$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: Z+zu6lwNIoRka0qC8S62HIv5YFtsFbhj+9u9py31YCE= Subject key identifier: 1F:70:82:B6:85:C3:9F:DF:A5:2B:DB:C2:6B:A6:0B:0D:A5:7F:05:12 Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0AE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0ADA Signing time: Sat 14 Jun 2025 19:16:41 +0000 Manifest this update: Sat 14 Jun 2025 19:16:41 +0000 Manifest next update: Sat 21 Jun 2025 19:16:41 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: yICQt6LZarOD/MXu2e4awOGW5qP7NkPvVrm6Zbd+TRI=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: A/a0M5805rjTnXrE1n/14FN5oLiy6+lmzg+Var9FAeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2792 (0xae8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Jun 14 19:16:41 2025 GMT Not After : Jun 21 19:16:41 2025 GMT Subject: CN=684dca99-b72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d1:b4:2d:1f:d8:bf:a4:b3:8d:8a:61:14:a6: a3:38:a1:fd:dc:3b:c7:a4:ac:44:38:6b:f3:43:21: f4:4b:e0:48:d5:33:ac:a5:1c:4a:ba:6b:8a:b8:c6: cc:e3:5f:93:b8:c8:f5:b1:2b:23:09:31:48:a8:8d: c4:ec:84:b5:fb:5c:dd:3f:62:09:f7:e8:c2:ba:a7: 75:77:35:bc:aa:f1:d4:9d:43:0b:20:8f:4d:1c:90: bc:5b:95:72:f8:fc:ef:4f:1e:91:5e:47:f1:47:eb: cc:2e:eb:8e:7d:8b:d3:f5:5b:d1:76:85:64:08:cd: aa:16:22:d8:40:60:30:3e:f4:76:6d:a1:56:ab:1e: bc:56:2c:05:32:49:ca:f4:e4:e3:74:03:46:c0:a9: 3d:a1:d5:01:5f:8f:b0:f0:f7:62:3f:99:59:92:54: ad:3c:97:3c:e0:22:49:05:09:2a:05:77:d4:be:96: fe:2d:1b:be:21:59:11:de:de:5d:d4:2d:f6:65:41: 82:3a:f5:db:bf:e4:74:77:5a:59:77:9d:73:9d:4b: 09:85:9d:e5:b4:9e:eb:38:e6:6f:01:bf:9c:e6:b5: cd:09:9a:95:8e:37:21:e7:15:cb:e9:a7:ad:e8:95: f5:4f:45:cd:5f:5c:6e:5e:78:ca:f7:2a:0f:b2:38: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:70:82:B6:85:C3:9F:DF:A5:2B:DB:C2:6B:A6:0B:0D:A5:7F:05:12 X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:71:6d:81:1b:4a:fb:a3:4a:3e:76:df:02:4c:7b:ca:5d:f9: 0c:59:af:02:7a:41:5a:5e:b2:92:28:6e:40:b5:98:a9:02:9b: 37:13:22:7a:91:5e:cf:68:c0:df:83:a0:05:f4:f0:b3:fa:58: 31:00:87:71:e5:1d:c5:da:52:8d:b1:3a:02:1f:4e:56:40:87: 19:b7:7c:b8:85:0c:b1:f2:39:81:8a:06:d1:e4:ab:31:5f:7f: cc:7f:68:ef:23:55:92:e3:55:a0:23:97:85:8c:4d:ac:22:f4: 43:60:5a:c9:29:59:75:bc:fa:19:8c:8a:95:10:76:9f:ef:6b: 59:5b:f6:55:99:81:f5:1f:6a:f9:2f:c3:f0:41:a6:d5:e3:07: 05:64:63:18:76:37:85:46:bf:10:8f:ec:18:54:7d:e9:d8:97: 11:ac:49:13:8d:38:17:15:b5:52:05:a1:de:36:c1:4d:21:52: 65:87:6b:ca:10:9e:d9:81:f5:5d:5d:24:6d:d7:e5:4a:fe:55: 69:83:27:e2:b3:b5:4c:59:44:c6:f1:23:61:51:86:de:37:e4: 7f:aa:19:25:c2:0a:15:ae:a6:5c:23:36:4c:cf:04:c1:cc:35: b8:84:72:36:cb:47:0e:71:7e:06:48:e0:c4:10:4f:9a:eb:00: 85:a0:78:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjUwNjE0MTkxNjQxWhcNMjUwNjIxMTkxNjQxWjAYMRYwFAYD VQQDEw02ODRkY2E5OS1iNzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztG0LR/Yv6SzjYphFKajOKH93DvHpKxEOGvzQyH0S+BI1TOspRxKumuKuMbM 41+TuMj1sSsjCTFIqI3E7IS1+1zdP2IJ9+jCuqd1dzW8qvHUnUMLII9NHJC8W5Vy +PzvTx6RXkfxR+vMLuuOfYvT9VvRdoVkCM2qFiLYQGAwPvR2baFWqx68ViwFMknK 9OTjdANGwKk9odUBX4+w8PdiP5lZklStPJc84CJJBQkqBXfUvpb+LRu+IVkR3t5d 1C32ZUGCOvXbv+R0d1pZd51znUsJhZ3ltJ7rOOZvAb+c5rXNCZqVjjch5xXL6aet 6JX1T0XNX1xuXnjK9yoPsjiWfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9wgraF w5/fpSvbwmumCw2lfwUSMB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATcW2BG0r7o0o+dt8CTHvKXfkMWa8CekFaXrKSKG5AtZipAps3EyJ6 kV7PaMDfg6AF9PCz+lgxAIdx5R3F2lKNsToCH05WQIcZt3y4hQyx8jmBigbR5Ksx X3/Mf2jvI1WS41WgI5eFjE2sIvRDYFrJKVl1vPoZjIqVEHaf72tZW/ZVmYH1H2r5 L8PwQabV4wcFZGMYdjeFRr8Qj+wYVH3p2JcRrEkTjTgXFbVSBaHeNsFNIVJlh2vK EJ7ZgfVdXSRt1+VK/lVpgyfis7VMWUTG8SNhUYbeN+R/qhklwgoVrqZcIzZMzwTB zDW4hHI2y0cOcX4GSODEEE+a6wCFoHhw -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:20 2025 by rpki-client