$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json) Hash identifier: huuzPzvsPxqBPc3cDa37vbUhSVE+vlvothwGgbJe1jA= Subject key identifier: AA:D2:16:26:3F:A6:4A:54:B0:C9:BF:80:BD:DC:54:63:23:D3:06:8F Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft Manifest number: 01A2 Signing time: Tue 01 Jul 2025 03:43:47 +0000 Manifest this update: Tue 01 Jul 2025 03:43:47 +0000 Manifest next update: Tue 08 Jul 2025 03:43:47 +0000 Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: dkUZO4ps/MhLSVmlTHboXVaXK/LZidB8pbpfK+xkxuY=) 2: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: 3MNDiBeknSHzY93vsrPzAAHGYu/SDVnN9ctSXpKt+Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Validity Not Before: Jul 1 03:43:47 2025 GMT Not After : Jul 8 03:43:47 2025 GMT Subject: CN=68635973-6845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:4c:7a:b7:23:89:5e:0b:5c:87:97:ea:37: 0a:88:26:d3:32:b4:fd:65:a4:0a:0d:28:b4:39:c8: 3c:4a:73:11:cb:1b:a2:76:06:e5:95:67:c2:47:94: 81:be:4e:35:a6:b0:db:03:4c:17:69:c5:ba:64:19: a9:48:e4:be:23:d5:dc:b5:0e:9d:ab:88:ba:35:7d: 01:34:52:f2:3a:b1:a1:41:8b:f7:eb:dc:c1:29:a1: d6:5f:9d:26:c3:ff:a3:a3:b8:cd:e4:66:55:d2:5b: bd:df:f9:90:fc:9d:04:17:28:bc:a6:a8:bf:84:9b: ea:70:22:b4:fd:24:a6:f6:4e:f9:a3:92:51:fb:25: a3:f3:29:bc:74:dd:af:3d:c6:4c:5d:9c:6d:00:20: a2:7a:7a:5b:80:c9:1a:2a:9b:b1:e6:31:90:53:cc: 74:95:e0:d2:96:63:8a:da:49:40:48:77:0d:d2:1b: 2a:ea:05:8c:62:03:80:8f:86:8e:aa:86:00:3f:62: eb:e9:40:37:a4:da:c3:4e:06:7c:1e:3a:da:8b:df: fe:9d:ac:8e:59:25:a1:aa:04:38:35:24:1f:94:b0: c2:77:08:5b:3c:95:90:96:ee:f9:37:de:96:c6:aa: 8c:5a:22:b8:3d:56:5c:c4:05:4a:e8:4d:20:76:7b: 52:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D2:16:26:3F:A6:4A:54:B0:C9:BF:80:BD:DC:54:63:23:D3:06:8F X509v3 Authority Key Identifier: keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7a:97:29:8d:21:86:31:ae:dc:82:c9:53:f9:35:fa:e4:ca: 9c:ce:6f:a9:6b:50:46:8f:d7:b4:d7:a4:11:c7:8b:7b:0f:7b: 2d:26:a1:51:a7:f2:5b:1f:18:51:b4:4a:b9:aa:61:a2:e1:e5: f0:13:bb:37:b0:63:2c:ad:f8:e6:92:e5:30:2e:82:33:28:cf: 39:25:97:ba:6d:70:86:79:b3:59:7f:fc:b2:82:16:bb:3d:b2: ec:f9:14:40:5f:20:f7:5e:e2:59:df:88:97:e0:7d:9e:f8:7d: 8a:df:ce:b2:36:6f:57:64:1b:ec:2a:59:21:ce:a0:c6:96:9c: 6c:e6:2a:c7:5e:50:5a:18:2e:d5:7d:6c:3b:6e:36:e1:c4:f4: c8:29:28:77:1e:bf:b8:cc:db:a6:7f:c8:8e:24:79:a6:f7:db: 97:f5:77:de:c9:00:ef:94:8e:85:4a:11:b6:af:30:56:94:1d: fa:98:04:e1:cc:bb:5c:63:14:b6:dd:59:d1:f5:d7:09:f5:b8: 6a:44:76:44:90:e8:ab:24:b3:22:b1:1f:20:6b:31:65:6c:0a: 77:e3:ec:38:c2:73:45:fe:70:41:83:7b:10:7e:e9:c3:42:fa: 5c:fc:12:12:a5:42:24:d1:ad:63:1c:e7:c6:7a:9c:4a:bd:00: b7:ad:3c:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NzcxMTAvBgNVBAUTKDBBOTUzODUyN0RBNTMyRkUzMUQ3NTBEMTM2OTZFNUNF QUYyQTlCQ0YwHhcNMjUwNzAxMDM0MzQ3WhcNMjUwNzA4MDM0MzQ3WjAYMRYwFAYD VQQDEw02ODYzNTk3My02ODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaJMercjiV4LXIeX6jcKiCbTMrT9ZaQKDSi0Ocg8SnMRyxuidgbllWfCR5SB vk41prDbA0wXacW6ZBmpSOS+I9XctQ6dq4i6NX0BNFLyOrGhQYv369zBKaHWX50m w/+jo7jN5GZV0lu93/mQ/J0EFyi8pqi/hJvqcCK0/SSm9k75o5JR+yWj8ym8dN2v PcZMXZxtACCienpbgMkaKpux5jGQU8x0leDSlmOK2klASHcN0hsq6gWMYgOAj4aO qoYAP2Lr6UA3pNrDTgZ8Hjrai9/+nayOWSWhqgQ4NSQflLDCdwhbPJWQlu75N96W xqqMWiK4PVZcxAVK6E0gdntSMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrSFiY/ pkpUsMm/gL3cVGMj0waPMB8GA1UdIwQYMBaAFAqVOFJ9pTL+MddQ0TaW5c6vKpvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY3Ny82NDU3REZEOEQ4 MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12NHgxMURSTnBibHpxOHFt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwVTRVbjJsTXY0eDExRFJOcGJsenE4cW04OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY3Ny82NDU3REZEOEQ4MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12 NHgxMURSTnBibHpxOHFtODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7epcpjSGGMa7cgslT+TX65Mqczm+pa1BGj9e016QRx4t7D3stJqFR p/JbHxhRtEq5qmGi4eXwE7s3sGMsrfjmkuUwLoIzKM85JZe6bXCGebNZf/yygha7 PbLs+RRAXyD3XuJZ34iX4H2e+H2K386yNm9XZBvsKlkhzqDGlpxs5irHXlBaGC7V fWw7bjbhxPTIKSh3Hr+4zNumf8iOJHmm99uX9XfeyQDvlI6FShG2rzBWlB36mATh zLtcYxS23VnR9dcJ9bhqRHZEkOirJLMisR8gazFlbAp34+w4wnNF/nBBg3sQfunD Qvpc/BISpUIk0a1jHOfGepxKvQC3rTzZ -----END CERTIFICATE-----Generated at Wed Jul 2 11:47:57 2025 by rpki-client