$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: 8oJ7sG7mloyFLxN6wPCnNMPQXO3fBi92aNVUxRlvCzQ= Subject key identifier: BB:28:0F:6C:1A:17:A2:40:83:CA:07:64:9E:D5:5B:FB:6C:EC:1E:D2 Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: 0128 Signing time: Thu 03 Jul 2025 04:43:08 +0000 Manifest this update: Thu 03 Jul 2025 04:43:07 +0000 Manifest next update: Thu 10 Jul 2025 04:43:07 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: 1QyUqyWzHiScVU3Irhw9J0T2KyasvHeAIFvJYfVf+Tg=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: JGrOdZpDBctOporBnF3GYO8HL0N2P5Uu07r/sZBPWI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: Jul 3 04:43:07 2025 GMT Not After : Jul 10 04:43:07 2025 GMT Subject: CN=68660a5c-887f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4e:df:ca:c2:ca:54:4c:8f:c0:10:95:f8:8c: 46:5b:bd:04:53:ef:9b:a2:49:0f:6a:bf:4d:eb:39: 17:d5:91:66:11:5d:bb:5a:fb:0a:c4:e5:37:cd:d0: 2f:2e:28:e1:f2:73:27:37:fb:72:43:4a:b6:f0:a4: aa:1b:71:d7:28:93:9d:e8:61:43:86:98:f1:82:28: 06:67:a9:67:44:d8:93:a5:4e:9e:d0:cb:15:62:7e: 12:23:c7:6f:36:7a:05:fb:8f:ca:1e:22:80:13:47: 0e:0d:40:15:d3:e9:83:df:20:35:99:ab:3a:e6:4d: e7:8f:61:6a:68:59:95:fc:0c:64:bf:d1:20:56:02: da:29:f0:e0:2e:6d:44:02:83:92:ae:24:6d:94:24: 76:d1:0e:14:5a:c7:1e:bf:82:7e:af:c0:c2:45:5e: 90:1d:da:41:9e:e3:02:bb:db:23:de:9d:6b:66:c8: 53:0a:04:87:25:06:1b:e7:77:47:d9:ed:6b:6d:3c: 58:b0:e8:dc:88:d7:d3:bc:ff:ab:5b:82:66:00:59: 2d:31:f4:80:25:9c:4f:16:0c:fa:b5:90:41:b9:cf: d3:83:e3:7f:0e:ed:d8:84:f8:e6:45:71:e7:88:5d: e4:65:60:22:36:e8:57:b2:92:d2:c8:29:41:f8:8d: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:28:0F:6C:1A:17:A2:40:83:CA:07:64:9E:D5:5B:FB:6C:EC:1E:D2 X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:52:50:73:c8:57:b0:b3:ed:0c:28:a1:a2:9b:e4:bb:90:9f: b8:2a:c9:00:d0:3f:e4:4d:1c:1a:0f:f4:ae:ba:de:cf:7b:61: 3f:1a:bc:53:dd:cc:0e:77:da:be:55:d7:02:9e:ba:ae:54:24: d2:8a:14:4d:63:3e:af:af:86:9d:5a:8b:91:da:59:ac:a5:ee: fd:54:1a:0d:da:00:32:23:7c:cb:6c:28:c1:27:fe:b7:a4:21: 37:86:0e:6c:3b:15:98:70:b0:58:3f:f6:0c:8b:9f:52:70:8a: 4b:10:54:0b:47:51:31:98:b0:2a:c5:40:52:2f:18:d2:b9:50: d0:dd:37:e7:da:69:fb:52:5b:c9:f8:c9:ae:ba:aa:d4:9f:c7: e0:db:91:9f:15:c5:73:c5:61:b0:2e:c8:bc:65:9c:de:15:6a: 06:d9:5a:f7:db:69:3f:71:0f:d4:62:26:86:7d:19:d4:a8:69: 0d:05:fb:fc:72:6b:f1:e0:74:c2:ec:38:9e:97:98:01:ec:35: 07:0e:4f:51:8c:b8:52:23:53:55:e9:3d:a0:ed:28:33:3c:6e: a7:ba:40:a7:23:34:c7:8c:7e:26:84:8b:7a:1f:65:56:86:e6: 1e:e7:33:cd:78:e7:d1:d9:65:f1:6f:9a:04:4e:9d:e6:dc:aa: 93:de:03:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RDcxMTAvBgNVBAUTKDcyOTM1NUFBMDM3OEY2RDRGNDA1NkU2NjI2QkJDOUJF MzBDOUQ4RjAwHhcNMjUwNzAzMDQ0MzA3WhcNMjUwNzEwMDQ0MzA3WjAYMRYwFAYD VQQDEw02ODY2MGE1Yy04ODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA307fysLKVEyPwBCV+IxGW70EU++bokkPar9N6zkX1ZFmEV27WvsKxOU3zdAv Lijh8nMnN/tyQ0q28KSqG3HXKJOd6GFDhpjxgigGZ6lnRNiTpU6e0MsVYn4SI8dv NnoF+4/KHiKAE0cODUAV0+mD3yA1mas65k3nj2FqaFmV/Axkv9EgVgLaKfDgLm1E AoOSriRtlCR20Q4UWscev4J+r8DCRV6QHdpBnuMCu9sj3p1rZshTCgSHJQYb53dH 2e1rbTxYsOjciNfTvP+rW4JmAFktMfSAJZxPFgz6tZBBuc/Tg+N/Du3YhPjmRXHn iF3kZWAiNuhXspLSyClB+I1HewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsoD2wa F6JAg8oHZJ7VW/ts7B7SMB8GA1UdIwQYMBaAFHKTVaoDePbU9AVuZia7yb4wydjw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVENy80MEY5RUZBNDhG RDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0VDBCVzVtSnJ2SnZqREoy UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVENy80MEY5RUZBNDhGRDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0 VDBCVzVtSnJ2SnZqREoyUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9UlBzyFews+0MKKGim+S7kJ+4KskA0D/kTRwaD/Suut7Pe2E/GrxT 3cwOd9q+VdcCnrquVCTSihRNYz6vr4adWouR2lmspe79VBoN2gAyI3zLbCjBJ/63 pCE3hg5sOxWYcLBYP/YMi59ScIpLEFQLR1ExmLAqxUBSLxjSuVDQ3Tfn2mn7UlvJ +MmuuqrUn8fg25GfFcVzxWGwLsi8ZZzeFWoG2Vr322k/cQ/UYiaGfRnUqGkNBfv8 cmvx4HTC7Diel5gB7DUHDk9RjLhSI1NV6T2g7SgzPG6nukCnIzTHjH4mhIt6H2VW huYe5zPNeOfR2WXxb5oETp3m3KqT3gNr -----END CERTIFICATE-----Generated at Thu Jul 3 21:46:52 2025 by rpki-client