$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft File: cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json) Hash identifier: LowFrEgw4TlTSoV4S3jYM3oUCTr/2t1ogKSLhbWq7yo= Subject key identifier: 76:D7:4F:26:5B:57:FF:FD:D7:02:13:E4:4D:BC:25:0F:6F:C7:5C:49 Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 Certificate issuer: /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Certificate serial: 165B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft Manifest number: 263A Signing time: Wed 20 Aug 2025 16:47:16 +0000 Manifest this update: Wed 20 Aug 2025 16:47:16 +0000 Manifest next update: Wed 27 Aug 2025 16:47:16 +0000 Files and hashes: 1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: 7A2B9GF/Y0HKMD96kVWnk/4cZZo3pHv0zGpAVVV7PB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5723 (0x165b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Validity Not Before: Aug 20 16:47:16 2025 GMT Not After : Aug 27 16:47:16 2025 GMT Subject: CN=68a5fc14-fce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:9c:0e:d2:f8:8c:5a:d1:82:5f:c3:9d:20: 38:f6:d6:6e:33:ef:ec:58:c1:41:28:42:b3:ad:a9: 53:4b:e0:43:b8:c8:79:a2:86:aa:e1:3a:59:0c:1f: 2c:4e:0d:b5:2d:3d:f4:6c:b3:1a:f3:32:0b:cb:62: 05:fc:fd:17:f4:0e:aa:46:29:ec:0e:4a:57:9d:75: a9:73:74:ad:3a:0b:e8:36:46:91:1c:6b:aa:39:ce: 43:c4:4c:96:e7:37:a3:9b:b0:b4:85:35:6d:6b:4b: 0e:00:f5:b2:d1:c7:fb:69:ac:5f:17:3a:3e:a0:7e: 37:34:74:b6:11:ed:57:07:79:af:e0:98:af:ed:0a: f7:cd:86:9a:47:35:0f:58:a0:fd:19:b7:80:3b:b9: 91:07:64:2b:83:5b:fe:ea:3f:af:71:0a:48:56:87: 7a:1f:26:43:fe:62:95:1a:b0:a5:47:8e:ae:08:40: 1f:e8:80:21:d5:25:82:87:1c:96:db:c2:30:13:e5: d1:6e:3b:38:dc:21:1d:ab:21:55:b4:78:7d:18:4d: 29:18:35:81:9e:3c:ca:97:cd:90:32:5d:51:e0:c0: 7c:22:86:4a:04:8e:b8:2e:30:86:bc:83:c9:57:54: 35:cb:a4:54:ee:a6:dc:61:b0:d2:9e:a8:e8:96:ad: 36:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D7:4F:26:5B:57:FF:FD:D7:02:13:E4:4D:BC:25:0F:6F:C7:5C:49 X509v3 Authority Key Identifier: keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c2:3e:05:54:61:c5:15:2b:eb:e9:2c:58:d8:c0:36:c4:e4: 2b:b0:0c:41:6b:2c:b7:e4:c5:6e:1a:5e:25:ea:98:55:c0:6e: 8b:fc:f3:47:68:08:d2:d2:68:18:07:6c:ab:95:3b:27:13:d0: af:b2:bc:11:3c:b2:bc:5c:c3:64:06:a4:33:7c:23:3c:8a:dd: 9f:1f:d0:2b:6c:8f:ca:fe:87:ca:85:1f:d3:a2:52:b1:ab:d0: 21:e6:4e:82:83:a5:cc:03:bd:5d:3c:54:47:94:a6:3d:14:f7: 0a:dc:1c:2a:77:4d:f0:76:0d:76:16:e6:10:db:c0:9a:92:31: 56:8c:b0:ea:2d:92:83:7c:1d:19:4c:f1:69:af:ef:e4:47:e3: c0:8d:eb:4b:f7:2f:96:fa:79:e4:a0:ba:e2:5d:5c:84:76:3b: 88:22:d1:0a:b8:4f:2c:81:ea:27:58:9e:52:ae:ee:1c:23:ba: 81:50:b1:ea:bb:38:03:41:8c:df:e5:b5:85:a2:6e:8d:f6:4d: f0:8e:57:c8:2f:8f:27:97:12:a0:0d:01:a9:b3:98:11:05:00: c8:76:d8:3e:c4:6f:ee:a5:ec:0e:c4:af:b7:59:d1:e9:ee:1c: fa:aa:5a:a0:7b:55:42:a3:7f:a4:60:75:0c:ed:fb:c0:5a:d6: c3:b5:d5:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIzMkFDOUFBM0U4 RDJBRUJGNDEwHhcNMjUwODIwMTY0NzE2WhcNMjUwODI3MTY0NzE2WjAYMRYwFAYD VQQDEw02OGE1ZmMxNC1mY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwecDtL4jFrRgl/DnSA49tZuM+/sWMFBKEKzralTS+BDuMh5ooaq4TpZDB8s Tg21LT30bLMa8zILy2IF/P0X9A6qRinsDkpXnXWpc3StOgvoNkaRHGuqOc5DxEyW 5zejm7C0hTVta0sOAPWy0cf7aaxfFzo+oH43NHS2Ee1XB3mv4Jiv7Qr3zYaaRzUP WKD9GbeAO7mRB2Qrg1v+6j+vcQpIVod6HyZD/mKVGrClR46uCEAf6IAh1SWChxyW 28IwE+XRbjs43CEdqyFVtHh9GE0pGDWBnjzKl82QMl1R4MB8IoZKBI64LjCGvIPJ V1Q1y6RU7qbcYbDSnqjolq02HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbXTyZb V//91wIT5E28JQ9vx1xJMB8GA1UdIwQYMBaAFHDNApYKcRTh/X/bMqyao+jSrr9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZPSDlmOXN5ckpxajZOS3V2 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMENsZ3B4Rk9IOWY5c3lySnFqNk5LdXYwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZP SDlmOXN5ckpxajZOS3V2MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6wj4FVGHFFSvr6SxY2MA2xOQrsAxBayy35MVuGl4l6phVwG6L/PNH aAjS0mgYB2yrlTsnE9CvsrwRPLK8XMNkBqQzfCM8it2fH9ArbI/K/ofKhR/TolKx q9Ah5k6Cg6XMA71dPFRHlKY9FPcK3Bwqd03wdg12FuYQ28CakjFWjLDqLZKDfB0Z TPFpr+/kR+PAjetL9y+W+nnkoLriXVyEdjuIItEKuE8sgeonWJ5Sru4cI7qBULHq uzgDQYzf5bWFom6N9k3wjlfIL48nlxKgDQGps5gRBQDIdtg+xG/upewOxK+3WdHp 7hz6qlqge1VCo3+kYHUM7fvAWtbDtdV4 -----END CERTIFICATE-----Generated at Fri Aug 22 16:32:13 2025 by rpki-client