$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft File: MPLcABvWWM0WPiN3H0FHaXLg0U8.mft (raw, json) Hash identifier: ZKlCNwSX17YQfg2fEa38/p+hMPPxPQHISYu9viK/9pM= Subject key identifier: C3:C2:45:6D:43:CA:6F:D3:84:55:FB:CE:B2:AF:5E:90:CC:CA:1D:16 Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F Certificate issuer: /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft Manifest number: 04CD Signing time: Thu 24 Apr 2025 23:35:14 +0000 Manifest this update: Thu 24 Apr 2025 23:35:13 +0000 Manifest next update: Thu 01 May 2025 23:35:13 +0000 Files and hashes: 1: MPLcABvWWM0WPiN3H0FHaXLg0U8.crl (hash: MWuOrD/OSpJn5XGzG3P9frbo1R0xH8I26xXmmxOWGag=) 2: 9F7C20921ADD11EC80226B61C4F9AE02.roa (hash: 76Aj2e1/zvO+ptuFoEi5Uq+Ik3Pi+kbiWoL+xAlC1Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91283E7, serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Validity Not Before: Apr 24 23:35:13 2025 GMT Not After : May 1 23:35:13 2025 GMT Subject: CN=680acab1-db0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:a5:ea:26:8f:b8:f3:04:09:ef:9e:6e:4c: be:71:87:3d:78:e5:13:67:97:0d:c0:4c:16:43:f1: d6:58:f2:91:a4:52:0b:48:b0:5e:01:4f:6c:38:52: 40:83:39:21:e4:07:b0:bf:78:55:16:55:fa:6e:e5: b9:60:70:59:9a:da:32:3d:cd:63:87:1a:ea:74:b8: f0:d7:48:2f:9a:79:e6:b0:cf:f9:99:95:14:be:c3: 12:62:b8:16:08:73:3c:98:e4:07:dd:6e:f4:6a:6a: e0:81:75:49:8a:2f:80:f0:a5:a7:66:20:08:1e:11: 5f:14:98:ce:78:12:11:c1:1d:09:94:53:2b:1e:3a: ec:a6:1d:3b:d2:e3:43:f6:17:19:d4:00:fc:d2:18: aa:94:0a:60:c9:96:40:51:2a:32:d1:5f:9e:91:40: da:59:77:85:6a:6b:93:ee:d9:63:68:95:3e:1a:f1: a7:ff:a1:ca:c8:c2:a9:03:99:12:8f:f2:06:c6:41: 4f:c3:9c:17:85:7e:74:36:35:21:8f:aa:91:aa:b0: ab:38:b5:43:68:8b:98:41:98:6a:87:bc:50:d2:e7: be:75:15:d1:9a:87:7c:4d:69:c9:f4:ae:3d:a1:f7: c0:bc:86:93:57:10:7d:93:56:64:c4:e3:60:ec:97: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C2:45:6D:43:CA:6F:D3:84:55:FB:CE:B2:AF:5E:90:CC:CA:1D:16 X509v3 Authority Key Identifier: keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:75:d5:19:69:0d:c9:53:85:00:17:a5:fd:b5:81:0c:c7:f4: 85:5e:a8:01:fe:b9:76:1e:b2:9a:f0:b7:0a:5c:99:5d:f5:6c: a7:3b:3e:32:4e:a7:d3:fa:e9:f6:8a:ed:a5:59:56:18:20:ce: 9c:91:ce:6d:40:c2:03:a3:dd:f3:d1:d8:06:c9:fb:ad:65:e3: 43:9f:b7:d2:ff:ac:37:a3:88:95:eb:c5:4a:fc:44:ea:fd:fc: 03:16:05:8e:bf:fc:39:ff:d7:ad:3a:12:df:96:e0:c2:5b:66: 93:ca:5c:5f:77:3c:73:4d:10:1b:82:58:c5:8a:6f:2c:17:22: 96:66:96:95:0a:e2:39:c7:7d:d9:a3:b2:1a:71:c4:ef:6f:e3: 07:2e:89:d8:4f:57:45:94:2e:30:76:02:69:6f:cb:37:9c:87: 89:e4:50:cc:3c:11:7c:7a:d4:15:2b:69:a7:86:18:28:44:84: 9e:44:7c:96:1c:51:f7:d0:a1:37:ab:96:96:e7:1a:82:8b:62: 11:0f:d3:e8:e4:5e:56:84:89:df:04:00:73:91:29:7f:8d:55: 09:36:d0:94:29:b8:e0:52:4b:25:2b:2d:d7:1d:87:c3:b6:1e: 1f:33:04:3e:9b:5a:64:34:c3:44:1d:13:52:b2:1b:e1:ca:9f: a1:61:08:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgzRTcxMTAvBgNVBAUTKDMwRjJEQzAwMUJENjU4Q0QxNjNFMjM3NzFGNDE0NzY5 NzJFMEQxNEYwHhcNMjUwNDI0MjMzNTEzWhcNMjUwNTAxMjMzNTEzWjAYMRYwFAYD VQQDEw02ODBhY2FiMS1kYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqq6l6iaPuPMECe+ebky+cYc9eOUTZ5cNwEwWQ/HWWPKRpFILSLBeAU9sOFJA gzkh5Aewv3hVFlX6buW5YHBZmtoyPc1jhxrqdLjw10gvmnnmsM/5mZUUvsMSYrgW CHM8mOQH3W70amrggXVJii+A8KWnZiAIHhFfFJjOeBIRwR0JlFMrHjrsph070uND 9hcZ1AD80hiqlApgyZZAUSoy0V+ekUDaWXeFamuT7tljaJU+GvGn/6HKyMKpA5kS j/IGxkFPw5wXhX50NjUhj6qRqrCrOLVDaIuYQZhqh7xQ0ue+dRXRmod8TWnJ9K49 offAvIaTVxB9k1ZkxONg7Jde1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPCRW1D ym/ThFX7zrKvXpDMyh0WMB8GA1UdIwQYMBaAFDDy3AAb1ljNFj4jdx9BR2ly4NFP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODNFNy83Mzk2MENDNDFB REIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dNMFdQaU4zSDBGSGFYTGcw VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QTGNBQnZXV00wV1BpTjNIMEZIYVhMZzBVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODNFNy83Mzk2MENDNDFBREIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dN MFdQaU4zSDBGSGFYTGcwVTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHddUZaQ3JU4UAF6X9tYEMx/SFXqgB/rl2HrKa8LcKXJld9WynOz4y TqfT+un2iu2lWVYYIM6ckc5tQMIDo93z0dgGyfutZeNDn7fS/6w3o4iV68VK/ETq /fwDFgWOv/w5/9etOhLfluDCW2aTylxfdzxzTRAbgljFim8sFyKWZpaVCuI5x33Z o7IaccTvb+MHLonYT1dFlC4wdgJpb8s3nIeJ5FDMPBF8etQVK2mnhhgoRISeRHyW HFH30KE3q5aW5xqCi2IRD9Po5F5WhInfBABzkSl/jVUJNtCUKbjgUkslKy3XHYfD th4fMwQ+m1pkNMNEHRNSshvhyp+hYQjL -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:27 2025 by rpki-client