$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json) Hash identifier: MebpYIHUIwGY7v9tR+zGxbAm2s5H5vTv8ZA1yaWqYtY= Subject key identifier: AE:BF:5D:A8:11:BB:51:60:85:FC:61:D7:11:0C:1A:93:8C:9A:AC:45 Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft Manifest number: 0130 Signing time: Fri 25 Apr 2025 03:40:50 +0000 Manifest this update: Fri 25 Apr 2025 03:40:49 +0000 Manifest next update: Fri 02 May 2025 03:40:49 +0000 Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: QlIB1rjIcv72q28RHKCRqrma99O9is6YZEHKh3rgCuw=) 2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=) 3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=) 4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=) 5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=) 6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: Apr 25 03:40:49 2025 GMT Not After : May 2 03:40:49 2025 GMT Subject: CN=680b0442-1842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:44:4f:db:70:4f:34:de:ac:51:d6:93:45: f2:dd:05:d3:bf:b7:46:c9:63:ec:33:c5:1d:83:15: e0:32:6e:3a:92:f8:dc:32:e6:e9:bd:50:48:8e:87: 2f:ad:30:77:a5:06:97:e4:ac:69:f5:7c:b4:24:92: f7:9c:4e:fb:da:3c:d3:db:c9:d0:95:c9:cd:fa:41: d2:22:ea:01:dc:20:fa:f2:ab:e7:e7:68:1c:eb:ac: a4:5d:d6:35:36:74:7a:65:87:60:d7:b8:57:64:e1: 70:cc:74:21:a2:ff:0b:12:04:f2:d0:fd:99:ae:4d: 39:33:0f:d8:92:54:6b:6c:d7:de:b6:3c:e3:fa:74: 86:79:95:1b:b1:39:1b:33:21:26:4d:5d:46:7a:15: 09:bd:71:77:aa:db:84:6e:0c:01:06:d8:11:06:94: fe:c3:bb:e1:b9:26:ab:7e:22:70:02:78:7c:f1:ae: 1e:63:11:ae:ca:08:11:a4:85:4f:00:0a:17:0c:94: 42:47:45:a7:c1:2a:c0:bb:6b:03:cf:73:5f:c2:4b: 69:96:19:23:3f:7c:a0:63:04:74:2a:6e:8c:bb:46: dc:f1:5b:d0:c4:30:c2:61:e9:fc:cd:4a:aa:cf:4f: 84:3f:65:63:77:87:6f:63:2e:d6:0a:cb:8d:b8:c1: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BF:5D:A8:11:BB:51:60:85:FC:61:D7:11:0C:1A:93:8C:9A:AC:45 X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:03:09:5c:81:2a:18:67:95:d8:61:85:e5:da:42:39:62:f7: 35:8e:ff:ae:cc:2e:c2:99:cf:3b:19:ef:d2:a7:8b:87:22:6e: 5e:3d:3a:f4:85:1a:e8:85:69:38:fe:43:90:4f:e2:f9:7d:61: f6:e3:f2:48:50:c2:53:c6:af:bc:37:98:c3:55:bc:c8:b5:d4: 27:15:2d:73:e1:cc:2b:a3:04:87:ea:4c:04:45:76:80:3a:8d: 3a:ff:34:72:3d:94:f1:93:4c:23:c2:08:97:dd:08:90:92:b1: ab:c2:fb:ec:78:3a:f2:0e:16:e8:17:65:78:29:9d:e8:e1:8e: c9:33:cc:7d:a2:5a:75:c6:7b:fd:0f:b3:a2:c8:0a:88:d9:60: 78:8f:70:fd:f0:e3:3d:d8:89:40:16:f7:e7:be:79:10:46:7c: d8:bd:94:0d:4d:4c:7f:81:59:72:40:09:23:da:7d:18:c4:4e: 08:43:df:b9:4c:85:fd:43:72:19:40:05:ec:4f:74:88:91:3f: 89:23:34:42:da:7b:24:ad:44:52:92:fb:1c:1b:cf:5c:a9:41: 25:13:25:e3:80:23:13:63:33:e9:07:51:8c:97:7a:6d:a0:1e: 05:6d:46:82:60:33:a9:20:f6:e0:ea:6f:1c:e8:ef:f8:c9:42: 5d:60:af:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUwNDI1MDM0MDQ5WhcNMjUwNTAyMDM0MDQ5WjAYMRYwFAYD VQQDEw02ODBiMDQ0Mi0xODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TRET9twTzTerFHWk0Xy3QXTv7dGyWPsM8UdgxXgMm46kvjcMubpvVBIjocv rTB3pQaX5Kxp9Xy0JJL3nE772jzT28nQlcnN+kHSIuoB3CD68qvn52gc66ykXdY1 NnR6ZYdg17hXZOFwzHQhov8LEgTy0P2Zrk05Mw/YklRrbNfetjzj+nSGeZUbsTkb MyEmTV1GehUJvXF3qtuEbgwBBtgRBpT+w7vhuSarfiJwAnh88a4eYxGuyggRpIVP AAoXDJRCR0WnwSrAu2sDz3NfwktplhkjP3ygYwR0Km6Mu0bc8VvQxDDCYen8zUqq z0+EP2Vjd4dvYy7WCsuNuMFZDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6/XagR u1Fghfxh1xEMGpOMmqxFMB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJDRS85MDA5OUM0MDU3REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1 U2QyQ3lDOS16ckNWdVFLaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGAwlcgSoYZ5XYYYXl2kI5Yvc1jv+uzC7Cmc87Ge/Sp4uHIm5ePTr0 hRrohWk4/kOQT+L5fWH24/JIUMJTxq+8N5jDVbzItdQnFS1z4cwrowSH6kwERXaA Oo06/zRyPZTxk0wjwgiX3QiQkrGrwvvseDryDhboF2V4KZ3o4Y7JM8x9olp1xnv9 D7OiyAqI2WB4j3D98OM92IlAFvfnvnkQRnzYvZQNTUx/gVlyQAkj2n0YxE4IQ9+5 TIX9Q3IZQAXsT3SIkT+JIzRC2nskrURSkvscG89cqUElEyXjgCMTYzPpB1GMl3pt oB4FbUaCYDOpIPbg6m8c6O/4yUJdYK+h -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:58 2025 by rpki-client