$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: vaoKnZhC3VBIGrrrdyM+J0E0ILAFLs4kXkVlB498cDM= Subject key identifier: DA:19:6D:AD:CE:76:CA:8F:2A:D4:D1:DB:9C:3D:37:BF:81:50:EC:87 Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: 0169 Signing time: Wed 05 Nov 2025 04:04:08 +0000 Manifest this update: Wed 05 Nov 2025 04:04:07 +0000 Manifest next update: Wed 12 Nov 2025 04:04:07 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: 8zcRnNaJXIEbmbxxPLmFpYTm1gR+xhRHdIubE7qWP4k=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: ewSndXmGK4bIjd/hEYzsemW56YoGlHl9wDoTOirwBNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: Nov 5 04:04:07 2025 GMT Not After : Nov 12 04:04:07 2025 GMT Subject: CN=690accb7-3427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:56:2d:cf:be:ed:6f:f9:2d:b2:e9:c5:76: 0b:77:95:a7:05:b6:52:b6:24:0d:31:0b:9c:e3:a9: b8:82:f0:e4:a8:2f:64:90:15:97:4d:65:9d:90:80: 14:d2:b7:9b:97:ce:8a:af:eb:b7:c7:e3:11:e6:5f: 47:f9:08:72:c0:b1:ca:70:d4:57:04:0d:b2:dd:81: 96:c5:9f:ab:04:34:cd:e3:c7:46:74:2a:23:75:b6: 2a:75:94:81:25:0c:58:3d:e7:d9:72:a2:a8:31:30: 1c:8a:c0:24:28:b1:ac:99:f9:60:cc:25:0e:8d:fc: fa:05:63:58:02:ab:88:d3:43:fe:99:2d:ee:5e:60: 07:2f:c9:c6:3b:71:be:b0:69:31:97:b1:17:f2:bf: cb:49:6d:2e:f8:16:05:7d:ed:a7:1b:c5:aa:03:46: f0:62:3a:83:e8:4e:a3:0f:bf:4e:a9:9b:75:3d:fa: d3:62:85:f1:96:a2:91:4d:de:11:97:10:d4:8a:84: 3a:72:35:25:d5:60:56:55:42:d4:d2:c5:dd:75:2d: a5:b2:8e:c4:64:3f:d2:aa:b4:1a:f5:3c:06:5f:29: 2d:a2:77:bb:5b:58:83:69:34:41:0f:44:c1:4f:2b: 67:2c:2d:a1:7c:b5:76:a3:57:15:c0:b5:01:94:ec: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:19:6D:AD:CE:76:CA:8F:2A:D4:D1:DB:9C:3D:37:BF:81:50:EC:87 X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:bd:bb:00:56:c6:97:ef:a9:2e:23:55:0c:66:81:b8:29:d9: 84:43:e1:74:87:bd:87:50:55:62:03:76:24:a3:f4:30:93:e2: b2:2d:6b:53:64:97:25:15:f1:c4:f0:6c:00:77:4e:48:6a:be: e2:18:3a:78:78:6b:58:df:3a:34:f0:fb:3c:0e:29:a9:cf:6f: 48:40:c0:f8:a0:79:28:ee:87:4e:a7:93:79:8b:77:ff:8d:43: 5b:33:9a:b2:a1:12:14:3d:8a:20:44:8d:93:dc:21:e2:35:6b: d2:ab:c0:19:a3:f1:d7:f0:e8:44:66:7c:43:8b:cb:92:fe:49: 0e:6a:db:fd:6a:74:da:18:a1:a6:36:92:dc:2a:63:ac:65:fa: 30:2d:ed:55:99:d9:ae:fd:5f:99:c5:05:33:b9:fd:26:9c:45: 58:2b:97:ed:c7:18:1f:af:28:e3:b1:c4:7f:6a:7e:85:49:43: 99:55:8d:12:12:fd:02:cf:d8:81:ed:fa:ef:4d:81:f3:85:cc: 02:d3:3f:0d:32:26:f4:18:70:9d:14:37:10:f5:f0:a5:6e:9a: 70:b0:66:0e:5e:38:6a:68:a3:55:9e:74:77:eb:69:fb:a6:e6: 65:39:ee:ab:2c:08:52:c9:6e:95:6c:7e:5f:98:48:1e:6a:e0: e7:39:28:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RDcxMTAvBgNVBAUTKDcyOTM1NUFBMDM3OEY2RDRGNDA1NkU2NjI2QkJDOUJF MzBDOUQ4RjAwHhcNMjUxMTA1MDQwNDA3WhcNMjUxMTEyMDQwNDA3WjAYMRYwFAYD VQQDEw02OTBhY2NiNy0zNDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TFWLc++7W/5LbLpxXYLd5WnBbZStiQNMQuc46m4gvDkqC9kkBWXTWWdkIAU 0rebl86Kr+u3x+MR5l9H+QhywLHKcNRXBA2y3YGWxZ+rBDTN48dGdCojdbYqdZSB JQxYPefZcqKoMTAcisAkKLGsmflgzCUOjfz6BWNYAquI00P+mS3uXmAHL8nGO3G+ sGkxl7EX8r/LSW0u+BYFfe2nG8WqA0bwYjqD6E6jD79OqZt1PfrTYoXxlqKRTd4R lxDUioQ6cjUl1WBWVULU0sXddS2lso7EZD/SqrQa9TwGXyktone7W1iDaTRBD0TB TytnLC2hfLV2o1cVwLUBlOypBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoZba3O dsqPKtTR25w9N7+BUOyHMB8GA1UdIwQYMBaAFHKTVaoDePbU9AVuZia7yb4wydjw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVENy80MEY5RUZBNDhG RDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0VDBCVzVtSnJ2SnZqREoy UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVENy80MEY5RUZBNDhGRDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0 VDBCVzVtSnJ2SnZqREoyUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhvbsAVsaX76kuI1UMZoG4KdmEQ+F0h72HUFViA3Yko/Qwk+KyLWtT ZJclFfHE8GwAd05Iar7iGDp4eGtY3zo08Ps8Dimpz29IQMD4oHko7odOp5N5i3f/ jUNbM5qyoRIUPYogRI2T3CHiNWvSq8AZo/HX8OhEZnxDi8uS/kkOatv9anTaGKGm NpLcKmOsZfowLe1Vmdmu/V+ZxQUzuf0mnEVYK5ftxxgfryjjscR/an6FSUOZVY0S Ev0Cz9iB7frvTYHzhcwC0z8NMib0GHCdFDcQ9fClbppwsGYOXjhqaKNVnnR362n7 puZlOe6rLAhSyW6VbH5fmEgeauDnOSil -----END CERTIFICATE-----Generated at Wed Nov 5 12:06:00 2025 by rpki-client