$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: /AOsDxPVq2+tOxn9+zLPu2t9nlqQ4SFx3M+YkdHAA7Q= Subject key identifier: 5C:EE:3D:36:CE:51:D6:10:C1:AC:24:93:63:F8:1F:8D:FC:71:34:D0 Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 04 Signing time: Fri 05 Sep 2025 08:40:47 +0000 Manifest this update: Fri 05 Sep 2025 08:40:46 +0000 Manifest next update: Fri 12 Sep 2025 08:40:46 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: P+QghLoRfNEmvuJrZXBmjWE0Ox44oLVtspX5ov+wVgQ=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: vMZkY4LJvSskuTqDy/+VGXHXuUJS0EC4VIR/FgkiiB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Sep 5 08:40:46 2025 GMT Not After : Sep 12 08:40:46 2025 GMT Subject: CN=68baa20f-98de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:0e:af:c4:dc:42:a9:68:f4:76:46:3c:03: 86:eb:f8:fe:4b:41:08:6b:75:b3:cc:86:86:d9:29: b9:b2:07:f9:95:6a:eb:a9:eb:81:10:f7:64:19:f1: 78:75:e8:b7:38:d2:59:cd:a7:51:42:51:bc:54:78: 9a:ae:de:be:29:07:bd:77:46:33:29:b6:60:ab:71: fc:0e:14:b9:a3:a1:94:3f:8a:f0:65:ac:ce:c0:cd: 6b:ae:14:c6:17:63:78:c3:71:49:8d:4f:de:f6:3a: ea:a4:b2:d8:73:30:5c:6d:4e:c3:65:93:e7:a2:6b: 92:84:7c:b0:89:f0:27:fd:b7:83:ca:c0:6c:31:02: 14:0f:57:58:37:0c:f7:1a:ce:55:dc:2f:a9:5b:4e: f7:68:7e:11:29:65:f2:3f:81:f8:26:28:c8:aa:b1: 54:93:60:3a:f2:f5:ac:cb:8f:79:e4:03:89:0a:81: e1:b1:4d:18:59:83:14:c0:f5:05:49:db:d0:fd:6a: 6c:52:f5:47:fd:f8:c6:f8:c2:28:9a:48:f6:99:d7: a2:47:48:28:c1:a5:05:b8:05:e8:c2:47:59:84:fb: d6:58:14:fd:7b:73:25:53:a5:b9:bc:34:a9:85:f3: e5:88:c9:e7:63:1c:e5:18:04:3e:8e:ba:96:3d:64: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EE:3D:36:CE:51:D6:10:C1:AC:24:93:63:F8:1F:8D:FC:71:34:D0 X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:02:16:46:3f:e0:d9:01:a7:6d:da:8e:81:f7:3a:7e:c3:ac: e1:7a:2b:66:fc:7e:d7:ca:f7:e1:3d:75:ec:ce:fb:8c:97:94: 00:c9:a4:b6:ee:86:f3:ea:7d:85:bd:54:c1:96:a2:a4:d2:53: 9c:17:84:cf:8d:96:97:f4:dc:9a:88:a0:1a:e0:32:07:d9:68: b1:d7:ae:59:47:f3:db:fd:a5:5f:bd:c2:70:f8:e4:00:ea:32: a3:1d:f1:fb:cc:0e:6e:41:27:21:f5:6d:df:89:20:00:47:57: a0:af:57:51:37:f5:3b:b6:78:b0:c3:f5:b1:e5:56:9f:0f:f0: a5:51:84:22:91:74:b1:23:03:dd:68:94:4a:a4:68:d0:32:94: b9:67:ed:98:ac:0b:9a:61:9f:15:a1:23:3b:1f:d4:d6:b3:dc: 97:9f:a1:9a:e9:3b:03:e5:e3:4c:56:28:a4:3c:87:d2:e5:d8: 62:01:9b:00:b1:6a:60:50:41:cd:e4:27:19:ab:4e:9c:7f:7b: af:be:dc:76:e1:c3:9e:8d:4a:c0:02:69:88:1d:1f:d5:60:0e: 5a:34:ee:91:b8:92:ad:64:2f:4f:01:83:b0:28:d9:2d:fa:79: 26:c9:61:9d:f1:b3:e1:a4:29:94:12:36:d6:48:52:23:13:04: a6:53:b1:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3 MDNFNDM2OTAeFw0yNTA5MDUwODQwNDZaFw0yNTA5MTIwODQwNDZaMBgxFjAUBgNV BAMTDTY4YmFhMjBmLTk4ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC41g6vxNxCqWj0dkY8A4br+P5LQQhrdbPMhobZKbmyB/mVauup64EQ92QZ8Xh1 6Lc40lnNp1FCUbxUeJqu3r4pB713RjMptmCrcfwOFLmjoZQ/ivBlrM7AzWuuFMYX Y3jDcUmNT972OuqksthzMFxtTsNlk+eia5KEfLCJ8Cf9t4PKwGwxAhQPV1g3DPca zlXcL6lbTvdofhEpZfI/gfgmKMiqsVSTYDry9azLj3nkA4kKgeGxTRhZgxTA9QVJ 29D9amxS9Uf9+Mb4wiiaSPaZ16JHSCjBpQW4BejCR1mE+9ZYFP17cyVTpbm8NKmF 8+WIyedjHOUYBD6OupY9ZPsPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXO49Ns5R 1hDBrCSTY/gfjfxxNNAwHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0VDLzI1NjM1N0M4ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1O UEsxcFJ3ejZPa25BLVEyay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKkCFkY/4NkBp23ajoH3On7DrOF6K2b8ftfK9+E9dezO+4yXlADJpLbu hvPqfYW9VMGWoqTSU5wXhM+Nlpf03JqIoBrgMgfZaLHXrllH89v9pV+9wnD45ADq MqMd8fvMDm5BJyH1bd+JIABHV6CvV1E39Tu2eLDD9bHlVp8P8KVRhCKRdLEjA91o lEqkaNAylLln7ZisC5phnxWhIzsf1Naz3JefoZrpOwPl40xWKKQ8h9Ll2GIBmwCx amBQQc3kJxmrTpx/e6++3Hbhw56NSsACaYgdH9VgDlo07pG4kq1kL08Bg7Ao2S36 eSbJYZ3xs+GkKZQSNtZIUiMTBKZTsYo= -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:37 2025 by rpki-client