$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json) Hash identifier: VFWcNn3JRKQsvTrVutrFkBJhGl9zJsuu39sO1j3j/bI= Subject key identifier: C9:B2:6A:5C:1B:2E:9A:10:67:12:9F:4B:E2:94:88:CE:D7:74:4F:71 Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft Manifest number: 0AAB Signing time: Fri 30 May 2025 19:45:45 +0000 Manifest this update: Fri 30 May 2025 19:45:44 +0000 Manifest next update: Fri 06 Jun 2025 19:45:44 +0000 Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: mw5Me05Ry7imMDbL5DJsspin+KdVRq2VEvZHkBr+Iiw=) 2: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: 1xdS0of8jq6b+9XXSYhXqSMAsRL9VgQ5wBfYf2X41Dk=) 3: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: hl/3X6BX11WafllMiNd1LQR2jHaTy4LdnM1ilVWB8H4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Validity Not Before: May 30 19:45:44 2025 GMT Not After : Jun 6 19:45:44 2025 GMT Subject: CN=683a0ae8-4e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:7a:be:3e:4d:5a:4e:ff:aa:57:d3:88:74: 28:6e:6b:7a:79:c8:c9:21:9e:ac:e5:64:21:cc:b6: 13:2e:ee:fc:fd:56:0c:63:06:18:8a:b8:fa:99:9f: d3:f7:f6:3f:0b:c0:77:89:c8:0d:02:78:e1:8c:1c: 43:e4:77:6f:33:c8:00:33:e3:ba:cd:75:d7:20:23: c4:87:20:94:a8:61:09:19:4e:0b:59:91:3c:fe:1e: a1:68:2c:2c:7c:fb:7d:18:28:fb:ad:52:3a:b3:7e: d1:78:3b:6e:b5:54:03:fe:e5:ca:72:b4:05:d2:b2: 04:1e:7d:93:4b:a7:2b:07:3c:e5:13:64:76:5e:50: 3a:10:7e:65:fe:c0:99:b2:e9:af:08:d9:4c:83:6e: 3d:12:01:89:30:12:af:72:bb:fd:ed:fc:87:28:39: 71:ee:2d:6a:32:bb:c6:e7:6d:56:5e:15:b2:cb:ab: 7d:3b:68:51:77:a5:07:76:f6:f7:d8:2f:a2:e4:db: ce:dc:9a:4d:4f:5f:fd:ca:fa:a7:c5:fb:73:4b:78: 91:ba:15:db:44:da:78:cc:82:57:bb:6e:43:46:64: 9a:61:d0:93:d2:3c:be:c1:ba:86:8d:4e:17:c0:c9: ba:d5:c0:16:ec:df:f9:9a:93:58:5f:83:24:50:ab: ca:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:6A:5C:1B:2E:9A:10:67:12:9F:4B:E2:94:88:CE:D7:74:4F:71 X509v3 Authority Key Identifier: keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:69:c2:f6:ce:30:c3:13:5d:59:60:17:6e:f1:fb:59:ec:61: d6:5a:c6:3f:74:84:c0:13:39:df:7d:57:d2:2e:90:69:da:71: bc:6d:e5:28:c1:fd:81:f1:01:f5:70:52:9c:7f:52:c7:66:3c: 90:6b:d0:78:3e:47:40:44:c5:16:f8:e4:c5:94:0b:0e:e9:94: 83:04:da:db:c5:00:3e:5c:92:1d:fd:61:c3:20:1e:2d:ff:ae: b7:d4:3b:5f:9f:c6:8b:84:34:b9:66:87:6a:bf:5f:f5:45:37: f3:0f:28:11:b5:cd:1e:e6:7a:a0:47:d1:81:c1:7c:8a:99:68: 2b:be:92:7f:e7:3c:dd:72:e3:36:c7:1b:68:01:f9:fe:79:6f: 6b:85:90:48:2a:58:1c:b7:1c:13:d0:01:94:bf:3c:13:58:ec: 57:a2:40:9b:58:3b:d6:40:57:83:73:07:46:c4:ea:42:21:ea: 03:54:41:e2:be:74:df:b9:6f:30:28:fd:9c:6b:ad:10:a4:f2: 8e:5f:f3:27:65:7c:fc:c7:9c:3a:0a:fc:8e:31:66:19:b0:3f: 02:d4:3f:05:97:96:64:44:dd:c7:83:45:d3:59:e2:46:bb:e6: 85:ba:7b:38:15:fc:1c:ea:f0:53:e3:a5:12:17:f8:78:c9:7c: 84:b0:b7:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENEMkQxMTAvBgNVBAUTKDMyOTUyRUE0NjE5NTYzNTZEMzc3RUJERDRCRkExODcy QThFMUU0NDMwHhcNMjUwNTMwMTk0NTQ0WhcNMjUwNjA2MTk0NTQ0WjAYMRYwFAYD VQQDEw02ODNhMGFlOC00ZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRZ6vj5NWk7/qlfTiHQobmt6ecjJIZ6s5WQhzLYTLu78/VYMYwYYirj6mZ/T 9/Y/C8B3icgNAnjhjBxD5HdvM8gAM+O6zXXXICPEhyCUqGEJGU4LWZE8/h6haCws fPt9GCj7rVI6s37ReDtutVQD/uXKcrQF0rIEHn2TS6crBzzlE2R2XlA6EH5l/sCZ sumvCNlMg249EgGJMBKvcrv97fyHKDlx7i1qMrvG521WXhWyy6t9O2hRd6UHdvb3 2C+i5NvO3JpNT1/9yvqnxftzS3iRuhXbRNp4zIJXu25DRmSaYdCT0jy+wbqGjU4X wMm61cAW7N/5mpNYX4MkUKvKJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmyalwb LpoQZxKfS+KUiM7XdE9xMB8GA1UdIwQYMBaAFDKVLqRhlWNW03fr3Uv6GHKo4eRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0QyRC85NEZGMUZCQzU4 ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkxYlRkLXZkU19vWWNxamg1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wVXVwR0dWWTFiVGQtdmRTX29ZY3FqaDVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0QyRC85NEZGMUZCQzU4ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkx YlRkLXZkU19vWWNxamg1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPacL2zjDDE11ZYBdu8ftZ7GHWWsY/dITAEznffVfSLpBp2nG8beUo wf2B8QH1cFKcf1LHZjyQa9B4PkdARMUW+OTFlAsO6ZSDBNrbxQA+XJId/WHDIB4t /6631Dtfn8aLhDS5Zodqv1/1RTfzDygRtc0e5nqgR9GBwXyKmWgrvpJ/5zzdcuM2 xxtoAfn+eW9rhZBIKlgctxwT0AGUvzwTWOxXokCbWDvWQFeDcwdGxOpCIeoDVEHi vnTfuW8wKP2ca60QpPKOX/MnZXz8x5w6CvyOMWYZsD8C1D8Fl5ZkRN3Hg0XTWeJG u+aFuns4Ffwc6vBT46USF/h4yXyEsLf/ -----END CERTIFICATE-----Generated at Sat May 31 17:28:53 2025 by rpki-client