$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft File: MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json) Hash identifier: snah4oPpR5i/L+5Qp9x9ikn9jTWUWw5FmW4LR/32r60= Subject key identifier: CE:D1:B5:FD:A6:FD:46:14:5C:39:2F:18:FF:16:93:19:56:75:83:E9 Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC Certificate issuer: /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Certificate serial: 1911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft Manifest number: 1907 Signing time: Fri 30 May 2025 16:37:14 +0000 Manifest this update: Fri 30 May 2025 16:37:14 +0000 Manifest next update: Fri 06 Jun 2025 16:37:14 +0000 Files and hashes: 1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: DgRv6f6OMQFWnMUGyhtOxwjlsCfjT6ohTwpQ5bbJZdc=) 2: AE929D88823711E782F9A440C4F9AE02.roa (hash: sKS3rMJ6It6/rpeTWZ/r67AylRsKXL//6e7PLZw6fXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6417 (0x1911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5E3, serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Validity Not Before: May 30 16:37:14 2025 GMT Not After : Jun 6 16:37:14 2025 GMT Subject: CN=6839deba-be6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:54:69:31:97:cb:9d:d4:1d:d7:bc:1d:c1:ab: a4:2f:1e:68:8c:7f:24:5d:9a:f3:ad:fb:91:a3:61: cf:44:be:37:fe:21:fc:cd:1e:ac:56:78:ef:0f:78: d0:87:f8:b7:0b:54:09:b8:48:ea:91:a0:c7:d6:a5: 13:7c:80:70:72:37:da:e6:f4:85:16:07:1f:bf:77: 2f:b4:b5:35:e8:4e:83:3d:da:0d:00:7e:73:54:31: a1:7e:12:d6:e1:a2:c6:95:3c:45:4f:92:03:55:a8: a5:4b:33:c5:70:44:d6:d1:23:e9:f2:ec:7b:59:66: 7d:ff:d9:35:a0:5e:3e:7f:40:f2:e4:87:74:a1:9b: 57:ea:7d:08:df:80:e6:28:13:0c:92:4b:d9:93:d6: 34:05:45:38:1b:69:a7:97:73:0e:fc:98:00:84:ce: bc:58:5c:ce:de:ba:6d:44:01:05:9b:3d:02:47:3a: 14:4f:6f:3e:61:6a:12:49:14:22:58:c7:0d:49:20: c9:6e:2d:b4:48:0e:5a:10:47:5e:da:d8:03:9a:25: 79:b4:e4:8c:c4:7c:87:be:00:2c:a1:c2:04:86:fd: 5b:8c:72:32:a1:87:cd:07:72:d0:33:91:0d:c7:0f: d6:81:63:4c:ab:9e:c2:de:81:05:e0:c8:1d:9e:84: 79:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D1:B5:FD:A6:FD:46:14:5C:39:2F:18:FF:16:93:19:56:75:83:E9 X509v3 Authority Key Identifier: keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:92:f1:17:34:45:96:ef:fa:6c:a0:37:f4:a6:e8:29:1e:31: 84:ab:a8:0f:8c:5e:7e:ce:e4:9a:9a:a8:6b:8d:c2:88:09:76: 26:67:73:b5:6c:ac:cf:4c:93:1e:12:dc:12:ca:39:da:7d:4b: 45:30:da:55:e1:89:c0:29:ab:19:eb:7a:07:de:3a:00:a1:e2: d3:f4:58:45:02:4a:b1:69:3f:ba:a7:ec:3f:d5:ab:b6:72:e5: d5:30:e4:12:eb:fb:96:c0:79:c3:6c:9f:1a:c0:c2:b3:d5:90: 22:d2:5c:3a:d0:f7:c6:f2:ba:54:c9:d6:ca:63:f8:d1:bf:68: e0:46:fd:8f:b6:ea:6a:00:aa:e5:0b:59:90:5d:43:13:2a:aa: af:8c:3d:98:06:79:88:d4:4b:d0:b8:79:4b:f7:3d:4f:c1:66: d2:11:ef:10:4c:0b:c9:ab:36:c2:61:43:1e:2f:23:10:f6:77: ab:77:ba:d7:cc:31:5a:ca:73:db:8f:b1:57:97:f2:c3:c9:a8: 3c:24:64:e4:44:e1:81:54:c4:63:bc:20:d1:ce:7d:a6:f4:a0: 34:ee:87:9b:a2:56:47:fd:0a:70:a7:3d:2b:f4:fb:50:36:26: a5:02:2a:50:a4:85:41:47:c3:de:d5:25:dd:9b:19:8f:7f:ec: 5b:d5:88:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1RTMxMTAvBgNVBAUTKDMwQzA0MDc2MjlCQjRGOUZDRDgxNTQ4OUEzNzhEQzFB MzUzREFGRUMwHhcNMjUwNTMwMTYzNzE0WhcNMjUwNjA2MTYzNzE0WjAYMRYwFAYD VQQDEw02ODM5ZGViYS1iZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41RpMZfLndQd17wdwaukLx5ojH8kXZrzrfuRo2HPRL43/iH8zR6sVnjvD3jQ h/i3C1QJuEjqkaDH1qUTfIBwcjfa5vSFFgcfv3cvtLU16E6DPdoNAH5zVDGhfhLW 4aLGlTxFT5IDVailSzPFcETW0SPp8ux7WWZ9/9k1oF4+f0Dy5Id0oZtX6n0I34Dm KBMMkkvZk9Y0BUU4G2mnl3MO/JgAhM68WFzO3rptRAEFmz0CRzoUT28+YWoSSRQi WMcNSSDJbi20SA5aEEde2tgDmiV5tOSMxHyHvgAsocIEhv1bjHIyoYfNB3LQM5EN xw/WgWNMq57C3oEF4MgdnoR5OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7Rtf2m /UYUXDkvGP8WkxlWdYPpMB8GA1UdIwQYMBaAFDDAQHYpu0+fzYFUiaN43Bo1Pa/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVFMy9CNzA5QTVEQTgy MzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1X05nVlNKbzNqY0dqVTly LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NQkFkaW03VDVfTmdWU0pvM2pjR2pVOXItdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzVFMy9CNzA5QTVEQTgyMzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1 X05nVlNKbzNqY0dqVTlyLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAekvEXNEWW7/psoDf0pugpHjGEq6gPjF5+zuSamqhrjcKICXYmZ3O1 bKzPTJMeEtwSyjnafUtFMNpV4YnAKasZ63oH3joAoeLT9FhFAkqxaT+6p+w/1au2 cuXVMOQS6/uWwHnDbJ8awMKz1ZAi0lw60PfG8rpUydbKY/jRv2jgRv2PtupqAKrl C1mQXUMTKqqvjD2YBnmI1EvQuHlL9z1PwWbSEe8QTAvJqzbCYUMeLyMQ9nerd7rX zDFaynPbj7FXl/LDyag8JGTkROGBVMRjvCDRzn2m9KA07oebolZH/Qpwpz0r9PtQ NialAipQpIVBR8Pe1SXdmxmPf+xb1Ygy -----END CERTIFICATE-----Generated at Sat May 31 16:42:05 2025 by rpki-client