$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft File: MpUupGGVY1bTd-vdS_oYcqjh5EM.mft (raw, json) Hash identifier: OpC7F9cduQd5ad4IrhYZOg4qfZTVbbE8tYM61gcJnpk= Subject key identifier: CD:41:BD:19:B9:3D:8B:E9:B2:01:A9:19:86:7D:30:0A:A6:A0:AF:FE Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 Certificate issuer: /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Certificate serial: 0ABA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft Manifest number: 0A9E Signing time: Fri 02 May 2025 19:44:23 +0000 Manifest this update: Fri 02 May 2025 19:44:22 +0000 Manifest next update: Fri 09 May 2025 19:44:22 +0000 Files and hashes: 1: MpUupGGVY1bTd-vdS_oYcqjh5EM.crl (hash: 3MPFKbuvHMV2Sgy78gRgs1bnLvJ7yM6HWiFydczfyBs=) 2: 77EDB752588311EA98A7C452C4F9AE02.roa (hash: 1xdS0of8jq6b+9XXSYhXqSMAsRL9VgQ5wBfYf2X41Dk=) 3: EF4B2E301CE411EB95E5A216C4F9AE02.roa (hash: hl/3X6BX11WafllMiNd1LQR2jHaTy4LdnM1ilVWB8H4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 19:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2746 (0xaba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443 Validity Not Before: May 2 19:44:22 2025 GMT Not After : May 9 19:44:22 2025 GMT Subject: CN=68152097-6abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:b2:27:38:43:8a:8c:b6:a2:41:4d:dc:63: 47:22:4d:8c:50:c9:31:b8:3f:e6:6f:00:6b:79:2f: 21:40:31:11:2a:d0:f1:f9:4e:51:bc:ed:fe:53:35: 2a:23:76:3b:e4:c7:e2:a6:89:85:1f:8e:0d:ce:a8: b4:d6:94:12:c8:7c:dd:2f:9a:e9:b4:a8:b5:dc:88: da:e6:27:3b:02:68:08:c3:8c:f5:d7:bf:3a:e2:ff: 52:fa:9e:44:1b:d4:f6:a8:9f:7d:b0:03:bb:b2:a6: bc:6d:3d:55:9e:84:b7:d5:07:b3:53:42:2c:a0:6b: 66:d9:85:9b:87:7f:e6:5f:7e:5e:e0:c0:a0:d4:83: 37:65:92:59:c6:14:1d:57:5b:45:79:09:af:99:b4: 0b:68:0a:74:35:cb:93:be:33:76:94:60:49:fc:05: c2:69:02:1c:e9:60:b9:ce:a7:6c:91:1f:c4:3f:2d: f5:9a:67:64:c6:03:4b:4a:73:64:c2:16:18:8a:7e: 0c:f5:5e:f7:5c:9f:ee:4d:35:3e:05:24:6f:26:af: e3:d7:94:0e:29:fa:b3:16:7a:69:34:eb:92:a3:28: 74:91:eb:d0:be:50:62:04:0c:d2:bd:00:41:c4:6f: a8:7f:9f:4a:6e:00:1f:3b:1e:7c:fc:29:62:8f:9a: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:41:BD:19:B9:3D:8B:E9:B2:01:A9:19:86:7D:30:0A:A6:A0:AF:FE X509v3 Authority Key Identifier: keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:5c:b9:12:b4:e6:b5:3c:b8:2d:ba:41:40:e9:f1:78:fa:d1: f3:48:ec:15:b8:85:33:2f:e2:51:77:85:1c:f9:77:43:e7:dd: 1b:fd:94:81:99:7e:42:f9:a5:c8:5b:1e:30:61:d1:69:ac:f6: 57:98:7a:63:2a:6c:cd:e2:1f:a1:85:41:b8:64:54:6d:14:e7: 67:b2:f0:e5:68:c3:2b:b0:52:bc:b8:cf:bf:73:ed:de:83:d1: f5:fd:02:3c:4d:72:6e:1d:97:1d:aa:9c:0d:a8:fe:bb:18:2b: ba:f3:0e:6d:6c:0b:53:0b:9c:89:24:6b:54:5e:9a:fd:d3:07: 03:88:46:e0:6b:3f:42:72:79:2d:f5:2a:a5:41:19:28:56:fc: fb:57:1c:be:d8:19:00:08:34:b7:c1:6c:eb:a4:2a:21:8f:f2: 37:c6:bc:5a:17:59:3d:a3:54:05:6a:93:d8:10:93:4a:c6:e9: 62:63:75:60:62:e7:7f:ae:1f:fb:7d:7e:19:9c:5e:7f:79:b2: 5e:f4:21:e4:c8:2d:3f:66:b2:18:b3:7d:11:f1:93:01:dd:b7: 77:25:0a:da:5d:6c:ad:fa:e4:80:c1:be:0b:19:fc:7d:e2:61: 78:01:5b:b9:92:6b:de:ae:6e:bd:06:32:60:e7:44:cb:01:f4: 77:c2:3e:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENEMkQxMTAvBgNVBAUTKDMyOTUyRUE0NjE5NTYzNTZEMzc3RUJERDRCRkExODcy QThFMUU0NDMwHhcNMjUwNTAyMTk0NDIyWhcNMjUwNTA5MTk0NDIyWjAYMRYwFAYD VQQDEw02ODE1MjA5Ny02YWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBmyJzhDioy2okFN3GNHIk2MUMkxuD/mbwBreS8hQDERKtDx+U5RvO3+UzUq I3Y75MfipomFH44Nzqi01pQSyHzdL5rptKi13Ija5ic7AmgIw4z117864v9S+p5E G9T2qJ99sAO7sqa8bT1VnoS31QezU0IsoGtm2YWbh3/mX35e4MCg1IM3ZZJZxhQd V1tFeQmvmbQLaAp0NcuTvjN2lGBJ/AXCaQIc6WC5zqdskR/EPy31mmdkxgNLSnNk whYYin4M9V73XJ/uTTU+BSRvJq/j15QOKfqzFnppNOuSoyh0kevQvlBiBAzSvQBB xG+of59KbgAfOx58/Clij5q5zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1BvRm5 PYvpsgGpGYZ9MAqmoK/+MB8GA1UdIwQYMBaAFDKVLqRhlWNW03fr3Uv6GHKo4eRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0QyRC85NEZGMUZCQzU4 ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkxYlRkLXZkU19vWWNxamg1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wVXVwR0dWWTFiVGQtdmRTX29ZY3FqaDVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0QyRC85NEZGMUZCQzU4ODIxMUVBOTVCNDdGNTFDNEY5QUUwMi9NcFV1cEdHVlkx YlRkLXZkU19vWWNxamg1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADXLkStOa1PLgtukFA6fF4+tHzSOwVuIUzL+JRd4Uc+XdD590b/ZSB mX5C+aXIWx4wYdFprPZXmHpjKmzN4h+hhUG4ZFRtFOdnsvDlaMMrsFK8uM+/c+3e g9H1/QI8TXJuHZcdqpwNqP67GCu68w5tbAtTC5yJJGtUXpr90wcDiEbgaz9Ccnkt 9SqlQRkoVvz7Vxy+2BkACDS3wWzrpCohj/I3xrxaF1k9o1QFapPYEJNKxuliY3Vg Yud/rh/7fX4ZnF5/ebJe9CHkyC0/ZrIYs30R8ZMB3bd3JQraXWyt+uSAwb4LGfx9 4mF4AVu5kmverm69BjJg50TLAfR3wj4o -----END CERTIFICATE-----Generated at Sat May 3 06:03:13 2025 by rpki-client