$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json) Hash identifier: QTkY0GT14G7NGBZMQMaz3X6ukVhJTjd29wWKMSiGCpU= Subject key identifier: DE:7B:96:E2:EB:7A:A8:E5:47:16:3B:06:06:EB:6E:89:60:4E:95:47 Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Certificate serial: 0C39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft Manifest number: 0C33 Signing time: Fri 04 Apr 2025 18:31:55 +0000 Manifest this update: Fri 04 Apr 2025 18:31:54 +0000 Manifest next update: Fri 11 Apr 2025 18:31:54 +0000 Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: huprgYrAteQuvpRfgVuF4c+DGloY7NaZ8lCRMX1He5Y=) 2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: olNlCN64bLbPObiQcnjy8ZCy31CgqZyVDz4boAZyKow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3129 (0xc39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAC7 Validity Not Before: Apr 4 18:31:54 2025 GMT Not After : Apr 11 18:31:54 2025 GMT Subject: CN=67f0259a-6b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:a2:11:48:b7:c3:af:71:f5:1c:f7:42:c1: 2b:b3:9d:39:8b:46:3f:7f:6b:f2:93:1d:f9:cf:c9: 13:c2:d1:11:97:1e:24:e1:f1:2d:bc:f2:a7:23:e7: 95:b2:76:57:22:e7:11:5f:e3:ed:bf:f9:d5:86:6e: 5f:a4:a9:e0:75:56:17:d2:8b:5f:54:72:4c:34:68: 20:90:34:c7:ec:9c:0a:13:f3:69:e1:4f:00:b1:92: a9:62:7b:7b:16:17:0d:78:0f:2f:f8:92:12:cd:8c: 60:b1:54:f3:c0:e8:43:80:81:fc:ed:d1:d4:e5:e6: 9a:b1:d9:1c:be:41:55:86:74:b3:92:76:72:31:20: 5e:1a:68:8c:83:fa:d1:9c:b4:0e:26:ac:e1:95:42: ec:8c:c8:87:e5:85:73:be:1d:c3:58:ab:09:59:26: 4b:cd:1f:f4:68:ad:df:5d:2c:b3:1d:09:54:60:05: 75:3a:d0:97:17:d4:4c:87:50:4c:83:4a:3b:b7:90: d3:70:b9:9f:b9:2a:11:cf:1d:ae:6b:d4:15:f3:10: 5c:4f:73:c6:66:3b:1c:69:3d:e2:c1:88:75:b0:15: 81:6a:b7:1a:12:08:60:9c:4b:2f:38:65:35:0b:a9: d1:a9:c2:d1:05:6a:a0:d4:d2:b8:b0:ab:75:92:07: 47:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7B:96:E2:EB:7A:A8:E5:47:16:3B:06:06:EB:6E:89:60:4E:95:47 X509v3 Authority Key Identifier: keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:df:65:a3:00:e6:cc:54:ca:90:27:7a:74:22:cd:5e:3d:3c: f2:52:79:3a:06:ef:b3:5e:cf:01:93:dc:ed:81:23:fc:8e:5b: 7b:ba:fe:3b:61:d8:83:e2:e5:07:02:86:7a:83:27:24:a8:e5: ea:70:67:8b:d7:65:af:43:4a:03:cf:8a:92:6b:9f:26:bc:57: 2c:68:77:d6:a2:24:1a:be:20:e5:91:03:a6:69:f1:19:ca:f2: b2:cb:47:57:aa:9e:49:0d:70:2c:9b:cd:52:23:e7:c2:d5:4b: 7c:36:eb:6f:49:a9:35:21:4b:12:03:74:31:93:3b:e5:94:fb: c3:bb:b7:55:fb:38:8b:ac:c7:be:e6:b6:36:06:7d:3d:ba:b5: 45:b2:63:4a:08:41:8a:da:cd:5b:17:d5:7b:f8:23:29:96:a0: f9:78:ff:61:57:72:4d:ee:71:a5:3a:52:bc:95:d3:54:6c:59: ee:09:8d:8a:15:f4:19:09:47:b2:f2:38:c5:d2:0b:04:d1:4d: 3a:ed:90:b2:b5:92:ea:6c:06:69:9a:b6:55:f8:2d:f1:4b:ce: dc:73:10:1b:40:00:e2:69:fd:b4:6a:c9:2a:7d:a8:73:09:a4: 18:39:a1:dd:4f:55:c3:d2:e4:d4:8e:72:e9:99:b0:ce:6a:92: fe:3a:36:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD MEQ4RTkyMjQwHhcNMjUwNDA0MTgzMTU0WhcNMjUwNDExMTgzMTU0WjAYMRYwFAYD VQQDEw02N2YwMjU5YS02YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+SiEUi3w69x9Rz3QsErs505i0Y/f2vykx35z8kTwtERlx4k4fEtvPKnI+eV snZXIucRX+Ptv/nVhm5fpKngdVYX0otfVHJMNGggkDTH7JwKE/Np4U8AsZKpYnt7 FhcNeA8v+JISzYxgsVTzwOhDgIH87dHU5eaasdkcvkFVhnSzknZyMSBeGmiMg/rR nLQOJqzhlULsjMiH5YVzvh3DWKsJWSZLzR/0aK3fXSyzHQlUYAV1OtCXF9RMh1BM g0o7t5DTcLmfuSoRzx2ua9QV8xBcT3PGZjscaT3iwYh1sBWBarcaEghgnEsvOGU1 C6nRqcLRBWqg1NK4sKt1kgdHNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN57luLr eqjlRxY7BgbrbolgTpVHMB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt RDk4Z0RuaWJJNkxBMk9raVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW32WjAObMVMqQJ3p0Is1ePTzyUnk6Bu+zXs8Bk9ztgSP8jlt7uv47 YdiD4uUHAoZ6gyckqOXqcGeL12WvQ0oDz4qSa58mvFcsaHfWoiQaviDlkQOmafEZ yvKyy0dXqp5JDXAsm81SI+fC1Ut8NutvSak1IUsSA3QxkzvllPvDu7dV+ziLrMe+ 5rY2Bn09urVFsmNKCEGK2s1bF9V7+CMplqD5eP9hV3JN7nGlOlK8ldNUbFnuCY2K FfQZCUey8jjF0gsE0U067ZCytZLqbAZpmrZV+C3xS87ccxAbQADiaf20askqfahz CaQYOaHdT1XD0uTUjnLpmbDOapL+OjZY -----END CERTIFICATE-----Generated at Sun Apr 6 02:27:08 2025 by rpki-client