$ rpki-client -vvf rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft File: cPp5EccBLljvn7BaVaTOb7Bgm88.mft (raw, json) Hash identifier: RxAsXcOSLWGf4mZl1n8rp/thpE4oc8qP6jW47J4AHBk= Subject key identifier: 92:DE:A8:CB:9D:06:D9:F7:F1:6E:79:E6:DB:4F:D0:FF:43:12:19:08 Authority key identifier: 70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF Certificate issuer: /CN=A9119465/serialNumber=70FA7911C7012E58EF9FB05A55A4CE6FB0609BCF Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft Manifest number: CA Signing time: Thu 07 Aug 2025 06:20:23 +0000 Manifest this update: Thu 07 Aug 2025 06:20:22 +0000 Manifest next update: Thu 14 Aug 2025 06:20:22 +0000 Files and hashes: 1: cPp5EccBLljvn7BaVaTOb7Bgm88.crl (hash: 9cOjMHRiHRTco8UlIjYiMrlJIZKkzscDWNJY9W8vWv0=) 2: F0C7266245D811EF9D851624C4F9AE02.roa (hash: SZIMeYcJUuIC8rNtcwaM/lfCvbj4vLmNtyjgG3i25mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.crl rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119465, serialNumber=70FA7911C7012E58EF9FB05A55A4CE6FB0609BCF Validity Not Before: Aug 7 06:20:22 2025 GMT Not After : Aug 14 06:20:22 2025 GMT Subject: CN=689445a6-0966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:25:0b:03:23:bc:d7:b1:82:58:3b:d6:4b: ea:43:f2:ff:42:8e:3d:77:08:ec:86:06:b6:a0:d7: eb:a8:66:d3:e9:6e:bb:25:a0:fe:16:38:5c:58:04: 9d:a2:59:44:9d:c3:27:47:cb:79:d8:17:47:c2:cf: 0a:2c:57:83:b5:3e:ce:28:61:06:77:cc:28:a9:3b: e5:d3:65:ec:79:03:93:16:5e:01:a6:05:9f:e7:13: 4e:cc:e4:6d:09:ad:72:56:b2:65:4f:13:5b:e3:0a: 0b:e6:40:ac:d6:ca:8d:a1:41:13:f8:58:26:5c:d1: 90:a7:ac:6e:d1:02:02:69:9f:9b:ca:ca:48:0e:14: da:bf:44:c1:33:7c:50:fa:a7:e2:b6:a3:24:50:96: 06:6d:58:80:f4:c8:45:3e:e5:cd:85:7b:b6:40:66: 42:75:d3:70:4a:63:32:61:b9:2e:94:f2:72:e5:1e: e7:65:9e:4a:6c:11:1a:5b:11:05:c6:1a:f2:d4:1d: b6:cc:93:d3:26:4a:69:e7:e6:18:b4:93:5c:ca:aa: 13:1a:60:a3:ec:0a:0a:b9:9f:69:2f:b7:aa:98:04: 3b:6f:26:b9:b2:57:fc:8d:ee:63:85:2a:8e:a6:87: c1:a5:ef:a7:4d:3c:84:13:7a:4c:0e:ef:30:05:54: a3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DE:A8:CB:9D:06:D9:F7:F1:6E:79:E6:DB:4F:D0:FF:43:12:19:08 X509v3 Authority Key Identifier: keyid:70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:6a:0c:0a:3c:6a:3d:b9:c6:38:51:2c:88:cb:49:0a:10:92: 