$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft File: MPLcABvWWM0WPiN3H0FHaXLg0U8.mft (raw, json) Hash identifier: ahEoBjNckfK63vVeN9dPe2t8X3jMCgCyZg4e8K+YbAQ= Subject key identifier: F4:5A:87:37:1C:81:EA:B8:67:3D:BD:98:96:CD:A7:1F:3C:CF:88:E2 Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F Certificate issuer: /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft Manifest number: 04DE Signing time: Fri 30 May 2025 23:57:26 +0000 Manifest this update: Fri 30 May 2025 23:57:25 +0000 Manifest next update: Fri 06 Jun 2025 23:57:25 +0000 Files and hashes: 1: MPLcABvWWM0WPiN3H0FHaXLg0U8.crl (hash: JcS3JhDtVlLKcXOvLKFtX1Q3j/msvFlZXw5jiewcGPI=) 2: 9F7C20921ADD11EC80226B61C4F9AE02.roa (hash: 76Aj2e1/zvO+ptuFoEi5Uq+Ik3Pi+kbiWoL+xAlC1Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91283E7, serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Validity Not Before: May 30 23:57:25 2025 GMT Not After : Jun 6 23:57:25 2025 GMT Subject: CN=683a45e6-a260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:aa:1b:ac:cd:3c:89:2e:72:76:31:14:04: cd:c8:30:87:a9:1f:a4:95:ff:8d:69:ec:0f:73:5a: 1b:2a:e6:90:84:6d:a5:f7:c2:f2:b9:d7:df:64:91: 93:07:9b:49:40:e0:8f:3b:91:40:32:47:ab:10:a6: be:52:fd:1e:2e:6e:87:0f:79:09:bc:19:af:ef:f1: 9b:b5:bd:71:df:5b:74:75:c1:00:4c:1a:f1:63:91: 9a:7f:5e:fe:ac:18:bf:55:81:1d:56:41:c8:79:b8: af:a7:2f:ec:9c:c2:94:bb:22:fe:73:45:fc:0b:03: 2a:67:db:63:b5:c2:93:0b:0b:2b:84:8f:5d:07:a4: 8c:af:53:5e:b1:43:31:96:d0:ad:71:2e:f0:da:3e: b6:38:67:88:0c:15:da:ed:64:ec:80:54:07:92:00: c6:00:d2:1e:7d:ed:5a:34:1b:de:d7:f3:07:c5:1d: 8e:5d:76:5f:a4:74:80:cf:a6:5c:06:4d:8b:23:49: 9b:97:70:02:b5:44:1d:1a:88:bc:a8:a1:84:00:a1: 92:38:58:16:bf:7c:70:81:e6:c9:e7:e0:1f:bf:3f: 34:9f:bb:d0:8a:9f:d0:19:01:c9:0a:6b:66:ef:0e: e9:65:9a:cb:ec:73:c1:ac:04:c5:6e:18:e0:16:8e: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5A:87:37:1C:81:EA:B8:67:3D:BD:98:96:CD:A7:1F:3C:CF:88:E2 X509v3 Authority Key Identifier: keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:29:05:b8:2f:bd:ed:bf:37:26:48:d4:4b:08:61:d8:50:9d: f8:8e:7d:52:56:b9:9e:b3:c3:79:52:9e:80:aa:08:68:ab:84: 57:89:43:d1:44:ac:73:6b:10:9a:7a:ce:5c:e9:9c:b9:b0:e4: 10:de:b9:72:f9:0a:6e:01:54:aa:78:a5:5e:74:67:b2:9f:f7: 20:c1:f9:5c:83:c1:dc:b1:5d:25:a7:fa:a0:7e:82:89:2d:7f: 15:6d:2c:70:26:24:2e:c1:e1:f8:b7:9d:e0:ae:24:cc:65:86: f1:82:04:f2:86:d1:74:66:e7:1c:e4:6b:27:9b:b4:66:73:fa: 92:be:be:73:d8:d7:d6:76:73:f1:8f:89:b3:ab:10:43:40:b4: a8:7a:9a:34:79:bd:b1:14:b7:5f:59:aa:fc:b6:17:77:d0:2c: 18:1b:71:d5:ad:73:1b:94:5a:19:45:d9:7f:85:80:ee:91:85: 1e:b1:4d:29:18:0d:a6:81:a0:ae:ac:5a:6b:74:f6:85:64:26: c0:38:6e:f2:64:fa:ca:79:d4:35:73:c4:ef:d4:c8:7d:40:0d: 95:92:77:e0:37:50:ce:12:61:44:14:39:c5:21:d3:1b:e0:c2: 63:2c:64:16:87:58:af:7e:e6:14:6f:1f:6b:4c:ae:e9:b4:25: 6a:81:41:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgzRTcxMTAvBgNVBAUTKDMwRjJEQzAwMUJENjU4Q0QxNjNFMjM3NzFGNDE0NzY5 NzJFMEQxNEYwHhcNMjUwNTMwMjM1NzI1WhcNMjUwNjA2MjM1NzI1WjAYMRYwFAYD VQQDEw02ODNhNDVlNi1hMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswqqG6zNPIkucnYxFATNyDCHqR+klf+NaewPc1obKuaQhG2l98LyudffZJGT B5tJQOCPO5FAMkerEKa+Uv0eLm6HD3kJvBmv7/Gbtb1x31t0dcEATBrxY5Gaf17+ rBi/VYEdVkHIebivpy/snMKUuyL+c0X8CwMqZ9tjtcKTCwsrhI9dB6SMr1NesUMx ltCtcS7w2j62OGeIDBXa7WTsgFQHkgDGANIefe1aNBve1/MHxR2OXXZfpHSAz6Zc Bk2LI0mbl3ACtUQdGoi8qKGEAKGSOFgWv3xwgebJ5+Afvz80n7vQip/QGQHJCmtm 7w7pZZrL7HPBrATFbhjgFo5SrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRahzcc geq4Zz29mJbNpx88z4jiMB8GA1UdIwQYMBaAFDDy3AAb1ljNFj4jdx9BR2ly4NFP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODNFNy83Mzk2MENDNDFB REIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dNMFdQaU4zSDBGSGFYTGcw VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QTGNBQnZXV00wV1BpTjNIMEZIYVhMZzBVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODNFNy83Mzk2MENDNDFBREIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dN MFdQaU4zSDBGSGFYTGcwVTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASKQW4L73tvzcmSNRLCGHYUJ34jn1SVrmes8N5Up6Aqghoq4RXiUPR RKxzaxCaes5c6Zy5sOQQ3rly+QpuAVSqeKVedGeyn/cgwflcg8HcsV0lp/qgfoKJ LX8VbSxwJiQuweH4t53griTMZYbxggTyhtF0Zucc5Gsnm7Rmc/qSvr5z2NfWdnPx j4mzqxBDQLSoepo0eb2xFLdfWar8thd30CwYG3HVrXMblFoZRdl/hYDukYUesU0p GA2mgaCurFprdPaFZCbAOG7yZPrKedQ1c8Tv1Mh9QA2VknfgN1DOEmFEFDnFIdMb 4MJjLGQWh1ivfuYUbx9rTK7ptCVqgUFp -----END CERTIFICATE-----Generated at Sat May 31 16:30:28 2025 by rpki-client