$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: RB2PzQu9BUDPqlD+28GU8TRZPA0KWrP9yG48eUgPfKw= Subject key identifier: A8:FD:EB:61:3A:0C:9E:54:E0:34:3E:96:0E:83:55:9D:8A:4C:17:71 Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 1678 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 166F Signing time: Fri 31 Oct 2025 16:49:51 +0000 Manifest this update: Fri 31 Oct 2025 16:49:50 +0000 Manifest next update: Fri 07 Nov 2025 16:49:50 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: Dw8htpzJ/qknWmgCFyvdetuDsr4N6DYorOfkr9J1swg=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: mykXr6ve/cwvr+LfcirysCKrHVhRt9J9fVkHn/0QFbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 16:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5752 (0x1678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Oct 31 16:49:50 2025 GMT Not After : Nov 7 16:49:50 2025 GMT Subject: CN=6904e8ae-8c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:09:76:29:b6:fa:c6:6d:0b:59:bc:75:5b: c0:78:6d:a6:be:37:3b:f9:a4:d4:f1:3d:68:40:13: f1:5e:fc:28:83:84:84:d1:a5:14:d4:ac:4a:be:6b: 11:8b:18:ba:1c:0f:05:ac:95:cf:59:14:ad:27:95: 10:53:29:fa:1f:6f:d0:c3:c2:26:a0:bd:60:c6:5c: 4a:af:14:ca:5e:39:6b:4b:38:96:fa:32:18:34:9f: 36:c3:f4:8d:d4:3a:86:48:ec:61:00:38:5d:ab:6e: 50:d0:ca:b9:7c:14:33:77:04:6f:16:f8:bb:0f:4d: 5c:10:cc:d8:13:9b:d1:72:bd:eb:76:c4:2c:50:40: 98:41:7a:a4:01:0d:3b:88:33:75:a7:7d:36:c5:89: 1c:c1:87:60:be:36:96:a7:e2:56:53:84:aa:75:5e: 76:c4:7c:b8:b8:45:83:fb:6a:f8:af:66:97:fe:39: be:56:4e:d8:bb:09:03:53:2d:6a:9c:37:3a:5e:24: 6b:b0:4f:8c:d9:fd:53:4a:4f:2d:c3:4f:3c:89:95: cc:14:6a:f4:60:ec:3e:fe:6f:82:03:1b:33:ea:85: 9d:5c:51:34:c0:40:0e:cc:3f:bb:cb:4b:bb:7a:9a: df:9d:28:ee:04:29:81:d5:d4:8e:ec:02:92:ac:7f: a2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FD:EB:61:3A:0C:9E:54:E0:34:3E:96:0E:83:55:9D:8A:4C:17:71 X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:7c:1f:c3:3a:a0:eb:39:3a:5d:d5:71:44:76:72:e1:e5:3d: 13:d4:c4:86:7b:45:84:62:63:07:6c:1f:34:ce:fc:c0:04:d2: 76:c3:6d:b4:4b:74:6d:79:60:50:52:76:ff:d1:5c:b1:bd:42: 24:b3:84:41:84:65:29:c5:be:91:b3:5f:e0:5f:a3:0f:8f:59: 86:a4:88:b9:ed:01:3a:84:ae:e9:56:4a:bd:e0:99:e4:21:1d: 5c:f8:21:69:f0:4f:fb:6d:94:91:a4:c5:e1:bb:35:55:44:de: eb:60:10:16:27:a3:b5:13:20:f7:44:79:68:89:d8:67:b5:ba: a4:53:b3:0e:f6:fc:5a:9d:04:1a:1d:e1:26:b3:b0:d3:53:c9: 6b:84:a9:ae:d8:d8:a2:69:d2:0e:39:c6:d2:16:52:8b:7f:f1: 5a:21:11:30:ee:f9:f2:f7:a9:63:c2:b9:69:43:be:76:00:c4: 8c:eb:1f:fb:fe:f8:d5:07:fe:12:38:94:16:c9:18:7f:db:1f: 13:5e:fb:65:39:d6:12:61:e7:a3:d2:5b:25:64:14:97:06:ab: 71:d0:07:d1:73:96:86:0f:24:66:87:ae:55:19:64:b6:9b:0a: f7:75:d0:7d:87:b5:e8:ed:6a:c9:2d:9a:38:77:43:1a:da:33: ad:17:0e:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUxMDMxMTY0OTUwWhcNMjUxMTA3MTY0OTUwWjAYMRYwFAYD VQQDEw02OTA0ZThhZS04YzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDwJdim2+sZtC1m8dVvAeG2mvjc7+aTU8T1oQBPxXvwog4SE0aUU1KxKvmsR ixi6HA8FrJXPWRStJ5UQUyn6H2/Qw8ImoL1gxlxKrxTKXjlrSziW+jIYNJ82w/SN 1DqGSOxhADhdq25Q0Mq5fBQzdwRvFvi7D01cEMzYE5vRcr3rdsQsUECYQXqkAQ07 iDN1p302xYkcwYdgvjaWp+JWU4SqdV52xHy4uEWD+2r4r2aX/jm+Vk7YuwkDUy1q nDc6XiRrsE+M2f1TSk8tw088iZXMFGr0YOw+/m+CAxsz6oWdXFE0wEAOzD+7y0u7 eprfnSjuBCmB1dSO7AKSrH+iBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj962E6 DJ5U4DQ+lg6DVZ2KTBdxMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpfB/DOqDrOTpd1XFEdnLh5T0T1MSGe0WEYmMHbB80zvzABNJ2w220 S3RteWBQUnb/0VyxvUIks4RBhGUpxb6Rs1/gX6MPj1mGpIi57QE6hK7pVkq94Jnk IR1c+CFp8E/7bZSRpMXhuzVVRN7rYBAWJ6O1EyD3RHloidhntbqkU7MO9vxanQQa HeEms7DTU8lrhKmu2NiiadIOOcbSFlKLf/FaIREw7vny96ljwrlpQ752AMSM6x/7 /vjVB/4SOJQWyRh/2x8TXvtlOdYSYeej0lslZBSXBqtx0AfRc5aGDyRmh65VGWS2 mwr3ddB9h7Xo7WrJLZo4d0Ma2jOtFw6R -----END CERTIFICATE-----Generated at Sun Nov 2 00:45:11 2025 by rpki-client