$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: RcwK2i8UBDwaReSzv/FTl9NpcAVbEXnh4JcoogPohtc= Subject key identifier: E4:98:54:CC:02:62:B8:7F:04:57:9E:83:C5:34:87:13:C8:52:2E:B9 Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 026B Signing time: Tue 17 Jun 2025 02:17:21 +0000 Manifest this update: Tue 17 Jun 2025 02:17:20 +0000 Manifest next update: Tue 24 Jun 2025 02:17:20 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: 4KoYcHb6hWuCJQ+EMrSNf5s70TToCfx7REgC819WbLw=) 2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: d1kPy/eiI5YE+DwwaFZQ8lzq73y437eEPrtNiOguvKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Validity Not Before: Jun 17 02:17:20 2025 GMT Not After : Jun 24 02:17:20 2025 GMT Subject: CN=6850d031-e548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:ee:67:45:eb:37:73:42:d7:12:fc:c7:70: ce:4a:0d:b8:3f:7d:ed:2f:47:3d:d2:ac:5a:80:d0: 51:54:f9:0e:5f:c3:54:99:f1:4d:c4:4e:d5:c0:a9: 3e:2b:8c:89:1f:89:83:5b:8e:fe:15:1f:f1:af:94: b4:86:8b:fb:80:40:d8:b8:df:5b:f2:fa:a4:7f:c8: ac:fb:9f:93:52:10:09:be:84:98:3a:8e:2d:40:1d: 83:18:d6:a3:53:6d:a6:02:48:64:16:c0:78:12:b2: 49:87:8f:93:e7:e4:c2:31:98:ba:63:39:3c:d9:69: a6:53:49:45:01:c8:1d:4f:40:c5:08:6a:70:94:9b: 6a:14:cd:fa:7b:54:4c:fe:ba:a0:5f:23:33:98:d5: ec:12:51:73:1b:11:9d:60:1b:fe:62:09:0d:06:44: d1:d8:ec:13:1e:8a:26:2e:f2:f0:d4:a1:f0:60:d6: e9:0f:f3:4f:ef:39:a7:8a:fd:60:64:cd:06:5a:db: 5d:48:b9:6f:13:d0:fb:40:84:f9:45:b0:10:4c:4d: a0:20:5d:dd:70:de:2b:64:77:03:0f:94:13:c6:ab: a7:40:7e:5e:ec:ee:ec:ff:19:62:28:17:ce:72:86: a0:41:ef:5a:e4:29:df:20:1f:31:9e:46:6b:7d:29: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:98:54:CC:02:62:B8:7F:04:57:9E:83:C5:34:87:13:C8:52:2E:B9 X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fe:f4:17:fe:45:f0:2b:6a:38:84:ef:46:0a:bc:ec:4b:67: f2:a5:4a:85:48:37:dd:2a:2b:49:fe:8c:27:67:83:23:cb:ae: 79:e9:36:0b:5f:07:ee:af:9f:fc:d6:eb:3c:d9:f2:05:c4:10: 6a:64:40:7a:3d:9c:eb:10:07:56:36:c2:11:e5:7e:35:a0:de: df:ec:14:0a:48:4f:9b:67:cd:79:19:a2:02:b4:75:95:53:e4: 41:bb:ef:b3:8e:20:f8:be:06:8e:3f:27:4f:cb:b3:a8:a5:6a: 35:95:9d:00:2f:3f:c2:58:14:f7:15:60:66:f4:99:2e:cf:9a: cf:48:bb:bc:d4:00:61:ea:52:f3:e4:27:04:01:4b:e1:15:3d: 4d:1e:aa:ff:fe:0a:aa:e5:65:b6:66:51:24:6b:e2:fe:cb:ed: 98:02:40:a7:bd:46:73:4c:48:a8:35:e1:50:b8:6c:c3:c1:19: 2a:bd:54:c3:92:ca:a4:52:fb:14:e3:f3:e4:31:d6:9c:c6:47: 16:21:aa:72:d3:a8:7d:e4:b2:74:13:37:61:72:36:cc:41:ae: 47:19:a1:87:48:c4:db:40:8c:22:e9:bd:9b:96:17:68:49:46: a2:d4:bb:2f:ca:f4:2d:30:90:cb:ff:42:51:81:9a:6d:ce:f5: e9:86:9a:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1 RjRGQzAxNTIwHhcNMjUwNjE3MDIxNzIwWhcNMjUwNjI0MDIxNzIwWjAYMRYwFAYD VQQDEw02ODUwZDAzMS1lNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuevuZ0XrN3NC1xL8x3DOSg24P33tL0c90qxagNBRVPkOX8NUmfFNxE7VwKk+ K4yJH4mDW47+FR/xr5S0hov7gEDYuN9b8vqkf8is+5+TUhAJvoSYOo4tQB2DGNaj U22mAkhkFsB4ErJJh4+T5+TCMZi6Yzk82WmmU0lFAcgdT0DFCGpwlJtqFM36e1RM /rqgXyMzmNXsElFzGxGdYBv+YgkNBkTR2OwTHoomLvLw1KHwYNbpD/NP7zmniv1g ZM0GWttdSLlvE9D7QIT5RbAQTE2gIF3dcN4rZHcDD5QTxqunQH5e7O7s/xliKBfO coagQe9a5CnfIB8xnkZrfSkB9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSYVMwC Yrh/BFeeg8U0hxPIUi65MB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl WHpxR0FYT0lXbVJmVDhBVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW/vQX/kXwK2o4hO9GCrzsS2fypUqFSDfdKitJ/ownZ4Mjy6556TYL Xwfur5/81us82fIFxBBqZEB6PZzrEAdWNsIR5X41oN7f7BQKSE+bZ815GaICtHWV U+RBu++zjiD4vgaOPydPy7OopWo1lZ0ALz/CWBT3FWBm9Jkuz5rPSLu81ABh6lLz 5CcEAUvhFT1NHqr//gqq5WW2ZlEka+L+y+2YAkCnvUZzTEioNeFQuGzDwRkqvVTD ksqkUvsU4/PkMdacxkcWIapy06h95LJ0EzdhcjbMQa5HGaGHSMTbQIwi6b2blhdo SUai1LsvyvQtMJDL/0JRgZptzvXphpqn -----END CERTIFICATE-----Generated at Thu Jun 19 00:15:22 2025 by rpki-client