$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: +FGkYJgGfMgxS+0iLchzcKGQ4cIJDyIA5+7/wE2S18M= Subject key identifier: E0:7E:B9:51:37:D1:0A:50:10:E7:7C:C0:58:1B:70:AB:D4:29:FA:99 Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0ACC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0ABF Signing time: Thu 24 Apr 2025 19:22:41 +0000 Manifest this update: Thu 24 Apr 2025 19:22:40 +0000 Manifest next update: Thu 01 May 2025 19:22:40 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: T2SDZrNdYposayqHLWdBo9tmeqMR/QunHDRKgusgPj0=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: TXPw1rBEL7FEvLcSdgq3HIrDA+j+HPbArLAJjSl35pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2764 (0xacc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Apr 24 19:22:40 2025 GMT Not After : May 1 19:22:40 2025 GMT Subject: CN=680a8f81-1b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:e1:7c:a3:0d:57:b8:e4:b9:46:33:26:23: d8:9d:70:6c:5b:e4:5d:57:1c:1f:1d:63:10:c6:e0: 22:06:26:c2:42:61:9a:f7:b6:0a:9e:f9:24:df:82: f3:81:59:60:ed:16:1a:3b:35:04:73:68:71:03:03: 3d:3f:9e:58:cf:bf:33:21:4d:f9:00:8a:75:b0:c9: 2d:e4:53:c3:5c:6f:58:ef:e5:ec:2d:9b:31:0e:8a: 38:7e:2a:2c:41:f0:70:42:a1:92:08:40:af:c4:27: 4c:7b:a4:f6:bb:45:ae:15:ac:4b:1b:7d:ca:56:5a: 95:28:7c:f8:0d:94:f1:58:55:f3:17:27:22:04:f5: db:e3:d7:b8:7b:d4:90:d2:bd:71:82:11:f6:93:80: b2:92:4a:44:ec:97:9a:d7:54:dc:26:88:47:19:52: e1:93:7d:ea:26:03:4e:76:c9:2d:ca:4e:f7:61:9d: 6f:e6:cf:4a:6a:2b:40:b5:ec:2f:a8:f8:50:bf:f2: e8:1d:0c:f5:f6:d7:57:5c:f3:33:a6:c4:5a:6f:68: e7:2f:97:4d:5c:d2:b2:a1:f0:c4:6a:7b:c4:7d:4e: 08:c9:0f:ab:47:7f:67:77:42:94:73:65:4b:5d:7f: ce:f6:39:b5:20:7f:0c:1a:b2:7f:ec:af:fa:43:10: 4c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:B9:51:37:D1:0A:50:10:E7:7C:C0:58:1B:70:AB:D4:29:FA:99 X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:93:64:68:df:55:8d:b2:15:47:35:86:fe:02:2e:b1:9b:06: cf:ea:3e:e2:06:7f:aa:5a:a5:0e:8e:3c:44:0b:ac:84:61:9b: f7:1c:bf:ca:b1:14:de:92:23:73:13:fa:92:1d:66:92:9c:77: 94:03:c0:73:b2:2a:ba:6f:6b:01:2b:69:b5:b1:45:22:52:5f: 95:e9:7b:6a:05:c0:aa:25:74:a4:32:48:0f:57:d5:8f:b6:1a: 6c:96:ab:03:32:ed:b3:0c:c2:ba:9d:94:7d:65:14:62:44:4c: 0f:29:d9:b6:8b:f0:79:38:fb:e4:b2:4d:ae:0f:02:6b:af:ee: b3:c0:97:56:59:83:c9:9e:02:86:a4:54:b2:cd:70:4c:1f:ab: fa:15:14:cd:84:7c:ae:3b:8e:4d:f3:79:ad:6f:a8:fd:d8:cf: bd:d0:20:09:43:06:e9:8e:26:9e:9c:89:b0:3e:73:63:86:6e: 92:78:97:db:5a:7f:b7:02:7c:40:e6:be:e7:92:3b:e3:d1:52: 60:dd:53:e1:d7:e0:c3:57:75:5f:27:da:e8:1d:7a:6c:a1:93: 50:30:79:9e:58:9f:9b:6f:e8:e4:b0:83:97:ae:1f:aa:32:a6: 3d:e4:18:42:0d:be:3b:48:ac:4a:26:c0:f8:96:b4:bf:4c:eb: 7d:10:30:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjUwNDI0MTkyMjQwWhcNMjUwNTAxMTkyMjQwWjAYMRYwFAYD VQQDEw02ODBhOGY4MS0xYjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zzhfKMNV7jkuUYzJiPYnXBsW+RdVxwfHWMQxuAiBibCQmGa97YKnvkk34Lz gVlg7RYaOzUEc2hxAwM9P55Yz78zIU35AIp1sMkt5FPDXG9Y7+XsLZsxDoo4fios QfBwQqGSCECvxCdMe6T2u0WuFaxLG33KVlqVKHz4DZTxWFXzFyciBPXb49e4e9SQ 0r1xghH2k4CykkpE7Jea11TcJohHGVLhk33qJgNOdsktyk73YZ1v5s9KaitAtewv qPhQv/LoHQz19tdXXPMzpsRab2jnL5dNXNKyofDEanvEfU4IyQ+rR39nd0KUc2VL XX/O9jm1IH8MGrJ/7K/6QxBMuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOB+uVE3 0QpQEOd8wFgbcKvUKfqZMB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFk2Ro31WNshVHNYb+Ai6xmwbP6j7iBn+qWqUOjjxEC6yEYZv3HL/K sRTekiNzE/qSHWaSnHeUA8Bzsiq6b2sBK2m1sUUiUl+V6XtqBcCqJXSkMkgPV9WP thpslqsDMu2zDMK6nZR9ZRRiREwPKdm2i/B5OPvksk2uDwJrr+6zwJdWWYPJngKG pFSyzXBMH6v6FRTNhHyuO45N83mtb6j92M+90CAJQwbpjiaenImwPnNjhm6SeJfb Wn+3AnxA5r7nkjvj0VJg3VPh1+DDV3VfJ9roHXpsoZNQMHmeWJ+bb+jksIOXrh+q MqY95BhCDb47SKxKJsD4lrS/TOt9EDBG -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:53 2025 by rpki-client