$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft File: MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json) Hash identifier: qM9xGV6gthEzt2EfEG1ioz4/VBWU9yGBRyGXmDBcDZA= Subject key identifier: 03:70:67:15:96:0E:DE:75:D8:EB:00:AD:3C:36:EE:38:BF:DB:7F:19 Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 Certificate issuer: /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft Manifest number: FA Signing time: Tue 13 May 2025 04:28:13 +0000 Manifest this update: Tue 13 May 2025 04:28:12 +0000 Manifest next update: Tue 20 May 2025 04:28:12 +0000 Files and hashes: 1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: Bf0inJAIRngjnYwnmcsfOuDjRoyOeUh2zd9c/PRcNaU=) 2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: eLvQDqgzb8pzAvtiGB3lMpGAuC1qmsTh4Dk3DLhUIRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Validity Not Before: May 13 04:28:12 2025 GMT Not After : May 20 04:28:12 2025 GMT Subject: CN=6822ca5d-6346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:15:af:1d:72:f2:58:51:48:a5:81:91:a2: 25:ca:87:f7:89:5f:86:e4:e3:a9:d4:f4:95:48:52: 20:4c:f6:6b:74:e7:ac:6d:e3:ba:65:21:8e:91:14: ee:b7:e8:6e:e1:33:6e:dc:5a:c1:f0:b4:5f:eb:5a: d5:1b:fd:ea:9b:3a:bd:19:98:ae:e3:2a:89:0d:85: 78:ff:e1:5b:27:87:32:7b:5d:21:fb:47:13:24:2f: 17:61:cd:9f:ec:d5:cd:df:fa:ad:79:54:18:32:5b: a4:1a:e4:ca:33:c3:2a:9b:30:cb:49:a0:da:f1:6c: 2a:5c:9a:74:58:c4:15:07:34:e7:bf:9a:5e:fe:78: dc:6e:40:6f:00:d4:bb:10:4a:19:e4:2b:63:de:41: 56:e4:c9:3a:a6:fd:bf:9b:b4:f5:bd:02:64:38:7b: 17:c4:11:9b:93:9f:28:29:4e:2b:14:67:4a:d0:3d: 2d:30:0e:50:15:90:8c:8a:80:7f:dc:de:14:5a:ba: 42:b6:30:17:6e:ab:11:48:be:05:81:78:2f:1b:a2: b3:3c:58:1f:4b:0a:ca:dd:9c:b3:b2:d7:5a:2c:00: 59:38:60:ce:90:b7:c5:6f:a0:ae:db:a6:69:49:0e: 2e:08:f4:0c:6e:63:57:0e:ed:2c:32:18:d0:94:c1: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:70:67:15:96:0E:DE:75:D8:EB:00:AD:3C:36:EE:38:BF:DB:7F:19 X509v3 Authority Key Identifier: keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:8f:fe:de:f3:96:6d:24:c4:30:c4:4f:6e:a6:b5:97:6f:3c: 38:98:92:68:f0:d5:59:25:0f:f2:e5:69:df:58:a7:4e:81:16: 3e:64:46:5e:6b:de:76:3f:7c:b5:78:2e:0f:4c:2c:3f:d8:8e: 21:55:0e:98:6e:1c:b6:5a:21:bd:74:b3:90:fd:92:51:d5:b6: ca:12:fb:7c:c6:88:04:33:00:35:8a:f5:f4:be:8a:b3:73:92: 08:a4:48:74:29:55:3f:4e:31:f6:6d:dd:dc:72:a1:59:f9:3d: a3:73:72:20:da:2d:65:a0:e8:7e:7c:d1:f1:49:08:eb:12:75: c4:5c:bb:5f:b7:8f:5b:16:2c:59:82:2f:df:e4:3d:d6:4f:92: 28:9f:3f:ec:27:46:3f:d5:fa:49:de:00:13:43:07:da:89:9f: 82:b7:da:1b:4f:4c:5e:55:ef:6f:72:93:cd:e7:f4:eb:80:4a: 34:39:dd:bf:41:5a:d1:99:34:10:d6:0a:f8:a1:c9:1c:9c:20: 63:2d:54:49:0f:b8:be:dd:d3:f9:56:a1:71:c2:c0:4c:57:9f: 27:d5:34:5b:47:38:42:92:28:9d:29:ad:b6:9c:34:6e:b0:13: 23:15:a0:8e:f5:17:da:0b:d5:e3:7e:3a:d7:0a:ed:5d:8f:56: 34:15:d6:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDMwRjBEQjgyRDU4RjU4M0U4NDg4Mzc5QkEwMEQzNUFD QjM1MjYxMTAwHhcNMjUwNTEzMDQyODEyWhcNMjUwNTIwMDQyODEyWjAYMRYwFAYD VQQDEw02ODIyY2E1ZC02MzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB4Vrx1y8lhRSKWBkaIlyof3iV+G5OOp1PSVSFIgTPZrdOesbeO6ZSGOkRTu t+hu4TNu3FrB8LRf61rVG/3qmzq9GZiu4yqJDYV4/+FbJ4cye10h+0cTJC8XYc2f 7NXN3/qteVQYMlukGuTKM8MqmzDLSaDa8WwqXJp0WMQVBzTnv5pe/njcbkBvANS7 EEoZ5Ctj3kFW5Mk6pv2/m7T1vQJkOHsXxBGbk58oKU4rFGdK0D0tMA5QFZCMioB/ 3N4UWrpCtjAXbqsRSL4FgXgvG6KzPFgfSwrK3ZyzstdaLABZOGDOkLfFb6Cu26Zp SQ4uCPQMbmNXDu0sMhjQlMFRywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANwZxWW Dt512OsArTw27ji/238ZMB8GA1UdIwQYMBaAFDDw24LVj1g+hIg3m6ANNayzUmEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GQjE4Mjk5OEJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdENkVpRGVib0EwMXJMTlNZ UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QRGJndFdQV0Q2RWlEZWJvQTAxckxOU1lSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GQjE4Mjk5OEJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdE NkVpRGVib0EwMXJMTlNZUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFj/7e85ZtJMQwxE9uprWXbzw4mJJo8NVZJQ/y5WnfWKdOgRY+ZEZe a952P3y1eC4PTCw/2I4hVQ6Ybhy2WiG9dLOQ/ZJR1bbKEvt8xogEMwA1ivX0voqz c5IIpEh0KVU/TjH2bd3ccqFZ+T2jc3Ig2i1loOh+fNHxSQjrEnXEXLtft49bFixZ gi/f5D3WT5Ionz/sJ0Y/1fpJ3gATQwfaiZ+Ct9obT0xeVe9vcpPN5/TrgEo0Od2/ QVrRmTQQ1gr4ockcnCBjLVRJD7i+3dP5VqFxwsBMV58n1TRbRzhCkiidKa22nDRu sBMjFaCO9RfaC9XjfjrXCu1dj1Y0FdYM -----END CERTIFICATE-----Generated at Wed May 14 04:40:15 2025 by rpki-client