$ rpki-client -vvf rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft File: MPLcABvWWM0WPiN3H0FHaXLg0U8.mft (raw, json) Hash identifier: BLzRrCBB7BdAt2fZXgt6MwinOae7tPhUgjL3Z4BCQng= Subject key identifier: 97:B5:F4:0F:24:14:F8:DB:78:51:DB:C7:3A:8E:1C:67:9E:5E:78:48 Authority key identifier: 30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F Certificate issuer: /CN=A91283E7/serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft Manifest number: 04E6 Signing time: Sat 14 Jun 2025 23:27:35 +0000 Manifest this update: Sat 14 Jun 2025 23:27:35 +0000 Manifest next update: Sat 21 Jun 2025 23:27:34 +0000 Files and hashes: 1: MPLcABvWWM0WPiN3H0FHaXLg0U8.crl (hash: VuQqDOlhfia+rVlTtWo6dckgtKEQHBtcHxlfhFOMlY4=) 2: 9F7C20921ADD11EC80226B61C4F9AE02.roa (hash: 76Aj2e1/zvO+ptuFoEi5Uq+Ik3Pi+kbiWoL+xAlC1Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91283E7, serialNumber=30F2DC001BD658CD163E23771F41476972E0D14F Validity Not Before: Jun 14 23:27:35 2025 GMT Not After : Jun 21 23:27:34 2025 GMT Subject: CN=684e0567-20d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:c2:e2:05:8b:f1:cd:bc:b7:94:33:41:e3: 02:45:06:2c:ed:8b:d0:fb:b8:6e:d7:db:cb:4e:23: 95:ef:4a:da:3c:46:d7:72:93:72:64:24:92:16:37: 66:89:7b:40:7b:b9:e7:46:f6:c2:97:21:72:4c:ec: 72:df:b6:b4:97:fa:a9:0e:94:67:fd:1c:d9:6b:1c: 95:71:f5:b8:03:5c:2c:cf:e3:b0:2e:53:3d:b9:a8: 02:52:f1:1d:7b:cf:f8:40:1a:48:32:07:2f:07:87: 95:4d:6a:5b:7b:d8:04:da:66:11:a8:36:2b:63:b1: 17:65:6d:d9:4c:26:26:88:7e:ee:67:13:b0:b3:9a: 27:f7:85:5b:91:3b:e8:49:e0:66:64:01:6b:f8:1a: da:0d:a9:35:4e:53:5b:e6:eb:44:eb:4a:95:0c:1d: 6f:d5:a4:60:33:1a:f1:7e:e6:2c:53:5f:c5:1a:25: 6f:08:ee:6f:e2:3a:86:37:0d:22:fd:ec:5d:20:80: 6f:b4:35:3c:0a:92:52:e0:e2:fa:96:1c:ab:9c:9c: 34:bc:7b:aa:0b:b9:6a:d4:c7:84:73:10:f2:0b:56: e7:6d:39:ca:48:09:f2:6d:73:54:2d:e8:ed:a6:88: 68:ee:0e:2f:0c:d2:db:f9:45:0a:ab:8b:9f:17:24: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B5:F4:0F:24:14:F8:DB:78:51:DB:C7:3A:8E:1C:67:9E:5E:78:48 X509v3 Authority Key Identifier: keyid:30:F2:DC:00:1B:D6:58:CD:16:3E:23:77:1F:41:47:69:72:E0:D1:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPLcABvWWM0WPiN3H0FHaXLg0U8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91283E7/73960CC41ADB11EC93D06C60C4F9AE02/MPLcABvWWM0WPiN3H0FHaXLg0U8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:23:d5:1e:59:65:c0:dd:68:87:04:e0:79:64:00:1d:76:dd: 