$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json) Hash identifier: zki3K3gYDd8CNvboD7TTLOO/ATIf24zv7m2UAYXXXoo= Subject key identifier: DF:BE:E9:1D:02:93:85:CA:E0:FD:94:29:B6:7B:03:FC:2F:9C:38:74 Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft Manifest number: 01DA Signing time: Sun 19 Oct 2025 05:11:33 +0000 Manifest this update: Sun 19 Oct 2025 05:11:32 +0000 Manifest next update: Sun 26 Oct 2025 05:11:32 +0000 Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: FICcHvijqWJJWcg2IuI7qMAH5tFTxyD9CSpZEW74yXc=) 2: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: 3MNDiBeknSHzY93vsrPzAAHGYu/SDVnN9ctSXpKt+Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Validity Not Before: Oct 19 05:11:32 2025 GMT Not After : Oct 26 05:11:32 2025 GMT Subject: CN=68f47305-3e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c5:4e:03:14:78:23:6a:d5:d5:e9:23:22:c4: ee:1f:40:4e:d2:4a:5e:74:22:13:af:1a:a9:5e:99: e3:45:10:ce:70:f2:09:84:cf:70:b1:f9:c0:31:63: c0:7e:01:13:87:db:7d:b2:b0:95:09:af:9a:14:f5: ef:b3:70:80:bb:e2:15:9a:69:9d:5a:e5:5b:7c:30: b6:0a:53:b5:23:5e:36:19:ae:20:80:ef:e5:bb:5c: f0:30:58:5a:2d:86:d4:8e:7a:aa:b5:2b:74:d1:d8: f2:0d:e1:1b:3f:54:52:ed:b0:28:73:00:40:12:2a: b7:1f:73:2c:2f:63:8b:5f:f5:72:f5:56:6e:92:e8: c9:79:eb:6a:32:e0:9e:39:3a:2f:65:9e:22:5b:34: 24:84:a6:95:55:89:34:c5:d9:eb:08:be:19:e7:43: 8b:54:34:0c:e1:4c:7d:55:11:89:56:2d:d0:a8:c7: 70:83:a8:8e:41:68:c5:f0:fc:7f:4a:2b:18:bf:25: 49:42:58:32:27:08:e6:c8:36:e8:4b:50:2d:03:a3: f0:95:4d:f1:e9:9d:9c:c5:3f:41:43:06:a1:6a:b2: f1:b9:1b:63:6d:73:f8:0b:36:1f:67:fe:e8:9a:53: d4:51:24:6e:28:fb:b1:2b:3c:96:06:c0:03:95:57: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BE:E9:1D:02:93:85:CA:E0:FD:94:29:B6:7B:03:FC:2F:9C:38:74 X509v3 Authority Key Identifier: keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:7c:43:72:be:69:00:4c:70:cc:44:bf:08:c3:e3:e4:eb:bc: 2a:a3:6e:36:3b:2f:4a:ee:42:60:e7:0e:47:88:88:97:ed:1b: 30:e0:6f:91:56:0a:9d:01:a4:f7:95:a6:3c:8e:84:f7:41:fe: 6c:91:66:b1:0c:b3:20:c4:61:4d:74:00:ed:30:f3:76:c2:8c: df:c5:0c:40:00:41:9c:ed:c7:78:12:53:fc:2a:58:02:9d:4d: 32:e7:bf:42:7a:4e:3f:36:5a:0c:41:3f:a9:02:b0:aa:5e:31: 6a:01:28:63:b1:55:f2:54:5f:77:a2:e1:0d:d7:44:9b:72:3a: 53:77:78:ff:57:57:61:2b:b4:bc:86:c7:ed:07:50:9f:d9:34: 7b:24:13:2a:18:61:a0:82:1b:30:b0:00:5c:7c:8b:c4:28:84: 96:6d:92:f6:20:c0:4d:0b:ab:29:5a:e3:d0:24:18:ee:58:e4: 5e:86:e0:45:bf:53:61:0b:7e:8a:15:82:e4:ab:59:84:1f:de: 00:0a:1d:3a:00:3a:4b:cd:3b:06:c4:e6:b6:ae:d9:88:e2:2b: f2:a0:e2:9c:35:ae:b8:42:79:1f:f0:1e:1e:e8:6d:a4:43:5a: 26:f0:81:f6:14:e6:a3:4d:7f:af:46:db:f6:8b:ce:90:56:1d: 0f:18:8a:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NzcxMTAvBgNVBAUTKDBBOTUzODUyN0RBNTMyRkUzMUQ3NTBEMTM2OTZFNUNF QUYyQTlCQ0YwHhcNMjUxMDE5MDUxMTMyWhcNMjUxMDI2MDUxMTMyWjAYMRYwFAYD VQQDEw02OGY0NzMwNS0zZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58VOAxR4I2rV1ekjIsTuH0BO0kpedCITrxqpXpnjRRDOcPIJhM9wsfnAMWPA fgETh9t9srCVCa+aFPXvs3CAu+IVmmmdWuVbfDC2ClO1I142Ga4ggO/lu1zwMFha LYbUjnqqtSt00djyDeEbP1RS7bAocwBAEiq3H3MsL2OLX/Vy9VZukujJeetqMuCe OTovZZ4iWzQkhKaVVYk0xdnrCL4Z50OLVDQM4Ux9VRGJVi3QqMdwg6iOQWjF8Px/ SisYvyVJQlgyJwjmyDboS1AtA6PwlU3x6Z2cxT9BQwaharLxuRtjbXP4CzYfZ/7o mlPUUSRuKPuxKzyWBsADlVf5SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN++6R0C k4XK4P2UKbZ7A/wvnDh0MB8GA1UdIwQYMBaAFAqVOFJ9pTL+MddQ0TaW5c6vKpvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY3Ny82NDU3REZEOEQ4 MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12NHgxMURSTnBibHpxOHFt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwVTRVbjJsTXY0eDExRFJOcGJsenE4cW04OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY3Ny82NDU3REZEOEQ4MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12 NHgxMURSTnBibHpxOHFtODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjfENyvmkATHDMRL8Iw+Pk67wqo242Oy9K7kJg5w5HiIiX7Rsw4G+R VgqdAaT3laY8joT3Qf5skWaxDLMgxGFNdADtMPN2wozfxQxAAEGc7cd4ElP8KlgC nU0y579Cek4/NloMQT+pArCqXjFqAShjsVXyVF93ouEN10SbcjpTd3j/V1dhK7S8 hsftB1Cf2TR7JBMqGGGgghswsABcfIvEKISWbZL2IMBNC6spWuPQJBjuWORehuBF v1NhC36KFYLkq1mEH94ACh06ADpLzTsGxOa2rtmI4ivyoOKcNa64Qnkf8B4e6G2k Q1om8IH2FOajTX+vRtv2i86QVh0PGIrA -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:52 2025 by rpki-client