$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft File: CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json) Hash identifier: DrH0kXaLWJO85rughbuzxX+f4b4PwMJwZgdEHWpQWAM= Subject key identifier: 91:1C:DB:47:9B:D2:A5:12:F0:1C:EB:83:B3:FF:43:C0:D0:4B:1C:92 Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 Certificate issuer: /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft Manifest number: B5 Signing time: Mon 03 Nov 2025 06:00:35 +0000 Manifest this update: Mon 03 Nov 2025 06:00:34 +0000 Manifest next update: Mon 10 Nov 2025 06:00:34 +0000 Files and hashes: 1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: jI/ZDtrxq4SUjUmjqT+r5QD/fz6qeyen0TQDud0o8j8=) 2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: ZgB4/zOUlrbnr+66F7inM4U41pNR0yS6V1N2ZkRjXXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164164, serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60 Validity Not Before: Nov 3 06:00:34 2025 GMT Not After : Nov 10 06:00:34 2025 GMT Subject: CN=69084502-5abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:23:c5:7f:7c:2e:39:51:7c:f7:a5:fb:d2: 83:00:a6:9d:a1:a2:20:23:0e:6d:ab:92:6f:a9:b7: a4:43:72:21:5d:69:af:85:2b:d0:3a:33:f3:1c:94: 31:73:2c:ae:bc:46:c9:9b:b3:29:a9:15:71:80:db: 49:29:e9:af:e5:31:a4:6f:6e:7e:57:4d:fd:65:ca: 10:b9:cd:11:a4:51:61:c4:6d:ca:fa:b4:39:d7:6e: 67:fa:6d:8c:cb:f2:c4:05:22:f1:4a:90:58:48:ee: 8b:63:cc:b1:da:1e:21:8d:7f:5b:ae:a8:9b:db:f4: 7e:8b:e9:6b:42:95:aa:5f:36:0b:24:70:3e:1c:87: 58:9e:36:28:6d:fa:3d:f2:81:29:46:e2:eb:2f:f7: 51:ad:10:bb:3a:b2:a9:0e:35:0a:9f:7d:36:10:fa: ca:93:de:04:55:25:8d:23:64:fd:23:a4:e4:b6:13: 2f:a5:25:5f:37:78:de:b8:27:e1:d3:b5:05:36:b9: 44:98:57:2f:49:49:08:db:a2:56:54:e4:04:ce:0a: 55:e5:28:1f:3e:de:85:93:9c:91:40:81:2d:48:e4: af:b9:c0:44:d1:0c:54:b9:f3:99:32:93:28:68:4e: 21:b5:13:6b:c0:c9:19:79:77:b9:a2:3c:91:71:10: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1C:DB:47:9B:D2:A5:12:F0:1C:EB:83:B3:FF:43:C0:D0:4B:1C:92 X509v3 Authority Key Identifier: keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:63:4c:f4:de:07:94:ae:dc:02:fd:26:a1:03:d1:55:7b:ed: 7f:ac:4f:54:79:da:f9:2c:f1:e8:e3:55:1c:ce:de:99:5b:6b: fd:b5:1f:39:cb:98:1f:c1:d9:bb:e8:11:80:83:03:84:89:5d: 68:d8:16:d0:bb:45:72:29:a6:8d:d7:26:98:42:38:5a:be:17: ae:08:50:bf:3a:a0:9e:5f:02:0a:1f:b7:1c:e0:25:5e:b5:c8: a6:cb:6c:f6:34:7d:38:e4:dc:63:d4:0f:3c:f3:12:b1:a9:96: bc:ce:85:47:4e:bc:3b:7d:96:47:63:39:98:d3:11:35:57:83: 91:99:8b:05:c0:bb:a0:a3:34:0b:d8:94:53:f1:c4:54:7d:3f: 06:a3:f9:7f:fa:3c:1f:a4:dc:a7:1f:a6:ea:55:da:c9:5f:00: 85:c4:51:b7:09:5b:04:08:ff:f4:65:78:59:4a:39:9e:e7:87: 2c:64:3a:5d:a2:71:4c:a2:8a:94:ae:4a:1f:53:c4:43:84:d6: 0e:9b:0f:c1:52:d2:08:97:e7:fa:27:d5:2b:3e:1d:f2:76:1d: 19:10:b7:53:0a:a7:b6:5f:09:04:1a:cb:c8:e1:b5:b3:b8:78: f6:02:df:ca:13:8e:8c:17:bd:76:ac:86:4b:ee:73:14:4c:7e: 40:02:f0:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQxNjQxMTAvBgNVBAUTKDA5NEM4QkM1REFEQ0NEOUMyRkIzQ0Y0NUQxNDY0REVF Q0YzQTFDNjAwHhcNMjUxMTAzMDYwMDM0WhcNMjUxMTEwMDYwMDM0WjAYMRYwFAYD VQQDEw02OTA4NDUwMi01YWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+sjxX98LjlRfPel+9KDAKadoaIgIw5tq5JvqbekQ3IhXWmvhSvQOjPzHJQx cyyuvEbJm7MpqRVxgNtJKemv5TGkb25+V039ZcoQuc0RpFFhxG3K+rQ5125n+m2M y/LEBSLxSpBYSO6LY8yx2h4hjX9brqib2/R+i+lrQpWqXzYLJHA+HIdYnjYobfo9 8oEpRuLrL/dRrRC7OrKpDjUKn302EPrKk94EVSWNI2T9I6TkthMvpSVfN3jeuCfh 07UFNrlEmFcvSUkI26JWVOQEzgpV5SgfPt6Fk5yRQIEtSOSvucBE0QxUufOZMpMo aE4htRNrwMkZeXe5ojyRcRCUewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEc20eb 0qUS8Bzrg7P/Q8DQSxySMB8GA1UdIwQYMBaAFAlMi8Xa3M2cL7PPRdFGTe7POhxg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDE2NC9BRTcyMjg5Q0Ex ODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9DVXlMeGRyY3pad3ZzODlGMFVaTjdzODZI R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVeUx4ZHJjelp3dnM4OUYwVVpON3M4NkhHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDE2NC9BRTcyMjg5Q0ExODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9DVXlMeGRyY3pa d3ZzODlGMFVaTjdzODZIR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcY0z03geUrtwC/SahA9FVe+1/rE9Uedr5LPHo41Uczt6ZW2v9tR85 y5gfwdm76BGAgwOEiV1o2BbQu0VyKaaN1yaYQjhavheuCFC/OqCeXwIKH7cc4CVe tcimy2z2NH045Nxj1A888xKxqZa8zoVHTrw7fZZHYzmY0xE1V4ORmYsFwLugozQL 2JRT8cRUfT8Go/l/+jwfpNynH6bqVdrJXwCFxFG3CVsECP/0ZXhZSjme54csZDpd onFMooqUrkofU8RDhNYOmw/BUtIIl+f6J9UrPh3ydh0ZELdTCqe2XwkEGsvI4bWz uHj2At/KE46MF712rIZL7nMUTH5AAvBK -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:39 2025 by rpki-client