9c:93:3a:1d:51:10:ad:f6:7a:90:e8:9a:c5:0d:2a:53:e5:a3: a7:36:fb:07:d9:bf:ef:4f:3d:c7:6b:cb:3c:f9:01:6e:4a:bb: db:53:31:6f:a5:4c:b9:20:79:9e:2b:48:97:6c:fa:49:db:96: 0e:43:70:03:21:52:53:b1:15:25:00:cd:99:92:93:5f:d8:38: 8b:e4:7c:6a:14:a8:d1:e4:89:6b:9f:7a:7c:b7:7f:9a:fa:40: b6:20:01:fc:c8:2f:82:c9:10:26:9c:87:ea:41:60:91:3d:7d: 99:f9:3e:46:41:96:1b:35:1e:d1:44:99:69:2e:2b:07:c2:bf: 1f:bb:0c:af:4e:67:7f:0a:48:c5:99:17:ec:1d:23:43:35:6a: ba:74:eb:27:72:9b:8c:96:f1:3b:ac:40:e8:13:75:58:72:bf: e1:9f:82:38:43:0f:5d:8d:bf:5c:31:f8:ae:b8:6e:bf:19:1e: 17:56:bd:63:12:27:52:d9:77:c9:37:93:61:b9:7d:e8:8b:e2: 07:b8:4c:07:66:f7:34:84:55:07:c3:db:35:37:d5:63:6c:5a: 60:22:4a:0c:f1:b4:df:46:ce:53:e4:b0:df:ce:7a:1f:f6:7d: d4:a8:4c:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0NjUxMTAvBgNVBAUTKDcwRkE3OTExQzcwMTJFNThFRjlGQjA1QTU1QTRDRTZG QjA2MDlCQ0YwHhcNMjUwODA3MDYyMDIyWhcNMjUwODE0MDYyMDIyWjAYMRYwFAYD VQQDEw02ODk0NDVhNi0wOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqB0lCwMjvNexglg71kvqQ/L/Qo49dwjshga2oNfrqGbT6W67JaD+FjhcWASd ollEncMnR8t52BdHws8KLFeDtT7OKGEGd8woqTvl02XseQOTFl4BpgWf5xNOzORt Ca1yVrJlTxNb4woL5kCs1sqNoUET+FgmXNGQp6xu0QICaZ+byspIDhTav0TBM3xQ +qfitqMkUJYGbViA9MhFPuXNhXu2QGZCddNwSmMyYbkulPJy5R7nZZ5KbBEaWxEF xhry1B22zJPTJkpp5+YYtJNcyqoTGmCj7AoKuZ9pL7eqmAQ7bya5slf8je5jhSqO pofBpe+nTTyEE3pMDu8wBVSjmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLeqMud Btn38W555ttP0P9DEhkIMB8GA1UdIwQYMBaAFHD6eRHHAS5Y75+wWlWkzm+wYJvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ2NS9EQzM2OEFDMjQ1 MkQxMUVGQURFRDYzNENDNEY5QUUwMi9jUHA1RWNjQkxsanZuN0JhVmFUT2I3Qmdt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQcDVFY2NCTGxqdm43QmFWYVRPYjdCZ204OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTQ2NS9EQzM2OEFDMjQ1MkQxMUVGQURFRDYzNENDNEY5QUUwMi9jUHA1RWNjQkxs anZuN0JhVmFUT2I3QmdtODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtagwKPGo9ucY4USyIy0kKEJKckzodURCt9nqQ6JrFDSpT5aOnNvsH 2b/vTz3Ha8s8+QFuSrvbUzFvpUy5IHmeK0iXbPpJ25YOQ3ADIVJTsRUlAM2ZkpNf 2DiL5HxqFKjR5Ilrn3p8t3+a+kC2IAH8yC+CyRAmnIfqQWCRPX2Z+T5GQZYbNR7R RJlpLisHwr8fuwyvTmd/CkjFmRfsHSNDNWq6dOsncpuMlvE7rEDoE3VYcr/hn4I4 Qw9djb9cMfiuuG6/GR4XVr1jEidS2XfJN5NhuX3oi+IHuEwHZvc0hFUHw9s1N9Vj bFpgIkoM8bTfRs5T5LDfznof9n3UqEz+ -----END CERTIFICATE-----Generated at Fri Aug 8 19:22:36 2025 by rpki-client