$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: A8XYX503YUl5jhi/2Vjm3qOFK6OmOGGTA+JILrbnHnI= Subject key identifier: FF:9B:EC:58:B0:A4:91:4B:D2:67:CA:0C:5E:CE:F6:84:74:EF:80:74 Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0ACD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0AC0 Signing time: Sat 26 Apr 2025 19:17:30 +0000 Manifest this update: Sat 26 Apr 2025 19:17:30 +0000 Manifest next update: Sat 03 May 2025 19:17:30 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: SNB/LMfZg3DqaRFmDf1j+K6chiZb3V+hdMbplT7XCV8=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: TXPw1rBEL7FEvLcSdgq3HIrDA+j+HPbArLAJjSl35pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2765 (0xacd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Apr 26 19:17:30 2025 GMT Not After : May 3 19:17:30 2025 GMT Subject: CN=680d314a-d3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:86:8f:bf:df:e0:61:05:e1:10:6e:8b:4d: 39:3f:7c:f5:c8:c0:54:08:c6:2a:51:84:4a:a5:fe: 9d:eb:0d:08:51:ca:ba:66:9b:ea:42:a3:37:3a:3e: f2:c2:43:9b:22:31:6c:48:6e:f2:a0:3d:47:01:54: 58:85:3e:92:5d:96:1b:1f:42:8a:f9:ec:6f:0a:63: 16:fb:8b:ff:73:a3:a4:65:c8:d3:e7:0c:d7:0f:f1: 35:31:e6:71:57:38:59:b2:ff:c4:7d:cb:fa:51:dd: 64:7b:93:11:49:83:e9:0e:3c:f3:a5:59:e6:75:34: e0:5d:c5:51:ca:31:e0:19:89:e3:96:00:f4:ca:6b: ff:a2:6d:d0:c8:a8:53:e8:ec:46:9b:89:11:1b:ac: 2d:bf:c3:95:44:ee:86:16:c8:28:d3:06:ec:51:34: 80:fa:03:94:59:39:22:df:b0:88:80:c3:03:70:22: a0:c7:e0:b8:a7:da:b7:67:fd:c0:72:a6:21:e0:95: aa:23:1b:74:d3:9f:45:ad:31:4f:99:b8:08:dc:1b: 36:24:96:b7:63:39:d9:4c:4c:aa:4e:b7:af:c2:e1: e0:cb:2a:af:2c:7b:c9:c3:c8:40:82:3a:6b:49:31: 7a:ec:32:53:e1:fa:12:82:b0:35:8c:04:62:d2:c5: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9B:EC:58:B0:A4:91:4B:D2:67:CA:0C:5E:CE:F6:84:74:EF:80:74 X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:c8:99:fd:4d:61:f5:24:fc:b0:6d:b9:f0:4d:38:0c:66:f8: 8b:d5:db:23:e6:ef:76:a9:7a:5a:68:a7:83:30:e5:fc:94:ce: bd:16:e7:97:f2:0e:7b:53:99:7a:d5:2c:74:2c:59:c0:e6:e0: 91:c3:a2:35:4a:4b:b4:05:89:33:6c:28:63:4d:2c:2a:a7:b9: 22:dc:89:7d:f6:af:12:2b:b6:34:32:85:89:a6:61:d5:07:01: 0d:c6:cf:cb:02:9d:61:e4:63:83:06:14:4e:9b:77:b5:f4:39: 44:ea:61:cd:68:b8:37:36:89:03:27:43:95:ff:40:f1:eb:d6: bb:d9:b9:03:5f:80:46:1d:7c:ab:fb:b2:f7:ff:93:f6:9b:c8: 3c:c6:c9:29:97:a8:52:c4:ce:63:09:c8:e0:51:a5:3a:e8:85: 09:f0:32:11:0b:91:02:74:5a:9a:1f:6f:6f:3e:fa:c3:62:3f: 2d:59:87:de:c9:c6:4d:62:47:59:30:d6:9c:89:50:8f:13:8d: 79:30:33:ae:a1:2b:80:47:49:f8:58:a0:49:2f:f5:2c:3b:62: d6:a1:a0:08:04:3c:9d:90:5e:ae:0c:84:bc:f3:8d:7d:10:f2: 18:ac:89:6a:d8:5d:92:65:d8:44:57:b2:36:40:bb:b3:1e:a2: 1a:a3:2e:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjUwNDI2MTkxNzMwWhcNMjUwNTAzMTkxNzMwWjAYMRYwFAYD VQQDEw02ODBkMzE0YS1kM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc6Gj7/f4GEF4RBui005P3z1yMBUCMYqUYRKpf6d6w0IUcq6ZpvqQqM3Oj7y wkObIjFsSG7yoD1HAVRYhT6SXZYbH0KK+exvCmMW+4v/c6OkZcjT5wzXD/E1MeZx VzhZsv/Efcv6Ud1ke5MRSYPpDjzzpVnmdTTgXcVRyjHgGYnjlgD0ymv/om3QyKhT 6OxGm4kRG6wtv8OVRO6GFsgo0wbsUTSA+gOUWTki37CIgMMDcCKgx+C4p9q3Z/3A cqYh4JWqIxt0059FrTFPmbgI3Bs2JJa3YznZTEyqTrevwuHgyyqvLHvJw8hAgjpr STF67DJT4foSgrA1jARi0sUBqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+b7Fiw pJFL0mfKDF7O9oR074B0MB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQyJn9TWH1JPywbbnwTTgMZviL1dsj5u92qXpaaKeDMOX8lM69FueX 8g57U5l61Sx0LFnA5uCRw6I1Sku0BYkzbChjTSwqp7ki3Il99q8SK7Y0MoWJpmHV BwENxs/LAp1h5GODBhROm3e19DlE6mHNaLg3NokDJ0OV/0Dx69a72bkDX4BGHXyr +7L3/5P2m8g8xskpl6hSxM5jCcjgUaU66IUJ8DIRC5ECdFqaH29vPvrDYj8tWYfe ycZNYkdZMNaciVCPE415MDOuoSuAR0n4WKBJL/UsO2LWoaAIBDydkF6uDIS88419 EPIYrIlq2F2SZdhEV7I2QLuzHqIaoy5U -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:13 2025 by rpki-client on console.sobornost.net