$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json) Hash identifier: Tsq4HwVBv9aT+eIN5f+4l0h9xD4UGqQdL/jftVLaJCk= Subject key identifier: 2F:20:54:8E:72:EF:96:61:0F:5B:32:B3:23:8A:29:7D:FC:50:14:13 Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft Manifest number: 4F Signing time: Sat 31 May 2025 06:49:39 +0000 Manifest this update: Sat 31 May 2025 06:49:39 +0000 Manifest next update: Sat 07 Jun 2025 06:49:39 +0000 Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: 5BYSP0Wer+Nxwzf3/nmkTCmjd8Fjg0HfpscBaTdRB2s=) 2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: KRcguCIL3wMi3PwztLJpTVhTUzHmH2MqWyforuoA8o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Validity Not Before: May 31 06:49:39 2025 GMT Not After : Jun 7 06:49:39 2025 GMT Subject: CN=683aa683-f5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:a3:a6:ef:dc:8e:ca:99:36:ea:db:b9:a6: ca:a1:af:92:1d:7f:43:36:bb:fb:81:69:a5:d5:59: b7:6e:eb:68:46:d9:b9:17:67:a0:fb:7e:48:52:f0: 72:af:79:96:4c:51:67:5d:5e:9b:ed:a9:9e:86:df: eb:3c:3d:d9:be:e8:5d:0e:bf:bd:56:7c:46:0f:2a: 79:2c:4b:e9:c1:7e:60:ad:d9:af:e9:b1:e8:1c:9e: ad:f3:83:e3:11:c1:cf:83:90:cb:c8:25:6a:ed:b8: 64:62:0a:78:25:d0:fc:6b:c1:76:15:9c:35:75:ec: e5:6c:e0:bd:21:ef:40:ca:8c:95:48:53:b6:3f:b1: ac:4c:f1:01:45:2e:1a:98:95:a3:30:3a:3f:da:70: 8e:13:dd:20:4b:f4:59:04:db:34:dd:91:78:5e:02: bc:da:46:59:f7:e1:6e:75:53:8a:8b:ae:d2:08:d3: a9:47:19:8b:c4:fe:92:8b:58:65:15:f8:6b:83:1e: 00:75:af:e5:ff:bc:fc:1e:59:32:c9:dd:0f:07:f5: d8:b8:8a:0d:2b:8c:62:60:cc:f8:5f:44:ef:a3:30: f6:33:f8:69:00:6e:50:dc:79:5e:42:31:2e:da:27: 45:a7:36:89:fa:fc:18:77:ff:dc:da:74:d8:98:cf: 06:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:20:54:8E:72:EF:96:61:0F:5B:32:B3:23:8A:29:7D:FC:50:14:13 X509v3 Authority Key Identifier: keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:01:ba:55:76:91:b5:59:57:1e:ae:00:de:34:36:00:05:ca: fc:13:87:29:b2:5e:9c:04:9a:74:a8:18:24:be:21:1e:85:d5: e2:85:2b:ea:8a:17:ed:98:43:3d:36:eb:01:0c:0c:b3:69:7c: 6d:0b:c6:2d:62:55:04:57:3c:ec:c6:b1:81:ae:70:5a:6f:73: 84:07:45:6a:73:38:d6:c3:5c:30:7f:c2:c3:24:38:50:15:02: f9:38:ae:e9:24:61:29:d2:2e:99:97:d9:e7:8c:6d:8c:3b:e0: f6:6e:ba:e3:5a:e8:a0:57:96:1a:9f:b8:63:74:dd:04:2f:d9: 6d:bb:80:f8:cf:9f:78:13:36:0d:17:78:60:59:72:be:8d:70: a5:8b:3e:17:c1:48:73:c9:71:f1:5b:41:01:f6:76:00:ff:ef: 2e:8d:1c:8e:d3:76:5e:cc:a5:99:39:a0:39:b5:7e:e7:ad:a8: a9:a3:d0:ef:c9:cd:46:be:ff:6c:91:4a:12:2d:da:c5:e9:6d: 72:91:c2:f3:43:3a:a4:f7:79:99:a2:08:bb:59:c7:cb:19:bd: 69:bf:b7:22:b2:70:93:62:ef:10:aa:69:c6:8a:72:6b:af:5a: 21:02:9f:2d:36:5f:ce:5b:a4:1f:fa:44:ff:2f:d0:62:c4:bf: 00:1e:9e:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzdEQzExMC8GA1UEBRMoOTlCNzBCRjIwMjVFRERDREY5MkE0N0QwNENCNzU2QUNC MDczREM0NTAeFw0yNTA1MzEwNjQ5MzlaFw0yNTA2MDcwNjQ5MzlaMBgxFjAUBgNV BAMTDTY4M2FhNjgzLWY1ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvh6Om79yOypk26tu5psqhr5Idf0M2u/uBaaXVWbdu62hG2bkXZ6D7fkhS8HKv eZZMUWddXpvtqZ6G3+s8Pdm+6F0Ov71WfEYPKnksS+nBfmCt2a/psegcnq3zg+MR wc+DkMvIJWrtuGRiCngl0PxrwXYVnDV17OVs4L0h70DKjJVIU7Y/saxM8QFFLhqY laMwOj/acI4T3SBL9FkE2zTdkXheArzaRln34W51U4qLrtII06lHGYvE/pKLWGUV +GuDHgB1r+X/vPweWTLJ3Q8H9di4ig0rjGJgzPhfRO+jMPYz+GkAblDceV5CMS7a J0WnNon6/Bh3/9zadNiYzwaNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULyBUjnLv lmEPWzKzI4opffxQFBMwHwYDVR0jBBgwFoAUmbcL8gJe3c35KkfQTLdWrLBz3EUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDN0RDLzZERUZEQjcwQzU4 QjExRUZCODdFNUYzM0M0RjlBRTAyL21iY0w4Z0plM2MzNUtrZlFUTGRXckxCejNF VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWJjTDhnSmUzYzM1S2tmUVRMZFdyTEJ6M0VVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD N0RDLzZERUZEQjcwQzU4QjExRUZCODdFNUYzM0M0RjlBRTAyL21iY0w4Z0plM2Mz NUtrZlFUTGRXckxCejNFVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAQBulV2kbVZVx6uAN40NgAFyvwThymyXpwEmnSoGCS+IR6F1eKFK+qK F+2YQz026wEMDLNpfG0Lxi1iVQRXPOzGsYGucFpvc4QHRWpzONbDXDB/wsMkOFAV Avk4rukkYSnSLpmX2eeMbYw74PZuuuNa6KBXlhqfuGN03QQv2W27gPjPn3gTNg0X eGBZcr6NcKWLPhfBSHPJcfFbQQH2dgD/7y6NHI7Tdl7MpZk5oDm1fuetqKmj0O/J zUa+/2yRShIt2sXpbXKRwvNDOqT3eZmiCLtZx8sZvWm/tyKycJNi7xCqacaKcmuv WiECny02X85bpB/6RP8v0GLEvwAenu0= -----END CERTIFICATE-----Generated at Sat May 31 16:33:11 2025 by rpki-client