$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft File: cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json) Hash identifier: jlfRjoRi+sfM0idTmlwZDaE5HAVBfugAQvtSvFmQvZc= Subject key identifier: C0:46:A7:0F:66:72:B2:03:CF:E1:53:02:0C:7A:D6:D9:71:0C:27:BE Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft Manifest number: 012B Signing time: Sat 19 Jul 2025 04:56:59 +0000 Manifest this update: Sat 19 Jul 2025 04:56:59 +0000 Manifest next update: Sat 26 Jul 2025 04:56:59 +0000 Files and hashes: 1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: ImIANOqAWjWLJrCtoonV50Ej/iImyHDmk7U9wXFDh2U=) 2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: 9cLUWM+lWWpZt/EGTjBbXr6teTbVNtgXpN+WMvBwXno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Validity Not Before: Jul 19 04:56:59 2025 GMT Not After : Jul 26 04:56:59 2025 GMT Subject: CN=687b259b-76ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:f2:fe:e7:4f:ae:64:d6:6c:3b:ef:48:22: e3:f1:c5:ea:f9:36:f8:bc:56:16:35:d4:e3:6b:9b: 76:e3:b2:7b:f2:b8:a3:50:98:63:3f:7c:15:6a:91: d3:29:68:3d:90:2e:d2:b2:85:ac:48:32:1d:20:16: ec:f9:82:ab:0f:88:57:d7:b0:08:10:5f:fe:34:6e: 1c:7c:f5:92:80:6a:1e:88:e9:f0:d8:57:e7:11:fc: d1:d3:e7:c2:43:4c:e0:b6:65:e1:0f:19:55:a3:55: 0c:f5:44:ea:2c:cb:a9:c8:49:68:f5:c2:5e:44:c9: 05:31:ca:d3:d9:63:d9:bb:b6:62:01:6a:e1:c5:30: 10:d4:09:52:39:d4:29:32:6c:58:eb:c2:99:9a:e4: e5:f2:0f:92:4d:fd:05:bc:38:8e:e6:c0:77:19:3a: e0:a2:17:54:46:6c:75:f5:49:3f:aa:e5:b8:59:39: 87:a6:1d:23:73:76:82:aa:d6:9d:04:2b:20:c4:fa: 05:f4:3d:a7:19:48:48:35:f0:b3:10:c9:d9:0e:5a: 65:8f:19:51:07:db:78:94:25:48:3c:3f:94:2c:56: ae:f0:66:38:58:59:09:f5:f5:3d:e3:65:0f:47:00: b0:64:4b:c5:5b:cd:29:e3:e2:50:1c:c3:c2:24:4f: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:46:A7:0F:66:72:B2:03:CF:E1:53:02:0C:7A:D6:D9:71:0C:27:BE X509v3 Authority Key Identifier: keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:5a:84:42:2a:b2:17:82:c6:d9:f2:56:3c:b1:bd:ff:e4:11: 80:c2:5a:c2:72:9d:73:67:9c:b4:e2:58:fb:eb:30:9f:a0:33: 1b:d3:a1:f3:85:f7:87:46:cc:47:54:ad:fc:ef:d2:cd:ef:a6: 2c:84:f8:1a:e2:3a:8c:00:49:fc:2d:08:66:51:77:06:42:e0: cd:8c:aa:04:58:6a:28:29:c9:23:19:80:3b:09:aa:83:cb:7c: 9c:2e:7d:00:21:3e:de:65:0d:48:72:5f:52:ec:5c:8b:f8:d2: 08:e9:b3:81:71:8b:ce:d0:74:c7:b4:c0:a2:17:71:6b:ac:0e: 84:4a:c2:77:0a:26:7a:cd:48:f8:16:da:4d:31:c4:e4:16:72: 75:fd:d3:ab:f2:74:ae:bc:2f:9c:9c:0a:96:88:11:22:82:ea: 7a:21:33:5b:48:7a:60:4a:57:27:9b:59:fd:71:b4:ef:22:31: eb:01:31:46:66:cd:c3:7e:ac:0b:86:b9:ec:42:26:c5:dd:8f: 9e:88:1f:01:07:78:19:01:4b:fc:b6:4b:26:47:44:6e:70:a4: d9:eb:f1:af:25:27:f7:cb:b0:2b:00:3f:96:25:d3:79:16:f3: 68:7e:83:4a:1c:39:77:0f:fe:07:f4:30:13:71:7b:80:5b:1f: 2d:92:90:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1Q0UxMTAvBgNVBAUTKDcyOTI2RkM2MEY3QzE4NEE2MUQ3M0JEMDk0QUE2QTM4 NkI2MzAwMkEwHhcNMjUwNzE5MDQ1NjU5WhcNMjUwNzI2MDQ1NjU5WjAYMRYwFAYD VQQDEw02ODdiMjU5Yi03NmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuify/udPrmTWbDvvSCLj8cXq+Tb4vFYWNdTja5t247J78rijUJhjP3wVapHT KWg9kC7SsoWsSDIdIBbs+YKrD4hX17AIEF/+NG4cfPWSgGoeiOnw2FfnEfzR0+fC Q0zgtmXhDxlVo1UM9UTqLMupyElo9cJeRMkFMcrT2WPZu7ZiAWrhxTAQ1AlSOdQp MmxY68KZmuTl8g+STf0FvDiO5sB3GTrgohdURmx19Uk/quW4WTmHph0jc3aCqtad BCsgxPoF9D2nGUhINfCzEMnZDlpljxlRB9t4lCVIPD+ULFau8GY4WFkJ9fU942UP RwCwZEvFW80p4+JQHMPCJE/ZwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBGpw9m crIDz+FTAgx61tlxDCe+MB8GA1UdIwQYMBaAFHKSb8YPfBhKYdc70JSqajhrYwAq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVDRS8wRUIwOUQzNkFF NzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdFcGgxenZRbEtwcU9HdGpB Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwSnZ4Zzk4R0VwaDF6dlFsS3BxT0d0akFDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVDRS8wRUIwOUQzNkFFNzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdF cGgxenZRbEtwcU9HdGpBQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBWoRCKrIXgsbZ8lY8sb3/5BGAwlrCcp1zZ5y04lj76zCfoDMb06Hz hfeHRsxHVK3879LN76YshPga4jqMAEn8LQhmUXcGQuDNjKoEWGooKckjGYA7CaqD y3ycLn0AIT7eZQ1Icl9S7FyL+NII6bOBcYvO0HTHtMCiF3FrrA6ESsJ3CiZ6zUj4 FtpNMcTkFnJ1/dOr8nSuvC+cnAqWiBEigup6ITNbSHpgSlcnm1n9cbTvIjHrATFG Zs3DfqwLhrnsQibF3Y+eiB8BB3gZAUv8tksmR0RucKTZ6/GvJSf3y7ArAD+WJdN5 FvNofoNKHDl3D/4H9DATcXuAWx8tkpB9 -----END CERTIFICATE-----Generated at Sun Jul 20 06:43:20 2025 by rpki-client