$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: AToaXZO4GCpYoOXL2crwiDzCXBxAXJS+etI3sBwNPJE= Subject key identifier: 8A:E6:49:FE:30:E3:53:EF:65:07:A6:6B:39:09:D4:B3:FB:D1:16:80 Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: 013C Signing time: Mon 11 Aug 2025 04:32:12 +0000 Manifest this update: Mon 11 Aug 2025 04:32:11 +0000 Manifest next update: Mon 18 Aug 2025 04:32:11 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: 1s59U1rNUIHugfXiTVF9K6IV7BQQVMbg2RlVO1aLZ78=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: JGrOdZpDBctOporBnF3GYO8HL0N2P5Uu07r/sZBPWI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: Aug 11 04:32:11 2025 GMT Not After : Aug 18 04:32:11 2025 GMT Subject: CN=6899724b-b1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:1f:24:66:35:19:1d:da:45:ab:04:85:3f: 32:5a:69:10:cb:cc:50:72:2d:ac:66:63:da:d5:a6: 17:5b:3e:1f:c2:e7:03:2d:4a:33:f0:a2:9f:ad:f5: 04:fc:19:00:ea:48:e2:e7:42:c8:69:bd:34:96:ea: e1:72:10:c1:5a:e3:14:cb:3e:2d:52:f7:2d:11:16: b0:36:e0:52:8e:9c:8a:30:a0:fb:18:dc:9c:a4:c3: 6e:37:b7:49:c8:b1:34:dd:93:40:81:13:44:f5:5b: 99:c4:b4:33:64:89:8a:d0:50:53:60:d8:a0:83:b0: 49:a3:a5:74:f4:ca:03:93:66:dd:98:d9:34:c5:7b: 8e:d1:54:f4:af:c5:a8:77:1c:3f:71:38:77:c2:fc: e7:31:e4:88:cf:71:5d:00:75:fc:37:f5:2d:30:c7: 46:4d:2b:bd:7b:32:88:6b:a3:29:9e:7b:85:a8:cc: 83:26:34:62:b0:21:a3:54:d3:9d:ea:d4:69:05:cd: 1a:d8:29:c0:30:48:b7:8c:72:71:59:61:93:98:58: 75:32:d5:0b:29:11:28:bf:b2:c6:f6:a6:23:55:f0: 34:86:84:63:41:b2:1e:3e:34:fe:27:9e:3f:1a:4e: e9:de:37:2e:20:48:83:44:9a:18:7d:b1:40:ab:68: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E6:49:FE:30:E3:53:EF:65:07:A6:6B:39:09:D4:B3:FB:D1:16:80 X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:5d:cc:7b:81:28:fd:a3:a4:0a:4f:91:c3:77:88:9a:fd:95: 6b:da:f0:3b:74:7d:c5:31:73:00:c1:4d:d1:8d:74:17:47:5c: 2f:b3:77:29:98:1b:aa:06:21:15:96:2c:f3:67:12:af:bd:9c: 86:ab:8e:40:c3:46:8b:45:d2:3f:3f:ac:57:a3:43:81:d0:df: 27:13:a0:cd:35:ad:6f:8c:86:ab:64:57:94:5d:1f:1c:63:87: 40:b1:79:eb:d7:d8:ec:1a:18:8c:57:78:03:ed:a8:4b:bd:9b: 9a:40:84:3e:53:7c:6f:ee:85:65:8a:82:98:cd:4c:2b:a8:a4: 1a:77:45:da:6f:89:41:50:55:6c:e3:f1:15:f2:1a:68:97:ff: 76:a6:0d:26:8f:1d:4f:f7:91:4e:7b:75:92:fa:a4:83:e8:02: 34:78:95:b1:6c:88:33:19:7b:43:54:9f:ed:09:de:1f:3a:63: de:fa:fb:fe:52:b1:ca:d8:e8:d4:ed:b6:75:54:f2:4a:6b:06: 3c:18:4a:d5:a1:d2:09:b3:6a:20:c3:a0:31:3d:01:5e:e4:55: 9c:2f:97:ec:8d:cf:7f:4c:5e:2b:eb:53:38:60:f7:e9:d3:67: 24:0a:4c:9b:44:74:21:16:96:c7:a8:42:97:f1:cd:8f:57:b5: 1a:06:f1:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RDcxMTAvBgNVBAUTKDcyOTM1NUFBMDM3OEY2RDRGNDA1NkU2NjI2QkJDOUJF MzBDOUQ4RjAwHhcNMjUwODExMDQzMjExWhcNMjUwODE4MDQzMjExWjAYMRYwFAYD VQQDEw02ODk5NzI0Yi1iMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyq8fJGY1GR3aRasEhT8yWmkQy8xQci2sZmPa1aYXWz4fwucDLUoz8KKfrfUE /BkA6kji50LIab00lurhchDBWuMUyz4tUvctERawNuBSjpyKMKD7GNycpMNuN7dJ yLE03ZNAgRNE9VuZxLQzZImK0FBTYNigg7BJo6V09MoDk2bdmNk0xXuO0VT0r8Wo dxw/cTh3wvznMeSIz3FdAHX8N/UtMMdGTSu9ezKIa6MpnnuFqMyDJjRisCGjVNOd 6tRpBc0a2CnAMEi3jHJxWWGTmFh1MtULKREov7LG9qYjVfA0hoRjQbIePjT+J54/ Gk7p3jcuIEiDRJoYfbFAq2gkHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrmSf4w 41PvZQemazkJ1LP70RaAMB8GA1UdIwQYMBaAFHKTVaoDePbU9AVuZia7yb4wydjw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVENy80MEY5RUZBNDhG RDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0VDBCVzVtSnJ2SnZqREoy UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVENy80MEY5RUZBNDhGRDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0 VDBCVzVtSnJ2SnZqREoyUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHXcx7gSj9o6QKT5HDd4ia/ZVr2vA7dH3FMXMAwU3RjXQXR1wvs3cp mBuqBiEVlizzZxKvvZyGq45Aw0aLRdI/P6xXo0OB0N8nE6DNNa1vjIarZFeUXR8c Y4dAsXnr19jsGhiMV3gD7ahLvZuaQIQ+U3xv7oVlioKYzUwrqKQad0Xab4lBUFVs 4/EV8hpol/92pg0mjx1P95FOe3WS+qSD6AI0eJWxbIgzGXtDVJ/tCd4fOmPe+vv+ UrHK2OjU7bZ1VPJKawY8GErVodIJs2ogw6AxPQFe5FWcL5fsjc9/TF4r61M4YPfp 02ckCkybRHQhFpbHqEKX8c2PV7UaBvH3 -----END CERTIFICATE-----Generated at Mon Aug 11 12:56:30 2025 by rpki-client