$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json) Hash identifier: +66YXb8b+6mN1s8Man6jOEkUwpPl8UXx25MNknnRR9c= Subject key identifier: 61:2C:E3:04:79:CD:D5:FD:CF:A8:BA:60:E2:56:6E:A6:AC:E6:48:77 Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Certificate serial: 0BD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft Manifest number: 0BD1 Signing time: Wed 20 Aug 2025 18:58:27 +0000 Manifest this update: Wed 20 Aug 2025 18:58:26 +0000 Manifest next update: Wed 27 Aug 2025 18:58:26 +0000 Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: tGPZUBpr/+wKkJcqxQN1mInkgkM0CIRE0bGmNkymy7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3030 (0xbd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Validity Not Before: Aug 20 18:58:26 2025 GMT Not After : Aug 27 18:58:26 2025 GMT Subject: CN=68a61ad2-1460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:d2:03:e9:ab:62:db:80:1e:aa:94:76:c7: 68:9d:77:de:ee:ab:05:b6:7e:10:58:f6:d3:8b:7b: ae:b3:b3:ac:8a:06:fb:ca:56:66:93:c3:bd:26:ca: 75:a2:80:88:2d:8f:a8:be:08:b0:61:fb:63:15:a4: 8d:ff:a8:c9:bd:2d:1b:62:ef:e3:b2:51:3b:17:04: 54:35:d4:de:4d:7f:cc:20:65:f0:5f:f1:d1:29:24: ce:39:21:2b:28:87:ef:2a:e3:0c:b6:0e:f2:6b:a5: 44:d5:be:1f:61:13:1e:1d:95:c0:3e:15:fe:07:a3: 80:1b:ac:c7:04:e2:bb:80:10:14:06:74:c3:dd:9f: 6c:6e:79:fb:04:1e:ee:75:68:de:19:6d:ae:57:5f: 9f:3c:74:89:fb:db:3e:88:55:3e:a4:83:bb:af:c9: 83:42:11:af:c3:94:ce:90:d9:fd:14:8d:78:52:20: f6:20:9f:c4:28:f5:3c:fc:59:95:cc:f0:cc:35:ef: 8f:28:8f:5b:a0:0a:23:c3:fa:93:a4:5f:be:b2:1c: 99:35:ac:b2:c4:98:f6:30:1b:be:ef:61:ca:68:76: 33:d6:9f:d8:00:1d:01:4c:3d:c3:12:46:fa:50:41: 16:9b:23:b8:3f:4e:0b:83:d9:9c:cd:eb:5d:3f:e0: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2C:E3:04:79:CD:D5:FD:CF:A8:BA:60:E2:56:6E:A6:AC:E6:48:77 X509v3 Authority Key Identifier: keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:0f:c0:c8:e7:e0:9a:fd:a4:1f:5b:f5:90:0c:9b:48:89:5c: 0b:ef:b6:c7:c2:69:05:38:8e:de:91:4e:96:25:27:0b:ab:5d: e2:e5:eb:3c:3b:bd:54:88:3e:84:77:2e:cb:32:58:ad:58:3f: df:23:cd:8f:29:06:9f:47:f1:52:89:29:74:a2:1e:98:55:b5: 4a:60:db:55:90:34:9a:13:f8:3f:b1:bc:23:db:0b:ed:15:8d: 3c:11:64:8e:b2:57:c6:fb:73:81:52:12:5a:05:2e:94:b6:a5: 0e:d9:87:3a:3f:33:66:eb:ac:94:10:da:21:b7:f6:42:dd:94: 42:6f:66:eb:71:25:86:f2:7c:f4:cd:6b:20:ef:c4:c8:60:76: ff:19:4a:f2:60:31:a4:d9:47:aa:2f:1a:51:ff:43:54:52:38: 98:40:2a:f8:1b:ad:e2:1f:23:21:ba:2f:ab:2c:81:74:3b:50: db:22:31:43:5a:d9:48:51:aa:5a:38:0e:17:a3:ae:97:ab:ed: e3:f5:52:69:8c:ed:1e:e8:8d:1f:be:dd:18:e4:20:91:af:a3: 63:07:85:73:d5:c8:f7:2f:9f:1e:5d:d0:e5:1d:11:26:16:5f: 1a:9c:37:54:a5:c2:bc:c8:ce:0c:af:e9:a8:07:4f:2f:66:3a: b4:20:4e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC QTY5RTQ0M0QwHhcNMjUwODIwMTg1ODI2WhcNMjUwODI3MTg1ODI2WjAYMRYwFAYD VQQDEw02OGE2MWFkMi0xNDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgvSA+mrYtuAHqqUdsdonXfe7qsFtn4QWPbTi3uus7Osigb7ylZmk8O9Jsp1 ooCILY+ovgiwYftjFaSN/6jJvS0bYu/jslE7FwRUNdTeTX/MIGXwX/HRKSTOOSEr KIfvKuMMtg7ya6VE1b4fYRMeHZXAPhX+B6OAG6zHBOK7gBAUBnTD3Z9sbnn7BB7u dWjeGW2uV1+fPHSJ+9s+iFU+pIO7r8mDQhGvw5TOkNn9FI14UiD2IJ/EKPU8/FmV zPDMNe+PKI9boAojw/qTpF++shyZNayyxJj2MBu+72HKaHYz1p/YAB0BTD3DEkb6 UEEWmyO4P04Lg9mczetdP+AGKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEs4wR5 zdX9z6i6YOJWbqas5kh3MB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0 ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUD8DI5+Ca/aQfW/WQDJtIiVwL77bHwmkFOI7ekU6WJScLq13i5es8 O71UiD6Edy7LMlitWD/fI82PKQafR/FSiSl0oh6YVbVKYNtVkDSaE/g/sbwj2wvt FY08EWSOslfG+3OBUhJaBS6UtqUO2Yc6PzNm66yUENoht/ZC3ZRCb2brcSWG8nz0 zWsg78TIYHb/GUryYDGk2UeqLxpR/0NUUjiYQCr4G63iHyMhui+rLIF0O1DbIjFD WtlIUapaOA4Xo66Xq+3j9VJpjO0e6I0fvt0Y5CCRr6NjB4Vz1cj3L58eXdDlHREm Fl8anDdUpcK8yM4Mr+moB08vZjq0IE7c -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:42 2025 by rpki-client