$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft File: MnO_dM_TfcKwgKpPGtntXtY-YyA.mft (raw, json) Hash identifier: 5v6jmtkD0PYEoK9LUNviu6VTRAnStqu3mSjgIMR/oso= Subject key identifier: 4C:DD:3E:00:59:3D:72:8F:FB:8B:9D:DC:99:66:61:06:58:DE:D9:F9 Authority key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 Certificate issuer: /CN=A912E3C7/serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft Manifest number: 5B Signing time: Sat 31 May 2025 06:42:38 +0000 Manifest this update: Sat 31 May 2025 06:42:38 +0000 Manifest next update: Sat 07 Jun 2025 06:42:38 +0000 Files and hashes: 1: MnO_dM_TfcKwgKpPGtntXtY-YyA.crl (hash: shEfTONmuRujFmRdNms/q1bbmY9ciyg2Q+8ydp9DJ24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320 Validity Not Before: May 31 06:42:38 2025 GMT Not After : Jun 7 06:42:38 2025 GMT Subject: CN=683aa4de-406e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:d9:ea:ed:6c:63:12:fb:c1:62:81:fa:59: 93:22:8a:6b:d8:d6:41:67:66:e1:38:21:06:86:cc: ae:84:9f:6e:d3:4b:c3:31:d1:5b:bd:98:87:fb:38: 5b:b0:22:0e:e1:4f:c7:67:cc:20:f7:09:75:93:f0: 26:9e:df:37:91:1f:cd:63:9c:50:61:a8:91:8e:c5: b8:b9:1f:5a:f5:67:e5:67:94:ae:0d:07:96:ab:b5: 0e:e9:aa:a0:bd:cf:f9:8c:05:2a:23:22:78:e9:54: 4a:e5:97:92:42:d0:46:39:4e:30:bf:fd:3c:75:bc: 8e:61:5d:31:ec:97:68:db:42:8c:66:1c:0e:11:c9: fa:91:6d:da:46:b8:d4:be:e0:9d:ab:07:1c:28:f6: 39:90:80:5d:5a:c1:f2:04:ea:31:e8:fc:36:a9:8d: 1c:66:f6:d9:78:54:9a:3e:c3:c9:e9:e1:c6:aa:3d: db:22:38:f7:9e:0c:30:cb:31:98:55:38:cd:ae:de: 70:57:33:c9:93:66:44:3d:98:bd:54:8a:d5:bf:32: c3:ad:5c:0d:50:39:28:f0:6f:8a:b8:20:af:e4:83: b9:69:c1:3f:fc:76:f8:d2:ff:39:3b:03:a9:ce:c3: 97:fc:6e:b4:df:02:40:4a:a6:7c:bc:3b:63:1f:df: 14:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DD:3E:00:59:3D:72:8F:FB:8B:9D:DC:99:66:61:06:58:DE:D9:F9 X509v3 Authority Key Identifier: keyid:32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f5:e4:15:92:66:0f:f3:a7:8f:89:88:23:dc:3b:fc:bd:f2: 85:7d:af:10:b1:93:69:a4:b4:17:8e:a7:e6:18:a0:cd:dd:1d: 83:a2:5e:64:7f:82:4a:8f:a6:55:f2:de:cd:54:bd:9e:45:96: a5:4c:8c:ae:28:c3:77:f5:bd:8c:6e:b0:32:2b:bd:0b:c5:d6: 96:45:93:77:8b:8d:b6:81:6e:04:75:62:e2:7d:3c:ef:5c:a1: 5b:b7:34:4c:35:05:59:20:35:a8:0a:4a:b1:87:73:d1:0d:2e: 4e:86:b4:69:45:3e:c1:ef:b9:4c:0a:20:67:2a:88:66:55:62: 79:1a:0d:59:bc:0b:3d:e1:63:8b:a0:fe:0f:19:b7:3b:3f:e5: b0:4d:42:1f:c5:ec:5f:2c:15:97:00:c1:cc:59:36:68:7d:94: 4e:8c:f8:f4:1b:9c:9d:54:67:07:de:d9:66:db:e1:2b:0d:02: b9:be:81:81:24:16:56:01:1e:55:ec:ab:f2:be:83:c7:50:de: 41:71:3d:31:e1:68:26:86:3e:c0:b2:3e:1b:27:e8:81:c4:0d: 1a:40:1e:2a:ea:e0:4f:fd:21:d1:1f:09:52:41:a1:6e:0f:7d: 66:1e:c0:bd:77:64:92:ba:fa:74:9a:09:80:ae:ef:9c:49:fc: 1a:71:f7:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNDNzExMC8GA1UEBRMoMzI3M0JGNzRDRkQzN0RDMkIwODBBQTRGMUFEOUVENUVE NjNFNjMyMDAeFw0yNTA1MzEwNjQyMzhaFw0yNTA2MDcwNjQyMzhaMBgxFjAUBgNV BAMTDTY4M2FhNGRlLTQwNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRpdnq7WxjEvvBYoH6WZMiimvY1kFnZuE4IQaGzK6En27TS8Mx0Vu9mIf7OFuw Ig7hT8dnzCD3CXWT8Cae3zeRH81jnFBhqJGOxbi5H1r1Z+VnlK4NB5artQ7pqqC9 z/mMBSojInjpVErll5JC0EY5TjC//Tx1vI5hXTHsl2jbQoxmHA4RyfqRbdpGuNS+ 4J2rBxwo9jmQgF1awfIE6jHo/DapjRxm9tl4VJo+w8np4caqPdsiOPeeDDDLMZhV OM2u3nBXM8mTZkQ9mL1UitW/MsOtXA1QOSjwb4q4IK/kg7lpwT/8dvjS/zk7A6nO w5f8brTfAkBKpny8O2Mf3xShAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTN0+AFk9 co/7i53cmWZhBlje2fkwHwYDVR0jBBgwFoAUMnO/dM/TfcKwgKpPGtntXtY+YyAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0M3LzhFNjA4QThBQjI2 NzExRUZBNTY1QTg0OUM0RjlBRTAyL01uT19kTV9UZmNLd2dLcFBHdG50WHRZLVl5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTW5PX2RNX1RmY0t3Z0twUEd0bnRYdFktWXlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0M3LzhFNjA4QThBQjI2NzExRUZBNTY1QTg0OUM0RjlBRTAyL01uT19kTV9UZmNL d2dLcFBHdG50WHRZLVl5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE715BWSZg/zp4+JiCPcO/y98oV9rxCxk2mktBeOp+YYoM3dHYOiXmR/ gkqPplXy3s1UvZ5FlqVMjK4ow3f1vYxusDIrvQvF1pZFk3eLjbaBbgR1YuJ9PO9c oVu3NEw1BVkgNagKSrGHc9ENLk6GtGlFPsHvuUwKIGcqiGZVYnkaDVm8Cz3hY4ug /g8Ztzs/5bBNQh/F7F8sFZcAwcxZNmh9lE6M+PQbnJ1UZwfe2Wbb4SsNArm+gYEk FlYBHlXsq/K+g8dQ3kFxPTHhaCaGPsCyPhsn6IHEDRpAHirq4E/9IdEfCVJBoW4P fWYewL13ZJK6+nSaCYCu75xJ/Bpx94A= -----END CERTIFICATE-----Generated at Sat May 31 17:34:22 2025 by rpki-client