$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft File: MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json) Hash identifier: JdfXnl7drKFVw/kIXsTLHBwHVeGQfUXx13cLGjrrDS8= Subject key identifier: 79:A6:AE:E9:40:D2:9A:CD:30:35:06:4F:AB:33:68:DD:A8:6C:3B:A1 Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 Certificate issuer: /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft Manifest number: 0113 Signing time: Thu 03 Jul 2025 05:09:48 +0000 Manifest this update: Thu 03 Jul 2025 05:09:47 +0000 Manifest next update: Thu 10 Jul 2025 05:09:47 +0000 Files and hashes: 1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: 9h8o/uSkTA3dpGa/OH0xFJvs6+0dTJTslqbAzIwyH1U=) 2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: eLvQDqgzb8pzAvtiGB3lMpGAuC1qmsTh4Dk3DLhUIRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Validity Not Before: Jul 3 05:09:47 2025 GMT Not After : Jul 10 05:09:47 2025 GMT Subject: CN=6866109c-a0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:56:4d:3c:a1:67:fa:87:62:5f:6d:20:5d: 87:64:0f:40:6d:95:02:6f:6b:63:f7:66:6e:8a:2f: 63:80:37:bd:a4:d3:a8:eb:6c:b9:a1:fc:2e:d2:22: e1:67:10:6f:cb:dd:b4:c4:fa:3a:b2:f1:36:6f:41: 9d:2b:d7:a0:8a:0c:15:ac:64:fa:27:35:44:35:65: da:f1:fc:3d:7f:ff:ab:2c:ce:bd:3b:65:80:3f:a7: f9:fe:b1:b9:55:5c:34:55:5f:00:d9:fc:61:63:d8: 79:28:82:ad:7c:88:b7:03:47:c4:d9:c0:4e:f8:bb: 54:f7:11:29:3f:bb:2d:fa:0f:59:4d:37:c6:c0:d3: 1f:b6:97:9c:19:db:63:78:fc:9a:9c:f1:bd:0b:66: ed:58:15:90:d7:8a:5d:84:69:76:05:26:3f:64:43: c8:25:fb:66:33:37:fa:f2:05:93:95:4c:6d:c6:17: 35:3c:5b:4b:48:83:53:e5:0d:24:14:e8:d6:79:48: bc:64:9e:99:71:97:cb:a5:f5:1c:d2:e9:ef:70:eb: e4:2e:c3:11:65:6c:7c:30:39:6c:93:f7:20:bd:d2: f2:57:f8:c8:a1:1a:32:48:04:89:fb:20:94:6c:3d: ca:6d:04:d1:0e:5c:7b:56:6d:4b:f8:c1:5e:1e:9d: ce:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A6:AE:E9:40:D2:9A:CD:30:35:06:4F:AB:33:68:DD:A8:6C:3B:A1 X509v3 Authority Key Identifier: keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f6:49:30:20:7a:c6:f3:92:64:21:f6:93:10:bd:ce:b7:22: 6f:35:01:3b:27:38:01:3e:e1:a6:22:2c:1b:e6:4a:9c:45:bd: e7:9d:07:43:ad:54:c2:be:e6:de:04:88:a1:7a:4a:5d:b9:b5: 39:32:bc:32:b8:1c:5a:97:02:cf:78:3b:53:00:2f:6e:cb:ef: dd:d4:49:06:d1:20:c1:3b:4c:0e:4b:c2:cd:13:3c:a5:fe:b8: 38:3e:16:d0:7f:b3:16:88:0a:22:5b:41:78:ea:1c:45:9b:a3: 83:44:99:8a:5b:22:b0:8c:2e:55:01:9e:55:22:3c:48:f5:b8: c7:76:74:ec:c0:c9:1a:81:81:5d:bd:9f:00:30:3e:fb:6f:b8: 2a:2b:a7:3a:18:cf:3e:8f:12:6d:25:73:96:3f:0c:83:16:52: 39:d4:ca:1e:9f:a3:4e:01:ae:54:0a:cf:7b:66:a2:55:df:4d: 8e:df:f1:00:f1:78:cb:ec:dc:6b:9d:2b:79:73:cd:9d:42:f1: 9d:53:ab:3f:3e:bf:ca:f3:a7:9e:bc:ca:42:dc:29:41:f5:9c: 85:c5:32:0f:f3:02:81:93:b7:46:7c:2b:95:3f:ea:5f:81:3d: 2d:2a:75:fd:b5:67:8d:79:86:14:1e:d8:68:f2:5c:da:95:35: 40:25:bd:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDMwRjBEQjgyRDU4RjU4M0U4NDg4Mzc5QkEwMEQzNUFD QjM1MjYxMTAwHhcNMjUwNzAzMDUwOTQ3WhcNMjUwNzEwMDUwOTQ3WjAYMRYwFAYD VQQDEw02ODY2MTA5Yy1hMGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVxWTTyhZ/qHYl9tIF2HZA9AbZUCb2tj92Zuii9jgDe9pNOo62y5ofwu0iLh ZxBvy920xPo6svE2b0GdK9egigwVrGT6JzVENWXa8fw9f/+rLM69O2WAP6f5/rG5 VVw0VV8A2fxhY9h5KIKtfIi3A0fE2cBO+LtU9xEpP7st+g9ZTTfGwNMftpecGdtj ePyanPG9C2btWBWQ14pdhGl2BSY/ZEPIJftmMzf68gWTlUxtxhc1PFtLSINT5Q0k FOjWeUi8ZJ6ZcZfLpfUc0unvcOvkLsMRZWx8MDlsk/cgvdLyV/jIoRoySASJ+yCU bD3KbQTRDlx7Vm1L+MFeHp3OrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmmrulA 0prNMDUGT6szaN2obDuhMB8GA1UdIwQYMBaAFDDw24LVj1g+hIg3m6ANNayzUmEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GQjE4Mjk5OEJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdENkVpRGVib0EwMXJMTlNZ UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QRGJndFdQV0Q2RWlEZWJvQTAxckxOU1lSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GQjE4Mjk5OEJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdE NkVpRGVib0EwMXJMTlNZUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF9kkwIHrG85JkIfaTEL3OtyJvNQE7JzgBPuGmIiwb5kqcRb3nnQdD rVTCvubeBIihekpdubU5MrwyuBxalwLPeDtTAC9uy+/d1EkG0SDBO0wOS8LNEzyl /rg4PhbQf7MWiAoiW0F46hxFm6ODRJmKWyKwjC5VAZ5VIjxI9bjHdnTswMkagYFd vZ8AMD77b7gqK6c6GM8+jxJtJXOWPwyDFlI51Moen6NOAa5UCs97ZqJV302O3/EA 8XjL7NxrnSt5c82dQvGdU6s/Pr/K86eevMpC3ClB9ZyFxTIP8wKBk7dGfCuVP+pf gT0tKnX9tWeNeYYUHtho8lzalTVAJb2g -----END CERTIFICATE-----Generated at Sat Jul 5 05:31:10 2025 by rpki-client