$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: Clm9wHw0OcY8M7kQGUpnrK1Xc2t9bU+lT5a+0I9OGKE= Subject key identifier: 2C:DE:82:B4:95:5D:4C:CC:67:99:9C:0C:00:E7:E0:48:50:E2:C5:EE Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0AF6 Signing time: Fri 08 Aug 2025 19:39:33 +0000 Manifest this update: Fri 08 Aug 2025 19:39:33 +0000 Manifest next update: Fri 15 Aug 2025 19:39:33 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: 33hkDNOEfbZfUN0DC+5XjhGRHFtwUE6iTeAqTERoPmQ=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: A/a0M5805rjTnXrE1n/14FN5oLiy6+lmzg+Var9FAeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2820 (0xb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Aug 8 19:39:33 2025 GMT Not After : Aug 15 19:39:33 2025 GMT Subject: CN=68965275-1576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:51:ef:44:a3:06:f4:e3:e4:38:e7:0c:f5: d7:3d:d6:d3:f3:01:e0:c4:f6:11:fb:f4:ce:13:85: d9:86:4d:5b:55:61:d3:40:a1:0b:e5:38:56:22:f3: 6c:81:9b:36:d7:61:76:24:0e:8d:ee:30:fc:27:18: d9:93:b7:74:af:8d:0d:3f:bb:71:e8:e6:87:57:2e: f0:71:e3:5a:5d:3d:87:51:e9:13:69:cf:35:b7:26: ca:7c:b1:47:9e:b4:92:8d:21:98:44:09:12:2c:53: 1d:2f:3e:d2:dd:a3:23:a3:1f:f6:09:e6:44:bc:4b: 68:c6:d0:ba:06:a6:24:30:c4:44:17:96:6c:7c:5d: c0:aa:68:40:00:ce:e2:ae:2c:91:c9:aa:3f:ca:01: fa:b7:02:18:b0:73:0e:bd:47:9c:8c:4d:77:2b:47: 52:87:0d:50:2a:03:37:73:92:36:8b:92:b5:91:ca: dc:cc:7c:58:cf:5d:5d:15:e1:4f:a1:8d:31:e6:62: 65:60:5d:87:e7:aa:f2:9b:4f:80:29:c7:9f:06:5e: a6:de:a5:7a:67:a5:56:66:ce:e5:63:a8:bd:1e:83: b8:1f:8e:25:b3:48:c2:0b:6b:9c:ea:81:d5:37:19: ba:d6:89:fc:8d:f7:1f:f5:80:f5:6f:66:f1:83:a2: 92:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DE:82:B4:95:5D:4C:CC:67:99:9C:0C:00:E7:E0:48:50:E2:C5:EE X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6a:9b:c1:31:b9:8d:a1:86:e5:97:17:ef:06:d4:cb:02:23: 37:2a:19:48:82:b8:a8:d5:b3:54:a7:80:c1:6b:b4:6c:37:cd: 51:35:57:4c:35:07:f2:84:9e:bc:d6:f4:0d:d0:69:5f:20:c4: 0c:1e:f2:ed:6b:5f:cc:82:18:63:96:ee:5a:75:13:db:0f:92: 6f:e9:c2:2e:9f:3f:8a:d9:70:f5:6d:0a:c1:86:92:32:c4:5a: 87:42:1d:9e:7b:31:89:43:2d:7a:a8:2a:17:94:47:20:9a:d0: de:61:ba:7c:d6:5f:49:98:a1:4f:46:03:82:7f:0d:ac:61:6e: 3c:29:dc:80:54:f2:e1:87:16:12:d0:13:c9:d1:b1:d5:25:cd: 33:83:61:70:62:69:32:be:d7:45:4c:6f:e8:de:f2:d7:16:72: 2f:f5:f5:fb:ef:a6:ee:b3:06:05:58:29:65:db:6f:97:f0:40: 17:37:9b:26:33:95:cc:60:a2:c7:84:67:9b:cf:13:82:c0:41: 2c:cd:61:49:2c:ab:9f:ba:7a:e3:69:87:a4:bd:d0:05:65:cf: 85:04:a3:01:ed:e9:7f:07:c0:9f:a4:01:62:51:fb:50:5e:c0: 2f:a0:0f:83:f2:80:0e:eb:4c:49:a6:7b:15:1e:35:8f:e8:4c: f3:6a:8f:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjUwODA4MTkzOTMzWhcNMjUwODE1MTkzOTMzWjAYMRYwFAYD VQQDEw02ODk2NTI3NS0xNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtJR70SjBvTj5DjnDPXXPdbT8wHgxPYR+/TOE4XZhk1bVWHTQKEL5ThWIvNs gZs212F2JA6N7jD8JxjZk7d0r40NP7tx6OaHVy7wceNaXT2HUekTac81tybKfLFH nrSSjSGYRAkSLFMdLz7S3aMjox/2CeZEvEtoxtC6BqYkMMREF5ZsfF3AqmhAAM7i riyRyao/ygH6twIYsHMOvUecjE13K0dShw1QKgM3c5I2i5K1kcrczHxYz11dFeFP oY0x5mJlYF2H56rym0+AKcefBl6m3qV6Z6VWZs7lY6i9HoO4H44ls0jCC2uc6oHV Nxm61on8jfcf9YD1b2bxg6KS5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzegrSV XUzMZ5mcDADn4EhQ4sXuMB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaapvBMbmNoYbllxfvBtTLAiM3KhlIgrio1bNUp4DBa7RsN81RNVdM NQfyhJ681vQN0GlfIMQMHvLta1/Mghhjlu5adRPbD5Jv6cIunz+K2XD1bQrBhpIy xFqHQh2eezGJQy16qCoXlEcgmtDeYbp81l9JmKFPRgOCfw2sYW48KdyAVPLhhxYS 0BPJ0bHVJc0zg2FwYmkyvtdFTG/o3vLXFnIv9fX776buswYFWCll22+X8EAXN5sm M5XMYKLHhGebzxOCwEEszWFJLKufunrjaYekvdAFZc+FBKMB7el/B8CfpAFiUftQ XsAvoA+D8oAO60xJpnsVHjWP6Ezzao/v -----END CERTIFICATE-----Generated at Sat Aug 9 15:11:47 2025 by rpki-client