$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: dxQZu4y320yGQsaZaxjmCxiuWoQrlWOpfxLj8sF8IBo= Subject key identifier: 57:3D:E4:48:98:6D:F6:96:76:2E:7A:3D:0C:7D:CA:CD:3D:4C:B7:D3 Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0AFD Signing time: Fri 22 Aug 2025 19:30:30 +0000 Manifest this update: Fri 22 Aug 2025 19:30:29 +0000 Manifest next update: Fri 29 Aug 2025 19:30:29 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: PinIZs4v2V3IOGdPgLyRARMyQVQH5NCo40dR/TtPruo=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: A/a0M5805rjTnXrE1n/14FN5oLiy6+lmzg+Var9FAeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2827 (0xb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Aug 22 19:30:29 2025 GMT Not After : Aug 29 19:30:29 2025 GMT Subject: CN=68a8c555-1dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:ce:12:d7:3f:68:4e:9f:b1:9e:34:2d:bf: 18:94:a7:ba:3c:61:25:7d:10:54:ab:b7:40:c8:33: a0:84:3a:18:2d:fa:81:ff:3d:74:e0:7a:a2:02:c8: 27:dd:ed:5f:d5:bb:e3:9a:60:3e:ba:9f:3a:43:32: ea:0c:89:43:20:43:85:c2:ba:45:3a:59:6f:82:55: cd:3b:04:2b:fd:d8:dc:73:fd:b7:f4:8e:5b:fd:65: d4:29:0d:d8:26:08:4a:7c:0a:68:ed:13:e1:65:0d: 47:ad:03:20:01:21:f8:2e:3d:3e:df:4d:40:29:fa: 33:f2:d6:ad:12:b8:88:aa:47:20:a7:95:00:8d:5b: 74:da:86:25:db:dc:c1:58:a7:d4:df:f9:ca:db:9b: 8e:53:74:d7:f1:a8:53:32:93:6a:ef:a8:5f:c7:41: ef:6d:75:b0:26:06:5d:16:d8:59:08:d3:a6:67:3f: 51:4f:52:c6:d6:a4:ab:46:59:50:0e:36:34:59:b8: 46:62:0f:7b:8c:1b:3d:2c:26:df:c4:3e:14:6e:69: 16:fc:07:82:95:36:67:a4:43:e2:9f:ed:09:35:1a: 4c:ef:5d:38:71:74:e4:d2:3f:10:c5:1b:7e:85:a7: d5:44:46:f8:da:f3:70:65:28:74:30:ae:8e:cc:3b: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3D:E4:48:98:6D:F6:96:76:2E:7A:3D:0C:7D:CA:CD:3D:4C:B7:D3 X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:41:a2:5b:5c:18:77:69:42:68:c3:4e:42:06:1a:a2:5f:85: a9:4e:1b:eb:08:5a:a7:7f:10:79:3f:de:7f:be:65:bd:d3:dc: 3e:f2:e2:2c:17:54:9a:1d:37:7f:25:7e:be:cb:a2:a1:a1:fd: fd:d4:e0:15:26:34:7d:01:c3:7e:31:f2:92:22:53:3e:5c:f6: 6b:5e:c3:f1:49:58:9c:b0:73:70:5a:21:43:92:7d:7f:5e:77: 8e:42:04:ea:87:e6:88:16:14:4a:98:aa:71:c1:25:87:8c:0e: a5:e3:d7:18:9a:6d:dd:b9:38:40:9a:2c:83:5c:7d:c9:d1:4d: 45:1f:0b:7f:76:41:fb:57:38:a7:b7:d5:59:14:c7:90:fd:18: 5c:ea:ba:5e:2d:2d:47:78:f2:03:ca:f1:3f:93:aa:42:93:24: 92:19:dd:dd:f7:ad:c6:0d:d0:32:c3:8f:ac:7b:59:03:9b:95: 85:0a:71:c7:16:5c:45:3c:6c:3d:01:1c:b5:51:dd:26:62:cb: 1d:00:12:b1:14:af:b9:69:53:f2:08:ac:10:ec:da:ac:a6:48: e0:e2:18:10:1a:ae:77:56:21:35:fc:4b:74:1e:a2:4c:34:3a: b2:ca:57:20:1d:cd:65:bf:5b:a4:93:49:47:3d:4e:61:30:ca: 8b:be:e9:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjUwODIyMTkzMDI5WhcNMjUwODI5MTkzMDI5WjAYMRYwFAYD VQQDEw02OGE4YzU1NS0xZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PXOEtc/aE6fsZ40Lb8YlKe6PGElfRBUq7dAyDOghDoYLfqB/z104HqiAsgn 3e1f1bvjmmA+up86QzLqDIlDIEOFwrpFOllvglXNOwQr/djcc/239I5b/WXUKQ3Y JghKfApo7RPhZQ1HrQMgASH4Lj0+301AKfoz8tatEriIqkcgp5UAjVt02oYl29zB WKfU3/nK25uOU3TX8ahTMpNq76hfx0HvbXWwJgZdFthZCNOmZz9RT1LG1qSrRllQ DjY0WbhGYg97jBs9LCbfxD4UbmkW/AeClTZnpEPin+0JNRpM7104cXTk0j8QxRt+ hafVREb42vNwZSh0MK6OzDvfAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFc95EiY bfaWdi56PQx9ys09TLfTMB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdQaJbXBh3aUJow05CBhqiX4WpThvrCFqnfxB5P95/vmW909w+8uIs F1SaHTd/JX6+y6Khof391OAVJjR9AcN+MfKSIlM+XPZrXsPxSVicsHNwWiFDkn1/ XneOQgTqh+aIFhRKmKpxwSWHjA6l49cYmm3duThAmiyDXH3J0U1FHwt/dkH7Vzin t9VZFMeQ/Rhc6rpeLS1HePIDyvE/k6pCkySSGd3d963GDdAyw4+se1kDm5WFCnHH FlxFPGw9ARy1Ud0mYssdABKxFK+5aVPyCKwQ7Nqspkjg4hgQGq53ViE1/Et0HqJM NDqyylcgHc1lv1ukk0lHPU5hMMqLvulS -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:36 2025 by rpki-client