$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: lkPKpu7TAzDlLDskOa5RGoHQ3n/7snL0QCBV7V+MMeo= Subject key identifier: E8:C1:EA:6A:E8:BF:70:F1:47:71:48:A8:37:F2:9A:2E:CB:DA:22:9E Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0ADD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0AD0 Signing time: Fri 30 May 2025 19:38:57 +0000 Manifest this update: Fri 30 May 2025 19:38:56 +0000 Manifest next update: Fri 06 Jun 2025 19:38:56 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: E4I5PXY5Lk9TFcYmZl3ynHkirlfH5A8Pbz8+J7GJ8Cs=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: TXPw1rBEL7FEvLcSdgq3HIrDA+j+HPbArLAJjSl35pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2781 (0xadd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: May 30 19:38:56 2025 GMT Not After : Jun 6 19:38:56 2025 GMT Subject: CN=683a0951-84ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:14:a4:d6:e9:1d:34:d4:9a:a9:2d:d3:9c: 28:0d:77:5e:64:75:98:db:91:d5:9b:72:7c:5c:81: 63:60:4d:42:a1:80:4d:b8:b8:6a:ad:c6:f8:10:6d: 34:ce:15:ac:3b:eb:89:3f:04:e2:c8:77:44:b0:16: 6d:59:20:30:68:bf:14:ad:2e:81:88:8b:32:68:b3: 58:99:3d:79:cd:89:7f:de:83:c4:08:b4:88:1d:3e: b7:4d:0d:52:74:9b:b7:b0:75:41:b0:88:51:3e:17: 07:a4:82:34:a9:f9:cd:65:3f:60:85:de:b5:10:3c: 22:66:03:b2:16:aa:4f:0e:bf:8a:ca:08:22:b9:d8: ac:8e:45:86:c7:27:40:c5:c2:cf:d6:ea:5d:1a:4c: d0:81:bf:34:22:9c:bf:c5:06:29:89:fa:24:e5:b1: 3a:87:4f:a3:ee:04:08:22:1b:50:78:8d:bb:4f:6c: 2d:21:91:60:4f:c5:01:85:4c:db:46:a5:9d:27:00: 19:63:d0:b0:43:03:f9:28:c9:b0:a5:08:f3:fc:a2: ab:2b:58:08:ce:a3:ec:54:4a:44:d0:3f:42:d6:6d: e6:fe:48:11:1c:32:a6:17:8a:67:39:61:7f:a3:99: 20:46:76:36:70:ee:d4:3c:e9:9e:3c:ac:1e:1e:7b: 88:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C1:EA:6A:E8:BF:70:F1:47:71:48:A8:37:F2:9A:2E:CB:DA:22:9E X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f4:cc:57:bb:6f:40:70:80:c5:aa:cb:fa:53:c6:d5:1b:66: 84:e0:db:39:f8:02:3c:39:83:c4:8a:4e:1d:d4:af:4e:7a:7d: 2e:3e:81:aa:8c:c0:f7:ea:9f:f1:cd:fd:de:16:81:11:ca:18: 56:6d:e3:8d:d8:30:96:41:63:e2:b0:b6:91:e9:d7:8a:05:81: e1:0f:47:2a:38:ff:7d:9b:f7:6b:ae:9e:b2:0e:ee:02:12:4b: e2:d2:0b:48:fa:7e:13:ed:c1:8b:5b:6e:06:b8:0e:93:15:39: c4:e0:d0:1e:09:aa:47:3b:99:6a:88:85:1c:bb:87:d2:ba:80: cb:3c:3a:df:00:31:47:d8:bf:d5:63:07:b5:3f:d8:13:63:dc: 66:74:58:90:77:6b:c8:24:b8:6c:5e:42:d3:4d:01:47:9f:d1: 76:43:0b:35:3b:94:2c:0c:f4:bd:b7:a0:eb:68:79:9b:6d:cc: 92:ec:56:9d:30:68:0d:94:35:61:fe:d2:a9:ac:3b:f6:7c:20: f6:3c:7e:87:68:81:a4:68:34:22:84:01:29:a7:a5:c5:9c:d7: 16:04:29:ee:e9:c5:5f:32:e5:cc:ab:f9:ce:d1:87:95:0a:43: 75:06:01:a3:e0:5d:1c:8f:88:91:65:7c:c1:11:00:67:e7:2e: 21:d6:61:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjUwNTMwMTkzODU2WhcNMjUwNjA2MTkzODU2WjAYMRYwFAYD VQQDEw02ODNhMDk1MS04NGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMMUpNbpHTTUmqkt05woDXdeZHWY25HVm3J8XIFjYE1CoYBNuLhqrcb4EG00 zhWsO+uJPwTiyHdEsBZtWSAwaL8UrS6BiIsyaLNYmT15zYl/3oPECLSIHT63TQ1S dJu3sHVBsIhRPhcHpII0qfnNZT9ghd61EDwiZgOyFqpPDr+KyggiudisjkWGxydA xcLP1updGkzQgb80Ipy/xQYpifok5bE6h0+j7gQIIhtQeI27T2wtIZFgT8UBhUzb RqWdJwAZY9CwQwP5KMmwpQjz/KKrK1gIzqPsVEpE0D9C1m3m/kgRHDKmF4pnOWF/ o5kgRnY2cO7UPOmePKweHnuIEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjB6mro v3DxR3FIqDfymi7L2iKeMB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF9MxXu29AcIDFqsv6U8bVG2aE4Ns5+AI8OYPEik4d1K9Oen0uPoGq jMD36p/xzf3eFoERyhhWbeON2DCWQWPisLaR6deKBYHhD0cqOP99m/drrp6yDu4C Ekvi0gtI+n4T7cGLW24GuA6TFTnE4NAeCapHO5lqiIUcu4fSuoDLPDrfADFH2L/V Ywe1P9gTY9xmdFiQd2vIJLhsXkLTTQFHn9F2Qws1O5QsDPS9t6DraHmbbcyS7Fad MGgNlDVh/tKprDv2fCD2PH6HaIGkaDQihAEpp6XFnNcWBCnu6cVfMuXMq/nO0YeV CkN1BgGj4F0cj4iRZXzBEQBn5y4h1mFs -----END CERTIFICATE-----Generated at Sat May 31 17:06:32 2025 by rpki-client