$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: Oq01c6RkVIE+8nnycknh2B0/enRSA6+81RIT0M5upyI= Subject key identifier: ED:BF:15:E0:49:01:1D:B1:FA:42:DB:BF:0B:A7:DE:46:85:48:F6:9E Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 03B8 Signing time: Sat 31 May 2025 00:52:25 +0000 Manifest this update: Sat 31 May 2025 00:52:24 +0000 Manifest next update: Sat 07 Jun 2025 00:52:24 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: sbvUhRjwSKG2DZ56/I2/Bc0GCS71GLpbWa6L6RMRXgY=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: iSf3pkGC+96IY56uEQF7L3VqZS/vgXaJcABFmCHB8cc=) 3: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: 7R3hysbeSbUFb8HWymJrPzj8ZBNf1N511Ldy7MXSF9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: May 31 00:52:24 2025 GMT Not After : Jun 7 00:52:24 2025 GMT Subject: CN=683a52c9-c6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:09:f6:be:37:38:16:90:b6:36:2e:f7:c1: 01:b2:76:52:70:a8:36:63:4e:14:42:93:23:78:57: 4b:59:c5:dd:6b:63:f1:16:0b:29:ae:f1:0e:31:22: a9:39:b6:b5:1e:59:b5:98:b7:d2:e7:75:0d:93:f0: fd:ca:9f:c0:ec:98:13:d5:2f:fd:26:d9:0e:43:b9: e1:81:4b:f8:6a:75:57:4f:18:8d:14:13:ca:2f:52: ee:d4:2e:0a:58:bc:6e:61:4f:da:7f:2d:5e:7a:f3: 8c:12:c4:53:e8:92:03:52:35:dc:4b:d4:59:cc:06: 1c:0b:34:5a:6d:0a:71:2d:8f:48:a4:8b:ed:5b:04: 15:2d:3e:f9:89:7c:0c:30:c6:60:7e:99:3c:e0:5f: 5e:ab:bf:d2:e7:25:c0:34:e9:40:57:87:8e:8d:78: 21:db:13:92:64:8b:26:0c:eb:45:33:d3:41:1b:e0: c1:fd:2c:0a:50:ab:fc:30:8e:fb:49:82:ee:dc:4d: bd:45:50:0c:0c:1c:39:cc:19:bd:55:71:48:f7:05: 53:d8:80:2d:4b:56:78:7c:78:52:c7:16:85:81:07: 87:2b:32:fa:c2:50:a0:ce:1f:de:51:e7:0b:2a:b2: 1a:40:6d:07:f9:dc:23:0c:e4:48:59:0c:0a:d7:44: ac:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BF:15:E0:49:01:1D:B1:FA:42:DB:BF:0B:A7:DE:46:85:48:F6:9E X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:80:7a:f5:97:53:4f:70:f0:ca:fb:e2:6e:1c:1c:34:f0:80: e3:3a:5a:2c:a7:5b:ed:5b:ed:1b:86:a4:e5:b2:f8:cc:3f:ea: c1:42:ad:89:37:da:1e:3c:ab:41:c7:4d:53:06:3e:2e:46:2d: 29:84:eb:31:22:c4:a6:cf:0b:1c:bd:62:1c:c3:27:db:3d:e0: c4:3b:94:cd:fb:98:6f:fe:b4:8f:90:9a:10:c4:1d:81:f2:a4: a7:f7:f6:e0:0d:11:71:f7:f1:2d:65:e6:1f:c5:cc:62:2b:9d: 75:82:b5:ee:4b:4c:dd:1d:42:d0:b0:cd:82:bc:2e:24:17:fd: aa:fb:32:ee:6c:e4:89:81:17:c8:86:8d:e6:6d:52:7f:8d:ba: 16:04:d6:6a:15:3a:34:cc:c0:10:4d:34:e4:78:ee:7e:db:20: 6d:da:71:76:0c:8b:35:6c:fa:c4:91:f2:83:c0:6c:0c:22:c3: 41:c0:80:5d:13:0b:08:b9:cc:a1:dc:54:38:6e:fc:99:1c:40: eb:43:61:8c:e2:e1:59:73:be:a8:6a:2f:69:75:84:96:3a:76: f7:e8:71:07:e9:fd:6b:e3:2a:39:ee:75:e6:db:63:93:8d:38: 23:28:e0:a5:c7:32:b3:5b:1a:63:39:a5:d7:5e:3d:d0:e4:3c: 8b:a3:bb:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUwNTMxMDA1MjI0WhcNMjUwNjA3MDA1MjI0WjAYMRYwFAYD VQQDEw02ODNhNTJjOS1jNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8gJ9r43OBaQtjYu98EBsnZScKg2Y04UQpMjeFdLWcXda2PxFgsprvEOMSKp Oba1Hlm1mLfS53UNk/D9yp/A7JgT1S/9JtkOQ7nhgUv4anVXTxiNFBPKL1Lu1C4K WLxuYU/afy1eevOMEsRT6JIDUjXcS9RZzAYcCzRabQpxLY9IpIvtWwQVLT75iXwM MMZgfpk84F9eq7/S5yXANOlAV4eOjXgh2xOSZIsmDOtFM9NBG+DB/SwKUKv8MI77 SYLu3E29RVAMDBw5zBm9VXFI9wVT2IAtS1Z4fHhSxxaFgQeHKzL6wlCgzh/eUecL KrIaQG0H+dwjDORIWQwK10SswQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2/FeBJ AR2x+kLbvwun3kaFSPaeMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8gHr1l1NPcPDK++JuHBw08IDjOlosp1vtW+0bhqTlsvjMP+rBQq2J N9oePKtBx01TBj4uRi0phOsxIsSmzwscvWIcwyfbPeDEO5TN+5hv/rSPkJoQxB2B 8qSn9/bgDRFx9/EtZeYfxcxiK511grXuS0zdHULQsM2CvC4kF/2q+zLubOSJgRfI ho3mbVJ/jboWBNZqFTo0zMAQTTTkeO5+2yBt2nF2DIs1bPrEkfKDwGwMIsNBwIBd EwsIucyh3FQ4bvyZHEDrQ2GM4uFZc76oai9pdYSWOnb36HEH6f1r4yo57nXm22OT jTgjKOClxzKzWxpjOaXXXj3Q5DyLo7u/ -----END CERTIFICATE-----Generated at Sat May 31 16:52:18 2025 by rpki-client