$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft File: ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json) Hash identifier: deScM1WrSflMMIcHejd0E+pIOVb2stT4atts9UDdKE0= Subject key identifier: C0:20:0A:07:BF:F1:E5:AA:0C:70:0D:5F:EA:0D:B3:C1:99:25:92:41 Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 Certificate issuer: /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft Manifest number: 7F Signing time: Sat 31 May 2025 06:16:24 +0000 Manifest this update: Sat 31 May 2025 06:16:23 +0000 Manifest next update: Sat 07 Jun 2025 06:16:23 +0000 Files and hashes: 1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: 2xD+LMTDrtl7KxWqEJjeMQtEnpB8A1ZM+TAJMQVSdao=) 2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: Y1QGQN0nXso2hopLjYxap7U6L3vOEJ5sbYbcbURZoVc=) 3: EBC0BF3A843411EFA205900AC4F9AE02.roa (hash: 1lTg3C6avyOXyGgdRKyCJEw/4DfSTwcprqQ9ajZX1oM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Validity Not Before: May 31 06:16:23 2025 GMT Not After : Jun 7 06:16:23 2025 GMT Subject: CN=683a9eb8-d1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:40:5e:b0:cd:fb:4f:11:d1:2f:43:2a:c8: 43:39:85:e9:bf:bb:ab:6e:3a:b8:40:a9:53:7b:a1: 09:7c:03:df:c8:27:05:21:ed:95:29:77:59:36:a7: a2:84:f8:b2:f2:1a:5b:ae:52:98:fe:9c:8d:b3:f9: c4:c5:c6:ee:e3:92:83:5e:b7:8b:ba:d1:85:2d:a4: 06:e8:e9:38:f7:93:2b:39:46:af:2d:d2:28:4a:0a: df:5f:6f:26:6a:06:af:00:39:2f:96:63:6d:fa:df: dc:bf:23:e6:3c:50:a9:e4:6a:5d:ef:05:3a:8d:d6: 78:54:39:b0:5f:63:d2:c0:1a:1d:4a:18:cf:c9:d1: 6f:eb:51:72:08:0e:37:ca:65:a8:5a:b9:07:60:ba: 6a:6a:81:49:94:99:e8:a0:a6:ce:ea:61:d6:8d:69: 78:f8:5b:4f:95:7e:f9:49:ba:2a:be:e3:e4:b0:98: db:09:7a:6d:0d:6c:68:4b:15:37:80:45:a2:10:8c: 4d:2f:eb:02:10:56:9b:cb:71:55:57:42:dd:2b:1e: ef:03:61:70:da:97:3e:e3:74:4f:21:93:c8:d3:c0: b0:33:9c:7f:38:35:76:36:92:db:fe:9a:02:5d:1f: f8:07:7f:28:ab:eb:56:6b:9f:16:6d:3b:f1:8d:13: c9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:20:0A:07:BF:F1:E5:AA:0C:70:0D:5F:EA:0D:B3:C1:99:25:92:41 X509v3 Authority Key Identifier: keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:98:9a:ab:a4:a9:41:83:9c:1f:d7:d6:36:ce:99:d6:dc:75: 34:69:b8:0c:07:67:08:de:b9:1e:87:76:5a:8b:f5:9f:17:38: fc:c0:fc:b4:da:94:4f:10:20:99:d9:68:98:5f:26:7d:24:90: e1:ec:70:95:a1:c6:2a:af:88:2a:ae:05:c5:2c:1d:ce:da:43: 2d:d2:f8:1c:d8:87:53:d5:33:29:27:65:f2:0f:9e:6d:fc:2d: ab:85:7e:ec:74:7b:61:cc:b3:45:be:60:05:f8:a9:31:67:d9: 28:03:47:39:c6:ae:22:3f:26:4f:a1:5d:b3:4d:ec:3f:24:26: 24:2e:4f:f8:c4:98:54:d8:85:42:b9:cc:3e:b0:de:b9:0f:76: 59:df:d5:a8:54:ea:9e:a5:aa:32:d2:58:b5:13:3a:63:7e:48: 19:0f:8e:ff:7d:1e:99:a8:71:ac:62:af:04:2d:5f:f8:e3:1e: d6:1d:4c:19:d4:c3:e9:5e:3c:0d:e2:8b:09:ec:be:08:31:b5: 48:1a:c4:31:e3:96:91:69:71:95:07:e1:a8:53:55:85:79:5a: 6f:11:44:19:ff:37:6b:96:9f:fb:99:53:e4:fd:c8:d5:80:f8: 9e:c0:4d:85:3d:b9:0a:d2:20:65:4e:bb:e0:f1:27:71:9c:7e: 0b:d2:7a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I3MzYxMTAvBgNVBAUTKDMwQkUxRUI5RDNBQzQ5RDBBRkVFMTM1M0MzRjlEMTE2 N0EwMDdCMTcwHhcNMjUwNTMxMDYxNjIzWhcNMjUwNjA3MDYxNjIzWjAYMRYwFAYD VQQDEw02ODNhOWViOC1kMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyc5AXrDN+08R0S9DKshDOYXpv7urbjq4QKlTe6EJfAPfyCcFIe2VKXdZNqei hPiy8hpbrlKY/pyNs/nExcbu45KDXreLutGFLaQG6Ok495MrOUavLdIoSgrfX28m agavADkvlmNt+t/cvyPmPFCp5Gpd7wU6jdZ4VDmwX2PSwBodShjPydFv61FyCA43 ymWoWrkHYLpqaoFJlJnooKbO6mHWjWl4+FtPlX75SboqvuPksJjbCXptDWxoSxU3 gEWiEIxNL+sCEFaby3FVV0LdKx7vA2Fw2pc+43RPIZPI08CwM5x/ODV2NpLb/poC XR/4B38oq+tWa58WbTvxjRPJMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAgCge/ 8eWqDHANX+oNs8GZJZJBMB8GA1UdIwQYMBaAFDC+HrnTrEnQr+4TU8P50RZ6AHsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjczNi9GMTMzRUYwQzg0 MkQxMUVGOTlFODNEODRDNEY5QUUwMi9NTDRldWRPc1NkQ3Y3aE5Ud19uUkZub0Fl eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01MNGV1ZE9zU2RDdjdoTlR3X25SRm5vQWV4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjczNi9GMTMzRUYwQzg0MkQxMUVGOTlFODNEODRDNEY5QUUwMi9NTDRldWRPc1Nk Q3Y3aE5Ud19uUkZub0FleGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFmJqrpKlBg5wf19Y2zpnW3HU0abgMB2cI3rkeh3Zai/WfFzj8wPy0 2pRPECCZ2WiYXyZ9JJDh7HCVocYqr4gqrgXFLB3O2kMt0vgc2IdT1TMpJ2XyD55t /C2rhX7sdHthzLNFvmAF+KkxZ9koA0c5xq4iPyZPoV2zTew/JCYkLk/4xJhU2IVC ucw+sN65D3ZZ39WoVOqepaoy0li1EzpjfkgZD47/fR6ZqHGsYq8ELV/44x7WHUwZ 1MPpXjwN4osJ7L4IMbVIGsQx45aRaXGVB+GoU1WFeVpvEUQZ/zdrlp/7mVPk/cjV gPiewE2FPbkK0iBlTrvg8SdxnH4L0nry -----END CERTIFICATE-----Generated at Sat May 31 16:52:18 2025 by rpki-client