$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json) Hash identifier: mknRFkrOJKhNwwSy6eEwo1/r3IrJ4zdyuixKGotFpvU= Subject key identifier: 33:8C:B7:E2:8D:D4:AA:37:B9:EF:A5:0E:8B:96:23:EF:25:AF:54:DE Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft Manifest number: 013C Signing time: Sat 31 May 2025 04:03:59 +0000 Manifest this update: Sat 31 May 2025 04:03:59 +0000 Manifest next update: Sat 07 Jun 2025 04:03:59 +0000 Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: rtj92MFrblZYHmwCJP2HejuT7Eg/2IacoO+lgIpoBRA=) 2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: vLLtqJRwe55PLrIjKzUZV3hunL6I7HlofeTqMR4Wk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Validity Not Before: May 31 04:03:59 2025 GMT Not After : Jun 7 04:03:59 2025 GMT Subject: CN=683a7faf-214b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:26:55:0f:50:e8:00:a2:70:20:03:57:7a: 0f:8e:d2:a5:f0:c9:b9:a0:3c:c3:a7:e9:6a:6b:1e: e2:69:5c:96:fb:af:4a:0d:b9:c3:87:a2:48:b5:cb: 00:dc:28:2c:67:b3:94:10:1a:af:4d:36:1b:81:3e: a7:88:6c:d1:58:de:6d:0d:af:a0:51:8d:63:b8:32: f8:2e:e7:b8:6a:ba:d5:21:44:2d:4c:f3:cd:43:a3: 03:ee:d5:4b:e3:22:2a:a3:90:b8:d8:1c:6c:55:86: 79:19:8b:e5:7f:ac:4d:d9:4f:51:16:62:77:5f:e6: 55:cf:8a:0d:7a:dd:9f:c0:b7:c6:ff:88:34:10:20: 2f:e0:38:e8:29:fd:b7:d2:90:67:b8:da:05:22:a5: 9f:fa:9d:f3:1c:a1:33:15:ee:0b:25:2e:f5:69:3a: 21:90:a5:b6:a5:f1:e9:b4:84:f8:a8:88:db:20:24: cc:95:7d:9c:3a:f4:54:62:5f:0f:0f:28:30:5d:a0: 33:f8:df:87:c5:ce:53:43:39:78:e1:17:39:e1:2d: ca:42:1e:e6:1a:75:c9:2f:5f:da:3e:e3:3f:02:66: ec:ff:a8:a4:33:f4:24:e5:4c:ba:05:27:95:68:b0: 30:17:d1:0d:56:95:4d:b9:03:62:be:5f:d6:cb:35: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8C:B7:E2:8D:D4:AA:37:B9:EF:A5:0E:8B:96:23:EF:25:AF:54:DE X509v3 Authority Key Identifier: keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:8d:ab:47:1c:74:55:5d:e8:85:dd:74:61:2a:e6:88:3e:0e: f0:db:a9:c3:3b:5e:e6:51:b0:a5:f5:a8:e4:fd:4f:59:b5:c0: 9e:29:6a:32:6c:99:6d:68:f7:36:7b:db:84:ce:38:4f:fc:79: 8b:b8:6e:19:7e:5a:f0:81:d7:03:c2:0b:33:92:32:b1:4f:08: d5:5f:9e:da:c9:2d:a1:8f:9c:b2:60:bc:1e:8e:13:de:f0:0e: 19:41:cf:92:be:46:07:ea:38:65:cc:f4:32:3f:c2:af:83:ad: d8:a6:bb:fd:7b:f4:51:16:87:e7:e7:09:b7:1a:06:9b:02:40: a0:07:71:43:79:fb:c4:b2:1f:90:bc:8e:2c:f5:1d:ff:d0:54: 1f:9c:28:c5:b9:f2:32:1d:1c:0e:16:76:af:66:f1:47:3d:d0: ae:4a:82:57:b2:63:3e:cb:f5:a7:40:ef:98:d2:94:31:4e:53: f7:ff:b6:3c:85:bd:4c:07:41:70:0d:2a:99:f2:32:e9:6b:e1: 74:e3:12:79:af:69:a6:8d:b0:cd:99:5f:0a:ea:6b:e5:a5:1f: 4c:73:85:dc:26:9b:b9:7c:b6:08:15:d2:5c:f3:f6:96:dd:dd: da:c1:54:37:85:a0:55:ec:08:e4:00:e4:c4:b6:31:08:82:a9: 3a:2d:c4:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFMUUxMTAvBgNVBAUTKDMwMTRERDM4N0IxN0YzMzg4NzNBMkE3QTM3RjgyNDRE OTM3MDJFQTgwHhcNMjUwNTMxMDQwMzU5WhcNMjUwNjA3MDQwMzU5WjAYMRYwFAYD VQQDEw02ODNhN2ZhZi0yMTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDomVQ9Q6ACicCADV3oPjtKl8Mm5oDzDp+lqax7iaVyW+69KDbnDh6JItcsA 3CgsZ7OUEBqvTTYbgT6niGzRWN5tDa+gUY1juDL4Lue4arrVIUQtTPPNQ6MD7tVL 4yIqo5C42BxsVYZ5GYvlf6xN2U9RFmJ3X+ZVz4oNet2fwLfG/4g0ECAv4DjoKf23 0pBnuNoFIqWf+p3zHKEzFe4LJS71aTohkKW2pfHptIT4qIjbICTMlX2cOvRUYl8P DygwXaAz+N+Hxc5TQzl44Rc54S3KQh7mGnXJL1/aPuM/Ambs/6ikM/Qk5Uy6BSeV aLAwF9ENVpVNuQNivl/WyzXOjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOMt+KN 1Ko3ue+lDouWI+8lr1TeMB8GA1UdIwQYMBaAFDAU3Th7F/M4hzoqejf4JE2TcC6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkUxRS8yNzg4MTdDMDVD MTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6aUhPaXA2Tl9na1RaTndM cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CVGRPSHNYOHppSE9pcDZOX2drVFpOd0xxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkUxRS8yNzg4MTdDMDVDMTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6 aUhPaXA2Tl9na1RaTndMcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJjatHHHRVXeiF3XRhKuaIPg7w26nDO17mUbCl9ajk/U9ZtcCeKWoy bJltaPc2e9uEzjhP/HmLuG4ZflrwgdcDwgszkjKxTwjVX57ayS2hj5yyYLwejhPe 8A4ZQc+SvkYH6jhlzPQyP8Kvg63Yprv9e/RRFofn5wm3GgabAkCgB3FDefvEsh+Q vI4s9R3/0FQfnCjFufIyHRwOFnavZvFHPdCuSoJXsmM+y/WnQO+Y0pQxTlP3/7Y8 hb1MB0FwDSqZ8jLpa+F04xJ5r2mmjbDNmV8K6mvlpR9Mc4XcJpu5fLYIFdJc8/aW 3d3awVQ3haBV7AjkAOTEtjEIgqk6LcTQ -----END CERTIFICATE-----Generated at Sat May 31 17:50:39 2025 by rpki-client