$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: 6IgfxHbUh6TFnJYLOMK76Yo/oa/adcSxW7qPj6Z7RMw= Subject key identifier: 42:1D:8E:39:21:3E:E6:51:D3:E2:00:50:D5:31:E2:D6:76:5E:B9:70 Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 1278 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1A9C Signing time: Thu 18 Sep 2025 17:15:22 +0000 Manifest this update: Thu 18 Sep 2025 17:15:21 +0000 Manifest next update: Thu 25 Sep 2025 17:15:21 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: dhAED6ZrYQhDhoZIv9GKIF+RKEKInYIwiP5oe0bcjNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4728 (0x1278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: Sep 18 17:15:21 2025 GMT Not After : Sep 25 17:15:21 2025 GMT Subject: CN=68cc3e2a-a4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:10:5c:39:d7:70:40:eb:ce:2b:af:47:23: b5:65:ef:c9:1c:9c:4e:37:19:42:26:cb:73:99:a7: d5:e1:f6:a7:2a:6b:51:ed:e5:fd:c6:81:05:e5:3f: 74:cf:7f:bc:17:8d:b4:de:9b:1c:71:fd:73:8a:24: b7:0e:a5:4e:21:7f:56:a7:78:76:a7:ea:66:ce:ef: 60:66:fb:20:de:53:fc:69:75:be:3f:6c:aa:bb:14: 48:3a:f3:84:30:9d:d2:ac:4a:ce:92:12:e0:37:83: 5d:c8:6c:7d:a0:ae:33:78:7e:8f:80:c7:f6:2f:b4: 65:60:b2:13:8c:17:4e:29:cb:d2:d0:84:2f:d7:fa: fa:04:dd:db:1e:80:64:cf:67:5f:d2:08:4c:0b:f1: 6c:cf:16:5f:cc:99:ae:f5:aa:7f:ae:81:8a:e9:0c: 44:bf:47:ca:66:a3:8f:77:31:94:80:45:5e:43:dc: f0:79:3b:a8:9c:15:11:46:bd:23:6b:df:e9:9d:dc: 0d:a0:38:5c:94:81:f3:dc:0e:59:fa:09:4f:64:9e: 42:13:2c:81:40:fd:f6:3b:c6:8d:ab:e8:72:77:78: a4:cc:d7:67:50:bd:ff:04:2e:e5:15:26:a9:89:a5: 75:55:a8:f6:9e:f3:f8:6b:af:a6:ad:13:21:37:7e: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1D:8E:39:21:3E:E6:51:D3:E2:00:50:D5:31:E2:D6:76:5E:B9:70 X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:15:15:a8:30:61:3c:0c:60:1c:39:9d:98:f6:5a:85:d5:30: 70:9a:61:1b:51:89:be:b7:a6:56:a9:60:6e:00:b7:0f:d9:bd: 13:c8:b8:d4:76:a2:43:70:50:1a:d1:27:73:cc:98:ce:d4:d9: 8e:a7:7e:f6:a4:dc:b2:3f:0c:7a:ea:6f:a2:23:76:46:40:6d: c0:8e:64:b5:b6:61:fd:18:81:bf:cb:39:0b:d8:40:c4:1d:f0: c8:b1:3c:df:98:f5:b6:16:c9:c9:19:2c:cb:69:1a:a0:5c:4b: ce:ef:27:f4:18:28:13:80:5f:ec:b1:d4:37:09:da:c4:5e:11: 38:04:7a:55:7d:e4:70:39:6a:e7:82:cf:40:e1:0c:b8:8e:25: 6e:af:90:c7:3c:70:99:d8:c7:a7:d2:be:b4:6a:85:89:6c:68: 65:28:26:f4:55:37:81:3b:ce:5f:bf:1e:f0:6b:95:0d:3a:23: 2c:9f:92:d5:aa:94:bc:0e:77:b6:26:6b:91:44:b6:10:af:d7: d5:20:0f:5a:d9:90:b5:f6:9e:bc:24:9d:3b:fb:ad:a2:c9:c4: e1:27:63:e2:c6:17:84:d7:c5:98:61:e2:12:b1:5b:d0:86:35: d7:4b:9c:50:40:d4:d2:83:4b:57:39:90:66:31:6d:21:b4:e2: 07:2e:6e:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjUwOTE4MTcxNTIxWhcNMjUwOTI1MTcxNTIxWjAYMRYwFAYD VQQDEw02OGNjM2UyYS1hNGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYEQXDnXcEDrziuvRyO1Ze/JHJxONxlCJstzmafV4fanKmtR7eX9xoEF5T90 z3+8F4203psccf1ziiS3DqVOIX9Wp3h2p+pmzu9gZvsg3lP8aXW+P2yquxRIOvOE MJ3SrErOkhLgN4NdyGx9oK4zeH6PgMf2L7RlYLITjBdOKcvS0IQv1/r6BN3bHoBk z2df0ghMC/FszxZfzJmu9ap/roGK6QxEv0fKZqOPdzGUgEVeQ9zweTuonBURRr0j a9/pndwNoDhclIHz3A5Z+glPZJ5CEyyBQP32O8aNq+hyd3ikzNdnUL3/BC7lFSap iaV1Vaj2nvP4a6+mrRMhN34f6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIdjjkh PuZR0+IAUNUx4tZ2XrlwMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0FRWoMGE8DGAcOZ2Y9lqF1TBwmmEbUYm+t6ZWqWBuALcP2b0TyLjU dqJDcFAa0SdzzJjO1NmOp372pNyyPwx66m+iI3ZGQG3AjmS1tmH9GIG/yzkL2EDE HfDIsTzfmPW2FsnJGSzLaRqgXEvO7yf0GCgTgF/ssdQ3CdrEXhE4BHpVfeRwOWrn gs9A4Qy4jiVur5DHPHCZ2Men0r60aoWJbGhlKCb0VTeBO85fvx7wa5UNOiMsn5LV qpS8Dne2JmuRRLYQr9fVIA9a2ZC19p68JJ07+62iycThJ2PixheE18WYYeISsVvQ hjXXS5xQQNTSg0tXOZBmMW0htOIHLm6U -----END CERTIFICATE-----Generated at Thu Sep 18 22:15:55 2025 by rpki-client