$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: sdUq/LzmL08bpPRcfD/vPVT9XdbgZ+7219+bKu+ySyg= Subject key identifier: 9B:F3:C5:DD:A4:51:1F:B8:EA:32:BD:04:F7:91:80:A1:03:1D:42:BA Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0B04 Signing time: Thu 04 Sep 2025 19:34:21 +0000 Manifest this update: Thu 04 Sep 2025 19:34:20 +0000 Manifest next update: Thu 11 Sep 2025 19:34:20 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: r66TviA63TliP83Rcaf+S+2Mian7NGJXk04KPYsNsTM=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: A/a0M5805rjTnXrE1n/14FN5oLiy6+lmzg+Var9FAeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Sep 4 19:34:20 2025 GMT Not After : Sep 11 19:34:20 2025 GMT Subject: CN=68b9e9bc-8906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:be:21:ae:ed:ae:14:16:dd:b4:1b:70:39:36: b8:21:3a:43:17:f0:e3:f1:a9:c8:32:13:c7:17:ae: bf:bb:22:eb:03:13:83:fa:a8:e9:eb:fe:aa:1d:d0: 95:e9:e8:e3:4d:f2:3d:a6:ad:6b:25:39:37:dc:bb: 2c:0a:a6:17:b5:7f:0d:e9:51:ec:0a:f6:48:49:14: 3f:5f:7e:4a:93:5e:fc:3b:97:2b:0e:81:be:e5:8f: 82:70:d8:a8:b2:4d:18:0a:8f:90:06:0a:5b:99:4b: 4c:be:46:8a:e8:c0:4f:05:0f:41:62:50:7b:2a:58: 19:9f:96:d2:3c:4b:f1:41:aa:15:17:dd:77:82:aa: 4e:0f:e5:1b:ba:73:8f:09:0d:a0:98:42:d7:b5:ff: 02:60:cc:22:03:0b:de:dc:53:4d:e1:3c:b5:a5:05: 8b:b7:f1:7d:29:8b:6a:93:0e:08:53:6f:0a:8d:25: 20:cd:ba:43:99:fe:1b:0a:fb:80:17:1f:a8:b9:d2: 47:56:8c:2a:72:7c:6e:0d:34:f8:27:d9:88:4e:f0: 8b:5b:4c:db:c2:4b:4b:77:2a:e4:cb:0c:b3:61:48: b3:a1:f8:f4:f7:43:ed:71:3c:a2:5f:0a:8d:dc:9f: ed:0a:bb:8c:0d:46:a0:04:38:e5:22:22:5a:20:09: f9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F3:C5:DD:A4:51:1F:B8:EA:32:BD:04:F7:91:80:A1:03:1D:42:BA X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c8:be:11:6d:e0:0a:58:df:ea:cc:c2:69:ee:52:1c:27:d8: 73:57:6b:9c:5b:83:46:24:df:c1:5e:50:4c:a3:fe:2c:aa:45: 94:24:4a:f1:5e:24:06:b6:25:e7:2b:a5:ed:c9:f9:d2:d7:09: 27:0f:da:6a:6f:f4:bf:20:bc:9e:b8:f9:ea:1d:26:4f:69:7e: f6:3b:02:1b:4f:fc:ec:c9:50:23:58:33:c8:ed:af:d6:ca:e7: 1d:a5:2e:28:ed:aa:63:e3:82:d8:03:17:4e:fd:c3:36:3e:a6: b6:c6:2c:7a:7d:da:26:8b:84:2d:4f:17:b7:53:59:cc:65:3c: 5b:94:dc:54:a9:69:28:a9:ed:1b:ec:c0:76:a1:7c:cc:7d:1a: 07:1d:ca:51:16:b6:b6:35:11:d9:42:8e:f2:f7:9a:ce:5b:46: ef:50:59:95:67:b8:0e:08:40:aa:1d:de:fb:98:ba:56:90:b5: 1e:ba:50:8f:95:6f:60:25:b7:ab:79:ff:fc:71:e5:27:3c:e2: 40:2c:df:5a:ac:d8:74:3d:35:ba:0b:1f:5e:d1:e8:67:0e:51: 1f:76:e8:61:8d:ee:68:25:2e:f2:c8:f8:96:7e:91:c6:b9:9f: e2:71:8a:3d:ec:f2:fc:62:4c:59:7f:2e:3e:09:03:f7:0a:fc: 90:a0:17:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjUwOTA0MTkzNDIwWhcNMjUwOTExMTkzNDIwWjAYMRYwFAYD VQQDEw02OGI5ZTliYy04OTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4L4hru2uFBbdtBtwOTa4ITpDF/Dj8anIMhPHF66/uyLrAxOD+qjp6/6qHdCV 6ejjTfI9pq1rJTk33LssCqYXtX8N6VHsCvZISRQ/X35Kk178O5crDoG+5Y+CcNio sk0YCo+QBgpbmUtMvkaK6MBPBQ9BYlB7KlgZn5bSPEvxQaoVF913gqpOD+UbunOP CQ2gmELXtf8CYMwiAwve3FNN4Ty1pQWLt/F9KYtqkw4IU28KjSUgzbpDmf4bCvuA Fx+oudJHVowqcnxuDTT4J9mITvCLW0zbwktLdyrkywyzYUizofj090PtcTyiXwqN 3J/tCruMDUagBDjlIiJaIAn5AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvzxd2k UR+46jK9BPeRgKEDHUK6MB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbyL4RbeAKWN/qzMJp7lIcJ9hzV2ucW4NGJN/BXlBMo/4sqkWUJErx XiQGtiXnK6XtyfnS1wknD9pqb/S/ILyeuPnqHSZPaX72OwIbT/zsyVAjWDPI7a/W yucdpS4o7apj44LYAxdO/cM2Pqa2xix6fdomi4QtTxe3U1nMZTxblNxUqWkoqe0b 7MB2oXzMfRoHHcpRFra2NRHZQo7y95rOW0bvUFmVZ7gOCECqHd77mLpWkLUeulCP lW9gJberef/8ceUnPOJALN9arNh0PTW6Cx9e0ehnDlEfduhhje5oJS7yyPiWfpHG uZ/icYo97PL8YkxZfy4+CQP3CvyQoBd3 -----END CERTIFICATE-----Generated at Sat Sep 6 17:45:27 2025 by rpki-client