$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: rbFacem7zxSQNlzJiVU7CoChzitlS8HwUU0jY/unS70= Subject key identifier: 73:68:33:E6:86:6B:3F:E3:DC:B7:1C:79:58:F9:F6:8C:A3:C3:53:A1 Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 0246 Signing time: Tue 13 May 2025 02:35:30 +0000 Manifest this update: Tue 13 May 2025 02:35:30 +0000 Manifest next update: Tue 20 May 2025 02:35:30 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: 25+e5W9Mz2ml6CMRbsO0231nppL54MFBZlURUp4lpgM=) 2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: my2I25rVWAI3mCpxgHNM4W2V83/AlwvIt+xbjzG24Hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Validity Not Before: May 13 02:35:30 2025 GMT Not After : May 20 02:35:30 2025 GMT Subject: CN=6822aff2-2b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:f1:fc:73:16:2d:9a:94:9f:1c:f3:7e:ef: 50:11:c2:58:90:4e:d7:41:e0:e5:37:16:f7:b7:fa: b4:e5:44:27:2b:ba:72:87:e8:9e:59:3f:7b:18:c8: 6b:23:24:e7:c1:2a:89:9d:3e:7e:6d:0e:0c:dd:61: 47:4a:8d:65:eb:db:85:5c:43:57:49:2d:a2:b4:10: 4d:da:f0:db:48:02:96:5d:d5:b5:27:7a:cf:80:47: c9:27:f8:10:1a:73:6b:9b:99:3c:b2:72:59:fd:31: da:e9:50:34:ae:dd:27:df:52:5c:45:7a:1f:f0:d6: 1f:ee:cd:12:a7:e0:64:fb:eb:56:82:91:23:b4:ba: 7c:ad:d4:57:45:f5:cf:14:1b:30:d1:87:4c:d4:73: af:d7:2d:9d:fa:ba:c7:4d:ed:42:0f:db:47:d5:a2: a0:be:12:b7:3f:82:aa:97:72:91:f6:8f:0d:ec:3b: b1:78:1b:7e:59:3f:57:00:4a:22:69:5d:2e:b9:4f: 52:25:69:f1:2d:e7:9c:01:d6:51:97:1c:a7:46:cb: e1:97:92:5d:a4:60:56:c8:d9:d1:8a:71:25:d6:3e: 3d:e6:79:20:09:d3:08:82:5b:a0:97:18:03:d8:23: d2:d1:e3:57:06:a9:7b:d3:d6:97:2c:f5:2f:43:9b: 6c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:68:33:E6:86:6B:3F:E3:DC:B7:1C:79:58:F9:F6:8C:A3:C3:53:A1 X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d4:2a:78:2b:50:39:08:25:c2:7d:ca:7b:b9:33:65:12:00: 16:be:65:ee:77:c6:12:78:8e:d9:af:9e:e8:60:f8:40:ee:fe: 4e:4d:71:e3:22:be:81:65:b7:07:fb:9a:ef:73:f8:02:12:b2: cc:3a:3b:46:7a:25:9f:fa:83:1e:06:95:2b:93:7d:ac:5e:a6: 7a:ba:bc:6a:59:16:42:ac:8e:ea:a5:e7:aa:80:20:46:9f:09: c1:87:e0:c5:ee:b3:19:9f:d0:ab:72:60:3e:b6:f1:7d:60:33: d9:b0:ac:65:89:84:9f:eb:3a:04:ab:50:23:09:d0:da:a1:9b: da:a7:eb:f0:2f:d5:7e:e1:a0:51:2a:72:44:21:2c:66:2d:9e: 2c:c0:6f:2a:84:f8:cd:62:28:96:ae:e7:c0:71:9d:1c:e2:19: c1:05:3e:13:95:c0:39:a7:6d:ff:31:47:53:13:87:5c:fe:ec: 1e:b9:13:99:ac:4a:05:7b:40:c0:f0:cf:e6:9e:7e:2b:f5:33: 00:7a:e7:ce:62:e9:b6:ac:eb:10:81:8d:6a:4a:ff:1b:9a:33: cb:0c:46:58:be:01:9b:fe:f5:d3:77:8c:00:63:00:25:9d:59: 1e:60:29:dc:37:da:5a:8a:50:4e:8d:70:ff:5e:d5:43:77:8f: 2a:62:6b:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1 RjRGQzAxNTIwHhcNMjUwNTEzMDIzNTMwWhcNMjUwNTIwMDIzNTMwWjAYMRYwFAYD VQQDEw02ODIyYWZmMi0yYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVTx/HMWLZqUnxzzfu9QEcJYkE7XQeDlNxb3t/q05UQnK7pyh+ieWT97GMhr IyTnwSqJnT5+bQ4M3WFHSo1l69uFXENXSS2itBBN2vDbSAKWXdW1J3rPgEfJJ/gQ GnNrm5k8snJZ/THa6VA0rt0n31JcRXof8NYf7s0Sp+Bk++tWgpEjtLp8rdRXRfXP FBsw0YdM1HOv1y2d+rrHTe1CD9tH1aKgvhK3P4Kql3KR9o8N7DuxeBt+WT9XAEoi aV0uuU9SJWnxLeecAdZRlxynRsvhl5JdpGBWyNnRinEl1j495nkgCdMIgluglxgD 2CPS0eNXBql709aXLPUvQ5tsXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNoM+aG az/j3LcceVj59oyjw1OhMB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl WHpxR0FYT0lXbVJmVDhBVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj1Cp4K1A5CCXCfcp7uTNlEgAWvmXud8YSeI7Zr57oYPhA7v5OTXHj Ir6BZbcH+5rvc/gCErLMOjtGeiWf+oMeBpUrk32sXqZ6urxqWRZCrI7qpeeqgCBG nwnBh+DF7rMZn9CrcmA+tvF9YDPZsKxliYSf6zoEq1AjCdDaoZvap+vwL9V+4aBR KnJEISxmLZ4swG8qhPjNYiiWrufAcZ0c4hnBBT4TlcA5p23/MUdTE4dc/uweuROZ rEoFe0DA8M/mnn4r9TMAeufOYum2rOsQgY1qSv8bmjPLDEZYvgGb/vXTd4wAYwAl nVkeYCncN9pailBOjXD/XtVDd48qYmv1 -----END CERTIFICATE-----Generated at Tue May 13 21:58:18 2025 by rpki-client