$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft File: MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json) Hash identifier: pQm3vMhSyHKmtohKErFsjSUyqN65aSOxeTVDMQPZuGw= Subject key identifier: 39:AC:EA:B0:E4:05:B9:39:A5:20:4F:87:92:E1:33:AF:C0:AA:E1:A1 Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 Certificate issuer: /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft Manifest number: F1 Signing time: Fri 25 Apr 2025 04:26:35 +0000 Manifest this update: Fri 25 Apr 2025 04:26:35 +0000 Manifest next update: Fri 02 May 2025 04:26:35 +0000 Files and hashes: 1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: sI1fimnT4Jlpb+Hstg+98GgK2vXo9q4a8aK8yTsbVxE=) 2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: eLvQDqgzb8pzAvtiGB3lMpGAuC1qmsTh4Dk3DLhUIRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Validity Not Before: Apr 25 04:26:35 2025 GMT Not After : May 2 04:26:35 2025 GMT Subject: CN=680b0efb-2b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a8:00:4c:0c:56:41:15:b5:76:f8:6c:e3:cf: 8c:71:a0:f8:39:b7:f0:c1:96:11:37:20:c7:4a:3c: 6c:80:f0:1a:b3:a8:d0:3d:97:48:b7:b5:d3:58:28: 23:e1:5d:cd:13:57:20:6a:9d:4f:87:89:61:dd:bb: d0:22:74:85:ec:14:d8:aa:fa:58:7d:9d:bc:98:0d: dd:8a:90:0b:59:37:67:d6:77:be:ce:18:cf:e5:7e: 04:5b:d9:83:12:f9:54:db:a8:94:f5:24:04:54:34: 4f:00:b7:8f:c1:e4:db:f5:80:8e:bd:0c:ce:3a:df: 73:48:7c:6c:e0:13:bf:ba:7a:5e:5b:83:65:44:2d: 31:d5:3b:8a:2f:3f:ee:7d:a6:16:45:51:9f:bd:10: 5d:92:32:d3:03:f4:35:94:e6:bc:35:10:da:39:0c: 15:35:9b:c2:45:5e:a6:c0:64:29:fb:ec:34:29:e9: 84:1a:21:fc:64:c7:dc:fc:42:be:c0:ec:af:1e:eb: a0:a9:04:25:d5:22:fe:bc:ea:a3:7e:18:64:3a:0c: a2:72:32:12:12:bd:eb:53:e4:86:f9:16:53:8b:3c: 65:de:17:6e:f0:4e:3d:dd:88:24:74:97:b4:10:66: 75:2a:24:8a:44:92:74:53:fd:db:f7:06:7b:92:21: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AC:EA:B0:E4:05:B9:39:A5:20:4F:87:92:E1:33:AF:C0:AA:E1:A1 X509v3 Authority Key Identifier: keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f1:b1:e9:18:a1:11:a3:f3:17:a7:bb:7d:48:5b:3c:43:f7: 2f:a4:e6:f7:2e:65:11:d0:2a:2d:ce:79:cc:2e:c9:42:51:87: 7d:0d:8b:68:aa:4b:fd:e2:4a:a3:28:f2:4c:92:19:e2:88:af: 2e:f1:ba:09:9d:02:a5:ac:94:34:9a:98:c9:2c:f0:37:c6:16: 3e:c5:4a:ee:6b:bc:99:b7:5b:ac:a5:e4:3e:2c:ae:de:5a:1d: 30:5e:4c:21:1c:18:2e:42:34:d2:ad:7b:1b:76:b9:20:95:ac: 94:bb:c7:5d:f5:4e:a1:d9:6e:1e:d7:bd:be:a5:cf:2a:7b:63: 34:b6:69:fb:48:71:50:32:f3:da:e2:7c:d6:87:d4:9f:32:32: b6:de:fb:02:35:45:f0:3a:aa:47:5d:09:7f:99:d9:99:9c:10: 66:bb:11:41:7b:b4:65:a2:3c:62:50:f1:9c:8b:0a:c3:e3:a7: cb:92:60:20:5b:76:a5:60:a1:43:08:e6:a0:7b:c1:6a:c5:56: 45:26:8b:4d:5f:e4:2a:d3:71:f2:c4:e0:95:bf:16:d2:a1:8c: 9b:25:87:f8:0a:b6:d5:df:96:d7:45:24:59:9f:a2:77:ba:f8: 47:a7:61:3e:9d:7d:c7:29:57:5d:72:83:9b:9e:d7:ae:b3:11: 84:87:7d:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDMwRjBEQjgyRDU4RjU4M0U4NDg4Mzc5QkEwMEQzNUFD QjM1MjYxMTAwHhcNMjUwNDI1MDQyNjM1WhcNMjUwNTAyMDQyNjM1WjAYMRYwFAYD VQQDEw02ODBiMGVmYi0yYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKgATAxWQRW1dvhs48+McaD4ObfwwZYRNyDHSjxsgPAas6jQPZdIt7XTWCgj 4V3NE1cgap1Ph4lh3bvQInSF7BTYqvpYfZ28mA3dipALWTdn1ne+zhjP5X4EW9mD EvlU26iU9SQEVDRPALePweTb9YCOvQzOOt9zSHxs4BO/unpeW4NlRC0x1TuKLz/u faYWRVGfvRBdkjLTA/Q1lOa8NRDaOQwVNZvCRV6mwGQp++w0KemEGiH8ZMfc/EK+ wOyvHuugqQQl1SL+vOqjfhhkOgyicjISEr3rU+SG+RZTizxl3hdu8E493YgkdJe0 EGZ1KiSKRJJ0U/3b9wZ7kiFs2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDms6rDk Bbk5pSBPh5LhM6/AquGhMB8GA1UdIwQYMBaAFDDw24LVj1g+hIg3m6ANNayzUmEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GQjE4Mjk5OEJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdENkVpRGVib0EwMXJMTlNZ UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QRGJndFdQV0Q2RWlEZWJvQTAxckxOU1lSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GQjE4Mjk5OEJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdE NkVpRGVib0EwMXJMTlNZUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA8bHpGKERo/MXp7t9SFs8Q/cvpOb3LmUR0CotznnMLslCUYd9DYto qkv94kqjKPJMkhniiK8u8boJnQKlrJQ0mpjJLPA3xhY+xUrua7yZt1uspeQ+LK7e Wh0wXkwhHBguQjTSrXsbdrkglayUu8dd9U6h2W4e172+pc8qe2M0tmn7SHFQMvPa 4nzWh9SfMjK23vsCNUXwOqpHXQl/mdmZnBBmuxFBe7RlojxiUPGciwrD46fLkmAg W3alYKFDCOage8FqxVZFJotNX+Qq03HyxOCVvxbSoYybJYf4CrbV35bXRSRZn6J3 uvhHp2E+nX3HKVddcoObnteusxGEh32w -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:46 2025 by rpki-client