$ rpki-client -vvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft File: MxjodUE2Qh4kSmxB3aXezBDaj4E.mft (raw, json) Hash identifier: iJHVc7p7M45IFh+VZVUWmPlkFEugzp5bM4zkzNSpyA8= Subject key identifier: BF:B4:05:09:E0:BA:FE:1F:35:82:35:A2:12:37:26:CC:44:10:56:2D Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 Certificate issuer: /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft Manifest number: 013E Signing time: Thu 03 Jul 2025 04:28:27 +0000 Manifest this update: Thu 03 Jul 2025 04:28:27 +0000 Manifest next update: Thu 10 Jul 2025 04:28:27 +0000 Files and hashes: 1: MxjodUE2Qh4kSmxB3aXezBDaj4E.crl (hash: JbvHjEP0NFQhARzlcCHBxxvH9rp4zNAtTseqWITO0tg=) 2: 2201EFC86E5211EEB027A974C4F9AE02.roa (hash: 4nQ3/xG4CFEbotiusShRvyeKgM0UbijAal8OSC/u9HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490C8, serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Validity Not Before: Jul 3 04:28:27 2025 GMT Not After : Jul 10 04:28:27 2025 GMT Subject: CN=686606eb-8dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:9b:b9:c6:f3:20:c3:9b:fc:fe:d2:bd:70: 1f:15:b2:6c:2f:48:6b:57:be:aa:dd:f9:08:13:c8: 5c:f7:f7:c0:e4:ab:a6:8f:9c:72:cc:a6:b2:6b:32: 10:37:7c:bd:a0:48:73:b3:f3:02:f7:bb:e0:3b:20: ef:99:1c:01:69:3f:b8:39:c7:23:7c:54:da:44:bb: 3e:8f:cf:c3:fa:27:96:aa:fa:92:0c:6f:2c:89:3e: 9f:8f:c0:09:ac:75:df:4d:16:24:23:5e:9a:66:91: 08:6b:d6:38:2c:6c:d2:ce:ea:fe:77:5b:20:c4:b4: af:c9:c4:ee:a5:65:e4:23:5a:4f:1f:cf:9f:b9:e9: 99:2d:71:00:20:f2:78:fe:aa:1c:74:2e:e6:09:2a: bd:c9:3e:28:60:bf:c1:ea:ed:60:34:47:43:8f:c4: 36:a1:2e:23:40:63:d6:42:93:82:1b:9b:08:31:bc: 52:fb:cc:57:0a:c0:59:0a:cc:44:97:47:b6:96:ed: ad:f0:d5:49:fb:05:f6:c7:3f:72:5f:34:63:46:b9: bd:be:79:bc:ca:b5:15:dc:9d:0f:af:27:e3:fb:16: 99:95:d6:ab:87:b9:a6:4f:46:36:0f:8d:80:f4:7d: e7:dc:8e:6a:8d:2c:ca:df:72:2f:1a:55:10:4f:e6: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B4:05:09:E0:BA:FE:1F:35:82:35:A2:12:37:26:CC:44:10:56:2D X509v3 Authority Key Identifier: keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d2:b5:3a:b6:e5:97:8c:b9:0a:4e:c7:d5:0c:08:5e:69:0e: 7a:17:43:18:dd:8f:1f:14:3a:cd:db:f3:10:e5:47:06:93:51: 11:64:2d:31:1c:47:62:db:d9:69:33:78:28:ab:95:09:64:db: 97:da:09:04:be:4b:9d:6a:5d:60:2b:4b:8a:9a:d0:3d:69:ee: c9:44:67:21:e9:23:1a:d0:ae:0c:ce:a2:2a:f3:fc:16:92:0a: 97:e5:af:e9:19:68:4e:ed:b3:93:c9:d9:47:51:32:76:65:2c: e5:e0:37:2f:9d:cd:ab:b7:2d:ba:a3:cc:db:b2:71:9f:b4:f8: f6:86:7f:97:02:74:df:f2:35:09:7d:46:2a:94:e8:27:7c:d7: e5:a7:e8:51:c1:1f:28:f6:d4:7d:09:34:8e:90:9e:05:f2:ec: 91:55:ff:c2:92:50:64:24:0d:24:4f:43:da:96:2d:db:2e:a6: 97:c7:fc:07:81:14:d6:aa:98:a5:05:7a:97:84:7b:8c:5b:e9: 85:e5:cd:1f:08:cb:9e:1e:7f:1a:af:c7:cd:57:cc:d9:fe:a5: ec:3e:c0:71:d5:25:fa:8f:98:57:57:d8:43:76:a2:9c:5f:e9: 30:49:d4:91:33:ba:48:6d:9e:a8:90:8c:df:56:02:17:f5:20: cd:de:99:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwQzgxMTAvBgNVBAUTKDMzMThFODc1NDEzNjQyMUUyNDRBNkM0MUREQTVERUND MTBEQThGODEwHhcNMjUwNzAzMDQyODI3WhcNMjUwNzEwMDQyODI3WjAYMRYwFAYD VQQDEw02ODY2MDZlYi04ZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlubucbzIMOb/P7SvXAfFbJsL0hrV76q3fkIE8hc9/fA5Kumj5xyzKayazIQ N3y9oEhzs/MC97vgOyDvmRwBaT+4OccjfFTaRLs+j8/D+ieWqvqSDG8siT6fj8AJ rHXfTRYkI16aZpEIa9Y4LGzSzur+d1sgxLSvycTupWXkI1pPH8+fuemZLXEAIPJ4 /qocdC7mCSq9yT4oYL/B6u1gNEdDj8Q2oS4jQGPWQpOCG5sIMbxS+8xXCsBZCsxE l0e2lu2t8NVJ+wX2xz9yXzRjRrm9vnm8yrUV3J0Pryfj+xaZldarh7mmT0Y2D42A 9H3n3I5qjSzK33IvGlUQT+beDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+0BQng uv4fNYI1ohI3JsxEEFYtMB8GA1UdIwQYMBaAFDMY6HVBNkIeJEpsQd2l3swQ2o+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBDOC9DQzIzMzhEQzZF NTExMUVFQTQ3RTJCNzRDNEY5QUUwMi9NeGpvZFVFMlFoNGtTbXhCM2FYZXpCRGFq NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014am9kVUUyUWg0a1NteEIzYVhlekJEYWo0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTBDOC9DQzIzMzhEQzZFNTExMUVFQTQ3RTJCNzRDNEY5QUUwMi9NeGpvZFVFMlFo NGtTbXhCM2FYZXpCRGFqNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt0rU6tuWXjLkKTsfVDAheaQ56F0MY3Y8fFDrN2/MQ5UcGk1ERZC0x HEdi29lpM3goq5UJZNuX2gkEvkudal1gK0uKmtA9ae7JRGch6SMa0K4MzqIq8/wW kgqX5a/pGWhO7bOTydlHUTJ2ZSzl4Dcvnc2rty26o8zbsnGftPj2hn+XAnTf8jUJ fUYqlOgnfNflp+hRwR8o9tR9CTSOkJ4F8uyRVf/CklBkJA0kT0Pali3bLqaXx/wH gRTWqpilBXqXhHuMW+mF5c0fCMueHn8ar8fNV8zZ/qXsPsBx1SX6j5hXV9hDdqKc X+kwSdSRM7pIbZ6okIzfVgIX9SDN3pl7 -----END CERTIFICATE-----Generated at Fri Jul 4 08:13:28 2025 by rpki-client