$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json) Hash identifier: 5NOqGN+Yw/cvcaip1HlJ9yBdo5NKP5cCO7WPw3U1liA= Subject key identifier: 8F:57:41:3F:92:05:F6:21:3E:57:AF:A1:99:96:94:CD:33:FD:9B:D5 Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft Manifest number: 01BD Signing time: Sat 23 Aug 2025 03:09:30 +0000 Manifest this update: Sat 23 Aug 2025 03:09:30 +0000 Manifest next update: Sat 30 Aug 2025 03:09:30 +0000 Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: FsC+wZY5GHOEgmZMa9yjdfDGIrLhQt4hk6whdoUS28w=) 2: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: 3MNDiBeknSHzY93vsrPzAAHGYu/SDVnN9ctSXpKt+Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Validity Not Before: Aug 23 03:09:30 2025 GMT Not After : Aug 30 03:09:30 2025 GMT Subject: CN=68a930ea-3830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:81:7e:3b:0d:f1:88:5b:08:ba:8b:8e:fc: 33:0a:dc:c5:e8:9f:ea:37:72:4e:83:de:c7:2f:fc: 3b:cb:fa:01:0c:07:b3:15:62:0b:72:97:9c:f9:26: 9f:d3:3a:d1:29:c5:c4:ea:01:dd:51:ce:4a:6a:37: 0b:ef:bf:27:25:03:6a:c0:59:39:13:5c:1e:af:87: 53:91:80:6b:13:13:ff:21:6c:ac:99:ee:39:ad:b2: 9e:49:de:fe:9b:42:d0:d9:63:44:8b:1f:2f:c4:67: 93:72:7a:4a:e6:b8:a8:b6:0d:0d:17:bf:fc:6f:2a: b6:2c:3b:7a:74:57:05:e3:14:ba:bc:3e:40:ed:bf: 72:d7:77:14:3f:36:7e:f8:53:2a:29:18:97:5d:4b: 09:7a:3a:8a:77:4c:36:f8:8d:70:41:15:55:68:f3: 43:72:46:7d:ab:ff:d7:00:65:5a:24:bf:46:e7:7e: 50:6c:a6:e4:a8:d6:c9:f2:00:75:13:51:df:c5:62: 8f:4a:14:b5:9f:50:0f:98:46:4e:7a:d0:11:02:ec: 19:68:aa:1c:6d:1c:05:db:2f:06:58:94:ae:fd:fe: 63:8d:09:31:74:f8:60:90:cc:be:d0:e8:62:34:ef: a0:02:b5:1b:d7:35:fb:df:0e:b3:54:13:4e:88:6c: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:57:41:3F:92:05:F6:21:3E:57:AF:A1:99:96:94:CD:33:FD:9B:D5 X509v3 Authority Key Identifier: keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:38:76:ed:64:0f:ea:cd:d7:a1:64:4e:58:da:37:c8:15:ec: 6e:63:e6:8c:ac:5b:cd:39:c0:0e:02:9d:93:47:e2:87:9b:e9: df:7e:36:e0:79:1c:e7:54:eb:7a:a5:fe:e8:2e:f5:6f:bb:d3: ad:a1:60:89:a4:b6:b5:80:04:66:de:95:3e:3a:c1:61:9b:f6: 1c:16:d1:62:41:b8:44:11:8b:29:29:a8:d9:16:4d:ab:df:90: 89:ff:d9:d7:e0:40:52:96:eb:94:9b:43:8f:d0:6d:94:2a:53: 4a:39:74:62:86:84:f4:26:78:96:0b:12:a0:e6:8b:22:cb:05: c5:72:3b:c8:56:6c:6b:1e:ec:bb:57:10:6b:6c:f1:97:83:16: 92:f5:f0:7f:bd:4a:de:41:dc:f7:5a:fb:ba:9a:6b:27:82:7a: 09:d1:49:a6:63:f1:2f:c6:23:a7:b7:7d:c7:b2:92:5b:71:0f: f0:d3:d3:d5:30:a7:80:d3:3f:58:6a:b4:55:70:c3:1b:0c:38: 51:7d:6f:f5:2d:5e:37:bd:13:c8:b5:6a:8d:35:97:fa:2d:76: 93:a3:c0:cd:14:5f:ff:e3:4d:d2:76:22:ae:ce:3a:1d:60:12: a8:c2:3e:39:3b:f9:8a:dc:41:62:d7:cc:33:d3:89:f7:31:be: 80:d4:3a:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NzcxMTAvBgNVBAUTKDBBOTUzODUyN0RBNTMyRkUzMUQ3NTBEMTM2OTZFNUNF QUYyQTlCQ0YwHhcNMjUwODIzMDMwOTMwWhcNMjUwODMwMDMwOTMwWjAYMRYwFAYD VQQDEw02OGE5MzBlYS0zODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT+BfjsN8YhbCLqLjvwzCtzF6J/qN3JOg97HL/w7y/oBDAezFWILcpec+Saf 0zrRKcXE6gHdUc5KajcL778nJQNqwFk5E1wer4dTkYBrExP/IWysme45rbKeSd7+ m0LQ2WNEix8vxGeTcnpK5riotg0NF7/8byq2LDt6dFcF4xS6vD5A7b9y13cUPzZ+ +FMqKRiXXUsJejqKd0w2+I1wQRVVaPNDckZ9q//XAGVaJL9G535QbKbkqNbJ8gB1 E1HfxWKPShS1n1APmEZOetARAuwZaKocbRwF2y8GWJSu/f5jjQkxdPhgkMy+0Ohi NO+gArUb1zX73w6zVBNOiGz7GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9XQT+S BfYhPlevoZmWlM0z/ZvVMB8GA1UdIwQYMBaAFAqVOFJ9pTL+MddQ0TaW5c6vKpvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY3Ny82NDU3REZEOEQ4 MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12NHgxMURSTnBibHpxOHFt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwVTRVbjJsTXY0eDExRFJOcGJsenE4cW04OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY3Ny82NDU3REZEOEQ4MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12 NHgxMURSTnBibHpxOHFtODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCOHbtZA/qzdehZE5Y2jfIFexuY+aMrFvNOcAOAp2TR+KHm+nffjbg eRznVOt6pf7oLvVvu9OtoWCJpLa1gARm3pU+OsFhm/YcFtFiQbhEEYspKajZFk2r 35CJ/9nX4EBSluuUm0OP0G2UKlNKOXRihoT0JniWCxKg5osiywXFcjvIVmxrHuy7 VxBrbPGXgxaS9fB/vUreQdz3Wvu6mmsngnoJ0UmmY/EvxiOnt33HspJbcQ/w09PV MKeA0z9YarRVcMMbDDhRfW/1LV43vRPItWqNNZf6LXaTo8DNFF//403SdiKuzjod YBKowj45O/mK3EFi18wz04n3Mb6A1DqI -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:41 2025 by rpki-client