$ rpki-client -vvf rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft File: MxjodUE2Qh4kSmxB3aXezBDaj4E.mft (raw, json) Hash identifier: TY9MPqHTkgyu+Qw32R9lvJEeR/B3VX83RJfB7hg21bE= Subject key identifier: 38:66:94:F4:36:4F:74:56:4C:4C:AC:9F:D5:BD:D7:B2:09:B9:7D:1E Authority key identifier: 33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 Certificate issuer: /CN=A91490C8/serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft Manifest number: 011C Signing time: Fri 25 Apr 2025 03:51:01 +0000 Manifest this update: Fri 25 Apr 2025 03:51:01 +0000 Manifest next update: Fri 02 May 2025 03:51:01 +0000 Files and hashes: 1: MxjodUE2Qh4kSmxB3aXezBDaj4E.crl (hash: 4uW1tGsKymFwkUc3SE70BDCZ00rJIAXZxXX8T8BD1lg=) 2: 2201EFC86E5211EEB027A974C4F9AE02.roa (hash: 4nQ3/xG4CFEbotiusShRvyeKgM0UbijAal8OSC/u9HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490C8, serialNumber=3318E8754136421E244A6C41DDA5DECC10DA8F81 Validity Not Before: Apr 25 03:51:01 2025 GMT Not After : May 2 03:51:01 2025 GMT Subject: CN=680b06a5-f093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:8d:cc:74:c0:7f:e6:0f:6d:c8:68:88:26: 7c:f9:1b:2c:86:83:47:8c:64:f7:86:d0:f7:1e:14: d4:34:87:9b:44:3d:6b:60:f8:bb:ca:d3:33:43:58: d8:4e:10:02:40:76:52:e5:bd:ab:43:95:f2:6c:2d: 77:09:d6:22:f8:0e:44:a7:7b:d0:af:80:82:a3:99: a1:ab:ed:ac:b3:b7:4e:48:7a:01:4d:c8:eb:22:37: 0f:5a:a1:e2:45:17:20:6f:7e:1a:35:53:d2:92:a8: da:b1:3f:55:55:f3:49:2d:0f:ac:ef:cc:30:11:9b: 4c:86:4c:7e:84:07:cc:32:56:35:0e:aa:43:69:85: 01:ea:44:a5:4b:26:ae:7c:79:3a:46:01:b5:94:52: 1e:3c:2e:0e:62:90:16:1e:d0:e9:99:2f:96:f5:ec: a7:e2:3d:39:e4:89:8b:86:e7:95:1a:c0:05:46:2d: 2e:bb:db:4d:fc:2b:fd:b5:ac:b7:31:b7:72:fa:23: c9:01:29:b5:80:1f:c1:28:90:a3:5b:8f:85:6e:96: 9b:7a:7d:77:9f:03:63:26:49:f8:3f:93:16:90:e6: c3:69:05:b1:ce:91:0a:f5:3f:9f:e4:b0:33:e2:81: 00:55:35:00:bd:5d:0b:37:ee:76:29:ba:8f:71:43: 73:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:66:94:F4:36:4F:74:56:4C:4C:AC:9F:D5:BD:D7:B2:09:B9:7D:1E X509v3 Authority Key Identifier: keyid:33:18:E8:75:41:36:42:1E:24:4A:6C:41:DD:A5:DE:CC:10:DA:8F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxjodUE2Qh4kSmxB3aXezBDaj4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490C8/CC2338DC6E5111EEA47E2B74C4F9AE02/MxjodUE2Qh4kSmxB3aXezBDaj4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8a:d0:f6:fe:79:fb:8d:84:15:a6:1e:19:f6:26:45:af:5c: