$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: EBPC3IXeVd6Z6Qsdt7bhzuyPNIZOtfeSuje0vZttyzo= Subject key identifier: 34:52:6B:A6:4C:29:56:4E:79:82:BD:AC:94:BF:5E:5F:86:6B:A4:EF Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0C1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 1314 Signing time: Sun 20 Jul 2025 18:38:57 +0000 Manifest this update: Sun 20 Jul 2025 18:38:56 +0000 Manifest next update: Sun 27 Jul 2025 18:38:56 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: gpmfM6lDYoGkugwMZcVwY/ew2WMqpbYHMYMw4bloLRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3101 (0xc1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: Jul 20 18:38:56 2025 GMT Not After : Jul 27 18:38:56 2025 GMT Subject: CN=687d37c0-9d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:27:7d:87:ba:84:f6:79:5b:49:5a:d6:16: 46:de:73:34:f9:68:b2:39:ac:63:ea:da:bf:77:69: 77:92:99:27:93:37:b6:7d:fd:eb:59:a5:62:b9:33: 3b:d2:94:49:3a:00:91:af:15:02:e3:cd:9e:1f:53: c2:53:e3:33:51:f9:f9:1a:8f:a7:b0:c2:e8:f0:72: 94:ab:a8:2d:52:1d:73:9e:e4:44:9b:15:53:b3:95: a1:e1:36:31:2b:17:9d:49:ca:9b:61:c2:f8:72:97: be:44:39:eb:8c:d0:07:72:dd:51:b4:e9:d3:96:fd: 49:e2:9f:b7:da:3a:b8:13:f7:9c:22:e8:22:00:c2: fb:6b:b1:f2:aa:c4:af:1b:ff:f8:fa:7f:9b:1e:39: e2:0f:44:d6:ad:1e:03:2d:40:99:83:ac:b8:7e:f2: 25:0f:51:20:89:88:03:72:89:ed:03:9f:ec:2b:a4: 60:c1:e1:6f:7a:cc:8f:95:2e:fd:c8:4e:5f:e8:77: 85:e4:b6:f1:81:48:df:9c:dd:99:e0:e7:a2:8c:5c: ef:75:46:b1:bf:29:1d:5a:47:f3:92:bb:ec:f9:bd: cb:e4:78:ec:17:47:1d:ae:13:06:1f:fe:d1:b7:09: c9:5e:dc:3b:c0:6a:6f:64:3a:6e:87:71:37:a8:52: bd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:52:6B:A6:4C:29:56:4E:79:82:BD:AC:94:BF:5E:5F:86:6B:A4:EF X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:c5:b0:85:31:ba:83:2d:23:84:4d:54:58:a5:23:ea:a0:d7: 28:90:09:35:89:31:47:16:78:b3:01:7b:fc:cd:36:95:68:94: 7a:44:35:b1:3f:01:37:89:e1:97:74:bf:ea:19:a0:1b:15:45: 65:a0:82:5b:71:ab:bb:04:28:43:29:a6:ae:1b:bd:0c:f9:8e: cd:c9:7b:0c:94:c3:bb:e6:ed:ae:77:97:d5:94:ae:fd:35:94: 4c:6e:b1:bf:7a:0c:a6:98:e3:7f:38:e0:06:1f:8f:dd:ee:b2: 43:c4:2e:71:e4:2d:82:b6:b2:3d:ac:e5:ba:08:37:e7:e6:ae: 60:ef:70:fd:a6:bb:40:7e:d3:51:3e:be:5b:16:e0:6e:f8:23: 61:86:d8:0c:6f:cb:ed:16:49:8c:96:45:4e:42:cc:c3:f2:a6: e5:ea:91:85:bf:6a:00:49:6c:d5:ac:2f:4f:f9:d5:ee:ea:8e: 0d:c5:f4:08:f6:a2:23:86:d0:d4:2c:5c:37:c5:ae:8f:36:71: 42:04:6e:53:85:3c:01:54:e6:2d:63:7b:ea:60:83:c7:39:04: 35:e8:1d:38:89:b8:13:2e:39:54:0e:cf:a1:0d:d0:c6:9a:24: d2:fd:db:48:9c:03:02:d8:03:8c:57:98:bf:fc:43:00:52:59: c7:d3:4a:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjUwNzIwMTgzODU2WhcNMjUwNzI3MTgzODU2WjAYMRYwFAYD VQQDEw02ODdkMzdjMC05ZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbEnfYe6hPZ5W0la1hZG3nM0+WiyOaxj6tq/d2l3kpknkze2ff3rWaViuTM7 0pRJOgCRrxUC482eH1PCU+MzUfn5Go+nsMLo8HKUq6gtUh1znuREmxVTs5Wh4TYx KxedScqbYcL4cpe+RDnrjNAHct1RtOnTlv1J4p+32jq4E/ecIugiAML7a7HyqsSv G//4+n+bHjniD0TWrR4DLUCZg6y4fvIlD1EgiYgDcontA5/sK6RgweFvesyPlS79 yE5f6HeF5LbxgUjfnN2Z4OeijFzvdUaxvykdWkfzkrvs+b3L5HjsF0cdrhMGH/7R twnJXtw7wGpvZDpuh3E3qFK9eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRSa6ZM KVZOeYK9rJS/Xl+Ga6TvMB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVxbCFMbqDLSOETVRYpSPqoNcokAk1iTFHFnizAXv8zTaVaJR6RDWx PwE3ieGXdL/qGaAbFUVloIJbcau7BChDKaauG70M+Y7NyXsMlMO75u2ud5fVlK79 NZRMbrG/egymmON/OOAGH4/d7rJDxC5x5C2CtrI9rOW6CDfn5q5g73D9prtAftNR Pr5bFuBu+CNhhtgMb8vtFkmMlkVOQszD8qbl6pGFv2oASWzVrC9P+dXu6o4NxfQI 9qIjhtDULFw3xa6PNnFCBG5ThTwBVOYtY3vqYIPHOQQ16B04ibgTLjlUDs+hDdDG miTS/dtInAMC2AOMV5i//EMAUlnH00p2 -----END CERTIFICATE-----Generated at Mon Jul 21 07:21:35 2025 by rpki-client