$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: I1095TdmRhesb81gWGYZX3iSoipuqaR4WVKHg8WVccU= Subject key identifier: 08:A2:4A:90:3C:50:2C:4A:F0:B2:15:D5:10:D4:98:6A:9E:90:81:28 Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 099E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 0979 Signing time: Tue 04 Nov 2025 20:17:55 +0000 Manifest this update: Tue 04 Nov 2025 20:17:54 +0000 Manifest next update: Tue 11 Nov 2025 20:17:54 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: pDXRun909usvNwNPEGHyMFQt0MVhafHicRXHid2dIYM=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: lb657OxiZdu7OS/rkuzqIPL5kfvM5EeZVQrmP0Hrb44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2462 (0x99e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: Nov 4 20:17:54 2025 GMT Not After : Nov 11 20:17:54 2025 GMT Subject: CN=690a5f72-814b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:48:70:19:04:01:9f:b6:6d:8c:c9:b9:87: 8c:84:70:db:af:ae:1d:a0:19:7b:d8:f4:38:1c:5c: 41:75:ea:ce:64:c6:ea:7f:dc:4b:ab:b6:7e:46:78: ff:22:97:e1:5f:1c:e4:9a:77:65:5b:b4:ef:50:51: cf:0d:f8:66:ba:ae:63:e7:c2:00:3d:a9:ee:ee:49: 13:b1:ca:49:49:2e:0f:44:e8:ef:97:1c:70:0e:5b: b4:c5:d7:30:34:58:e3:7d:2f:aa:f5:40:0d:b5:32: c0:19:f6:22:66:22:29:a1:a1:e4:95:82:87:6d:30: 1e:dd:49:8a:21:4d:c8:4a:4e:ce:e9:d1:63:77:cb: 1e:d1:08:8b:b9:a5:bc:95:ac:32:7d:86:59:4f:a6: 48:d4:1c:4c:6e:ed:6d:b3:40:7f:3a:1f:f6:25:21: 18:1f:b9:f8:07:79:90:1f:e3:59:3c:c8:ce:b2:98: a5:93:ca:da:fa:43:67:b1:35:7e:aa:43:fa:a1:8d: f3:94:4b:51:04:1d:8f:1f:a4:7f:f1:34:b1:64:00: b5:1f:9f:64:04:1d:b4:b1:22:3d:b7:a5:01:90:7c: 83:0d:c3:d3:7c:ef:70:62:b8:cc:55:ba:0b:a8:ab: 84:1c:1b:1c:f5:17:52:38:17:12:c8:f1:91:22:48: 45:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A2:4A:90:3C:50:2C:4A:F0:B2:15:D5:10:D4:98:6A:9E:90:81:28 X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:d8:88:b4:91:d5:b8:26:b0:bc:ad:a3:05:e9:03:a4:a0:c4: 21:4f:3f:27:dc:ee:ef:7c:fa:6a:03:3b:39:2f:2e:05:b2:69: 4c:1d:24:64:80:18:02:8f:7e:91:e2:cc:72:7b:7c:cd:6a:aa: c7:0b:51:ac:fa:62:16:38:db:f9:fc:8d:2a:b2:81:d5:19:5b: fa:d3:08:23:20:53:ba:49:f0:59:df:3c:92:29:e2:77:76:4e: a6:a5:e0:43:01:b3:1a:58:c0:5a:ea:30:df:00:06:db:f0:1e: 2c:9e:44:0e:c8:4f:19:95:6e:43:60:63:ce:ec:1d:0f:85:e5: a7:f1:c7:ce:d2:29:fe:c5:1d:b7:08:8e:b7:5d:74:5e:a5:b7: 91:da:3f:52:ee:e8:db:a8:47:b5:29:46:5b:49:f4:92:58:b2: b1:44:d1:bb:34:86:bf:b8:04:1b:42:1d:96:39:39:c7:bf:7c: 1a:46:10:a5:ad:cd:a7:6c:b4:14:75:c0:ce:64:60:b7:52:1a: e9:aa:cd:c9:1d:fe:22:8d:29:86:83:5e:41:d1:16:ec:53:75: cc:ac:d3:1e:40:33:38:2c:70:7c:bd:f9:d7:8c:3a:fe:a2:0f: 6d:5e:c6:32:3a:8a:f5:ed:1c:b6:5f:fd:84:67:ba:c1:7e:d2: 12:94:6e:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjUxMTA0MjAxNzU0WhcNMjUxMTExMjAxNzU0WjAYMRYwFAYD VQQDEw02OTBhNWY3Mi04MTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyw1IcBkEAZ+2bYzJuYeMhHDbr64doBl72PQ4HFxBderOZMbqf9xLq7Z+Rnj/ IpfhXxzkmndlW7TvUFHPDfhmuq5j58IAPanu7kkTscpJSS4PROjvlxxwDlu0xdcw NFjjfS+q9UANtTLAGfYiZiIpoaHklYKHbTAe3UmKIU3ISk7O6dFjd8se0QiLuaW8 lawyfYZZT6ZI1BxMbu1ts0B/Oh/2JSEYH7n4B3mQH+NZPMjOspilk8ra+kNnsTV+ qkP6oY3zlEtRBB2PH6R/8TSxZAC1H59kBB20sSI9t6UBkHyDDcPTfO9wYrjMVboL qKuEHBsc9RdSOBcSyPGRIkhFawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiiSpA8 UCxK8LIV1RDUmGqekIEoMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC92Ii0kdW4JrC8raMF6QOkoMQhTz8n3O7vfPpqAzs5Ly4FsmlMHSRk gBgCj36R4sxye3zNaqrHC1Gs+mIWONv5/I0qsoHVGVv60wgjIFO6SfBZ3zySKeJ3 dk6mpeBDAbMaWMBa6jDfAAbb8B4snkQOyE8ZlW5DYGPO7B0PheWn8cfO0in+xR23 CI63XXRepbeR2j9S7ujbqEe1KUZbSfSSWLKxRNG7NIa/uAQbQh2WOTnHv3waRhCl rc2nbLQUdcDOZGC3Uhrpqs3JHf4ijSmGg15B0RbsU3XMrNMeQDM4LHB8vfnXjDr+ og9tXsYyOor17Ry2X/2EZ7rBftISlG6b -----END CERTIFICATE-----Generated at Wed Nov 5 19:19:48 2025 by rpki-client