$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: NfINFWP0l6PskUZ73WgHgkqstv2/8jQVUPj353jp2EM= Subject key identifier: 42:34:ED:A5:F3:45:DF:6D:90:E6:CF:2E:8F:32:A9:A1:7C:38:2D:67 Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 0983 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 095F Signing time: Thu 18 Sep 2025 20:30:47 +0000 Manifest this update: Thu 18 Sep 2025 20:30:46 +0000 Manifest next update: Thu 25 Sep 2025 20:30:46 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: VtycTjIKENa8KKOMOK5ty5Eiyy6xCk0BcTM/oPvrRtw=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: +5v/UPyW3dQ/0rVuztf81a9oZSnTgo/JoecluNMVK0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2435 (0x983) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: Sep 18 20:30:46 2025 GMT Not After : Sep 25 20:30:46 2025 GMT Subject: CN=68cc6bf6-1084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:82:49:82:b0:ea:30:07:fd:8d:46:e6:9f: b0:ae:af:5e:85:04:03:e8:2d:27:cb:40:33:ae:d8: 89:f6:9f:d9:49:f7:ce:95:07:5a:3e:b8:e1:4a:7a: 1a:d3:07:2d:c1:7d:ef:ff:a4:7b:0b:7e:86:f4:aa: 40:e6:15:4c:bd:7d:e2:6a:5b:96:b9:19:8e:11:b0: b1:7e:65:52:35:50:cf:9c:23:1a:91:f5:2b:cc:da: 08:ec:b2:cd:23:65:b3:ee:eb:33:00:8e:4b:26:77: 16:26:76:10:68:23:d4:d1:fa:53:29:da:0f:30:74: 10:f6:1d:c3:27:b8:f6:27:6e:96:de:85:5a:52:d4: af:ae:6e:68:eb:3a:a1:9e:e4:30:2e:64:4c:a4:35: 1b:f2:e9:58:2c:5c:62:ca:27:4d:cd:21:0f:dd:a8: 38:d3:dc:6d:85:28:bb:86:be:17:37:58:0d:a0:ec: 1c:4a:ea:29:fc:91:4f:a3:c2:56:6f:13:fc:19:ea: ed:8d:8e:00:15:f1:10:27:dc:31:a1:22:19:77:91: a7:a1:db:e6:a6:f2:55:87:e9:6a:bf:d8:f9:ef:e9: 9c:f5:98:a9:4c:90:e2:72:0a:83:c0:ab:15:f5:31: b8:8c:e0:ea:99:a6:06:ed:90:74:ce:7f:0d:75:d7: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:34:ED:A5:F3:45:DF:6D:90:E6:CF:2E:8F:32:A9:A1:7C:38:2D:67 X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:42:bb:63:a1:0a:b2:0a:d4:4a:b0:ee:a9:01:0b:f1:dd:5d: ef:2b:cb:57:b4:ed:f5:5c:e2:77:a4:8f:47:2e:1c:19:d5:49: 97:03:b7:24:22:aa:8b:d4:92:6b:e8:a6:9f:bc:c9:96:20:54: 2f:fd:1c:a6:fd:97:8f:ae:2b:35:f9:f0:6e:b3:e0:31:4d:48: e8:84:12:7e:82:9c:49:ce:b9:ae:c8:e5:02:9d:ff:e5:58:b6: c2:f7:1a:59:d7:21:1c:f9:7b:86:b6:07:50:31:5d:ca:0f:83: 14:44:81:af:6b:c2:78:88:85:b4:2b:50:05:53:f0:e5:97:b7: 9f:37:57:21:5c:fa:32:18:91:cf:3d:0f:4c:4b:a9:86:b0:5f: 3d:17:da:e9:a8:ff:ca:0c:2c:01:96:0e:43:40:5e:e3:80:cd: f5:67:d1:e8:d5:df:92:01:50:fb:0e:0c:0b:6b:f6:79:79:68: 29:8d:d4:58:8f:6f:61:79:25:15:32:68:99:9d:6f:4f:b9:ba: 27:46:cd:b3:2e:07:2f:ea:80:15:a7:40:c7:29:b1:9e:b5:e6: 4f:e0:ce:18:93:46:f2:9d:a9:c4:b7:63:32:79:e1:1f:ca:95: 35:56:dc:e8:74:e4:9e:fd:37:a2:7a:37:74:e4:aa:54:05:53: f4:05:dc:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjUwOTE4MjAzMDQ2WhcNMjUwOTI1MjAzMDQ2WjAYMRYwFAYD VQQDEw02OGNjNmJmNi0xMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsuCSYKw6jAH/Y1G5p+wrq9ehQQD6C0ny0AzrtiJ9p/ZSffOlQdaPrjhSnoa 0wctwX3v/6R7C36G9KpA5hVMvX3ialuWuRmOEbCxfmVSNVDPnCMakfUrzNoI7LLN I2Wz7uszAI5LJncWJnYQaCPU0fpTKdoPMHQQ9h3DJ7j2J26W3oVaUtSvrm5o6zqh nuQwLmRMpDUb8ulYLFxiyidNzSEP3ag409xthSi7hr4XN1gNoOwcSuop/JFPo8JW bxP8GertjY4AFfEQJ9wxoSIZd5GnodvmpvJVh+lqv9j57+mc9ZipTJDicgqDwKsV 9TG4jODqmaYG7ZB0zn8Ndde6oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI07aXz Rd9tkObPLo8yqaF8OC1nMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgQrtjoQqyCtRKsO6pAQvx3V3vK8tXtO31XOJ3pI9HLhwZ1UmXA7ck IqqL1JJr6KafvMmWIFQv/Rym/ZePris1+fBus+AxTUjohBJ+gpxJzrmuyOUCnf/l WLbC9xpZ1yEc+XuGtgdQMV3KD4MURIGva8J4iIW0K1AFU/Dll7efN1chXPoyGJHP PQ9MS6mGsF89F9rpqP/KDCwBlg5DQF7jgM31Z9Ho1d+SAVD7DgwLa/Z5eWgpjdRY j29heSUVMmiZnW9PubonRs2zLgcv6oAVp0DHKbGeteZP4M4Yk0bynanEt2MyeeEf ypU1VtzodOSe/Teiejd05KpUBVP0BdwR -----END CERTIFICATE-----Generated at Fri Sep 19 00:54:40 2025 by rpki-client