$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json) Hash identifier: iMjEbvudkgShob0RrO664ELh/4yZMFO92P77CXS2oP8= Subject key identifier: 25:CE:B6:05:D5:BF:F0:45:DB:76:3F:D7:A2:9C:D3:DE:8C:4F:2A:CB Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft Manifest number: 0148 Signing time: Fri 13 Jun 2025 03:16:14 +0000 Manifest this update: Fri 13 Jun 2025 03:16:13 +0000 Manifest next update: Fri 20 Jun 2025 03:16:13 +0000 Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: VBqA8/m9INGRTVaMC9gGYx3WoYDr5pquE0aBBnZ8Lr4=) 2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=) 3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=) 4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=) 5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=) 6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: Jun 13 03:16:13 2025 GMT Not After : Jun 20 03:16:13 2025 GMT Subject: CN=684b97fe-b0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:14:a6:10:4d:33:87:fb:88:67:ed:18:c9: 14:95:2d:9b:9a:5c:8f:56:29:89:4e:e6:54:ea:70: a0:5f:78:71:ef:3c:d6:7a:9e:cf:c2:8b:62:3b:6a: ab:cc:7e:52:a8:9f:a5:e8:4b:4e:47:16:6c:d6:e0: 4b:1d:87:41:41:43:a5:1b:85:02:72:4c:fb:86:0e: 25:c0:66:00:c4:57:d0:7a:23:20:bc:76:97:9d:9e: c0:c1:1b:df:65:4c:a2:32:9f:f8:3c:7d:97:d8:00: 4d:a9:e0:20:30:fb:71:98:f5:c5:fb:b6:ce:3d:7c: 37:f5:97:77:88:23:5f:96:d1:55:78:7b:fb:35:ae: b8:8b:a9:8f:c9:45:42:fb:51:c3:0b:d7:99:79:8e: ae:1e:91:07:41:2f:e8:4e:3c:0e:8e:24:5f:85:8a: 3e:32:86:68:16:15:5f:a2:c7:20:2b:d9:d8:c6:00: 7b:de:0f:db:5b:a9:a9:29:04:9f:89:de:fa:34:ed: 4a:1a:f7:e8:ad:31:65:ad:da:97:7e:56:d6:c1:22: 1a:f0:92:c9:d8:ba:0b:ec:23:82:88:69:7f:83:57: 9f:e4:6d:7e:95:58:09:40:f7:4e:c9:c3:c8:9c:da: 1d:ec:00:c1:27:ad:30:eb:c7:01:08:94:46:08:30: c1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CE:B6:05:D5:BF:F0:45:DB:76:3F:D7:A2:9C:D3:DE:8C:4F:2A:CB X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:30:95:6e:ee:c7:76:69:1b:0b:c9:0d:d1:59:a2:c8:6c:4b: 82:d0:83:20:cc:0f:a7:c9:60:dd:90:1f:1c:d9:d4:0e:b7:7e: bb:e5:5d:04:d0:2b:79:2b:b6:45:fd:a0:2c:79:4e:f4:f9:62: 44:2d:c5:b4:91:b9:ff:f9:06:f0:48:0c:e7:15:e7:4c:24:5a: ee:02:53:f7:7d:0d:3b:bc:cb:42:ed:fd:fc:c9:ce:36:58:b7: 47:13:16:ab:50:79:45:30:fd:a4:0d:10:97:dd:25:37:53:55: 95:76:c5:95:90:9e:f5:38:42:0f:80:f4:5d:64:80:3c:06:34: 17:c1:16:4e:17:ef:95:37:bb:b2:6c:03:68:c9:0f:61:f8:56: c4:c7:89:6e:0d:60:ea:da:2c:fd:42:cb:1b:97:84:6b:a9:ad: aa:23:2c:56:bc:ac:89:95:05:e7:68:f4:41:b5:09:ab:79:6d: 15:3d:cc:49:b7:30:0e:ff:e9:13:f5:2d:fd:19:45:74:c0:f7: 62:19:b6:9a:9c:18:18:9d:34:b2:19:0b:cb:e4:15:60:69:91: 74:1d:50:42:14:ea:cc:93:c7:94:1b:9b:df:e2:73:56:f0:3d: 12:57:7a:f4:c4:af:87:6c:c7:e2:2b:89:dd:5d:d7:ae:9f:fc: da:66:76:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUwNjEzMDMxNjEzWhcNMjUwNjIwMDMxNjEzWjAYMRYwFAYD VQQDEw02ODRiOTdmZS1iMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xUUphBNM4f7iGftGMkUlS2bmlyPVimJTuZU6nCgX3hx7zzWep7PwotiO2qr zH5SqJ+l6EtORxZs1uBLHYdBQUOlG4UCckz7hg4lwGYAxFfQeiMgvHaXnZ7AwRvf ZUyiMp/4PH2X2ABNqeAgMPtxmPXF+7bOPXw39Zd3iCNfltFVeHv7Na64i6mPyUVC +1HDC9eZeY6uHpEHQS/oTjwOjiRfhYo+MoZoFhVfoscgK9nYxgB73g/bW6mpKQSf id76NO1KGvforTFlrdqXflbWwSIa8JLJ2LoL7COCiGl/g1ef5G1+lVgJQPdOycPI nNod7ADBJ60w68cBCJRGCDDBvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXOtgXV v/BF23Y/16Kc096MTyrLMB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJDRS85MDA5OUM0MDU3REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1 U2QyQ3lDOS16ckNWdVFLaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4MJVu7sd2aRsLyQ3RWaLIbEuC0IMgzA+nyWDdkB8c2dQOt3675V0E 0Ct5K7ZF/aAseU70+WJELcW0kbn/+QbwSAznFedMJFruAlP3fQ07vMtC7f38yc42 WLdHExarUHlFMP2kDRCX3SU3U1WVdsWVkJ71OEIPgPRdZIA8BjQXwRZOF++VN7uy bANoyQ9h+FbEx4luDWDq2iz9Qssbl4Rrqa2qIyxWvKyJlQXnaPRBtQmreW0VPcxJ tzAO/+kT9S39GUV0wPdiGbaanBgYnTSyGQvL5BVgaZF0HVBCFOrMk8eUG5vf4nNW 8D0SV3r0xK+HbMfiK4ndXdeun/zaZnbk -----END CERTIFICATE-----Generated at Sat Jun 14 17:17:50 2025 by rpki-client