74:aa:78:fb:a3:4a:7e:ae:33:4b:a8:0a:22:c0:9a:ce:4e:18: 2d:d4:e7:4c:af:ee:db:86:1f:c5:fd:22:e8:5f:a6:f3:2a:1d: e5:37:ca:11:96:1e:22:45:a1:40:cb:47:6a:c7:ce:1f:85:cf: 10:9f:93:8d:0b:f4:36:78:ac:04:0d:cc:c9:0d:b8:b5:08:87: 49:c0:21:2c:74:91:ec:33:3d:4a:6f:93:7f:b7:fd:31:70:d4: fd:40:e2:a9:15:36:24:07:2a:5b:8f:36:64:a2:88:e1:dc:71: d2:5d:72:2f:15:ce:39:94:d9:19:2b:2d:ae:86:07:69:55:d2: 8f:30:40:c9:d4:76:da:e5:da:7c:5a:49:11:fa:5e:12:fe:52: f2:9a:bb:4d:f7:e2:ad:53:6e:41:ca:47:52:67:a8:e3:9e:dc: 95:29:50:e1:fd:cc:dd:46:a9:3d:bc:84:9a:33:25:91:35:5d: eb:10:52:a9:73:71:db:cb:79:c2:78:da:09:d9:7d:eb:f6:6c: 3f:51:02:a3:40:51:ca:12:22:c8:24:f4:de:af:0e:24:2b:cb: b3:11:40:ff:51:e3:a0:c9:ee:37:59:fc:7d:d4:6a:a4:fe:6e: c4:a5:19:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgzRTcxMTAvBgNVBAUTKDMwRjJEQzAwMUJENjU4Q0QxNjNFMjM3NzFGNDE0NzY5 NzJFMEQxNEYwHhcNMjUwNjE0MjMyNzM1WhcNMjUwNjIxMjMyNzM0WjAYMRYwFAYD VQQDEw02ODRlMDU2Ny0yMGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUnC4gWL8c28t5QzQeMCRQYs7YvQ+7hu19vLTiOV70raPEbXcpNyZCSSFjdm iXtAe7nnRvbClyFyTOxy37a0l/qpDpRn/RzZaxyVcfW4A1wsz+OwLlM9uagCUvEd e8/4QBpIMgcvB4eVTWpbe9gE2mYRqDYrY7EXZW3ZTCYmiH7uZxOws5on94VbkTvo SeBmZAFr+BraDak1TlNb5utE60qVDB1v1aRgMxrxfuYsU1/FGiVvCO5v4jqGNw0i /exdIIBvtDU8CpJS4OL6lhyrnJw0vHuqC7lq1MeEcxDyC1bnbTnKSAnybXNULejt poho7g4vDNLb+UUKq4ufFyS/3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJe19A8k FPjbeFHbxzqOHGeeXnhIMB8GA1UdIwQYMBaAFDDy3AAb1ljNFj4jdx9BR2ly4NFP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODNFNy83Mzk2MENDNDFB REIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dNMFdQaU4zSDBGSGFYTGcw VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QTGNBQnZXV00wV1BpTjNIMEZIYVhMZzBVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODNFNy83Mzk2MENDNDFBREIxMUVDOTNEMDZDNjBDNEY5QUUwMi9NUExjQUJ2V1dN MFdQaU4zSDBGSGFYTGcwVTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXI9UeWWXA3WiHBOB5ZAAddt10qnj7o0p+rjNLqAoiwJrOThgt1OdM r+7bhh/F/SLoX6bzKh3lN8oRlh4iRaFAy0dqx84fhc8Qn5ONC/Q2eKwEDczJDbi1 CIdJwCEsdJHsMz1Kb5N/t/0xcNT9QOKpFTYkBypbjzZkoojh3HHSXXIvFc45lNkZ Ky2uhgdpVdKPMEDJ1Hba5dp8WkkR+l4S/lLymrtN9+KtU25BykdSZ6jjntyVKVDh /czdRqk9vISaMyWRNV3rEFKpc3Hby3nCeNoJ2X3r9mw/UQKjQFHKEiLIJPTerw4k K8uzEUD/UeOgye43Wfx91Gqk/m7EpRk4 -----END CERTIFICATE-----Generated at Mon Jun 16 05:33:09 2025 by rpki-client