$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft File: CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json) Hash identifier: 2WF5lF/jr3O9oNlSBNLFLQYqIXDpqwnYcFjR90Y0P/4= Subject key identifier: FA:BE:F1:36:DA:B2:6B:99:74:C2:77:24:31:13:B0:67:02:A2:2C:3F Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 Certificate issuer: /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft Manifest number: 9F Signing time: Fri 19 Sep 2025 06:56:39 +0000 Manifest this update: Fri 19 Sep 2025 06:56:38 +0000 Manifest next update: Fri 26 Sep 2025 06:56:38 +0000 Files and hashes: 1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: mw8bLPiQw3SGeOjOyXoiu9NeyaPl4BlhhGdg3zno9S0=) 2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: ZgB4/zOUlrbnr+66F7inM4U41pNR0yS6V1N2ZkRjXXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 06:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164164, serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Validity Not Before: Sep 19 06:56:38 2025 GMT Not After : Sep 26 06:56:38 2025 GMT Subject: CN=68ccfea7-e60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5f:7f:8d:23:c3:95:1c:19:a9:74:64:f7:60: eb:10:51:0f:61:22:16:1c:a1:72:8e:46:70:9b:4f: 31:53:96:e8:ed:38:07:08:4a:a2:20:dd:ce:42:06: 81:e1:00:ed:7d:9e:e9:98:5e:06:51:59:a3:cd:ac: df:c4:2f:a9:41:39:aa:e4:c8:05:65:70:3f:83:36: 28:fa:a9:ce:14:7e:b6:84:ec:ff:c3:54:7e:ae:8f: b1:84:5a:44:09:cd:4a:b2:17:0f:db:35:a1:c9:8d: 1d:83:94:78:e6:f9:fc:b7:0b:98:02:47:82:a1:31: fe:61:03:49:f3:a3:15:75:60:d4:6f:31:ae:ed:e5: ea:08:d3:98:63:5d:ac:eb:40:bb:57:fe:e2:7e:9e: cf:91:b0:f6:20:4a:cd:a9:8f:2f:28:97:62:c4:c5: dc:78:3d:35:ae:17:b9:40:0f:fc:df:1e:f8:9f:b5: f4:69:10:8d:fb:2d:79:b8:31:70:d8:b5:1b:56:32: b1:c9:42:61:0b:a8:85:45:fe:47:c1:36:8a:62:4b: 49:06:28:2a:71:3d:3f:19:fb:e0:d4:f9:49:51:90: 58:2e:21:eb:a2:ee:24:2f:87:2d:95:17:d5:89:f1: 94:5a:09:d7:1c:4e:a7:00:65:ea:42:64:70:7f:66: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BE:F1:36:DA:B2:6B:99:74:C2:77:24:31:13:B0:67:02:A2:2C:3F X509v3 Authority Key Identifier: keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8d:91:2c:3f:f9:19:fa:50:1b:92:dd:31:26:52:aa:4e:e4: df:3b:08:93:b0:c5:db:3a:31:54:c2:94:b2:30:31:b2:b0:8a: f6:f4:06:8a:d6:bf:ce:1d:21:b2:b8:59:7e:0c:9c:40:bc:30: b7:63:bc:99:70:b9:34:26:c4:f6:19:bb:d8:81:08:6b:0a:0f: 4d:e9:7e:89:9d:4f:aa:fe:e7:d6:de:73:c3:0b:25:90:b9:18: 5e:3e:de:00:ff:53:2d:f6:6e:05:53:53:39:01:10:a0:61:e8: 8d:7e:93:67:fb:0c:ef:a5:9c:83:06:e7:63:f4:b9:27:26:4c: bd:49:16:af:9f:d2:d0:aa:44:e8:31:27:f5:f0:62:e3:f7:c5: f4:10:e5:94:d7:64:9b:14:5f:c8:48:21:8b:ac:20:bf:40:a9: fe:25:21:a3:5b:9f:ed:4d:5e:74:d6:0e:a8:ca:66:11:d7:fb: 45:0b:46:e9:14:10:9b:c2:b2:57:a5:73:83:67:6f:d9:47:4c: d8:dd:65:5f:b2:79:a3:0f:83:64:70:9a:c7:99:38:2b:8c:a4: 4d:f6:3e:1b:c6:56:62:54:a9:68:6e:48:9e:39:2b:51:8c:02: 77:98:e5:62:66:36:ae:48:4a:1d:05:73:83:a7:99:3f:31:1c: 47:57:b0:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQxNjQxMTAvBgNVBAUTKDA5NEM4QkM1REFEQ0NEOUMyRkIzQ0Y0NUQxNDY0REVF Q0YzQTFDNjAwHhcNMjUwOTE5MDY1NjM4WhcNMjUwOTI2MDY1NjM4WjAYMRYwFAYD VQQDEw02OGNjZmVhNy1lNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6l9/jSPDlRwZqXRk92DrEFEPYSIWHKFyjkZwm08xU5bo7TgHCEqiIN3OQgaB 4QDtfZ7pmF4GUVmjzazfxC+pQTmq5MgFZXA/gzYo+qnOFH62hOz/w1R+ro+xhFpE Cc1KshcP2zWhyY0dg5R45vn8twuYAkeCoTH+YQNJ86MVdWDUbzGu7eXqCNOYY12s 60C7V/7ifp7PkbD2IErNqY8vKJdixMXceD01rhe5QA/83x74n7X0aRCN+y15uDFw 2LUbVjKxyUJhC6iFRf5HwTaKYktJBigqcT0/Gfvg1PlJUZBYLiHrou4kL4ctlRfV ifGUWgnXHE6nAGXqQmRwf2bRbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPq+8Tba smuZdMJ3JDETsGcCoiw/MB8GA1UdIwQYMBaAFAlMi8Xa3M2cL7PPRdFGTe7POhxg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDE2NC9BRTcyMjg5Q0Ex ODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9DVXlMeGRyY3pad3ZzODlGMFVaTjdzODZI R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVeUx4ZHJjelp3dnM4OUYwVVpON3M4NkhHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDE2NC9BRTcyMjg5Q0ExODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9DVXlMeGRyY3pa d3ZzODlGMFVaTjdzODZIR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtjZEsP/kZ+lAbkt0xJlKqTuTfOwiTsMXbOjFUwpSyMDGysIr29AaK 1r/OHSGyuFl+DJxAvDC3Y7yZcLk0JsT2GbvYgQhrCg9N6X6JnU+q/ufW3nPDCyWQ uRhePt4A/1Mt9m4FU1M5ARCgYeiNfpNn+wzvpZyDBudj9LknJky9SRavn9LQqkTo MSf18GLj98X0EOWU12SbFF/ISCGLrCC/QKn+JSGjW5/tTV501g6oymYR1/tFC0bp FBCbwrJXpXODZ2/ZR0zY3WVfsnmjD4NkcJrHmTgrjKRN9j4bxlZiVKlobkieOStR jAJ3mOViZjauSEodBXODp5k/MRxHV7BJ -----END CERTIFICATE-----Generated at Fri Sep 19 10:41:32 2025 by rpki-client