$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: L7v+O+IphpyNdZYUrYZ6xc1Wjqc41B6oi4IQ6m6aUjI= Subject key identifier: B1:9F:4A:F3:9E:A5:54:0D:5D:85:D7:DE:CB:85:41:F0:91:B4:55:FA Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: 01AB Signing time: Thu 03 Jul 2025 03:18:35 +0000 Manifest this update: Thu 03 Jul 2025 03:18:35 +0000 Manifest next update: Thu 10 Jul 2025 03:18:35 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: pbS2xhycKZkTCI1BYvYeFwcTi55jOKMDqplAPPqUu4I=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: QOfAhP3S+ePBd5bLXcD9SSvstPxykfxAtUO9d7xqQdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: Jul 3 03:18:35 2025 GMT Not After : Jul 10 03:18:35 2025 GMT Subject: CN=6865f68b-70d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:36:b2:fe:6a:aa:25:13:38:33:39:85:c3:6c: 20:20:03:a1:22:74:b0:25:60:aa:2c:1c:a3:36:a7: 20:cb:d3:f1:fc:84:d3:c3:11:c7:9c:b9:de:ff:27: 77:de:1a:12:fd:85:c8:7a:0a:d1:66:c5:9c:59:29: 04:d6:51:fa:e5:de:4e:66:42:fa:0d:21:ab:9a:c7: f5:b4:ee:db:96:b9:1f:c4:b2:12:f6:60:e6:ed:e6: 49:47:07:2c:7f:c8:b0:e3:b8:b1:ce:83:a8:24:b1: 3f:fc:4f:2f:f5:36:f1:97:fd:a8:43:b7:36:d0:25: 2e:47:25:c1:2a:07:39:4a:66:c5:1b:97:38:ff:d6: 18:22:b5:f7:17:55:f9:ce:f0:72:df:5a:44:62:40: 5a:e1:ce:c9:6f:3c:bd:03:c1:ee:1a:d2:16:c5:c7: 47:0e:f6:8a:c7:f1:f1:52:e1:48:e1:44:8d:73:3f: 9f:37:37:3a:d1:05:bc:8c:42:65:f3:52:ec:58:da: 25:f1:3f:1e:73:1e:87:1f:36:4f:fd:d6:9a:e6:08: d6:f8:5a:56:3f:25:1c:9b:95:82:21:93:78:4b:cb: 38:5b:1e:cd:62:c5:b3:66:67:2a:67:2f:58:66:2c: 25:d9:8d:6b:3c:c7:2f:a9:bf:28:8e:82:1a:8c:7d: 37:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9F:4A:F3:9E:A5:54:0D:5D:85:D7:DE:CB:85:41:F0:91:B4:55:FA X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:29:36:27:01:40:b9:a8:2e:c5:1a:a3:fe:31:98:45:bd:18: e7:10:ee:9e:2a:d8:1f:1b:ec:44:c9:ed:f6:b7:a0:48:b4:be: a3:de:01:55:32:c5:25:43:b4:94:5c:49:12:c3:78:dd:d4:98: 1c:e5:8c:de:99:b4:ca:88:13:2b:59:00:2c:af:ad:0f:e5:fc: 8c:52:92:fd:e7:8d:12:57:f4:03:be:e7:77:cc:e0:c3:7d:af: 82:dd:75:55:40:a7:70:44:e7:2d:dd:10:2b:d1:89:b3:1c:0c: 6b:9c:8f:d9:39:14:2e:1b:88:4e:1e:36:8b:b6:a0:ad:4a:96: 56:92:12:3c:b6:44:7a:bb:90:54:7f:1e:fd:c9:1c:f5:4e:df: c0:8d:9c:55:c9:4e:9d:df:c7:4d:2e:6a:61:a0:75:9b:c2:be: a9:0f:18:e4:33:42:c1:2f:3f:fe:2a:41:65:c9:45:e8:6e:12: 74:63:6a:6b:ec:22:00:70:3d:10:50:c5:d4:1a:fc:6f:90:80: de:24:dd:09:07:e2:2e:8a:63:2c:41:66:0b:44:02:50:fd:b9: 60:f6:7e:34:74:40:3d:72:d5:63:50:fe:de:5e:de:c8:0f:a5: db:60:74:ed:68:3e:18:01:06:51:a6:f1:d8:2b:16:a5:62:48: f5:2b:25:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjUwNzAzMDMxODM1WhcNMjUwNzEwMDMxODM1WjAYMRYwFAYD VQQDEw02ODY1ZjY4Yi03MGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zay/mqqJRM4MzmFw2wgIAOhInSwJWCqLByjNqcgy9Px/ITTwxHHnLne/yd3 3hoS/YXIegrRZsWcWSkE1lH65d5OZkL6DSGrmsf1tO7blrkfxLIS9mDm7eZJRwcs f8iw47ixzoOoJLE//E8v9Tbxl/2oQ7c20CUuRyXBKgc5SmbFG5c4/9YYIrX3F1X5 zvBy31pEYkBa4c7Jbzy9A8HuGtIWxcdHDvaKx/HxUuFI4USNcz+fNzc60QW8jEJl 81LsWNol8T8ecx6HHzZP/daa5gjW+FpWPyUcm5WCIZN4S8s4Wx7NYsWzZmcqZy9Y Ziwl2Y1rPMcvqb8ojoIajH031QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGfSvOe pVQNXYXX3suFQfCRtFX6MB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3KTYnAUC5qC7FGqP+MZhFvRjnEO6eKtgfG+xEye32t6BItL6j3gFV MsUlQ7SUXEkSw3jd1Jgc5YzembTKiBMrWQAsr60P5fyMUpL9540SV/QDvud3zODD fa+C3XVVQKdwROct3RAr0YmzHAxrnI/ZORQuG4hOHjaLtqCtSpZWkhI8tkR6u5BU fx79yRz1Tt/AjZxVyU6d38dNLmphoHWbwr6pDxjkM0LBLz/+KkFlyUXobhJ0Y2pr 7CIAcD0QUMXUGvxvkIDeJN0JB+IuimMsQWYLRAJQ/blg9n40dEA9ctVjUP7eXt7I D6XbYHTtaD4YAQZRpvHYKxalYkj1KyUk -----END CERTIFICATE-----Generated at Thu Jul 3 17:05:02 2025 by rpki-client