$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: v1LFK6EYmleGBdzlU7qbG+rnoT222G5A4Pxae+cfCJc= Subject key identifier: 69:FC:1C:4A:B6:6B:F4:77:4A:CE:CB:34:48:95:84:2A:96:9E:5B:3A Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 0256 Signing time: Sat 31 May 2025 02:56:53 +0000 Manifest this update: Sat 31 May 2025 02:56:52 +0000 Manifest next update: Sat 07 Jun 2025 02:56:52 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: Xa44mtXzmhcWU/MZ33t+8anSiYFYDsRpm8i/vS3hDUU=) 2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: my2I25rVWAI3mCpxgHNM4W2V83/AlwvIt+xbjzG24Hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Validity Not Before: May 31 02:56:52 2025 GMT Not After : Jun 7 02:56:52 2025 GMT Subject: CN=683a6ff4-a313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:c0:bc:56:e9:d7:10:e5:ca:ac:ad:25:dc: c6:83:f5:27:e2:27:4b:a9:ef:71:72:ee:d4:36:1b: 62:7e:12:95:c8:2a:0a:af:2b:ec:e7:da:34:dc:bc: 92:5b:95:07:3d:33:07:1a:2b:b6:62:eb:fd:66:9b: 56:8b:66:54:5e:7d:b2:62:7f:0c:6c:0b:b4:d7:1f: 29:4d:69:d2:62:5c:7d:c4:2d:d9:ce:99:66:10:f2: a4:c6:22:b3:76:4d:96:89:32:3b:2f:f9:d5:94:fb: 38:ae:16:36:34:75:62:21:41:2b:e7:a4:b4:9a:53: 4a:8e:7e:22:1f:b1:c7:d3:5b:78:15:e7:65:80:92: b2:4d:d8:ef:59:49:de:fa:0f:72:37:f8:1e:ae:31: 55:15:6d:6b:a9:fe:c5:b3:eb:5e:c9:99:3a:31:6b: e5:6c:cd:5e:17:c3:87:68:c4:80:24:26:67:29:09: 91:04:9b:bf:ad:17:9c:d3:e5:5e:f4:2a:ed:b6:e4: ed:4e:23:06:2d:44:f9:6e:af:9f:8b:e1:65:14:f0: f6:ba:4d:91:f3:08:a5:29:2e:e2:ac:a6:bd:60:dc: 76:55:3d:25:54:48:d0:19:3c:ad:9d:ba:59:f2:69: ab:d9:59:62:af:40:e9:83:0e:e1:46:6d:e6:23:b6: c0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FC:1C:4A:B6:6B:F4:77:4A:CE:CB:34:48:95:84:2A:96:9E:5B:3A X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e6:56:50:68:31:35:b0:15:7d:07:b3:a1:77:30:52:77:95: 88:8b:b9:82:9c:bb:21:b8:2b:91:6c:5d:17:bc:b8:ba:94:f1: 62:cb:39:68:e1:b5:d7:a8:89:2d:a1:f6:f0:97:34:58:cf:85: ff:06:1d:f2:18:62:28:32:69:4a:33:37:87:7e:25:9f:7a:53: 9e:49:de:35:f9:85:4a:8e:bb:3d:97:35:ac:8f:89:01:a2:e0: a1:2f:e3:ee:45:bf:1f:76:23:e5:27:77:e3:93:db:bf:67:a6: 9c:1e:ab:7e:fc:35:98:9c:46:b3:7a:f2:bd:63:ce:4f:f4:51: fa:ff:89:57:14:3e:c8:9d:8a:83:f3:36:c5:20:d7:5d:0f:57: af:3a:9e:32:34:74:ac:a8:82:f9:a8:3e:6d:4b:e7:7b:15:0d: a2:da:f1:d0:29:f7:73:d7:5d:5e:d7:07:a1:e0:bf:32:2b:86: be:9b:1b:f3:a4:cd:31:47:d9:0f:6c:38:68:24:42:3c:2a:37: 4e:9f:33:c2:b0:ad:68:5b:9c:8d:bc:8b:c7:9d:c2:37:3a:97: 35:4c:83:28:47:c8:af:28:7f:d2:58:23:8e:d3:20:ef:40:4d: 2a:3b:44:b3:fa:ea:62:3d:fe:74:dd:ae:f7:13:9c:82:f1:e1: 10:bf:81:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1 RjRGQzAxNTIwHhcNMjUwNTMxMDI1NjUyWhcNMjUwNjA3MDI1NjUyWjAYMRYwFAYD VQQDEw02ODNhNmZmNC1hMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugLAvFbp1xDlyqytJdzGg/Un4idLqe9xcu7UNhtifhKVyCoKryvs59o03LyS W5UHPTMHGiu2Yuv9ZptWi2ZUXn2yYn8MbAu01x8pTWnSYlx9xC3ZzplmEPKkxiKz dk2WiTI7L/nVlPs4rhY2NHViIUEr56S0mlNKjn4iH7HH01t4FedlgJKyTdjvWUne +g9yN/gerjFVFW1rqf7Fs+teyZk6MWvlbM1eF8OHaMSAJCZnKQmRBJu/rRec0+Ve 9CrttuTtTiMGLUT5bq+fi+FlFPD2uk2R8wilKS7irKa9YNx2VT0lVEjQGTytnbpZ 8mmr2Vlir0Dpgw7hRm3mI7bA7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn8HEq2 a/R3Ss7LNEiVhCqWnls6MB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl WHpxR0FYT0lXbVJmVDhBVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo5lZQaDE1sBV9B7OhdzBSd5WIi7mCnLshuCuRbF0XvLi6lPFiyzlo 4bXXqIktofbwlzRYz4X/Bh3yGGIoMmlKMzeHfiWfelOeSd41+YVKjrs9lzWsj4kB ouChL+PuRb8fdiPlJ3fjk9u/Z6acHqt+/DWYnEazevK9Y85P9FH6/4lXFD7InYqD 8zbFINddD1evOp4yNHSsqIL5qD5tS+d7FQ2i2vHQKfdz111e1weh4L8yK4a+mxvz pM0xR9kPbDhoJEI8KjdOnzPCsK1oW5yNvIvHncI3Opc1TIMoR8ivKH/SWCOO0yDv QE0qO0Sz+upiPf503a73E5yC8eEQv4EI -----END CERTIFICATE-----Generated at Sat May 31 17:02:14 2025 by rpki-client