$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft File: cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json) Hash identifier: 9BVPtL3S+1iQYK4JxlQjDwurvXeTwt3YEUJarVl56C4= Subject key identifier: 48:F7:B6:9D:D2:D2:1A:63:A2:BF:9F:B1:0A:AC:3D:EF:27:5C:9B:CB Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft Manifest number: 0165 Signing time: Mon 03 Nov 2025 04:08:06 +0000 Manifest this update: Mon 03 Nov 2025 04:08:06 +0000 Manifest next update: Mon 10 Nov 2025 04:08:06 +0000 Files and hashes: 1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: 13EvHsjoO8tI8F6j6EB/J5MqpRDsKSyiVNrhpKG7cQA=) 2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: /r8zkPpv2X5SfBxbvGoAdJxHIR9dMbvXa2kBS0bQC9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Validity Not Before: Nov 3 04:08:06 2025 GMT Not After : Nov 10 04:08:06 2025 GMT Subject: CN=69082aa6-1a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:53:50:1e:99:48:c5:90:8f:43:d3:16:d8: 37:14:e9:b8:78:5d:47:73:d1:ad:03:c4:db:71:c2: fb:4b:67:a9:eb:10:7b:10:e9:93:c1:b1:eb:1a:04: 63:ae:cc:8f:6e:92:0d:55:68:1e:4d:e3:11:32:25: 22:6a:8a:26:4e:e4:19:70:b3:63:a8:6f:44:2b:5c: e0:81:d4:d9:c0:56:ad:24:84:8b:28:39:01:18:4d: 21:1d:e6:e7:96:24:ff:cb:09:28:19:3d:73:d1:69: 19:eb:6a:09:ba:58:db:af:c6:26:ea:91:6d:1f:72: b1:bd:a0:09:40:d2:55:b4:70:32:7a:db:0e:1e:2a: 52:d2:a6:0d:5c:c5:6a:82:b7:da:05:36:fe:12:0c: fa:c1:d0:15:30:7d:b7:ed:11:ee:fb:8c:26:47:95: 3c:9e:62:96:b5:64:6c:44:2d:e0:f5:0d:43:f9:80: 29:48:a6:22:83:f3:85:cc:69:e5:df:a7:3b:52:2f: fe:b6:90:32:2d:26:98:05:d5:d9:21:26:01:d6:6f: 7d:f6:e5:ca:86:14:7e:4f:02:80:c1:4c:a1:da:e5: b3:66:00:b1:60:6c:bb:45:bb:32:f8:21:c3:c8:28: a6:b4:78:54:30:6a:af:16:d8:97:8e:5e:d4:5b:45: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F7:B6:9D:D2:D2:1A:63:A2:BF:9F:B1:0A:AC:3D:EF:27:5C:9B:CB X509v3 Authority Key Identifier: keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:24:47:26:62:ee:de:ef:24:6b:80:e2:be:90:3f:c0:3d:d7: e6:63:0e:88:c2:5d:00:e7:20:a4:7f:5f:c1:cb:3d:02:d5:81: 20:10:e8:00:23:59:46:3b:74:30:51:a5:06:89:36:b3:bf:d0: 49:bc:47:48:31:a9:00:7b:ae:67:ca:7d:30:fa:9b:77:fe:e3: 53:c0:8c:21:93:74:ea:57:6c:c6:c4:20:07:ec:93:10:09:df: b4:a1:4e:27:98:0b:59:19:a5:7d:02:26:6d:c6:b1:6a:23:7b: 48:f4:db:ed:e1:00:13:f3:95:a8:2c:10:f1:bf:f3:8a:9c:16: 47:05:cc:c0:23:46:6c:a9:ce:e1:91:51:a1:e8:9d:0b:51:bb: 51:d7:8b:a6:1b:96:21:15:f9:73:70:dd:e8:9a:7b:e7:09:45: 87:03:03:90:e5:21:0a:c3:5f:bf:3d:29:e3:30:2b:ca:38:e0: ad:a8:0e:30:ca:28:f5:12:86:9f:c6:bf:1a:06:63:ee:64:59: fb:f2:6c:ec:1d:ca:61:66:d9:79:5e:02:3f:83:de:fd:b4:ad: a1:df:d2:30:21:ee:24:cc:3f:0c:a8:db:1a:e0:ca:07:ec:4a: 55:06:ee:98:46:41:37:2c:5d:88:f9:b6:56:e2:4b:57:f6:e3: 5c:dd:83:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1Q0UxMTAvBgNVBAUTKDcyOTI2RkM2MEY3QzE4NEE2MUQ3M0JEMDk0QUE2QTM4 NkI2MzAwMkEwHhcNMjUxMTAzMDQwODA2WhcNMjUxMTEwMDQwODA2WjAYMRYwFAYD VQQDEw02OTA4MmFhNi0xYTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqstTUB6ZSMWQj0PTFtg3FOm4eF1Hc9GtA8TbccL7S2ep6xB7EOmTwbHrGgRj rsyPbpINVWgeTeMRMiUiaoomTuQZcLNjqG9EK1zggdTZwFatJISLKDkBGE0hHebn liT/ywkoGT1z0WkZ62oJuljbr8Ym6pFtH3KxvaAJQNJVtHAyetsOHipS0qYNXMVq grfaBTb+Egz6wdAVMH237RHu+4wmR5U8nmKWtWRsRC3g9Q1D+YApSKYig/OFzGnl 36c7Ui/+tpAyLSaYBdXZISYB1m999uXKhhR+TwKAwUyh2uWzZgCxYGy7Rbsy+CHD yCimtHhUMGqvFtiXjl7UW0WzbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEj3tp3S 0hpjor+fsQqsPe8nXJvLMB8GA1UdIwQYMBaAFHKSb8YPfBhKYdc70JSqajhrYwAq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVDRS8wRUIwOUQzNkFF NzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdFcGgxenZRbEtwcU9HdGpB Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwSnZ4Zzk4R0VwaDF6dlFsS3BxT0d0akFDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVDRS8wRUIwOUQzNkFFNzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdF cGgxenZRbEtwcU9HdGpBQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkJEcmYu7e7yRrgOK+kD/APdfmYw6Iwl0A5yCkf1/Byz0C1YEgEOgA I1lGO3QwUaUGiTazv9BJvEdIMakAe65nyn0w+pt3/uNTwIwhk3TqV2zGxCAH7JMQ Cd+0oU4nmAtZGaV9AiZtxrFqI3tI9Nvt4QAT85WoLBDxv/OKnBZHBczAI0Zsqc7h kVGh6J0LUbtR14umG5YhFflzcN3omnvnCUWHAwOQ5SEKw1+/PSnjMCvKOOCtqA4w yij1Eoafxr8aBmPuZFn78mzsHcphZtl5XgI/g979tK2h39IwIe4kzD8MqNsa4MoH 7EpVBu6YRkE3LF2I+bZW4ktX9uNc3YN5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:10 2025 by rpki-client