$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: dw7R9+gpIf2PxF3zTUMTSpy4ASG9kNnh4QFsophqk30= Subject key identifier: 68:C2:9D:64:DA:C5:85:3A:30:B8:FB:9F:23:58:D2:0D:FF:AF:A7:9E Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: 019F Signing time: Mon 09 Jun 2025 02:27:35 +0000 Manifest this update: Mon 09 Jun 2025 02:27:34 +0000 Manifest next update: Mon 16 Jun 2025 02:27:34 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: 4FXITojACc23sbtYASOnjPH8++H+9J0mtk9I17p6S6A=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: QOfAhP3S+ePBd5bLXcD9SSvstPxykfxAtUO9d7xqQdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 02:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: Jun 9 02:27:34 2025 GMT Not After : Jun 16 02:27:34 2025 GMT Subject: CN=68464696-18d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d4:b6:dd:0a:da:56:89:8a:15:c9:b1:7c:c2: fe:6b:d4:e2:4a:7a:0c:ba:e0:b1:4b:4f:0b:8b:f0: 3d:bf:d2:e7:1e:bf:cf:43:cd:33:33:59:2a:ab:ea: 71:30:49:7b:5b:ef:5e:71:93:3e:f2:7f:55:2f:24: f8:29:4a:b0:a0:96:67:b0:db:65:ff:07:11:89:27: c2:fd:9b:56:1d:81:cb:3c:39:d5:d9:76:a5:ab:eb: fb:91:f1:1d:6e:6d:e1:ff:b3:4d:91:46:b3:4a:74: 8d:09:a6:0e:d8:07:3d:4b:66:d0:3a:0c:24:46:3c: c1:01:92:00:c3:80:80:8f:1a:6b:b5:53:a9:3a:24: 29:42:5b:65:94:ab:09:52:de:37:e3:25:b0:a6:8d: 3c:e0:01:ae:47:0d:84:3f:74:a1:01:0a:8f:2d:fe: d4:81:5b:54:ee:b2:fc:5e:69:ca:b8:3f:37:5e:fb: 1a:06:c1:be:6c:59:cc:b8:41:86:6e:00:37:8e:41: fd:03:3f:75:49:db:17:a5:9b:0e:a8:dd:92:e5:3e: 19:78:84:60:5b:83:d0:61:fd:ce:6b:ea:d0:27:09: 46:b8:7f:eb:92:da:b3:cc:c9:9b:53:32:73:08:96: f1:1b:3c:c1:c9:38:0e:80:b9:02:34:03:24:ca:37: 1e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C2:9D:64:DA:C5:85:3A:30:B8:FB:9F:23:58:D2:0D:FF:AF:A7:9E X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:88:b6:64:9e:b4:71:fd:1a:aa:ad:fe:08:c6:45:19:9f:6b: fb:99:00:27:d9:53:ef:2d:3f:ef:e4:d3:3c:9e:0b:1d:b2:97: 1f:18:fa:40:24:29:2f:a5:3e:f8:70:7a:77:b0:a5:aa:08:53: 7b:6e:db:0d:d2:4b:97:72:f8:a1:94:2d:82:ab:72:8b:2b:18: ff:98:59:4b:3e:da:5c:39:55:09:4b:6f:3f:36:4d:2d:b2:44: ec:b8:4a:44:dc:7e:7e:9d:15:fe:be:96:3d:07:8f:d6:ba:4d: 55:5e:08:17:93:bb:c6:99:2c:6c:18:28:ef:d0:d9:1b:92:56: 0b:aa:a8:d0:cc:d8:24:da:a1:2b:bb:4f:de:76:6d:45:fa:32: c1:98:6a:ee:b8:1a:01:e2:8d:a8:f5:31:a3:16:6d:55:2c:9a: b9:a5:2d:5e:24:6a:a9:d3:17:90:d3:5a:f3:ac:9e:26:56:0a: 3a:23:56:28:86:df:db:51:da:56:e2:b5:87:87:af:7f:93:d0: 99:8e:e6:a1:22:a3:f8:60:7b:82:9e:60:31:71:b7:2a:b2:60: a5:e4:00:c6:25:d0:08:97:9c:6d:eb:5b:4f:50:f9:e5:78:7f: 31:6d:01:46:8e:1a:56:b5:d5:00:55:11:49:05:8f:b7:e8:c2: e1:f6:25:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjUwNjA5MDIyNzM0WhcNMjUwNjE2MDIyNzM0WjAYMRYwFAYD VQQDEw02ODQ2NDY5Ni0xOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tS23QraVomKFcmxfML+a9TiSnoMuuCxS08Li/A9v9LnHr/PQ80zM1kqq+px MEl7W+9ecZM+8n9VLyT4KUqwoJZnsNtl/wcRiSfC/ZtWHYHLPDnV2Xalq+v7kfEd bm3h/7NNkUazSnSNCaYO2Ac9S2bQOgwkRjzBAZIAw4CAjxprtVOpOiQpQltllKsJ Ut434yWwpo084AGuRw2EP3ShAQqPLf7UgVtU7rL8XmnKuD83XvsaBsG+bFnMuEGG bgA3jkH9Az91SdsXpZsOqN2S5T4ZeIRgW4PQYf3Oa+rQJwlGuH/rktqzzMmbUzJz CJbxGzzByTgOgLkCNAMkyjceCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjCnWTa xYU6MLj7nyNY0g3/r6eeMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3iLZknrRx/Rqqrf4IxkUZn2v7mQAn2VPvLT/v5NM8ngsdspcfGPpA JCkvpT74cHp3sKWqCFN7btsN0kuXcvihlC2Cq3KLKxj/mFlLPtpcOVUJS28/Nk0t skTsuEpE3H5+nRX+vpY9B4/Wuk1VXggXk7vGmSxsGCjv0NkbklYLqqjQzNgk2qEr u0/edm1F+jLBmGruuBoB4o2o9TGjFm1VLJq5pS1eJGqp0xeQ01rzrJ4mVgo6I1Yo ht/bUdpW4rWHh69/k9CZjuahIqP4YHuCnmAxcbcqsmCl5ADGJdAIl5xt61tPUPnl eH8xbQFGjhpWtdUAVRFJBY+36MLh9iXY -----END CERTIFICATE-----Generated at Tue Jun 10 17:25:13 2025 by rpki-client