$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft File: MPLcABvWWM0WPiN3H0FHaXLg0U8.mft (raw, json) Hash identifier: mjLwXmg8BxVMA0/RUm0yhmvvTBaTNsc7AnMKA79ilKc= Subject key identifier: C0:79:94:5A:7E:D0:E6:70:86:25:8D:BE:17:2A:E6:22:B0:00:99:3F Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F Certificate issuer: /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Certificate serial: 04D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft Manifest number: 04D2 Signing time: Sun 04 May 2025 23:25:21 +0000 Manifest this update: Sun 04 May 2025 23:25:20 +0000 Manifest next update: Sun 11 May 2025 23:25:20 +0000 Files and hashes: 1: MPLcABvWWM0WPiN3H0FHaXLg0U8.crl (hash: unhzjOA56UfZpKtVUh3r3fMKF2JM3OFFe+tX8ZHT/0c=) 2: 9F7C20921ADD11EC80226B61C4F9AE02.roa (hash: 76Aj2e1/zvO+ptuFoEi5Uq+Ik3Pi+kbiWoL+xAlC1Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1238 (0x4d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91283E7, serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Validity Not Before: May 4 23:25:20 2025 GMT Not After : May 11 23:25:20 2025 GMT Subject: CN=6817f760-dc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:c3:7f:c4:cb:c4:50:ce:02:7c:a1:3c:31: b1:01:60:80:b5:70:d0:24:f4:4d:a3:3b:7d:09:89: 96:93:99:38:57:08:86:e0:08:67:c7:00:11:96:0d: d1:05:85:e4:c9:8f:52:23:47:e0:80:40:67:e4:46: fd:c5:2e:78:ed:0d:11:5d:64:40:7e:12:ff:69:74: 25:e3:e2:0a:60:16:c1:e8:06:eb:5b:87:7e:4d:f8: 9a:32:b7:05:81:dc:3c:75:56:56:9a:f3:b6:24:2a: 59:d8:d8:45:1e:df:1e:4b:73:f4:1e:13:74:c3:e1: 54:10:8d:a2:b1:f4:a1:8f:ff:e5:bb:d7:d1:1c:fa: 12:93:4c:11:58:03:13:94:7d:bf:b0:f9:08:3d:b5: 7b:00:01:b5:fe:08:ff:f2:55:47:c9:12:df:92:e2: 43:26:58:e9:2c:c6:e6:a1:cb:44:06:43:f2:d5:6d: 2c:39:80:af:09:16:cf:a1:02:62:10:4a:c8:5b:fd: b0:06:09:ef:22:4e:24:13:9c:08:70:82:8d:62:c4: 1a:65:37:f4:1a:14:e9:7e:db:7b:d0:6a:a5:5e:97: 3c:1f:ab:02:99:dc:66:c8:32:81:11:37:00:c2:1b: 99:50:e2:51:d2:0d:ee:d4:99:ab:35:43:08:8e:56: 6a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:79:94:5A:7E:D0:E6:70:86:25:8D:BE:17:2A:E6:22:B0:00:99:3F X509v3 Authority Key Identifier: keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:9b:1c:3b:30:5b:3c:c5:22:ea:d2:88:7a:ac:25:ac:c2:7f: a5:6f:64:b6:25:ca:0d:d0:90:bb:a2:79:9f:e9:e3:d0:1f:cc: 21:62:f7:c2:4e:01:da:41:34:48:b8:d0:a1:90:f3:79:cf:6f: 38:25:f6:65:f0:ef:f1:fc:f2:d8:f9:ca:57:23:24:1f:ff:79: b1:e6:f1:71:32:61:c1:fc:93:b8:6f:23:7c:f7:d3:3e:0a:a3: 9a:a8:12:f7:93:f1:b0:44:a7:d2:a0:96:da:b4:28:7c:39:fc: 8b:ff:60:77:17:70:ec:53:5e:76:89:06:19:e9:0f:1b:0c:f9: ff:8c:ee:90:29:e1:a1:3b:b9:e6:20:ec:f8:76:41:f5:9d:92: 23:60:3a:f4:78:bf:6b:b5:99:ed:0a:c6:2d:2f:e9:8d:92:a3: b0:40:d3:07:2a:33:db:6c:00:49:bd:7f:8b:ef:53:5d:c7:1b: 65:6a:db:01:8b:8d:58:7e:4c:87:5e:09:95:c8:83:c9:41:ac: 63:cb:52:ee:d9:ed:62:57:46:aa:32:f4:b0:c5:86:75:9f:cd: 9c:e5:e4:14:b1:ad:98:08:be:a5:bd:09:c2:a6:a9:54:a5:41: a4:7d:9c:5a:7f:bc:95:16:44:59:45:12:d4:50:53:30:b8:64: 4b:75:ed:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgzRTcxMTAvBgNVBAUTKDMwRjJEQzAwMUJENjU4Q0QxNjNFMjM3NzFGNDE0NzY5 NzJFMEQxNEYwHhcNMjUwNTA0MjMyNTIwWhcNMjUwNTExMjMyNTIwWjAYMRYwFAYD VQQDEw02ODE3Zjc2MC1kYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbfDf8TLxFDOAnyhPDGxAWCAtXDQJPRNozt9CYmWk5k4VwiG4AhnxwARlg3R BYXkyY9SI0fggEBn5Eb9xS547Q0RXWRAfhL/aXQl4+IKYBbB6AbrW4d+TfiaMrcF gdw8dVZWmvO2JCpZ2NhFHt8eS3P0HhN0w+FUEI2isfShj//lu9fRHPoSk0wRWAMT lH2/sPkIPbV7AAG1/gj/8lVHyRLfkuJDJljpLMbmoctEBkPy1W0sOYCvCRbPoQJi EErIW/2wBgnvIk4kE5wIcIKNYsQaZTf0GhTpftt70GqlXpc8H6sCmdxmyDKBETcA whuZUOJR0g3u1JmrNUMIjlZqXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB5lFp+ 0OZwhiWNvhcq5iKwAJk/MB8GA1UdIwQYMBaAFDDy3AAb1ljNFj4jdx9BR2ly4NFP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODNFNy83Mzk2MENDNDFB REIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dNMFdQaU4zSDBGSGFYTGcw VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QTGNBQnZXV00wV1BpTjNIMEZIYVhMZzBVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODNFNy83Mzk2MENDNDFBREIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dN MFdQaU4zSDBGSGFYTGcwVTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGmxw7MFs8xSLq0oh6rCWswn+lb2S2JcoN0JC7onmf6ePQH8whYvfC TgHaQTRIuNChkPN5z284JfZl8O/x/PLY+cpXIyQf/3mx5vFxMmHB/JO4byN899M+ CqOaqBL3k/GwRKfSoJbatCh8OfyL/2B3F3DsU152iQYZ6Q8bDPn/jO6QKeGhO7nm IOz4dkH1nZIjYDr0eL9rtZntCsYtL+mNkqOwQNMHKjPbbABJvX+L71NdxxtlatsB i41YfkyHXgmVyIPJQaxjy1Lu2e1iV0aqMvSwxYZ1n82c5eQUsa2YCL6lvQnCpqlU pUGkfZxaf7yVFkRZRRLUUFMwuGRLde1N -----END CERTIFICATE-----Generated at Mon May 5 12:44:28 2025 by rpki-client