ca:65:00:9e:5f:a2:e5:80:ee:bf:72:29:53:e1:c9:e9:c6:d6: 97:37:f8:e2:c1:d7:b8:41:bf:fc:70:be:9b:b0:e3:b3:98:4c: ad:e5:fc:87:56:89:f5:0d:52:59:46:e8:41:3d:70:64:14:62: 0c:36:7b:92:69:3a:7b:2d:0a:21:3d:da:0c:8f:86:c7:01:ce: 65:4b:51:6d:b3:44:22:af:b6:41:22:09:65:38:af:df:78:43: ae:40:9e:a8:a0:dc:c0:1f:c5:55:b1:43:71:aa:5c:2a:fc:15: 41:ee:ee:36:ba:a8:76:f0:7f:67:46:33:1d:5e:6c:23:50:24: d7:b7:2c:ca:f1:80:b8:b6:e8:6e:6a:3d:98:cc:62:57:20:18: 84:84:a3:34:3f:25:2d:8b:be:99:5c:a8:ca:7a:8a:8b:0c:11: 28:43:6c:82:85:3f:bc:70:15:4c:97:d3:51:07:cf:b6:39:b0: ab:c2:a2:7f:69:c3:b2:3a:39:8d:f7:e7:c7:f9:c3:3d:87:21: a6:db:46:f9:54:68:4f:41:f5:01:80:30:f8:80:b0:c1:a0:ef: 08:98:b0:8e:33:69:1f:19:b2:99:a5:09:2e:4c:8e:0b:dd:87: 94:69:bf:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwQzgxMTAvBgNVBAUTKDMzMThFODc1NDEzNjQyMUUyNDRBNkM0MUREQTVERUND MTBEQThGODEwHhcNMjUwNDI1MDM1MTAxWhcNMjUwNTAyMDM1MTAxWjAYMRYwFAYD VQQDEw02ODBiMDZhNS1mMDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPyNzHTAf+YPbchoiCZ8+RsshoNHjGT3htD3HhTUNIebRD1rYPi7ytMzQ1jY ThACQHZS5b2rQ5XybC13CdYi+A5Ep3vQr4CCo5mhq+2ss7dOSHoBTcjrIjcPWqHi RRcgb34aNVPSkqjasT9VVfNJLQ+s78wwEZtMhkx+hAfMMlY1DqpDaYUB6kSlSyau fHk6RgG1lFIePC4OYpAWHtDpmS+W9eyn4j055ImLhueVGsAFRi0uu9tN/Cv9tay3 Mbdy+iPJASm1gB/BKJCjW4+Fbpaben13nwNjJkn4P5MWkObDaQWxzpEK9T+f5LAz 4oEAVTUAvV0LN+52KbqPcUNzJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhmlPQ2 T3RWTEysn9W917IJuX0eMB8GA1UdIwQYMBaAFDMY6HVBNkIeJEpsQd2l3swQ2o+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBDOC9DQzIzMzhEQzZF NTExMUVFQTQ3RTJCNzRDNEY5QUUwMi9NeGpvZFVFMlFoNGtTbXhCM2FYZXpCRGFq NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014am9kVUUyUWg0a1NteEIzYVhlekJEYWo0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTBDOC9DQzIzMzhEQzZFNTExMUVFQTQ3RTJCNzRDNEY5QUUwMi9NeGpvZFVFMlFo NGtTbXhCM2FYZXpCRGFqNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPitD2/nn7jYQVph4Z9iZFr1zKZQCeX6LlgO6/cilT4cnpxtaXN/ji wde4Qb/8cL6bsOOzmEyt5fyHVon1DVJZRuhBPXBkFGIMNnuSaTp7LQohPdoMj4bH Ac5lS1Fts0Qir7ZBIgllOK/feEOuQJ6ooNzAH8VVsUNxqlwq/BVB7u42uqh28H9n RjMdXmwjUCTXtyzK8YC4tuhuaj2YzGJXIBiEhKM0PyUti76ZXKjKeoqLDBEoQ2yC hT+8cBVMl9NRB8+2ObCrwqJ/acOyOjmN9+fH+cM9hyGm20b5VGhPQfUBgDD4gLDB oO8ImLCOM2kfGbKZpQkuTI4L3YeUab/Q -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:38 2025 by rpki-client