$ rpki-client -vvf rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft File: cPp5EccBLljvn7BaVaTOb7Bgm88.mft (raw, json) Hash identifier: sBcAbdyx85KQTjZQaDIqiqlKDGHEpzPmY1qv7jVaR2g= Subject key identifier: 99:12:39:C2:F1:B0:87:34:D3:6B:42:A8:7D:3C:98:64:E2:0E:89:FC Authority key identifier: 70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF Certificate issuer: /CN=A9119465/serialNumber=70FA7911C7012E58EF9FB05A55A4CE6FB0609BCF Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft Manifest number: D2 Signing time: Sat 23 Aug 2025 05:50:12 +0000 Manifest this update: Sat 23 Aug 2025 05:50:11 +0000 Manifest next update: Sat 30 Aug 2025 05:50:11 +0000 Files and hashes: 1: cPp5EccBLljvn7BaVaTOb7Bgm88.crl (hash: xJ/sd7GbE9UuhnMslOnlGukKVjsCLAlio20t1Ct6j/s=) 2: F0C7266245D811EF9D851624C4F9AE02.roa (hash: SZIMeYcJUuIC8rNtcwaM/lfCvbj4vLmNtyjgG3i25mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.crl rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119465, serialNumber=70FA7911C7012E58EF9FB05A55A4CE6FB0609BCF Validity Not Before: Aug 23 05:50:11 2025 GMT Not After : Aug 30 05:50:11 2025 GMT Subject: CN=68a95693-e6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:eb:d6:09:6e:a9:67:e4:89:fc:5c:44:f9: 8b:9d:eb:d4:26:47:0d:2e:73:d2:1f:e5:d9:d9:5f: b0:eb:5f:56:29:12:3b:89:45:1d:6b:51:ba:11:b8: d2:bf:59:8a:d1:13:c2:c5:a1:af:8d:5a:6d:93:99: 48:4a:8b:99:93:b6:e3:c3:e0:1f:4c:dd:bd:62:ea: 40:9e:22:38:cd:77:af:d8:2f:a4:e2:2f:e7:48:98: 4a:35:da:91:46:3f:0a:2a:06:d6:4b:cb:46:cd:10: e3:4f:8d:32:7b:ec:d5:a8:c1:2d:ad:ab:17:17:95: 61:35:36:1f:88:da:fa:ef:8d:2c:b6:b1:4a:64:9b: d0:be:11:9b:66:a5:60:5a:e6:f2:0e:21:d5:0e:15: 57:fd:0a:a5:06:c7:87:af:85:23:d7:8f:8b:f3:3f: 7f:25:fe:97:60:96:f0:88:5c:6c:e3:66:bb:d5:cc: bb:2b:67:7f:42:37:8d:45:98:ab:bd:f9:3c:2b:df: be:04:d5:2c:6b:68:a9:4f:e7:a1:5f:17:91:0a:96: a7:8f:fe:68:a1:1e:2b:ca:dc:f4:85:03:b9:4d:76: c3:73:77:02:4f:c3:a1:c2:49:6b:b2:0d:27:e8:73: e9:d5:f7:f5:02:f1:1f:1f:f8:4e:bb:96:98:df:44: 73:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:12:39:C2:F1:B0:87:34:D3:6B:42:A8:7D:3C:98:64:E2:0E:89:FC X509v3 Authority Key Identifier: keyid:70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:52:65:fa:fa:cc:d8:32:2b:d8:67:0b:6b:f1:7e:c5:de:0d: 