$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: HqPzXJWdLqdUr9Sn/YlpESMyu3eLpBDh8tnZTkQoSW4= Subject key identifier: 3F:F3:2A:3C:44:B8:5F:54:1B:EA:DF:60:8E:B5:78:E6:8F:4F:48:CC Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 67 Signing time: Fri 09 May 2025 06:00:58 +0000 Manifest this update: Fri 09 May 2025 06:00:58 +0000 Manifest next update: Fri 16 May 2025 06:00:57 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: HUEa1a3ydZg79ywVobYdOFeijSgPuYcuT10NAwUqolA=) 2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: izRhlY7DGrfvs8MmjLdXrrQgAeYYKtyct/uQzFPAxkk=) 3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: gD5kq8/HSPW50HYpmldu2HRZWRqRsB+3dXKbKp9PeAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: May 9 06:00:58 2025 GMT Not After : May 16 06:00:57 2025 GMT Subject: CN=681d9a1a-60f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:22:56:51:35:eb:8a:b9:fb:68:46:f5:71:f8: 74:c7:a2:66:93:f5:3a:ff:54:56:9f:08:fe:4c:58: 07:7e:ff:e2:b1:24:dc:fd:0c:18:18:f7:6c:82:1a: 29:07:cd:a9:de:2f:27:b7:8b:41:10:06:8f:8b:d4: 5a:5a:ef:5d:3c:af:6f:93:99:2c:84:05:cb:bc:d2: 8c:4d:01:65:c5:51:e2:a5:59:d8:52:cb:f2:63:da: 10:39:aa:a4:a2:83:95:33:56:46:ba:01:e6:1c:fc: d6:f6:8a:1f:26:6f:7b:a1:1a:6d:20:53:d4:10:f1: bf:d7:da:eb:ff:b0:18:cf:a0:11:8c:d7:41:26:f5: d4:86:50:e7:69:71:d5:8c:5a:a7:5b:f7:be:4d:c9: 4e:54:90:69:06:bf:e9:77:76:d3:00:b8:a3:33:a8: be:a0:44:ac:00:8a:78:32:2b:97:40:ca:61:26:f7: fa:bd:7f:ee:85:c9:d8:69:be:e1:0e:89:c7:15:8b: 6b:e4:71:cf:0f:1f:3c:84:75:6f:ce:f3:e8:8c:61: c8:f8:02:77:45:17:18:81:ae:31:66:58:03:01:5a: 1e:1c:3f:cc:4a:b1:44:f9:cc:32:29:6f:68:a7:c3: f1:c5:c4:1c:c0:d8:73:44:ab:ed:29:fa:a8:81:8a: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F3:2A:3C:44:B8:5F:54:1B:EA:DF:60:8E:B5:78:E6:8F:4F:48:CC X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:77:14:9c:76:7c:91:d9:6d:38:f0:b9:77:0c:04:16:3a:cd: 15:04:ce:4c:34:d9:45:8b:d2:0b:6c:e2:df:ee:4c:26:26:ba: 88:0a:b2:a3:90:c3:2d:9d:6b:ef:2f:de:29:46:df:58:a8:76: 58:07:e8:4a:8b:3d:6f:e8:90:eb:ad:c3:ea:8c:20:77:8e:a2: f8:5c:0a:0c:f0:f5:c8:84:ea:6a:d8:7b:74:02:4b:9e:6b:02: f8:ef:c2:6e:82:e5:fb:5a:42:ed:c3:0b:1e:5f:2b:f7:48:7b: 84:2f:07:be:79:26:b8:b8:3a:e9:e7:c1:d7:5f:48:78:a4:98: 75:96:d7:5f:b9:c8:96:05:61:51:40:ae:7b:eb:e5:61:ce:18: 09:80:5c:ba:28:78:30:cf:f0:f1:7f:9a:a0:c9:eb:c7:27:da: ab:85:13:63:73:25:70:cc:bf:ba:a0:12:36:c6:51:11:a9:77: 82:97:22:12:68:a2:2e:80:b2:97:fd:d8:6d:c6:1c:54:b9:b2: 90:f3:0e:b7:2a:2d:00:5a:ad:e9:e4:33:40:6b:0f:93:1c:5e: ab:f1:8b:04:cc:ea:86:75:e3:e1:aa:bd:56:84:57:88:1a:55: df:0d:54:de:5a:5d:07:bd:2b:af:b2:6a:c0:23:24:b8:8e:b9: 02:e6:3d:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODIwMzExMC8GA1UEBRMoMzFEMjFENUNFRTVGQUNERUYzQzhDMUM4N0QwRDczOTFG OUY3M0FGRjAeFw0yNTA1MDkwNjAwNThaFw0yNTA1MTYwNjAwNTdaMBgxFjAUBgNV BAMTDTY4MWQ5YTFhLTYwZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTIlZRNeuKuftoRvVx+HTHomaT9Tr/VFafCP5MWAd+/+KxJNz9DBgY92yCGikH zaneLye3i0EQBo+L1Fpa7108r2+TmSyEBcu80oxNAWXFUeKlWdhSy/Jj2hA5qqSi g5UzVka6AeYc/Nb2ih8mb3uhGm0gU9QQ8b/X2uv/sBjPoBGM10Em9dSGUOdpcdWM Wqdb975NyU5UkGkGv+l3dtMAuKMzqL6gRKwAingyK5dAymEm9/q9f+6FydhpvuEO iccVi2vkcc8PHzyEdW/O8+iMYcj4AndFFxiBrjFmWAMBWh4cP8xKsUT5zDIpb2in w/HFxBzA2HNEq+0p+qiBiqDLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP/MqPES4 X1Qb6t9gjrV45o9PSMwwHwYDVR0jBBgwFoAUMdIdXO5frN7zyMHIfQ1zkfn3Ov8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4MjAzL0JDNTE1REFBOTI3 QTExRUZCNTY0M0M0RUM0RjlBRTAyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWRJZFhPNWZyTjd6eU1ISWZRMXprZm4zT3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 MjAzL0JDNTE1REFBOTI3QTExRUZCNTY0M0M0RUM0RjlBRTAyL01kSWRYTzVmck43 enlNSElmUTF6a2ZuM092OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZ3FJx2fJHZbTjwuXcMBBY6zRUEzkw02UWL0gts4t/uTCYmuogKsqOQ wy2da+8v3ilG31iodlgH6EqLPW/okOutw+qMIHeOovhcCgzw9ciE6mrYe3QCS55r Avjvwm6C5ftaQu3DCx5fK/dIe4QvB755Jri4OunnwddfSHikmHWW11+5yJYFYVFA rnvr5WHOGAmAXLooeDDP8PF/mqDJ68cn2quFE2NzJXDMv7qgEjbGURGpd4KXIhJo oi6Aspf92G3GHFS5spDzDrcqLQBarenkM0BrD5McXqvxiwTM6oZ14+GqvVaEV4ga Vd8NVN5aXQe9K6+yasAjJLiOuQLmPaw= -----END CERTIFICATE-----Generated at Sat May 10 21:25:00 2025 by rpki-client