$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: DrbgSUOXtykqxG0KwFmK0c9rXJc9My0qlH3UmEaOEq0= Subject key identifier: 9C:71:03:70:0D:BE:9B:BF:B2:92:9A:46:56:31:74:28:C9:12:3D:7E Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0AF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0AE3 Signing time: Wed 02 Jul 2025 19:38:59 +0000 Manifest this update: Wed 02 Jul 2025 19:38:59 +0000 Manifest next update: Wed 09 Jul 2025 19:38:59 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: LfGRVcNf/AVwp+FBg04SUmDs6yJWWXnMs7CwyzkveVo=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: A/a0M5805rjTnXrE1n/14FN5oLiy6+lmzg+Var9FAeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2801 (0xaf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Jul 2 19:38:59 2025 GMT Not After : Jul 9 19:38:59 2025 GMT Subject: CN=68658ad3-60e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:d0:58:f7:a7:92:ac:10:97:fb:96:7e:aa: 5d:26:ad:a8:d7:ae:90:d1:be:5d:ad:07:0a:aa:c7: 2b:b9:33:f3:8f:cd:2a:32:02:6f:a7:54:78:10:8a: 7a:e4:c2:0e:f8:c6:66:d4:37:2b:c6:49:39:08:fb: 03:a1:d6:bd:8c:ca:d0:94:e8:20:99:b1:b0:6f:5f: 8a:24:ff:0f:ca:c3:f8:7a:c1:56:b5:54:3b:74:27: f4:a4:67:92:24:9f:8d:9e:26:64:df:45:b6:47:05: 65:26:f9:0e:6a:1a:10:da:e0:4c:ca:97:80:9d:22: 58:ef:15:de:91:db:89:b0:e3:d2:5f:ea:1b:ad:10: 4d:6d:ad:f7:98:38:2f:08:ad:19:a9:33:18:e4:2f: 9e:74:fe:6f:65:c9:17:fa:ef:55:48:ab:d7:62:e6: 7f:d3:8c:7d:e1:f9:ee:ee:55:b8:4e:3e:1f:e1:71: 18:a0:e6:47:c8:94:87:6c:d7:8e:23:45:de:5c:59: a2:d7:f7:75:57:ce:f2:30:78:77:6d:d1:38:c8:65: 65:33:d9:66:a1:99:4f:a4:af:24:9c:54:40:97:f2: 2b:67:09:58:7d:28:82:50:d7:77:d4:6f:0e:32:9c: 9c:28:19:8e:85:60:aa:35:dc:16:da:a0:d0:24:1d: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:71:03:70:0D:BE:9B:BF:B2:92:9A:46:56:31:74:28:C9:12:3D:7E X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:39:40:dc:5c:d1:be:c4:8f:2f:eb:f3:a1:4b:1b:21:31:4a: 63:82:2c:c2:c2:ca:5a:69:c0:8a:4d:24:27:e6:0d:66:c3:fa: 4e:5c:e6:5b:3b:45:90:a1:57:88:49:0f:3f:a2:be:43:cb:70: a6:7b:71:ad:df:07:b8:3c:02:ee:43:89:8d:62:02:42:5c:b1: 28:d6:42:ac:d0:b7:aa:f9:0e:9b:10:88:6b:56:b0:a9:c3:d4: fe:95:18:63:3f:c0:91:02:74:b1:67:9b:0f:45:0d:c2:87:50: e5:83:48:aa:3a:3b:92:ef:77:5d:61:97:b9:b7:b4:05:8f:ca: c1:7e:42:61:9a:64:b6:20:57:9b:05:62:66:c1:07:68:75:23: 6a:0f:d2:a8:ee:cc:84:dc:9b:d0:02:90:0c:bd:8f:00:9c:dc: 06:9f:56:13:e2:92:88:7e:19:46:35:60:e0:c3:86:1a:70:eb: e2:a4:15:9a:a8:1b:60:0a:93:da:55:1b:5e:95:58:1a:18:bf: c1:63:7e:ac:90:72:fa:29:e3:1b:63:8f:75:5e:ae:4e:58:6c: ca:15:88:67:fa:9d:66:45:2e:31:b6:19:e8:bb:16:e3:53:78: 9a:4d:7c:69:11:bf:e6:8d:4e:71:00:89:8e:8c:8b:36:b0:5c: 37:d6:ed:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjUwNzAyMTkzODU5WhcNMjUwNzA5MTkzODU5WjAYMRYwFAYD VQQDEw02ODY1OGFkMy02MGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa7QWPenkqwQl/uWfqpdJq2o166Q0b5drQcKqscruTPzj80qMgJvp1R4EIp6 5MIO+MZm1Dcrxkk5CPsDoda9jMrQlOggmbGwb1+KJP8PysP4esFWtVQ7dCf0pGeS JJ+NniZk30W2RwVlJvkOahoQ2uBMypeAnSJY7xXekduJsOPSX+obrRBNba33mDgv CK0ZqTMY5C+edP5vZckX+u9VSKvXYuZ/04x94fnu7lW4Tj4f4XEYoOZHyJSHbNeO I0XeXFmi1/d1V87yMHh3bdE4yGVlM9lmoZlPpK8knFRAl/IrZwlYfSiCUNd31G8O MpycKBmOhWCqNdwW2qDQJB1D6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxxA3AN vpu/spKaRlYxdCjJEj1+MB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwOUDcXNG+xI8v6/OhSxshMUpjgizCwspaacCKTSQn5g1mw/pOXOZb O0WQoVeISQ8/or5Dy3Cme3Gt3we4PALuQ4mNYgJCXLEo1kKs0Leq+Q6bEIhrVrCp w9T+lRhjP8CRAnSxZ5sPRQ3Ch1Dlg0iqOjuS73ddYZe5t7QFj8rBfkJhmmS2IFeb BWJmwQdodSNqD9Ko7syE3JvQApAMvY8AnNwGn1YT4pKIfhlGNWDgw4YacOvipBWa qBtgCpPaVRtelVgaGL/BY36skHL6KeMbY491Xq5OWGzKFYhn+p1mRS4xthnouxbj U3iaTXxpEb/mjU5xAImOjIs2sFw31u1e -----END CERTIFICATE-----Generated at Thu Jul 3 10:16:55 2025 by rpki-client