$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: osufJY1T+4BK/y07yJveH57bbgxETZwmSZTGobudyHk= Subject key identifier: 2A:05:6E:6B:69:CB:DB:94:C2:47:02:3C:74:C9:2E:43:F8:20:9D:FC Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: 0142 Signing time: Sat 23 Aug 2025 04:27:36 +0000 Manifest this update: Sat 23 Aug 2025 04:27:35 +0000 Manifest next update: Sat 30 Aug 2025 04:27:35 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: g75sTgQ1v9v2KG9OmgS15vBVMOmbiQVHzbN/rVXJP+Y=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: JGrOdZpDBctOporBnF3GYO8HL0N2P5Uu07r/sZBPWI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: Aug 23 04:27:35 2025 GMT Not After : Aug 30 04:27:35 2025 GMT Subject: CN=68a94338-cf8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1a:eb:6c:f8:ba:ba:a8:35:5a:9c:c0:79:2a: 3e:dd:6b:58:4a:22:b4:cf:5d:29:16:5b:3c:7b:b8: b9:0b:06:44:d0:2b:f8:cf:bf:54:d3:65:99:72:c2: 0f:80:3a:56:8b:21:62:2a:ff:9c:c7:6a:66:f6:c9: 66:00:82:9c:d9:72:9d:20:3a:07:aa:9c:a8:0a:b5: 17:50:24:da:c3:5e:2c:2b:e2:2f:2c:24:51:7f:9a: e4:ce:ad:23:8f:d6:da:b0:8a:a9:f9:98:24:2b:fc: 33:12:d6:ae:e5:aa:cd:22:8c:b0:c2:dd:b4:1e:38: d7:24:d1:88:e7:92:21:cd:fe:67:5a:9b:25:ba:67: 56:6a:46:a6:65:93:cd:b1:c2:5c:5f:83:12:8c:7b: 93:a1:88:bf:a0:71:d6:69:44:b1:5c:a7:e4:2b:38: 96:65:28:da:39:03:bf:68:99:e8:32:47:5a:7a:44: 9e:4a:9b:cd:5a:82:bd:e4:db:a6:7c:77:c4:53:a9: 78:38:65:63:5c:dd:e9:ff:e2:a0:19:49:f7:7b:31: 24:dc:36:36:bf:18:b5:b9:50:19:10:60:0e:4b:24: 10:f1:c5:c9:f6:6a:fe:79:26:28:34:b5:77:b8:b5: 6d:04:a6:04:27:f5:51:6e:69:92:b6:60:e1:6f:c7: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:05:6E:6B:69:CB:DB:94:C2:47:02:3C:74:C9:2E:43:F8:20:9D:FC X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9b:59:19:ec:fc:28:01:83:94:16:93:d3:22:2f:b2:02:bd: 7f:85:9e:e8:ac:3c:2d:0b:41:55:dd:3b:31:f4:ea:c8:a5:f6: ea:57:b5:4d:79:07:48:4e:d3:65:45:b5:dc:e7:2f:60:9e:92: 60:94:1b:64:b1:4d:2f:ec:ed:ab:b0:6f:8c:0e:07:d4:9b:eb: ce:c1:6a:9b:8b:89:62:1e:39:0f:b3:0c:93:27:ce:44:db:d4: cd:cc:93:99:0c:b6:5a:e1:4f:8f:e9:19:b8:8b:76:03:41:6c: a8:53:ca:23:07:75:70:01:6d:01:74:5e:76:05:94:61:8c:ac: 05:a9:9e:cc:af:9a:4c:26:3f:c9:df:55:8b:fa:d8:c8:5b:17: b5:a5:2c:4b:46:eb:d2:d4:2b:fb:06:6d:f5:30:67:57:41:78: b5:28:9b:c3:73:10:93:07:b2:d4:ba:92:4e:14:ce:84:3f:34: c9:07:d8:ca:ed:41:3b:71:4a:23:1e:98:5f:be:b3:37:d4:1d: ab:b3:19:34:ab:d8:bb:76:c0:d6:f0:d2:0e:55:8f:25:ed:69: 80:3b:bd:79:23:ae:4a:c8:44:cb:ef:f8:05:1e:1e:25:e9:72: 63:47:1f:e7:80:9c:25:e9:45:5d:68:63:b0:08:96:c9:44:dc: d2:95:90:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RDcxMTAvBgNVBAUTKDcyOTM1NUFBMDM3OEY2RDRGNDA1NkU2NjI2QkJDOUJF MzBDOUQ4RjAwHhcNMjUwODIzMDQyNzM1WhcNMjUwODMwMDQyNzM1WjAYMRYwFAYD VQQDEw02OGE5NDMzOC1jZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xrrbPi6uqg1WpzAeSo+3WtYSiK0z10pFls8e7i5CwZE0Cv4z79U02WZcsIP gDpWiyFiKv+cx2pm9slmAIKc2XKdIDoHqpyoCrUXUCTaw14sK+IvLCRRf5rkzq0j j9basIqp+ZgkK/wzEtau5arNIoywwt20HjjXJNGI55Ihzf5nWpslumdWakamZZPN scJcX4MSjHuToYi/oHHWaUSxXKfkKziWZSjaOQO/aJnoMkdaekSeSpvNWoK95Num fHfEU6l4OGVjXN3p/+KgGUn3ezEk3DY2vxi1uVAZEGAOSyQQ8cXJ9mr+eSYoNLV3 uLVtBKYEJ/VRbmmStmDhb8f/owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoFbmtp y9uUwkcCPHTJLkP4IJ38MB8GA1UdIwQYMBaAFHKTVaoDePbU9AVuZia7yb4wydjw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVENy80MEY5RUZBNDhG RDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0VDBCVzVtSnJ2SnZqREoy UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVENy80MEY5RUZBNDhGRDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0 VDBCVzVtSnJ2SnZqREoyUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsm1kZ7PwoAYOUFpPTIi+yAr1/hZ7orDwtC0FV3Tsx9OrIpfbqV7VN eQdITtNlRbXc5y9gnpJglBtksU0v7O2rsG+MDgfUm+vOwWqbi4liHjkPswyTJ85E 29TNzJOZDLZa4U+P6Rm4i3YDQWyoU8ojB3VwAW0BdF52BZRhjKwFqZ7Mr5pMJj/J 31WL+tjIWxe1pSxLRuvS1Cv7Bm31MGdXQXi1KJvDcxCTB7LUupJOFM6EPzTJB9jK 7UE7cUojHphfvrM31B2rsxk0q9i7dsDW8NIOVY8l7WmAO715I65KyETL7/gFHh4l 6XJjRx/ngJwl6UVdaGOwCJbJRNzSlZCH -----END CERTIFICATE-----Generated at Sun Aug 24 03:36:14 2025 by rpki-client