$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft File: MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft (raw, json) Hash identifier: AhTp5jFrBcpg27Qo/MsMp+UxZ0WhkZwDdkuMPdaNKUc= Subject key identifier: CE:BE:55:58:AC:DC:72:01:D3:A1:59:24:8C:1D:D5:9E:60:60:23:B9 Authority key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 Certificate issuer: /CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft Manifest number: 01DA Signing time: Sat 31 May 2025 02:28:50 +0000 Manifest this update: Sat 31 May 2025 02:28:49 +0000 Manifest next update: Sat 07 Jun 2025 02:28:49 +0000 Files and hashes: 1: MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl (hash: 1osBLPXcooFo4xoXMcSOLLcBLX/KowvJ6fezKOsgNdc=) 2: FF88FC6AD39311ED9DE30F22C4F9AE02.roa (hash: HjT8VM2XqnkqsOJWOxm5J3xWXDt5memxcVZ9AVhTnyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115F08, serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Validity Not Before: May 31 02:28:49 2025 GMT Not After : Jun 7 02:28:49 2025 GMT Subject: CN=683a6962-9e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:68:75:b1:cb:e1:09:8a:53:ae:4c:1b:29: 6b:75:52:1c:b4:f1:67:43:00:7e:89:aa:1b:70:d6: 81:72:02:31:d8:d8:31:ed:2c:96:c6:91:88:ff:35: cb:f6:2f:22:2c:1e:05:6e:f0:1e:93:0f:ca:1c:c6: b0:94:7c:c1:0a:21:a5:0b:0c:cc:f2:5a:31:e9:4a: c9:eb:e2:9f:39:32:0f:2f:86:a1:d4:48:9e:b6:0c: 9e:a8:00:4a:83:d4:60:8a:0c:06:15:97:6a:70:2c: 2c:ca:46:4d:ac:78:93:c6:fd:65:0a:e9:8a:17:06: 93:42:67:90:e3:cb:31:8c:7d:15:16:e0:87:1f:7f: 86:48:09:f1:52:7c:cd:f7:49:13:6f:3c:0f:58:05: e1:06:20:9d:65:26:95:32:61:a7:51:cd:03:c7:ed: a1:b0:26:0e:63:d5:57:1c:78:3d:e5:8a:fc:7e:e6: c1:21:8d:12:54:09:c3:19:a9:6a:64:fd:65:4c:7f: 27:68:67:cb:24:4c:56:8a:1d:f3:53:6b:ab:15:54: 3e:5f:1d:68:a9:89:97:36:28:d0:92:cd:30:93:17: 0b:0c:51:c5:be:ab:56:af:36:7b:74:32:bc:7d:c3: 7d:6f:12:9f:b0:f3:47:cc:a7:1d:f4:77:84:be:25: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BE:55:58:AC:DC:72:01:D3:A1:59:24:8C:1D:D5:9E:60:60:23:B9 X509v3 Authority Key Identifier: keyid:30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:91:7e:f4:ac:12:47:51:54:bd:02:45:be:d6:22:f6:e6:a1: 1f:8f:34:81:a9:50:6b:c2:00:72:56:c7:c1:41:8d:ae:40:e4: d6:e1:30:ec:6a:a0:e9:b9:b3:5b:eb:f9:20:6a:43:02:e3:21: a9:27:69:f4:de:92:ef:6f:5a:41:9a:bd:2e:27:7e:46:fb:ee: 1e:7c:1b:d2:d6:e9:e7:55:87:f4:a2:c8:b8:ec:1c:87:a8:79: 71:bb:32:5c:04:bf:8c:e0:7f:8c:6c:75:6c:36:10:7a:0c:43: c1:4a:19:2a:cb:e1:dd:26:a8:85:ef:c8:d9:9e:d0:fb:68:b3: c2:90:b3:c8:cf:c7:6b:44:5b:89:66:d3:5b:b2:be:8e:59:57: a9:ae:dc:f3:0e:4a:34:53:04:e8:3e:da:96:71:af:fa:e5:36: 1a:ad:14:51:36:57:ea:dd:8e:8a:4d:c2:0a:b2:10:76:d0:54: 14:a1:85:93:37:51:ed:82:01:16:79:e9:7a:79:25:20:54:e2: 4d:5e:f7:a2:e4:f4:76:ab:27:5a:57:83:3b:a2:c0:9f:cd:31: 30:3a:cb:cf:bb:50:e1:4a:8c:01:a8:8a:6b:bf:4b:41:55:7e: 49:2f:6b:73:30:ae:3f:8d:1f:d7:8b:61:d7:d8:0b:bd:e9:7c: b1:18:8c:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVGMDgxMTAvBgNVBAUTKDMwM0NEM0NEQTc4NDI2QjVCRTg3NTFBNjM0RDY0OUFE OEZCN0EwQzMwHhcNMjUwNTMxMDIyODQ5WhcNMjUwNjA3MDIyODQ5WjAYMRYwFAYD VQQDEw02ODNhNjk2Mi05ZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ9odbHL4QmKU65MGylrdVIctPFnQwB+iaobcNaBcgIx2Ngx7SyWxpGI/zXL 9i8iLB4FbvAekw/KHMawlHzBCiGlCwzM8lox6UrJ6+KfOTIPL4ah1EietgyeqABK g9RgigwGFZdqcCwsykZNrHiTxv1lCumKFwaTQmeQ48sxjH0VFuCHH3+GSAnxUnzN 90kTbzwPWAXhBiCdZSaVMmGnUc0Dx+2hsCYOY9VXHHg95Yr8fubBIY0SVAnDGalq ZP1lTH8naGfLJExWih3zU2urFVQ+Xx1oqYmXNijQks0wkxcLDFHFvqtWrzZ7dDK8 fcN9bxKfsPNHzKcd9HeEviWSSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6+VVis 3HIB06FZJIwd1Z5gYCO5MB8GA1UdIwQYMBaAFDA8082nhCa1vodRpjTWSa2Pt6DD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYwOC8wMTZCQ0VERTZB MkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpyVy1oMUdtTk5aSnJZLTNv TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EelR6YWVFSnJXLWgxR21OTlpKclktM29NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUYwOC8wMTZCQ0VERTZBMkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpy Vy1oMUdtTk5aSnJZLTNvTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUkX70rBJHUVS9AkW+1iL25qEfjzSBqVBrwgByVsfBQY2uQOTW4TDs aqDpubNb6/kgakMC4yGpJ2n03pLvb1pBmr0uJ35G++4efBvS1unnVYf0osi47ByH qHlxuzJcBL+M4H+MbHVsNhB6DEPBShkqy+HdJqiF78jZntD7aLPCkLPIz8drRFuJ ZtNbsr6OWVeprtzzDko0UwToPtqWca/65TYarRRRNlfq3Y6KTcIKshB20FQUoYWT N1HtggEWeel6eSUgVOJNXvei5PR2qydaV4M7osCfzTEwOsvPu1DhSowBqIprv0tB VX5JL2tzMK4/jR/Xi2HX2Au96XyxGIxu -----END CERTIFICATE-----Generated at Sat May 31 16:56:18 2025 by rpki-client