$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: 5SW/KOLAqJx+XJmn9EEb1Vvfm4Ty7TT9eRWksgFlwL4= Subject key identifier: 0B:6B:78:0E:A1:C1:C6:1F:11:25:60:76:DE:5E:08:B0:29:8C:3E:4C Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0AD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0AC8 Signing time: Mon 12 May 2025 19:18:55 +0000 Manifest this update: Mon 12 May 2025 19:18:55 +0000 Manifest next update: Mon 19 May 2025 19:18:55 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: ia2e0TdFSlM+ZVFh7MHFMwcDeg0CWqw4dWskj5u/HFw=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: TXPw1rBEL7FEvLcSdgq3HIrDA+j+HPbArLAJjSl35pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2773 (0xad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: May 12 19:18:55 2025 GMT Not After : May 19 19:18:55 2025 GMT Subject: CN=6822499f-7313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:5d:41:1d:ec:a2:b8:0d:1b:21:e8:90:17: ad:98:2c:cc:43:17:d9:05:ab:9c:61:91:43:ca:24: 3f:b9:de:aa:8d:36:24:8c:bf:dd:68:02:e6:d8:48: 37:e6:0c:87:0d:20:c9:63:ea:fb:7e:df:a6:2e:73: 6f:53:a5:63:4f:d0:f9:a0:9d:7f:17:ed:36:77:42: 75:a9:cf:10:5f:b9:75:66:48:82:f9:09:a4:e3:c6: 28:47:3d:e8:63:05:b9:d3:c8:ec:39:6f:f6:47:db: 38:eb:64:39:0e:54:57:93:7d:34:52:73:bb:04:ed: eb:e0:d6:21:7b:1e:44:e2:fc:07:39:d9:63:f4:b1: ec:26:60:6b:9d:e1:38:93:a7:79:44:b2:c5:1d:48: 6b:e9:ec:d0:91:cf:25:23:9a:93:ab:10:41:06:91: d3:4b:79:7a:40:91:58:9d:c7:07:98:77:b8:96:4a: c0:3c:79:8e:79:87:94:87:6f:24:d2:52:ea:44:77: 31:8b:25:2e:6e:3a:4e:b4:bd:66:8b:7c:43:dd:a7: 36:b6:2c:d0:9f:45:f7:04:fe:3b:2d:a1:9c:0d:f9: 20:44:96:b0:b5:2b:7c:fe:0b:33:ed:87:9c:12:40: 89:a5:bc:79:43:c2:58:5e:d6:f9:0e:0e:cc:42:f2: 59:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6B:78:0E:A1:C1:C6:1F:11:25:60:76:DE:5E:08:B0:29:8C:3E:4C X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:53:6f:ef:fa:5c:64:70:43:13:99:8a:22:b9:b2:5d:02:7c: ea:39:c1:e8:a9:f0:80:65:3d:ec:8c:fa:fa:4f:29:3b:e7:a3: 83:2a:79:73:05:40:d7:9a:ab:5d:48:4f:b8:d8:eb:71:a4:20: 49:95:57:d6:7c:0f:9d:7d:03:c8:43:ca:88:b7:e8:08:90:ae: 10:38:ae:55:de:51:6e:96:22:35:75:fb:a9:f3:c3:1a:4b:b1: f7:09:c2:c4:04:6e:72:37:1c:09:17:26:5e:98:b0:86:bd:9b: 82:66:4d:c1:60:d7:4b:b3:65:52:d8:36:81:a0:fc:e6:d9:8c: 3a:36:8a:f9:54:54:7f:ad:fc:b6:66:31:9d:c2:1b:28:92:a4: bf:b8:38:82:b1:74:f6:65:fb:8f:a3:15:57:cc:ea:45:d0:1e: c4:68:e2:d6:e2:22:06:8d:34:73:dc:8e:36:9c:91:c3:e3:a8: a6:3e:5a:de:dc:64:c1:2b:01:8e:81:cd:3c:cd:08:b9:9a:03: 38:c3:43:f5:0c:f7:99:5d:fc:3c:d9:7f:dd:e6:bc:ad:0e:d9: 14:62:b2:75:94:f7:84:82:1a:95:89:ac:5f:85:10:13:54:cb: db:da:57:0f:08:35:0a:63:3b:2f:c8:13:e9:39:28:22:c0:5a: 9e:62:02:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjUwNTEyMTkxODU1WhcNMjUwNTE5MTkxODU1WjAYMRYwFAYD VQQDEw02ODIyNDk5Zi03MzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZNdQR3sorgNGyHokBetmCzMQxfZBaucYZFDyiQ/ud6qjTYkjL/daALm2Eg3 5gyHDSDJY+r7ft+mLnNvU6VjT9D5oJ1/F+02d0J1qc8QX7l1ZkiC+Qmk48YoRz3o YwW508jsOW/2R9s462Q5DlRXk300UnO7BO3r4NYhex5E4vwHOdlj9LHsJmBrneE4 k6d5RLLFHUhr6ezQkc8lI5qTqxBBBpHTS3l6QJFYnccHmHe4lkrAPHmOeYeUh28k 0lLqRHcxiyUubjpOtL1mi3xD3ac2tizQn0X3BP47LaGcDfkgRJawtSt8/gsz7Yec EkCJpbx5Q8JYXtb5Dg7MQvJZJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtreA6h wcYfESVgdt5eCLApjD5MMB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVU2/v+lxkcEMTmYoiubJdAnzqOcHoqfCAZT3sjPr6Tyk756ODKnlz BUDXmqtdSE+42OtxpCBJlVfWfA+dfQPIQ8qIt+gIkK4QOK5V3lFuliI1dfup88Ma S7H3CcLEBG5yNxwJFyZemLCGvZuCZk3BYNdLs2VS2DaBoPzm2Yw6Nor5VFR/rfy2 ZjGdwhsokqS/uDiCsXT2ZfuPoxVXzOpF0B7EaOLW4iIGjTRz3I42nJHD46imPlre 3GTBKwGOgc08zQi5mgM4w0P1DPeZXfw82X/d5rytDtkUYrJ1lPeEghqViaxfhRAT VMvb2lcPCDUKYzsvyBPpOSgiwFqeYgJ/ -----END CERTIFICATE-----Generated at Tue May 13 11:26:44 2025 by rpki-client