$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: H91EKs3qGz2FSee4PM7ESrtlj+m+UmJIHnh4X5YNDlE= Subject key identifier: BF:03:9A:96:D8:7A:00:E5:FD:0C:00:F5:65:7B:FB:70:56:3B:7B:4D Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0B23 Signing time: Tue 04 Nov 2025 19:24:24 +0000 Manifest this update: Tue 04 Nov 2025 19:24:23 +0000 Manifest next update: Tue 11 Nov 2025 19:24:23 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: E0uV/KnWFbmWp5cT7A5Nj5zyARphdjaq3/qatMHZTB0=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: A/a0M5805rjTnXrE1n/14FN5oLiy6+lmzg+Var9FAeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2865 (0xb31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Nov 4 19:24:23 2025 GMT Not After : Nov 11 19:24:23 2025 GMT Subject: CN=690a52e8-3604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:84:16:25:0b:01:94:9d:0a:f2:4f:a9:5f: 20:d7:cd:85:86:a9:36:f2:bf:73:78:f0:9c:a9:be: a1:e0:1b:da:1e:38:53:22:ce:c9:23:4a:c7:d4:df: fb:b8:15:41:68:42:48:bc:e3:7a:fc:00:23:ad:c9: a1:79:d1:c9:3b:93:79:15:33:48:22:af:cf:b2:93: f5:16:17:50:f2:7d:ba:b1:41:ef:5f:dc:af:d1:6f: ff:60:37:1f:85:13:1f:bd:dc:62:6e:65:47:60:b1: ca:e8:d0:f2:b8:23:ac:9d:bf:43:a2:4d:a8:f5:49: be:67:54:7c:46:3b:bf:81:1f:f4:96:c0:06:3c:05: d5:cb:4a:6c:a2:d4:5d:23:4d:23:46:7e:6d:42:6e: cb:74:54:08:62:ae:fa:8d:77:34:74:a8:b5:f2:3a: 2c:a6:e5:9e:a7:8e:45:c3:2a:ce:5b:42:d7:b6:3e: b3:4b:89:d5:b4:b7:fd:d7:9a:df:ef:0b:3f:a6:0b: 1b:52:5c:96:b1:22:d8:74:4f:50:16:64:8d:ac:a1: 0d:ea:ad:7f:56:fc:a9:2c:6e:31:6b:3f:9c:51:bd: a7:8a:94:9e:c4:09:94:d3:06:84:03:04:8f:3e:07: 51:36:ea:89:fd:bf:53:5b:d6:d9:71:3c:07:6d:43: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:03:9A:96:D8:7A:00:E5:FD:0C:00:F5:65:7B:FB:70:56:3B:7B:4D X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c1:cd:22:b3:43:88:80:d2:d4:75:c5:0f:48:db:7d:96:21: d5:f8:67:fd:25:3d:10:98:4a:cf:dd:dd:25:54:92:a5:a6:0d: 9f:b1:6b:29:b6:92:55:80:3e:16:59:d2:db:df:78:22:c5:23: 3c:ed:6f:67:b5:01:9f:54:6c:48:c8:63:ec:82:38:12:b7:3d: bf:bd:a9:7c:17:d5:7b:48:dd:10:a9:98:89:4a:b0:4a:a9:12: 80:f2:90:d5:41:75:5e:92:ad:2d:07:67:81:97:f5:4b:15:9e: 11:99:a5:3d:d5:b3:f5:cf:9d:7e:83:23:5b:78:96:68:3b:07: 64:23:ff:9e:fc:1e:cf:c8:ea:49:64:5e:96:f1:8b:77:b7:e0: 88:54:63:1c:4d:67:67:10:f4:3c:bf:70:de:2e:15:09:fa:d7: 97:24:ad:f8:5c:4a:3d:8c:9a:e9:29:ec:c8:24:6c:8e:ef:5b: a0:af:c5:5d:1b:4c:f7:2c:0c:1c:8c:1b:31:b2:4c:dc:c4:70: 7c:01:55:42:1f:d0:2f:35:71:bb:59:ad:de:1e:42:8e:74:4e: 2f:bb:dd:ec:58:d8:b8:ad:c0:00:db:01:24:21:01:6c:54:5b: ad:f3:60:af:71:07:b6:84:71:01:d8:42:d3:37:27:12:5c:f7: b0:e4:3f:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjUxMTA0MTkyNDIzWhcNMjUxMTExMTkyNDIzWjAYMRYwFAYD VQQDEw02OTBhNTJlOC0zNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwiEFiULAZSdCvJPqV8g182Fhqk28r9zePCcqb6h4BvaHjhTIs7JI0rH1N/7 uBVBaEJIvON6/AAjrcmhedHJO5N5FTNIIq/PspP1FhdQ8n26sUHvX9yv0W//YDcf hRMfvdxibmVHYLHK6NDyuCOsnb9Dok2o9Um+Z1R8Rju/gR/0lsAGPAXVy0psotRd I00jRn5tQm7LdFQIYq76jXc0dKi18jospuWep45FwyrOW0LXtj6zS4nVtLf915rf 7ws/pgsbUlyWsSLYdE9QFmSNrKEN6q1/VvypLG4xaz+cUb2nipSexAmU0waEAwSP PgdRNuqJ/b9TW9bZcTwHbUOvpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8DmpbY egDl/QwA9WV7+3BWO3tNMB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTwc0is0OIgNLUdcUPSNt9liHV+Gf9JT0QmErP3d0lVJKlpg2fsWsp tpJVgD4WWdLb33gixSM87W9ntQGfVGxIyGPsgjgStz2/val8F9V7SN0QqZiJSrBK qRKA8pDVQXVekq0tB2eBl/VLFZ4RmaU91bP1z51+gyNbeJZoOwdkI/+e/B7PyOpJ ZF6W8Yt3t+CIVGMcTWdnEPQ8v3DeLhUJ+teXJK34XEo9jJrpKezIJGyO71ugr8Vd G0z3LAwcjBsxskzcxHB8AVVCH9AvNXG7Wa3eHkKOdE4vu93sWNi4rcAA2wEkIQFs VFut82CvcQe2hHEB2ELTNycSXPew5D9/ -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:01 2025 by rpki-client