$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: JDAQgbmTidpqfmyOBVJIHqXaZBZ1Om8K4xxHSURoa48= Subject key identifier: D3:5E:12:E0:C6:77:6F:F9:77:48:2F:E7:27:AA:CF:DF:7E:BD:3E:A3 Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: 014B Signing time: Tue 09 Sep 2025 04:17:34 +0000 Manifest this update: Tue 09 Sep 2025 04:17:34 +0000 Manifest next update: Tue 16 Sep 2025 04:17:34 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: OikoAjQHEXyTtrnuinr26/bbZfa4tvhrRNhQUHhuV3o=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: JGrOdZpDBctOporBnF3GYO8HL0N2P5Uu07r/sZBPWI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: Sep 9 04:17:34 2025 GMT Not After : Sep 16 04:17:34 2025 GMT Subject: CN=68bfaa5e-9a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:e8:ea:2d:70:59:04:bb:02:f0:83:65:63: 54:df:dd:cd:04:f6:aa:02:82:2d:e4:28:69:d8:9e: 62:54:a3:ef:67:cb:97:2c:2a:3d:23:d3:96:2b:76: e8:1e:4e:21:e4:06:42:de:6c:43:7e:20:d9:3c:6b: 99:65:a2:ce:f5:ac:8c:62:4c:c4:1b:61:10:fd:e4: 7a:74:7f:20:5f:4e:46:45:ee:65:09:c8:29:fd:a3: 71:36:ba:08:21:fd:70:f2:7e:40:15:2b:0f:b6:02: a6:ed:4f:63:b8:a6:53:a1:9b:90:b5:e1:46:9b:8c: 34:61:00:f0:ee:95:a2:f2:ec:b1:ac:bd:7f:6a:16: 2c:5e:04:f0:05:2d:81:c1:cb:f5:13:3d:87:01:d5: 1c:39:22:e7:0e:ea:89:af:63:31:5a:e8:ae:ed:bb: 46:93:4d:44:1b:7e:f1:28:05:76:36:51:19:ba:34: 48:ab:dd:0d:6f:b7:7b:d4:b2:eb:90:f7:23:2f:f9: 6a:27:e3:2b:85:eb:d0:c5:50:c1:84:d8:91:6a:50: a5:95:6d:1a:2f:49:69:0b:aa:f4:52:a1:47:ee:d0: be:4d:63:82:27:13:cb:5a:b5:60:6d:16:2e:89:ab: f8:3d:85:58:36:a8:63:4d:5d:60:a2:ce:a6:14:14: 1a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5E:12:E0:C6:77:6F:F9:77:48:2F:E7:27:AA:CF:DF:7E:BD:3E:A3 X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1b:2d:ab:ef:f6:e9:f2:41:e5:56:29:b4:9c:63:08:30:c1: b5:31:ab:6f:f9:df:7a:c6:23:95:bb:59:37:20:98:e7:4e:fc: 9f:2a:02:77:0f:66:9f:2c:96:23:1b:99:e6:cc:8b:7c:3a:df: 4e:7b:78:71:fe:6f:64:81:e5:1d:c4:98:d5:1b:67:4b:b5:d5: 9d:94:85:c2:f0:27:a4:60:39:7b:e9:6a:fc:81:4d:92:a1:dd: 59:89:70:dd:9b:90:90:15:9c:70:3f:27:e5:58:17:ae:f8:39: 47:4e:47:3a:44:7c:86:60:23:10:16:70:15:d1:27:25:29:56: e5:e6:54:e2:4e:7d:80:0f:c9:69:dc:2a:c5:47:08:51:52:ef: ee:14:97:57:01:bf:77:2b:cd:a4:cb:4b:de:ab:e6:78:62:6c: 84:d4:cf:40:74:d9:5d:71:24:dc:35:34:63:ea:c7:e4:ad:34: 65:89:b8:ae:71:6a:99:0e:0e:1a:4c:17:e0:28:16:38:ee:49: 15:7b:b2:01:16:6f:0b:d8:39:02:5d:12:de:66:33:3b:15:da: 32:b3:3e:ec:cd:8d:f6:22:9a:b6:c3:a6:3a:cc:73:ec:43:73: bf:fc:07:fb:91:ef:a2:18:4d:e0:ea:e3:25:79:07:41:8e:bd: 1b:16:52:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RDcxMTAvBgNVBAUTKDcyOTM1NUFBMDM3OEY2RDRGNDA1NkU2NjI2QkJDOUJF MzBDOUQ4RjAwHhcNMjUwOTA5MDQxNzM0WhcNMjUwOTE2MDQxNzM0WjAYMRYwFAYD VQQDEw02OGJmYWE1ZS05YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzbo6i1wWQS7AvCDZWNU393NBPaqAoIt5Chp2J5iVKPvZ8uXLCo9I9OWK3bo Hk4h5AZC3mxDfiDZPGuZZaLO9ayMYkzEG2EQ/eR6dH8gX05GRe5lCcgp/aNxNroI If1w8n5AFSsPtgKm7U9juKZToZuQteFGm4w0YQDw7pWi8uyxrL1/ahYsXgTwBS2B wcv1Ez2HAdUcOSLnDuqJr2MxWuiu7btGk01EG37xKAV2NlEZujRIq90Nb7d71LLr kPcjL/lqJ+MrhevQxVDBhNiRalCllW0aL0lpC6r0UqFH7tC+TWOCJxPLWrVgbRYu iav4PYVYNqhjTV1gos6mFBQaXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNeEuDG d2/5d0gv5yeqz99+vT6jMB8GA1UdIwQYMBaAFHKTVaoDePbU9AVuZia7yb4wydjw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVENy80MEY5RUZBNDhG RDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0VDBCVzVtSnJ2SnZqREoy UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVENy80MEY5RUZBNDhGRDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0 VDBCVzVtSnJ2SnZqREoyUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSGy2r7/bp8kHlVim0nGMIMMG1Matv+d96xiOVu1k3IJjnTvyfKgJ3 D2afLJYjG5nmzIt8Ot9Oe3hx/m9kgeUdxJjVG2dLtdWdlIXC8CekYDl76Wr8gU2S od1ZiXDdm5CQFZxwPyflWBeu+DlHTkc6RHyGYCMQFnAV0SclKVbl5lTiTn2AD8lp 3CrFRwhRUu/uFJdXAb93K82ky0veq+Z4YmyE1M9AdNldcSTcNTRj6sfkrTRlibiu cWqZDg4aTBfgKBY47kkVe7IBFm8L2DkCXRLeZjM7Fdoysz7szY32Ipq2w6Y6zHPs Q3O//Af7ke+iGE3g6uMleQdBjr0bFlLC -----END CERTIFICATE-----Generated at Tue Sep 9 06:00:41 2025 by rpki-client