$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: OcH5a0oZKHQ41m5bCGLcg4nqXZIB7Qfry6aCwXNlV98= Subject key identifier: C4:EC:E8:05:C5:74:3A:98:D3:BB:FA:05:FF:11:FE:B9:19:87:BF:51 Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: 0192 Signing time: Tue 13 May 2025 02:44:45 +0000 Manifest this update: Tue 13 May 2025 02:44:44 +0000 Manifest next update: Tue 20 May 2025 02:44:44 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: adCw9jAm1G0MWB5Feg+viE27tck6DO+Pzj/4kxNO7OA=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: QOfAhP3S+ePBd5bLXcD9SSvstPxykfxAtUO9d7xqQdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: May 13 02:44:44 2025 GMT Not After : May 20 02:44:44 2025 GMT Subject: CN=6822b21d-a551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:5f:9d:35:2c:25:ee:4c:49:25:4f:97:28: be:6e:b0:ae:08:1e:eb:e8:82:4f:d4:a0:eb:45:dc: 2b:3b:68:d2:bc:9a:e3:5a:2c:a1:d5:13:09:4b:54: 12:80:6b:57:72:57:2d:9b:bf:b9:59:74:6f:9b:cd: 1f:15:a7:1b:23:8c:25:62:d2:17:0b:65:b3:a6:ec: 05:09:ea:83:0b:cd:98:8e:00:5a:a8:89:cf:a9:56: e6:3d:81:48:5e:62:89:6a:0e:4a:af:19:bf:ca:10: 43:1b:26:25:af:13:f1:76:6b:72:3e:ad:72:6c:c2: 68:9d:16:c2:c8:79:e5:96:1d:ae:9d:7a:c3:5a:0a: b3:7a:6d:30:fc:35:2f:38:e8:76:b3:03:02:21:39: 7e:24:b1:55:43:6a:fb:e9:ad:20:d8:2b:33:32:fc: 8f:3c:9b:8c:83:28:7e:ba:40:20:87:96:35:db:9f: 7e:52:c1:f1:13:8a:74:35:d3:c5:fd:4e:91:10:2f: 5d:76:d4:f0:9e:84:65:78:30:88:f3:23:2a:2f:c4: 73:d1:d0:1a:76:9d:ca:95:9b:5a:b6:a8:c9:91:4d: 07:9a:9e:56:07:1b:51:f2:a4:84:5e:34:6b:b1:75: c7:cd:13:d8:4f:3e:24:10:50:60:76:2b:4c:7a:96: 89:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EC:E8:05:C5:74:3A:98:D3:BB:FA:05:FF:11:FE:B9:19:87:BF:51 X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:af:9f:b5:9e:fc:4e:c5:76:4a:88:09:02:df:9a:66:a5:04: 55:2a:5b:05:d1:3a:c5:9e:60:22:57:15:cd:64:11:a4:32:9c: 45:b6:53:f9:25:32:a5:5f:6e:02:f3:d3:0f:3c:20:77:12:55: 49:75:7c:cc:94:13:08:68:0d:5c:36:52:40:34:f3:e0:ac:08: 3b:75:ca:7b:6d:97:1d:fe:86:9f:a3:7c:1d:95:38:09:9f:3f: 21:46:d7:d7:eb:31:1c:5a:e3:47:78:9f:42:cc:e6:36:76:35: f1:7c:9e:13:b7:8e:89:b1:c8:30:9c:67:56:05:12:61:02:04: b8:df:46:b6:15:3c:a8:01:5f:17:7d:b1:1c:ad:26:35:24:ce: 13:e7:07:7d:af:68:e3:cf:d1:d3:b1:c9:e0:4a:c0:0f:d9:f1: 29:96:12:7b:60:5c:a9:1c:ca:63:09:7f:14:40:0e:d7:21:f6: 75:37:18:b8:79:0a:14:57:f2:36:fa:30:7a:57:51:ed:62:3c: 48:e0:3c:6f:d8:11:75:df:14:34:9c:2a:11:e3:ef:10:f7:49: 88:e8:e8:52:f7:7b:c6:8d:9f:d7:2b:f4:6b:c0:24:fc:56:1b: 7d:3d:ce:dd:a9:c0:f5:8b:ad:2f:e3:12:93:38:73:ba:6a:4b: 85:ab:a0:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjUwNTEzMDI0NDQ0WhcNMjUwNTIwMDI0NDQ0WjAYMRYwFAYD VQQDEw02ODIyYjIxZC1hNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqf1fnTUsJe5MSSVPlyi+brCuCB7r6IJP1KDrRdwrO2jSvJrjWiyh1RMJS1QS gGtXclctm7+5WXRvm80fFacbI4wlYtIXC2WzpuwFCeqDC82YjgBaqInPqVbmPYFI XmKJag5Krxm/yhBDGyYlrxPxdmtyPq1ybMJonRbCyHnllh2unXrDWgqzem0w/DUv OOh2swMCITl+JLFVQ2r76a0g2CszMvyPPJuMgyh+ukAgh5Y1259+UsHxE4p0NdPF /U6REC9ddtTwnoRleDCI8yMqL8Rz0dAadp3KlZtatqjJkU0Hmp5WBxtR8qSEXjRr sXXHzRPYTz4kEFBgditMepaJUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTs6AXF dDqY07v6Bf8R/rkZh79RMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnr5+1nvxOxXZKiAkC35pmpQRVKlsF0TrFnmAiVxXNZBGkMpxFtlP5 JTKlX24C89MPPCB3ElVJdXzMlBMIaA1cNlJANPPgrAg7dcp7bZcd/oafo3wdlTgJ nz8hRtfX6zEcWuNHeJ9CzOY2djXxfJ4Tt46JscgwnGdWBRJhAgS430a2FTyoAV8X fbEcrSY1JM4T5wd9r2jjz9HTscngSsAP2fEplhJ7YFypHMpjCX8UQA7XIfZ1Nxi4 eQoUV/I2+jB6V1HtYjxI4Dxv2BF13xQ0nCoR4+8Q90mI6OhS93vGjZ/XK/RrwCT8 Vht9Pc7dqcD1i60v4xKTOHO6akuFq6Cq -----END CERTIFICATE-----Generated at Tue May 13 23:11:21 2025 by rpki-client