$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json) Hash identifier: z1ZWyzCPEXj/YfXw3KjvBfQWRvAgse3W8eROAPYxAH8= Subject key identifier: AE:C0:34:0F:6B:15:29:B9:F7:F8:2F:24:E1:39:4D:39:89:81:A9:A6 Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Certificate serial: 0AC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft Manifest number: 0AA4 Signing time: Wed 14 May 2025 19:42:33 +0000 Manifest this update: Wed 14 May 2025 19:42:32 +0000 Manifest next update: Wed 21 May 2025 19:42:32 +0000 Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: nxvaQY+7ejqxHghh99sWtUpwDKeMtjfnyiqGfhZz+CY=) 2: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: 1xdS0of8jq6b+9XXSYhXqSMAsRL9VgQ5wBfYf2X41Dk=) 3: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: hl/3X6BX11WafllMiNd1LQR2jHaTy4LdnM1ilVWB8H4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2752 (0xac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Validity Not Before: May 14 19:42:32 2025 GMT Not After : May 21 19:42:32 2025 GMT Subject: CN=6824f229-798b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:88:a6:2b:99:26:1a:58:5d:08:2c:17:3f: 95:4b:d6:42:02:38:fe:bd:ae:a9:f9:4b:eb:de:5e: b0:89:57:86:86:51:80:3c:c0:42:f4:b8:6d:e9:7a: 33:03:c7:84:88:ad:51:26:93:ce:4f:c5:08:2a:73: 16:ad:2d:78:87:0e:43:40:75:cb:c8:44:b8:7e:c9: 0d:53:a8:b0:67:09:47:43:46:ad:97:cb:fc:b7:ea: 1b:32:d1:11:b9:a0:f8:a4:3c:9c:c9:e7:f1:5f:7c: 40:ce:7a:6f:89:5a:7c:77:a0:2a:0b:fa:4e:dd:3e: 5f:6e:0f:46:08:07:51:cc:e0:ea:dc:69:1b:92:c3: 55:36:36:7b:dc:f1:a3:e1:f2:66:c5:c4:42:3b:c7: 18:4a:4e:ea:9e:75:6b:0f:e8:1d:28:79:6c:64:2e: ca:c3:a9:4e:d2:49:1a:e2:5f:37:66:b9:ee:70:34: 99:ef:ae:b0:53:5a:e9:61:41:d8:34:0b:af:26:f2: bf:eb:c0:cd:cf:ed:66:83:35:9d:ef:40:19:dd:53: 06:1e:ea:10:93:b3:fe:ca:c2:04:7c:b0:07:9b:91: 99:be:40:9e:e3:65:54:f8:b8:05:ce:74:c3:63:05: d6:62:7e:f1:f1:e9:5d:42:7a:92:dc:df:ea:ce:4b: b3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C0:34:0F:6B:15:29:B9:F7:F8:2F:24:E1:39:4D:39:89:81:A9:A6 X509v3 Authority Key Identifier: keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a3:75:fe:21:bf:17:05:d4:40:25:10:74:65:a8:68:65:1f: 1e:6b:f8:06:82:b4:a1:96:dd:1a:ad:50:a6:e4:74:74:f5:76: b2:a8:d2:88:a3:ab:85:ce:a6:6a:dc:7d:f5:f2:85:b0:88:23: e8:5e:a1:b9:4e:3d:e4:92:67:08:cc:54:31:0a:9b:64:4e:2d: 21:17:94:55:0d:9f:4d:41:fb:56:4c:e3:fa:c7:64:15:e4:46: 49:0b:3f:fa:28:2a:d4:02:44:bd:59:d1:c5:17:a5:5b:67:c4: 5b:ff:e2:ac:5e:5c:7b:9b:55:20:72:e1:3f:d5:be:32:a8:66: ba:96:ca:a1:cf:4a:10:31:a9:2d:a0:0e:54:da:28:74:4c:8b: 7d:66:72:82:93:18:d0:e0:e5:fb:56:24:39:33:f3:18:36:06: 50:b0:ef:81:aa:85:41:62:57:8b:03:26:39:48:9a:a8:f5:d0: ef:ba:ca:83:bd:3a:03:1c:08:75:cf:69:8a:81:77:ef:36:1b: f2:e3:b3:89:08:c6:86:af:d5:bc:32:a0:a7:d6:23:9b:95:e4: 17:0f:f2:ad:27:1b:99:7f:a5:67:05:e4:11:61:3b:b6:d8:8f: 6b:7d:54:2d:57:b7:5c:92:a0:24:ad:e8:0f:83:fe:bf:ea:56: 09:6c:65:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENEMkQxMTAvBgNVBAUTKDMyOTUyRUE0NjE5NTYzNTZEMzc3RUJERDRCRkExODcy QThFMUU0NDMwHhcNMjUwNTE0MTk0MjMyWhcNMjUwNTIxMTk0MjMyWjAYMRYwFAYD VQQDEw02ODI0ZjIyOS03OThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4mIpiuZJhpYXQgsFz+VS9ZCAjj+va6p+Uvr3l6wiVeGhlGAPMBC9Lht6Xoz A8eEiK1RJpPOT8UIKnMWrS14hw5DQHXLyES4fskNU6iwZwlHQ0atl8v8t+obMtER uaD4pDycyefxX3xAznpviVp8d6AqC/pO3T5fbg9GCAdRzODq3GkbksNVNjZ73PGj 4fJmxcRCO8cYSk7qnnVrD+gdKHlsZC7Kw6lO0kka4l83ZrnucDSZ766wU1rpYUHY NAuvJvK/68DNz+1mgzWd70AZ3VMGHuoQk7P+ysIEfLAHm5GZvkCe42VU+LgFznTD YwXWYn7x8eldQnqS3N/qzkuzvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7ANA9r FSm59/gvJOE5TTmJgammMB8GA1UdIwQYMBaAFDKVLqRhlWNW03fr3Uv6GHKo4eRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0QyRC85NEZGMUZCQzU4 ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkxYlRkLXZkU19vWWNxamg1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wVXVwR0dWWTFiVGQtdmRTX29ZY3FqaDVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0QyRC85NEZGMUZCQzU4ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkx YlRkLXZkU19vWWNxamg1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUo3X+Ib8XBdRAJRB0ZahoZR8ea/gGgrShlt0arVCm5HR09XayqNKI o6uFzqZq3H318oWwiCPoXqG5Tj3kkmcIzFQxCptkTi0hF5RVDZ9NQftWTOP6x2QV 5EZJCz/6KCrUAkS9WdHFF6VbZ8Rb/+KsXlx7m1UgcuE/1b4yqGa6lsqhz0oQMakt oA5U2ih0TIt9ZnKCkxjQ4OX7ViQ5M/MYNgZQsO+BqoVBYleLAyY5SJqo9dDvusqD vToDHAh1z2mKgXfvNhvy47OJCMaGr9W8MqCn1iObleQXD/KtJxuZf6VnBeQRYTu2 2I9rfVQtV7dckqAkregPg/6/6lYJbGWr -----END CERTIFICATE-----Generated at Thu May 15 17:59:19 2025 by rpki-client