$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: ZX/l98nkVb/A+XWEyoFozvo12V7ohPXe5hYYYYOYnjc= Subject key identifier: F0:2C:1F:6C:57:D1:19:50:75:A8:4C:9C:CB:92:F3:40:D2:6A:52:0A Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: 0168 Signing time: Mon 03 Nov 2025 03:55:44 +0000 Manifest this update: Mon 03 Nov 2025 03:55:43 +0000 Manifest next update: Mon 10 Nov 2025 03:55:43 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: p3isJ/03WajbSSuQdgTUyJbJitTe9xkD6ZZ3H/WbdR4=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: ewSndXmGK4bIjd/hEYzsemW56YoGlHl9wDoTOirwBNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: Nov 3 03:55:43 2025 GMT Not After : Nov 10 03:55:43 2025 GMT Subject: CN=690827c0-78da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:59:ac:d1:cd:d0:e9:e8:61:dd:2f:c2:85: 62:8a:56:3d:5f:0b:04:61:c9:9c:0f:2b:dd:70:ff: eb:0b:16:99:61:53:d3:23:ee:33:5e:8e:ac:11:31: bb:b7:db:74:3b:01:3c:d0:07:ab:b1:ed:de:98:3e: 8a:a8:d3:05:9e:07:33:89:87:60:37:4c:c6:6a:0f: 36:26:07:8c:1d:14:2b:3a:28:7f:46:1c:cc:cb:f9: f6:03:76:26:82:57:86:67:56:e2:88:fb:45:a7:b2: 32:c7:fa:16:df:49:78:1b:b6:3c:4c:d3:61:b4:73: a3:c1:77:dd:d0:bb:04:00:9d:ca:f3:41:3a:5b:bd: 9d:b5:71:3a:89:ea:4e:c7:b0:92:41:22:b4:10:5d: be:00:84:b3:fa:73:33:10:28:44:fd:3c:6e:96:fa: 4c:ab:e7:28:7f:d6:7f:2b:81:a2:f4:33:1d:bb:1d: 6c:07:7a:f6:0d:3e:36:e4:73:d5:c0:df:ec:40:13: 94:f9:76:23:39:30:90:09:8b:da:ba:9c:ed:12:80: cc:78:11:44:1e:bf:24:c3:ce:77:d1:56:49:d4:6a: 14:eb:11:ab:66:cc:ac:f7:bc:dc:71:00:c7:9f:53: 92:99:07:ac:d0:af:d8:49:c3:a8:68:0f:3e:d4:36: 19:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2C:1F:6C:57:D1:19:50:75:A8:4C:9C:CB:92:F3:40:D2:6A:52:0A X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:88:63:d3:c7:68:e8:07:95:b7:de:9d:89:2f:5b:65:50:e3: 4b:08:e4:56:a1:aa:27:49:77:f3:74:be:38:e1:eb:a8:c4:71: 61:6a:f8:dd:15:a5:52:62:11:dd:ba:b8:b9:6b:15:94:a3:77: 2c:94:05:f8:7a:b7:6e:be:48:b3:78:97:a3:e5:88:ec:ce:19: 73:12:aa:83:e9:56:80:38:3d:09:c3:32:3e:d9:57:9e:4d:c2: d8:31:65:64:38:ac:2d:84:44:a9:71:5f:63:7e:3b:91:94:41: b1:f3:d9:a1:31:89:c6:37:e6:92:f2:5c:54:42:47:92:c8:43: 92:50:4e:fc:82:22:27:dd:c4:f8:fe:14:76:c4:1f:94:2c:cd: 43:12:0d:d5:6f:1e:99:83:e0:98:20:75:0f:56:b0:80:86:a2: 58:03:30:be:b7:bf:b2:e1:5c:6b:4e:72:b3:ab:e2:ff:d0:f0: ca:15:61:da:ae:75:96:20:a4:a2:85:b4:56:1b:6d:44:3d:12: 5f:88:eb:58:12:1f:06:19:2e:47:37:7d:aa:c0:6a:02:d8:c1: 01:19:24:3b:34:00:df:25:1b:1a:a7:93:f0:eb:ab:34:22:d7: e4:38:bd:98:16:93:e6:1f:93:71:55:4e:21:10:36:ec:71:49: 8f:07:4c:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RDcxMTAvBgNVBAUTKDcyOTM1NUFBMDM3OEY2RDRGNDA1NkU2NjI2QkJDOUJF MzBDOUQ4RjAwHhcNMjUxMTAzMDM1NTQzWhcNMjUxMTEwMDM1NTQzWjAYMRYwFAYD VQQDEw02OTA4MjdjMC03OGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wJZrNHN0OnoYd0vwoViilY9XwsEYcmcDyvdcP/rCxaZYVPTI+4zXo6sETG7 t9t0OwE80Aerse3emD6KqNMFngcziYdgN0zGag82JgeMHRQrOih/RhzMy/n2A3Ym gleGZ1biiPtFp7Iyx/oW30l4G7Y8TNNhtHOjwXfd0LsEAJ3K80E6W72dtXE6iepO x7CSQSK0EF2+AISz+nMzEChE/TxulvpMq+cof9Z/K4Gi9DMdux1sB3r2DT425HPV wN/sQBOU+XYjOTCQCYvaupztEoDMeBFEHr8kw8530VZJ1GoU6xGrZsys97zccQDH n1OSmQes0K/YScOoaA8+1DYZeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAsH2xX 0RlQdahMnMuS80DSalIKMB8GA1UdIwQYMBaAFHKTVaoDePbU9AVuZia7yb4wydjw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVENy80MEY5RUZBNDhG RDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0VDBCVzVtSnJ2SnZqREoy UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVENy80MEY5RUZBNDhGRDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0 VDBCVzVtSnJ2SnZqREoyUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIiGPTx2joB5W33p2JL1tlUONLCORWoaonSXfzdL444euoxHFhavjd FaVSYhHduri5axWUo3cslAX4erduvkizeJej5YjszhlzEqqD6VaAOD0JwzI+2Vee TcLYMWVkOKwthESpcV9jfjuRlEGx89mhMYnGN+aS8lxUQkeSyEOSUE78giIn3cT4 /hR2xB+ULM1DEg3Vbx6Zg+CYIHUPVrCAhqJYAzC+t7+y4VxrTnKzq+L/0PDKFWHa rnWWIKSihbRWG21EPRJfiOtYEh8GGS5HN32qwGoC2MEBGSQ7NADfJRsap5Pw66s0 ItfkOL2YFpPmH5NxVU4hEDbscUmPB0yc -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:14 2025 by rpki-client