul 2025 20:34:26 +0000 Manifest next update: Fri 25 Jul 2025 20:34:26 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: kJF6/5ufyosc2kPf+VWGG7BW2RyrLGFunyNCIhr0tpI=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: +5v/UPyW3dQ/0rVuztf81a9oZSnTgo/JoecluNMVK0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2403 (0x963) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: Jul 18 20:34:26 2025 GMT Not After : Jul 25 20:34:26 2025 GMT Subject: CN=687aafd2-7b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:9e:b9:4a:fa:a4:bc:42:dd:f4:31:d2:84: 0a:05:9b:54:b5:f0:da:d8:4a:cf:82:f5:42:2a:9a: 09:ff:2b:d8:0f:85:41:b6:8e:46:63:31:09:ec:ea: 10:d8:f2:38:41:ff:8a:21:94:14:fd:e6:8d:a4:96: 05:8c:4e:32:ca:a1:a4:d0:46:f6:c7:f3:e1:b4:d4: 77:62:31:fa:51:e7:69:3a:56:03:9d:ee:a2:3b:c5: 70:b4:4c:42:56:bb:02:bf:be:f7:d1:2a:de:32:5d: 61:0b:37:2c:c0:b7:a1:8d:76:3f:56:94:8a:b0:ca: a7:83:ab:af:76:76:46:13:38:d6:8d:f4:b0:73:e9: c3:2e:a1:1c:07:d9:53:36:23:31:d2:0c:d5:58:38: be:19:55:d8:5d:f7:be:62:8c:89:55:f4:75:3d:ad: c3:62:c4:fb:9d:69:47:f1:d2:bf:17:0b:54:47:a5: ef:78:55:9c:c9:da:00:eb:4e:c8:dd:6a:b3:91:2a: bf:1c:c7:ce:67:d8:28:e5:7e:ed:7c:a6:62:3d:0b: 80:5c:bc:57:19:1e:99:09:4d:cf:23:3a:84:e0:0f: ba:98:4a:71:94:82:87:0f:c9:dd:33:9c:b1:7e:8b: 2c:f2:fe:7e:85:29:d8:5a:83:6f:31:82:3c:e1:32: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4E:65:9B:AD:27:1E:5F:5C:00:B6:42:94:AF:3C:B6:6D:5A:FE:5D X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:9e:f4:14:3d:bc:45:dd:51:12:be:6b:8f:69:40:c3:7b:73: 2a:17:0c:01:43:1a:36:d3:c8:aa:ea:50:d0:47:a3:4b:bb:10: 09:e3:fb:4f:19:b4:95:e1:6d:61:a1:1b:dd:de:aa:7d:84:77: 2c:67:06:38:55:77:2a:23:e8:e3:88:b3:15:3e:de:fe:1e:1b: 3a:36:09:22:b5:f1:fd:c8:d2:e1:0c:9b:59:8a:cb:f3:30:c7: bc:16:cc:c6:c2:f2:1e:d5:f2:d9:5d:5b:24:ae:7a:85:5c:31: f6:57:8f:c5:64:43:d3:ce:d5:a4:f6:5d:f7:bd:89:18:11:99: 42:3d:22:51:51:b0:40:12:c8:41:66:f8:0c:d5:22:43:05:37: 82:b8:48:a0:21:a0:e8:c0:55:34:de:de:8c:92:34:91:a7:97: d8:48:8c:3d:0e:7f:99:91:cd:e7:4f:46:cb:4b:bd:f7:b6:5d: 53:ed:a3:91:1a:45:bc:9e:27:ed:2d:36:95:4e:e2:ba:ac:bf: e3:72:a5:4b:8d:8f:ce:27:84:ac:1f:7b:99:e0:fb:0b:1e:6f: f6:b6:c6:62:68:33:00:9e:64:66:b5:d8:89:57:ac:2c:24:27: 3f:b0:23:46:28:c3:19:b0:e9:a5:ff:3d:53:da:1a:3e:50:7f: 11:d8:18:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjUwNzE4MjAzNDI2WhcNMjUwNzI1MjAzNDI2WjAYMRYwFAYD VQQDEw02ODdhYWZkMi03YjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yueuUr6pLxC3fQx0oQKBZtUtfDa2ErPgvVCKpoJ/yvYD4VBto5GYzEJ7OoQ 2PI4Qf+KIZQU/eaNpJYFjE4yyqGk0Eb2x/PhtNR3YjH6UedpOlYDne6iO8VwtExC VrsCv7730SreMl1hCzcswLehjXY/VpSKsMqng6uvdnZGEzjWjfSwc+nDLqEcB9lT NiMx0gzVWDi+GVXYXfe+YoyJVfR1Pa3DYsT7nWlH8dK/FwtUR6XveFWcydoA607I 3WqzkSq/HMfOZ9go5X7tfKZiPQuAXLxXGR6ZCU3PIzqE4A+6mEpxlIKHD8ndM5yx foss8v5+hSnYWoNvMYI84TJqIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlOZZut Jx5fXAC2QpSvPLZtWv5dMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4nvQUPbxF3VESvmuPaUDDe3MqFwwBQxo208iq6lDQR6NLuxAJ4/tP GbSV4W1hoRvd3qp9hHcsZwY4VXcqI+jjiLMVPt7+Hhs6NgkitfH9yNLhDJtZisvz MMe8FszGwvIe1fLZXVskrnqFXDH2V4/FZEPTztWk9l33vYkYEZlCPSJRUbBAEshB ZvgM1SJDBTeCuEigIaDowFU03t6MkjSRp5fYSIw9Dn+Zkc3nT0bLS733tl1T7aOR GkW8niftLTaVTuK6rL/jcqVLjY/OJ4SsH3uZ4PsLHm/2tsZiaDMAnmRmtdiJV6ws JCc/sCNGKMMZsOml/z1T2ho+UH8R2BhP -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:21 2025 by rpki-client