$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: PoJ3SeZznl782K/OojyfrN+Ze6kmkQBDTlDNvu9w2Wo= Subject key identifier: 91:A2:04:BD:03:9A:01:B4:68:B6:2B:2A:B0:46:BB:98:3C:A9:C2:6D Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 0234 Signing time: Fri 25 Apr 2025 02:34:42 +0000 Manifest this update: Fri 25 Apr 2025 02:34:41 +0000 Manifest next update: Fri 02 May 2025 02:34:41 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: gW5czkDfu4e6DGe3fqfNYVOTPBjzszqB8CcwUa/cd8s=) 2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: my2I25rVWAI3mCpxgHNM4W2V83/AlwvIt+xbjzG24Hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Validity Not Before: Apr 25 02:34:41 2025 GMT Not After : May 2 02:34:41 2025 GMT Subject: CN=680af4c1-466a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:32:92:21:c3:6a:e7:e6:c2:24:1a:a9:52: db:1a:02:54:61:b8:7e:d0:1d:41:c8:33:e5:67:81: 9c:04:5d:05:1b:bf:1a:fa:c6:fc:84:50:c9:8d:66: aa:d8:89:65:dd:e7:10:8f:b4:8c:48:6d:c9:e0:99: e5:c7:39:f7:df:c3:59:e7:24:0f:69:18:80:da:63: ef:ea:f4:96:26:34:ed:8f:eb:bd:a0:c5:9f:71:91: ab:b9:6f:a7:1d:7e:26:fa:ab:b9:42:86:60:b7:b7: 13:e4:c0:66:1b:6c:eb:b6:8c:d2:cc:e2:1d:df:a2: 2c:6c:d6:7a:7c:a3:9b:1e:04:68:52:af:9f:3e:f5: 25:70:17:a3:07:81:9b:c7:a9:4f:f6:86:17:95:01: b0:49:64:16:93:fa:41:05:a0:74:d8:f0:08:15:0f: e3:96:f9:a3:c5:3c:cd:ec:10:d3:93:4b:c0:c7:23: 1e:79:52:e8:d2:02:98:04:c5:de:fc:a6:a4:74:7f: 5f:4b:aa:0a:8f:23:7c:f4:62:dc:39:78:1c:6f:0e: 62:67:0a:8a:14:d9:94:67:15:63:67:26:1e:13:5b: 1f:6d:ba:8c:47:e3:ce:86:6a:d9:7b:28:ec:bb:c8: 0d:e0:fd:91:e1:7f:2c:3d:21:a3:d6:1c:4b:7f:25: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A2:04:BD:03:9A:01:B4:68:B6:2B:2A:B0:46:BB:98:3C:A9:C2:6D X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:60:47:7a:b8:37:5d:60:42:59:be:b7:60:ca:43:a9:cf:1e: c6:48:cf:06:89:90:5b:7d:5f:ad:e2:66:a0:70:92:56:59:5a: e6:ea:6c:15:18:38:7c:62:ed:37:d0:ce:fd:e9:de:2d:80:0f: 2a:8c:62:e6:45:bd:ac:ac:29:52:e3:eb:05:13:f6:48:21:51: c4:28:89:2e:b1:2f:75:1a:43:5a:c2:8e:d4:42:7e:44:d9:a7: 6e:0a:5d:84:3d:a9:6b:5e:82:7a:7d:67:26:0e:c8:36:30:3c: 93:2f:1c:fa:62:58:29:03:a8:76:d9:11:96:7c:94:5e:c0:dd: 3a:85:07:eb:5c:7a:12:3b:eb:79:67:25:59:62:8b:b2:27:7f: 94:39:d7:44:3a:eb:8e:e2:ec:b4:d0:48:b5:03:de:0d:85:ac: ad:6b:67:6a:b5:10:f2:a8:e0:f2:2e:56:f2:fb:ff:40:cf:58: 20:f8:68:c6:98:19:ae:5c:91:26:25:4b:a1:4d:c4:6b:ab:ae: ed:52:6c:1c:fe:40:30:a1:c7:33:3b:93:22:40:7a:57:35:d1: 7b:b3:65:28:45:16:4b:74:21:c2:fe:bc:3f:d0:5e:e5:66:72: 08:89:f1:81:fd:a9:46:93:ad:09:a4:f0:e4:f0:64:6c:c4:13: 1b:ef:95:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1 RjRGQzAxNTIwHhcNMjUwNDI1MDIzNDQxWhcNMjUwNTAyMDIzNDQxWjAYMRYwFAYD VQQDEw02ODBhZjRjMS00NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4AykiHDaufmwiQaqVLbGgJUYbh+0B1ByDPlZ4GcBF0FG78a+sb8hFDJjWaq 2Ill3ecQj7SMSG3J4Jnlxzn338NZ5yQPaRiA2mPv6vSWJjTtj+u9oMWfcZGruW+n HX4m+qu5QoZgt7cT5MBmG2zrtozSzOId36IsbNZ6fKObHgRoUq+fPvUlcBejB4Gb x6lP9oYXlQGwSWQWk/pBBaB02PAIFQ/jlvmjxTzN7BDTk0vAxyMeeVLo0gKYBMXe /KakdH9fS6oKjyN89GLcOXgcbw5iZwqKFNmUZxVjZyYeE1sfbbqMR+POhmrZeyjs u8gN4P2R4X8sPSGj1hxLfyW6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGiBL0D mgG0aLYrKrBGu5g8qcJtMB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl WHpxR0FYT0lXbVJmVDhBVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIYEd6uDddYEJZvrdgykOpzx7GSM8GiZBbfV+t4magcJJWWVrm6mwV GDh8Yu030M796d4tgA8qjGLmRb2srClS4+sFE/ZIIVHEKIkusS91GkNawo7UQn5E 2aduCl2EPalrXoJ6fWcmDsg2MDyTLxz6YlgpA6h22RGWfJRewN06hQfrXHoSO+t5 ZyVZYouyJ3+UOddEOuuO4uy00Ei1A94Nhayta2dqtRDyqODyLlby+/9Az1gg+GjG mBmuXJEmJUuhTcRrq67tUmwc/kAwocczO5MiQHpXNdF7s2UoRRZLdCHC/rw/0F7l ZnIIifGB/alGk60JpPDk8GRsxBMb75UC -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:25 2025 by rpki-client