$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: A6iuRIRlsFSdoyFQvk4btRVvY1xWdgf/ORUtRY47pNg= Subject key identifier: 3A:5B:89:D5:FF:3F:DB:3E:45:91:47:83:9C:05:B4:67:1D:0E:99:6F Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0B1A Signing time: Sat 18 Oct 2025 20:14:20 +0000 Manifest this update: Sat 18 Oct 2025 20:14:19 +0000 Manifest next update: Sat 25 Oct 2025 20:14:19 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: mo99WelC0BNmdxr9A+PpLJIujNJrX9WHj8lvA+ky9fY=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: A/a0M5805rjTnXrE1n/14FN5oLiy6+lmzg+Var9FAeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2856 (0xb28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Oct 18 20:14:19 2025 GMT Not After : Oct 25 20:14:19 2025 GMT Subject: CN=68f3f51c-6a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4f:b2:4b:99:23:a9:a7:e6:86:08:6f:99:ab: 96:91:38:e7:d6:07:70:88:5c:8c:6c:9d:f0:39:c2: ab:ce:fc:e4:d8:ba:c1:01:e3:40:f4:81:27:16:2a: 75:e7:a8:a5:78:98:9a:86:58:64:19:4b:64:9d:de: c5:72:04:da:a8:8e:cd:a1:a4:9e:d6:8d:85:2b:8c: 6c:17:d8:ba:01:10:1a:11:1f:59:24:21:52:ca:36: d5:2d:c1:f4:21:bd:63:a7:19:08:49:3b:de:58:e7: 1d:52:cf:fc:59:a1:fb:c4:fe:9e:78:4f:7b:e1:67: bc:d1:2a:f5:07:cb:3a:fc:b5:7d:2e:22:7a:be:1d: 1a:2f:26:e9:dd:d5:ac:5b:ae:80:a7:8b:e5:c7:0e: b7:f2:de:57:83:c0:f0:ee:1a:32:24:f8:d1:89:d3: 87:25:ad:34:e4:a1:ea:49:b3:fb:6c:bf:a0:40:96: 68:4d:28:70:8e:34:d9:1a:92:27:bc:91:0f:27:db: 3c:af:28:9a:4a:6c:fa:e8:d9:8e:2b:0d:8c:e1:1f: d4:f8:59:32:d2:ef:71:61:79:ce:e1:dc:38:bb:28: 44:1a:5e:a4:80:a5:3a:d0:a2:30:76:14:95:75:c4: c2:46:4c:19:17:57:03:3f:44:6d:b7:6a:90:93:0b: d4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5B:89:D5:FF:3F:DB:3E:45:91:47:83:9C:05:B4:67:1D:0E:99:6F X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b8:0f:6e:f4:b8:27:5a:0d:b0:52:84:2a:f2:44:a0:84:c3: 7c:75:38:80:f0:fe:fe:46:a0:7c:7b:ac:39:78:d8:83:54:3e: 15:97:04:35:59:eb:b4:ad:d6:00:e8:7c:02:85:62:25:42:dc: c0:8f:07:64:c1:ca:86:a3:5a:f3:bc:1a:90:68:d0:02:06:4c: 30:2d:23:15:6a:bc:a9:03:50:6b:6a:71:c6:11:5d:a3:f2:ba: 9b:76:b2:56:2c:72:8c:ec:1e:93:25:5e:d3:f4:1d:58:46:f2: a0:ff:4b:7a:6b:6b:97:f0:8b:89:cf:cd:31:63:95:6a:64:b0: 0c:80:96:29:ef:89:16:6d:35:a5:97:2a:d1:37:9a:73:f4:eb: 51:1c:b8:2a:0b:40:9e:d6:1a:8b:07:df:5e:7e:1a:32:10:09: 0c:aa:3a:8d:fa:f5:31:34:a4:35:b5:b1:dd:67:b3:80:e7:b9: ca:36:6f:3d:c0:c3:aa:52:ac:5f:d4:30:90:33:d4:8c:2a:24: 1d:91:d2:da:53:f4:c1:93:ef:4f:e3:2f:03:bb:41:c2:df:7c: 71:8f:80:69:32:a7:8b:ed:9a:4b:02:34:99:81:88:9c:e8:fd: ff:f8:fb:97:17:86:b7:4f:07:68:05:b5:9d:2f:0e:ba:60:29: cb:95:22:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjUxMDE4MjAxNDE5WhcNMjUxMDI1MjAxNDE5WjAYMRYwFAYD VQQDEw02OGYzZjUxYy02YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoU+yS5kjqafmhghvmauWkTjn1gdwiFyMbJ3wOcKrzvzk2LrBAeNA9IEnFip1 56ileJiahlhkGUtknd7FcgTaqI7NoaSe1o2FK4xsF9i6ARAaER9ZJCFSyjbVLcH0 Ib1jpxkISTveWOcdUs/8WaH7xP6eeE974We80Sr1B8s6/LV9LiJ6vh0aLybp3dWs W66Ap4vlxw638t5Xg8Dw7hoyJPjRidOHJa005KHqSbP7bL+gQJZoTShwjjTZGpIn vJEPJ9s8ryiaSmz66NmOKw2M4R/U+Fky0u9xYXnO4dw4uyhEGl6kgKU60KIwdhSV dcTCRkwZF1cDP0Rtt2qQkwvUPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpbidX/ P9s+RZFHg5wFtGcdDplvMB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIuA9u9LgnWg2wUoQq8kSghMN8dTiA8P7+RqB8e6w5eNiDVD4VlwQ1 Weu0rdYA6HwChWIlQtzAjwdkwcqGo1rzvBqQaNACBkwwLSMVarypA1BranHGEV2j 8rqbdrJWLHKM7B6TJV7T9B1YRvKg/0t6a2uX8IuJz80xY5VqZLAMgJYp74kWbTWl lyrRN5pz9OtRHLgqC0Ce1hqLB99efhoyEAkMqjqN+vUxNKQ1tbHdZ7OA57nKNm89 wMOqUqxf1DCQM9SMKiQdkdLaU/TBk+9P4y8Du0HC33xxj4BpMqeL7ZpLAjSZgYic 6P3/+PuXF4a3TwdoBbWdLw66YCnLlSJg -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:07 2025 by rpki-client