$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: EXA50U5GKYr+5ezoaUddu7PIqS9jKiSWxV+wcjVypog= Subject key identifier: D9:C2:1E:74:14:21:DB:7A:CA:FD:0E:7D:21:96:D9:F1:5F:0B:A8:59 Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0C30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0C23 Signing time: Fri 30 May 2025 18:50:11 +0000 Manifest this update: Fri 30 May 2025 18:50:11 +0000 Manifest next update: Fri 06 Jun 2025 18:50:11 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: NE2Tir6CbdLeMTiLqKSXiesaRQ6tDNlAScUJu1szRVU=) 2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: F9++BbjjmMUe8vc/0zV646ZfgUr7qUiZRpjhYm31XaE=) 3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: iI/QhwgtRnAZ89cLUtViFH1F7QhncCiFpfub0JT3vAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3120 (0xc30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Validity Not Before: May 30 18:50:11 2025 GMT Not After : Jun 6 18:50:11 2025 GMT Subject: CN=6839fde3-9f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:7a:f7:8d:7b:72:a1:76:35:aa:59:26:4d: 47:5f:62:8e:3c:72:8a:18:40:10:73:a7:77:3c:86: 79:42:89:67:85:2b:d8:cb:a5:c2:f2:ed:e8:16:ad: e8:f3:c4:c5:ea:ed:e7:7f:05:fa:20:c4:b3:60:46: 0d:55:36:47:72:bb:59:94:ce:62:7a:72:7e:18:21: 01:22:0a:64:99:7d:54:40:aa:82:7e:32:3f:70:99: df:39:22:31:82:31:fc:59:95:97:17:68:5f:18:38: dc:34:6e:81:1f:66:4e:0f:6b:de:17:54:cc:2b:d2: 84:65:60:c4:ed:a1:32:35:1f:fc:b6:b4:ba:be:3f: 31:56:07:1c:d2:00:27:f7:68:4c:80:95:02:5d:02: 6e:e6:95:f3:0b:ad:79:e0:b3:95:26:2a:48:bd:5b: e7:26:f4:a1:29:3a:f5:d2:79:f6:38:71:85:c0:ed: 84:5d:e4:c7:95:87:70:92:e8:fe:de:ba:a9:bb:bb: 2a:f7:fa:53:3e:7f:28:bc:b3:69:64:98:98:50:c6: 6b:31:1d:2b:54:fd:cd:47:c0:23:3b:b1:f6:d0:b6: a5:d5:a5:5b:ea:69:fb:3b:72:c4:6c:83:5d:4c:1c: 47:79:e3:1e:4a:58:57:22:a3:92:ae:b1:a8:d0:44: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C2:1E:74:14:21:DB:7A:CA:FD:0E:7D:21:96:D9:F1:5F:0B:A8:59 X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6c:5a:18:7f:fd:99:b2:fe:90:08:e3:a0:63:6b:dc:0e:aa: e5:86:8d:a9:fe:ad:ca:61:68:cd:fd:ff:2b:fb:05:83:f7:fa: 01:13:9a:ad:57:b5:9a:22:ec:17:27:46:72:77:eb:ae:87:a9: 6d:03:ed:af:82:d3:bc:2a:cd:b7:9f:aa:15:bd:d1:cd:76:d3: 71:ad:a0:de:e3:2d:f7:07:b0:21:8b:0a:33:79:c5:4d:2f:e0: 67:8c:80:11:32:4e:f0:7a:31:28:2f:b1:36:5b:19:eb:f0:bf: d4:3e:5e:3b:fa:08:59:0a:77:3a:58:9e:ce:33:92:c5:9c:de: 64:e1:86:25:32:73:70:5e:6b:af:5d:bc:e8:12:c5:df:ba:24: f5:5a:aa:b3:d1:9e:68:29:65:25:fb:9c:e2:9b:5c:a0:4b:49: e6:34:c4:c2:88:33:45:80:16:54:49:32:a0:8b:53:fe:da:0c: 56:6b:8a:74:11:d2:b4:63:59:31:eb:11:3a:f1:47:52:c4:77: 32:a6:4b:e0:3c:9f:53:22:93:0d:40:a9:ea:57:ab:4f:6a:70: 62:ef:67:7b:87:dc:0a:33:f6:7e:1f:03:03:ac:40:42:33:30: 3f:62:df:6e:97:ca:8c:b7:bb:11:8c:14:4b:03:b8:ff:ee:6f: d3:6e:d4:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjUwNTMwMTg1MDExWhcNMjUwNjA2MTg1MDExWjAYMRYwFAYD VQQDEw02ODM5ZmRlMy05ZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYJ69417cqF2NapZJk1HX2KOPHKKGEAQc6d3PIZ5QolnhSvYy6XC8u3oFq3o 88TF6u3nfwX6IMSzYEYNVTZHcrtZlM5ienJ+GCEBIgpkmX1UQKqCfjI/cJnfOSIx gjH8WZWXF2hfGDjcNG6BH2ZOD2veF1TMK9KEZWDE7aEyNR/8trS6vj8xVgcc0gAn 92hMgJUCXQJu5pXzC6154LOVJipIvVvnJvShKTr10nn2OHGFwO2EXeTHlYdwkuj+ 3rqpu7sq9/pTPn8ovLNpZJiYUMZrMR0rVP3NR8AjO7H20Lal1aVb6mn7O3LEbINd TBxHeeMeSlhXIqOSrrGo0EQEbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnCHnQU Idt6yv0OfSGW2fFfC6hZMB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIbFoYf/2Zsv6QCOOgY2vcDqrlho2p/q3KYWjN/f8r+wWD9/oBE5qt V7WaIuwXJ0Zyd+uuh6ltA+2vgtO8Ks23n6oVvdHNdtNxraDe4y33B7AhiwozecVN L+BnjIARMk7wejEoL7E2Wxnr8L/UPl47+ghZCnc6WJ7OM5LFnN5k4YYlMnNwXmuv XbzoEsXfuiT1Wqqz0Z5oKWUl+5zim1ygS0nmNMTCiDNFgBZUSTKgi1P+2gxWa4p0 EdK0Y1kx6xE68UdSxHcypkvgPJ9TIpMNQKnqV6tPanBi72d7h9wKM/Z+HwMDrEBC MzA/Yt9ul8qMt7sRjBRLA7j/7m/TbtSe -----END CERTIFICATE-----Generated at Sat May 31 17:50:34 2025 by rpki-client