$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft File: MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json) Hash identifier: WnUKzTvq2rxfS2iK7JJp3NoH5BzIZDhAfbZE4i7ZcNM= Subject key identifier: A4:CB:FC:7E:F9:81:C2:35:29:CE:2A:99:FE:7C:6A:BB:DA:79:7A:C1 Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 Certificate issuer: /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft Manifest number: E6 Signing time: Thu 03 Apr 2025 04:44:25 +0000 Manifest this update: Thu 03 Apr 2025 04:44:25 +0000 Manifest next update: Thu 10 Apr 2025 04:44:25 +0000 Files and hashes: 1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: RNejtsAvULiWH3t3ZD1x3PwCEcOIPZVnx1tqCowRWIQ=) 2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: eLvQDqgzb8pzAvtiGB3lMpGAuC1qmsTh4Dk3DLhUIRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A Validity Not Before: Apr 3 04:44:25 2025 GMT Not After : Apr 10 04:44:25 2025 GMT Subject: CN=67ee1229-0d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:99:5f:5b:75:f4:d4:f4:9c:a5:6f:68:6f: 1e:df:dc:4d:de:e2:0b:76:d1:b4:9c:3a:f0:06:34: 28:1e:df:0c:4d:fc:c8:91:02:cd:88:58:04:3e:5a: d0:09:af:e5:2b:8f:19:75:24:f7:50:fd:1a:f0:0d: a2:d5:ef:ee:94:81:00:fa:0e:cf:f4:c4:2f:a7:6f: 8c:a2:86:ae:0e:71:b2:67:55:1e:d0:d3:1b:0f:b1: d3:3f:ee:3f:0f:2a:67:fc:d8:54:fe:de:53:07:10: 83:70:40:60:9b:83:d3:64:a4:52:13:44:ed:b0:a6: fb:f5:48:cf:7a:17:4b:b2:22:14:17:9a:30:bd:68: 26:8c:d2:5d:77:02:0a:4c:37:bf:91:67:df:c1:5a: 5e:6e:c6:af:80:cf:f3:e4:fc:0b:22:c3:38:2e:d9: 2a:34:9e:7a:f1:43:8f:47:1c:1f:ab:40:d6:34:c2: 49:a6:39:7d:23:a1:04:dd:06:30:73:43:17:af:19: aa:5c:17:e1:18:0e:16:3a:06:e5:98:69:09:90:4d: 11:a9:5e:89:c0:35:2a:13:ee:1a:af:b0:3a:78:01: fb:3c:01:06:6b:e0:6a:a0:01:49:c4:40:dd:26:51: 10:b7:d2:11:62:fb:18:1d:b8:62:82:79:29:cb:38: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CB:FC:7E:F9:81:C2:35:29:CE:2A:99:FE:7C:6A:BB:DA:79:7A:C1 X509v3 Authority Key Identifier: keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f1:cf:7e:85:90:59:6f:49:58:47:b4:29:af:bf:0c:4c:ae: 87:b3:2d:ef:f5:ab:5c:8d:52:8e:6e:b6:cf:ea:2d:db:8f:20: b5:7b:44:5f:41:3b:64:be:0b:e7:bb:27:97:57:26:4e:cd:8e: f1:0c:1a:cc:4c:f2:46:50:58:93:a0:ba:81:5b:fb:b7:f8:e8: 13:30:26:64:4b:50:68:d2:a8:80:61:da:1e:d4:46:b4:81:d1: 03:f9:56:9d:1d:1d:1e:e8:b8:94:15:42:89:f9:8e:0f:ab:f1: 7c:6a:d7:54:9b:d7:90:6a:db:b4:ef:38:93:41:03:be:5a:a1: be:90:7c:2a:56:fc:22:c2:83:89:ca:e6:41:7d:d1:30:9a:6d: 7a:57:cc:0c:78:d2:6e:57:db:5e:e4:6c:d6:ca:49:d3:05:8c: a9:5a:4c:fd:5f:e2:d9:36:ce:1e:bf:70:89:fb:c3:33:55:e0: 0f:9d:ee:8c:18:31:23:e7:92:cd:40:19:75:b7:f4:83:be:27: cc:9b:dd:93:ed:50:43:fc:a3:71:c1:c0:5d:55:f5:c6:64:ce: a9:87:bc:9c:68:12:05:30:97:99:e6:18:f1:2c:dc:4a:b2:2b: 69:8d:2f:f6:87:1a:3d:a3:b5:bf:41:01:19:9a:67:40:6a:76: 93:9c:cd:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDMwRjBEQjgyRDU4RjU4M0U4NDg4Mzc5QkEwMEQzNUFD QjM1MjYxMTAwHhcNMjUwNDAzMDQ0NDI1WhcNMjUwNDEwMDQ0NDI1WjAYMRYwFAYD VQQDEw02N2VlMTIyOS0wZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOeZX1t19NT0nKVvaG8e39xN3uILdtG0nDrwBjQoHt8MTfzIkQLNiFgEPlrQ Ca/lK48ZdST3UP0a8A2i1e/ulIEA+g7P9MQvp2+MooauDnGyZ1Ue0NMbD7HTP+4/ Dypn/NhU/t5TBxCDcEBgm4PTZKRSE0TtsKb79UjPehdLsiIUF5owvWgmjNJddwIK TDe/kWffwVpebsavgM/z5PwLIsM4LtkqNJ568UOPRxwfq0DWNMJJpjl9I6EE3QYw c0MXrxmqXBfhGA4WOgblmGkJkE0RqV6JwDUqE+4ar7A6eAH7PAEGa+BqoAFJxEDd JlEQt9IRYvsYHbhignkpyzgHlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTL/H75 gcI1Kc4qmf58arvaeXrBMB8GA1UdIwQYMBaAFDDw24LVj1g+hIg3m6ANNayzUmEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GQjE4Mjk5OEJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdENkVpRGVib0EwMXJMTlNZ UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QRGJndFdQV0Q2RWlEZWJvQTAxckxOU1lSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GQjE4Mjk5OEJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdE NkVpRGVib0EwMXJMTlNZUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd8c9+hZBZb0lYR7Qpr78MTK6Hsy3v9atcjVKObrbP6i3bjyC1e0Rf QTtkvgvnuyeXVyZOzY7xDBrMTPJGUFiToLqBW/u3+OgTMCZkS1Bo0qiAYdoe1Ea0 gdED+VadHR0e6LiUFUKJ+Y4Pq/F8atdUm9eQatu07ziTQQO+WqG+kHwqVvwiwoOJ yuZBfdEwmm16V8wMeNJuV9te5GzWyknTBYypWkz9X+LZNs4ev3CJ+8MzVeAPne6M GDEj55LNQBl1t/SDvifMm92T7VBD/KNxwcBdVfXGZM6ph7ycaBIFMJeZ5hjxLNxK sitpjS/2hxo9o7W/QQEZmmdAanaTnM1f -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:43 2025 by rpki-client