$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: s2Pa1NE79eAsionPQ0NRfdsWUlzxTCWGt+6XQvqmW7Y= Subject key identifier: 70:6F:2E:29:33:89:15:EC:23:14:98:CF:0B:8C:3F:1C:A3:EC:9B:8C Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 0220 Signing time: Sat 05 Apr 2025 02:58:26 +0000 Manifest this update: Sat 05 Apr 2025 02:58:26 +0000 Manifest next update: Sat 12 Apr 2025 02:58:26 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: Q4zEOzZy4IoMbAz6CfLTYNacWb8HjeWmJeNRXJsmYSE=) 2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: my2I25rVWAI3mCpxgHNM4W2V83/AlwvIt+xbjzG24Hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5 Validity Not Before: Apr 5 02:58:26 2025 GMT Not After : Apr 12 02:58:26 2025 GMT Subject: CN=67f09c52-4de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:c8:22:b4:77:35:0a:6d:30:af:1b:e3:5e: fe:65:fb:29:1b:08:4c:37:e7:12:6e:1c:80:d9:4a: 8b:85:45:12:25:e6:95:14:2f:7e:64:d0:fa:97:83: a0:ed:86:c1:99:43:31:67:b8:07:8d:81:5e:1f:03: af:cd:f7:c3:07:85:69:83:a8:e0:a1:34:26:06:de: 2b:ec:1f:e0:e1:e9:94:a3:f2:9b:bd:08:3f:ea:0b: 2f:3b:e8:81:43:89:1e:e7:d2:a8:b7:f5:75:15:54: a1:ab:8d:a5:3e:4f:56:89:2f:c1:d0:ae:46:a6:d9: e1:c7:aa:33:ed:b8:4a:b3:22:56:77:28:e5:8c:55: 6a:ad:a4:75:89:53:e5:ff:82:51:ab:13:12:f1:92: 69:96:c5:8f:01:ca:55:b2:90:4b:fe:0c:f1:e0:21: aa:5b:f7:eb:b7:42:e5:a8:e1:13:1b:5a:db:7c:c3: 54:c8:a0:56:27:ff:40:6a:36:31:38:2c:b6:9c:89: ec:3d:16:a0:35:ce:51:57:a4:54:22:c1:e8:e3:42: 4a:15:0c:93:e9:04:1e:97:70:71:6c:46:fc:b1:5e: 98:e2:dd:9f:b2:b3:4c:f1:04:91:cb:54:9f:70:8f: af:1b:c7:be:bd:88:98:5a:85:90:53:8f:7b:6f:59: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6F:2E:29:33:89:15:EC:23:14:98:CF:0B:8C:3F:1C:A3:EC:9B:8C X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:99:02:18:81:22:00:eb:4b:10:24:82:b4:e3:73:cd:37:32: 74:ba:00:b3:37:be:02:21:98:0a:58:9f:c6:b8:1d:21:61:d2: f1:9d:a7:23:e7:90:5a:b7:0e:13:db:f4:77:b9:4d:09:04:51: 55:6e:79:d4:9e:aa:c6:05:33:17:f8:50:64:4c:f7:11:4f:7a: 45:41:b7:2e:a3:5f:1b:77:e5:95:9f:03:28:7c:d0:e4:ae:12: f7:92:17:de:39:f1:8e:26:cb:68:c9:d1:7e:99:6b:01:94:d1: 99:24:aa:bb:e4:bd:4b:fd:e6:39:55:e2:f9:0b:18:00:cc:62: 28:99:a4:4a:bd:0e:b0:84:82:e6:32:1e:38:09:4a:08:01:fa: 83:ec:72:69:b8:97:42:24:d8:c8:8c:5e:45:43:e9:d1:e9:32: d5:60:29:45:90:45:b0:a4:86:c9:8e:5c:69:c2:f9:46:36:8e: 88:ea:76:4b:cb:84:42:d2:e1:aa:2d:b2:7f:95:47:d1:07:9b: cf:87:6f:1b:c2:2c:0e:e7:81:92:2b:67:8d:15:1a:f9:aa:c6: 0a:9b:6b:b6:f6:23:1e:44:0f:f7:70:49:18:9c:56:45:d6:40: 2f:9e:57:15:1e:fa:1a:0f:61:a7:06:82:15:29:85:b3:45:3c: 7b:fd:71:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1 RjRGQzAxNTIwHhcNMjUwNDA1MDI1ODI2WhcNMjUwNDEyMDI1ODI2WjAYMRYwFAYD VQQDEw02N2YwOWM1Mi00ZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b/IIrR3NQptMK8b417+ZfspGwhMN+cSbhyA2UqLhUUSJeaVFC9+ZND6l4Og 7YbBmUMxZ7gHjYFeHwOvzffDB4Vpg6jgoTQmBt4r7B/g4emUo/KbvQg/6gsvO+iB Q4ke59Kot/V1FVShq42lPk9WiS/B0K5Gptnhx6oz7bhKsyJWdyjljFVqraR1iVPl /4JRqxMS8ZJplsWPAcpVspBL/gzx4CGqW/frt0LlqOETG1rbfMNUyKBWJ/9AajYx OCy2nInsPRagNc5RV6RUIsHo40JKFQyT6QQel3BxbEb8sV6Y4t2fsrNM8QSRy1Sf cI+vG8e+vYiYWoWQU497b1lw0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBvLikz iRXsIxSYzwuMPxyj7JuMMB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl WHpxR0FYT0lXbVJmVDhBVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUmQIYgSIA60sQJIK043PNNzJ0ugCzN74CIZgKWJ/GuB0hYdLxnacj 55Batw4T2/R3uU0JBFFVbnnUnqrGBTMX+FBkTPcRT3pFQbcuo18bd+WVnwMofNDk rhL3khfeOfGOJstoydF+mWsBlNGZJKq75L1L/eY5VeL5CxgAzGIomaRKvQ6whILm Mh44CUoIAfqD7HJpuJdCJNjIjF5FQ+nR6TLVYClFkEWwpIbJjlxpwvlGNo6I6nZL y4RC0uGqLbJ/lUfRB5vPh28bwiwO54GSK2eNFRr5qsYKm2u29iMeRA/3cEkYnFZF 1kAvnlcVHvoaD2GnBoIVKYWzRTx7/XEJ -----END CERTIFICATE-----Generated at Mon Apr 7 01:24:22 2025 by rpki-client