45:6d:ba:30:18:eb:38:4e:ac:4c:30:be:63:cf:23:f9:20:26: 89:53:81:24:99:4f:eb:f6:8b:6c:f6:9f:f5:2f:d2:15:86:ee: 82:3c:81:8a:12:04:45:0e:24:ae:ee:fc:4f:86:58:fb:ce:8b: 28:50:07:a0:ed:4f:66:27:1a:8c:1b:25:77:fd:5e:98:3c:f5: 82:da:f7:62:f5:c3:ce:8a:82:d3:12:59:6b:b4:fb:47:91:07: ef:8d:0f:a8:ba:58:03:e5:33:14:1a:5f:2e:4e:f4:e0:a8:e1: 7e:d9:ae:40:f9:2c:b1:c3:ac:cb:1b:08:fe:bf:ff:ab:78:9c: ff:01:68:88:7c:fb:9a:ed:a2:2e:5b:0e:04:44:2c:03:62:03: d0:aa:49:7b:7e:f8:b9:2a:bc:9b:a5:7b:62:70:69:6a:42:8e: b3:a4:d6:61:66:56:ec:e7:1e:47:7b:70:7f:8d:c9:85:d9:59: 9c:a5:57:5e:1f:96:2f:e5:cd:8d:23:a4:92:38:5d:ad:17:20: 55:d1:28:54:8a:4e:12:02:ff:69:da:cf:5b:15:39:bf:1d:b6: 92:43:15:c5:64:4c:d8:c2:8c:c2:33:70:b0:1a:b1:0a:d8:9d: 67:2b:10:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0NjUxMTAvBgNVBAUTKDcwRkE3OTExQzcwMTJFNThFRjlGQjA1QTU1QTRDRTZG QjA2MDlCQ0YwHhcNMjUwODIzMDU1MDExWhcNMjUwODMwMDU1MDExWjAYMRYwFAYD VQQDEw02OGE5NTY5My1lNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApR3r1gluqWfkifxcRPmLnevUJkcNLnPSH+XZ2V+w619WKRI7iUUda1G6EbjS v1mK0RPCxaGvjVptk5lISouZk7bjw+AfTN29YupAniI4zXev2C+k4i/nSJhKNdqR Rj8KKgbWS8tGzRDjT40ye+zVqMEtrasXF5VhNTYfiNr6740strFKZJvQvhGbZqVg WubyDiHVDhVX/QqlBseHr4Uj14+L8z9/Jf6XYJbwiFxs42a71cy7K2d/QjeNRZir vfk8K9++BNUsa2ipT+ehXxeRCpanj/5ooR4rytz0hQO5TXbDc3cCT8Ohwklrsg0n 6HPp1ff1AvEfH/hOu5aY30RzqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkSOcLx sIc002tCqH08mGTiDon8MB8GA1UdIwQYMBaAFHD6eRHHAS5Y75+wWlWkzm+wYJvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ2NS9EQzM2OEFDMjQ1 MkQxMUVGQURFRDYzNENDNEY5QUUwMi9jUHA1RWNjQkxsanZuN0JhVmFUT2I3Qmdt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQcDVFY2NCTGxqdm43QmFWYVRPYjdCZ204OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTQ2NS9EQzM2OEFDMjQ1MkQxMUVGQURFRDYzNENDNEY5QUUwMi9jUHA1RWNjQkxs anZuN0JhVmFUT2I3QmdtODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYUmX6+szYMivYZwtr8X7F3g1FbbowGOs4TqxMML5jzyP5ICaJU4Ek mU/r9ots9p/1L9IVhu6CPIGKEgRFDiSu7vxPhlj7zosoUAeg7U9mJxqMGyV3/V6Y PPWC2vdi9cPOioLTEllrtPtHkQfvjQ+oulgD5TMUGl8uTvTgqOF+2a5A+Syxw6zL Gwj+v/+reJz/AWiIfPua7aIuWw4ERCwDYgPQqkl7fvi5KrybpXticGlqQo6zpNZh Zlbs5x5He3B/jcmF2VmcpVdeH5Yv5c2NI6SSOF2tFyBV0ShUik4SAv9p2s9bFTm/ HbaSQxXFZEzYwozCM3CwGrEK2J1nKxCr -----END CERTIFICATE-----Generated at Sat Aug 23 20:18:55 2025 by rpki-client