$ rpki-client -vvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft File: MxjodUE2Qh4kSmxB3aXezBDaj4E.mft (raw, json) Hash identifier: FIrc7G97TjOUmk5AWsuV42BSAGCXvhq0EKfXAiWqfmo= Subject key identifier: AC:14:DF:8E:41:29:0A:2F:0C:C5:19:33:D3:76:D1:3A:A5:86:07:F8 Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 Certificate issuer: /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft Manifest number: 0134 Signing time: Fri 13 Jun 2025 03:26:22 +0000 Manifest this update: Fri 13 Jun 2025 03:26:21 +0000 Manifest next update: Fri 20 Jun 2025 03:26:21 +0000 Files and hashes: 1: MxjodUE2Qh4kSmxB3aXezBDaj4E.crl (hash: 38vkRwkjIn4q+fd5RPwrTjr6vkhb7+pL/JnGtzl9FWk=) 2: 2201EFC86E5211EEB027A974C4F9AE02.roa (hash: 4nQ3/xG4CFEbotiusShRvyeKgM0UbijAal8OSC/u9HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490C8, serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Validity Not Before: Jun 13 03:26:21 2025 GMT Not After : Jun 20 03:26:21 2025 GMT Subject: CN=684b9a5d-3a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:dd:7e:21:ef:d4:ff:75:9c:9e:45:b7:85: 5b:68:e8:8f:d9:80:44:63:f7:0d:36:5a:86:b0:09: 02:e3:04:17:8a:46:1b:b1:04:98:5c:eb:c6:70:ae: 59:77:48:38:5e:df:65:5b:bd:f8:a4:02:8c:f1:7f: 3c:b7:fb:81:8c:c5:fa:db:1f:50:3f:e0:62:5a:98: bc:d7:bf:01:c3:cb:47:12:ad:dc:8d:9c:49:bf:b9: 3a:f1:17:fd:ee:8d:ef:b5:51:a7:76:6f:66:ba:ef: 46:90:ef:4b:e2:c9:8d:65:dd:c2:d0:74:56:f1:44: 09:64:3f:1a:9d:58:f5:96:3e:4f:ac:78:35:17:ae: f5:1c:ad:93:3f:15:63:6a:27:b4:c8:a7:c7:bc:0f: a4:ca:89:2b:d3:b6:0a:ba:44:4e:1f:ea:0b:d3:48: fb:85:17:dd:bc:e9:58:92:5e:c6:29:9a:e1:1e:1a: 9b:5a:d8:ee:f6:3c:bc:e6:fa:24:88:74:57:e5:55: 26:46:92:0a:1e:f9:b6:a3:a8:f4:3c:9b:ed:86:e8: 84:3d:e1:e2:60:d8:a0:b9:ba:b0:a5:5c:77:fb:ee: 93:a0:68:b0:9d:e4:14:97:2b:ff:82:3c:5f:7f:ac: 9d:10:e2:64:de:e1:c9:87:21:5a:15:16:95:e4:71: e0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:DF:8E:41:29:0A:2F:0C:C5:19:33:D3:76:D1:3A:A5:86:07:F8 X509v3 Authority Key Identifier: keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e1:0e:94:f8:9a:ad:47:12:8f:7c:c2:e9:6c:42:13:45:b6: 7b:b3:60:0b:8a:23:bb:ea:3f:a3:b2:0a:18:e1:67:34:48:56: a4:e1:fd:88:b5:9f:3b:83:c6:15:28:1e:05:9f:bc:26:52:85: f0:87:1f:de:94:bc:6f:f9:9a:ee:56:c5:83:be:92:33:e0:8e: 1e:0e:96:de:bf:84:30:b3:64:38:a7:ab:ba:4f:0d:49:df:4f: 3e:9d:cf:35:1f:89:e5:6c:91:9d:86:72:0d:ac:fa:49:8e:dd: 95:35:14:a2:3a:72:35:b9:23:e4:3a:d3:88:0f:4c:0d:23:af: dd:29:4d:43:87:89:d6:2c:94:e1:40:5f:15:a1:8b:9f:e3:22: 41:2b:64:1f:a8:e4:3f:67:2d:aa:20:11:84:b5:61:02:3e:00: 44:8a:a7:3b:29:f7:ae:cd:7b:4d:fa:ac:93:cc:32:85:40:38: 89:7f:c3:78:b8:89:9d:bc:b8:09:24:20:db:0c:c7:a2:04:58: e9:31:95:b7:6b:3f:c2:53:82:02:4d:6b:ff:a0:74:2b:7c:6a: be:c4:41:85:a0:98:48:c0:09:ea:fc:71:2e:54:68:e8:c3:06: 48:b7:8f:df:22:9d:03:b0:26:0f:57:b6:72:e2:65:99:74:bc: 49:49:a3:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwQzgxMTAvBgNVBAUTKDMzMThFODc1NDEzNjQyMUUyNDRBNkM0MUREQTVERUND MTBEQThGODEwHhcNMjUwNjEzMDMyNjIxWhcNMjUwNjIwMDMyNjIxWjAYMRYwFAYD VQQDEw02ODRiOWE1ZC0zYTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/HdfiHv1P91nJ5Ft4VbaOiP2YBEY/cNNlqGsAkC4wQXikYbsQSYXOvGcK5Z d0g4Xt9lW734pAKM8X88t/uBjMX62x9QP+BiWpi8178Bw8tHEq3cjZxJv7k68Rf9 7o3vtVGndm9muu9GkO9L4smNZd3C0HRW8UQJZD8anVj1lj5PrHg1F671HK2TPxVj aie0yKfHvA+kyokr07YKukROH+oL00j7hRfdvOlYkl7GKZrhHhqbWtju9jy85vok iHRX5VUmRpIKHvm2o6j0PJvthuiEPeHiYNigubqwpVx3++6ToGiwneQUlyv/gjxf f6ydEOJk3uHJhyFaFRaV5HHg5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwU345B KQovDMUZM9N20Tqlhgf4MB8GA1UdIwQYMBaAFDMY6HVBNkIeJEpsQd2l3swQ2o+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBDOC9DQzIzMzhEQzZF NTExMUVFQTQ3RTJCNzRDNEY5QUUwMi9NeGpvZFVFMlFoNGtTbXhCM2FYZXpCRGFq NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014am9kVUUyUWg0a1NteEIzYVhlekJEYWo0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTBDOC9DQzIzMzhEQzZFNTExMUVFQTQ3RTJCNzRDNEY5QUUwMi9NeGpvZFVFMlFo NGtTbXhCM2FYZXpCRGFqNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc4Q6U+JqtRxKPfMLpbEITRbZ7s2ALiiO76j+jsgoY4Wc0SFak4f2I tZ87g8YVKB4Fn7wmUoXwhx/elLxv+ZruVsWDvpIz4I4eDpbev4Qws2Q4p6u6Tw1J 308+nc81H4nlbJGdhnINrPpJjt2VNRSiOnI1uSPkOtOID0wNI6/dKU1Dh4nWLJTh QF8VoYuf4yJBK2QfqOQ/Zy2qIBGEtWECPgBEiqc7KfeuzXtN+qyTzDKFQDiJf8N4 uImdvLgJJCDbDMeiBFjpMZW3az/CU4ICTWv/oHQrfGq+xEGFoJhIwAnq/HEuVGjo wwZIt4/fIp0DsCYPV7Zy4mWZdLxJSaO/ -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:17 2025 by rpki-client