$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json) Hash identifier: 4Y9gMv+8m4DmRPVs6ZCYhxQxTQdEsRU6NvFAKoOyqWM= Subject key identifier: BB:12:B7:7A:00:00:3D:84:2C:6E:B6:97:5B:CC:06:24:47:3C:92:F2 Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft Manifest number: 012B Signing time: Fri 25 Apr 2025 03:42:32 +0000 Manifest this update: Fri 25 Apr 2025 03:42:32 +0000 Manifest next update: Fri 02 May 2025 03:42:32 +0000 Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: sqbh/Z8SZDGLd2LuJgahNLY8Zg1GdgcZEds0J+OHbww=) 2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: vLLtqJRwe55PLrIjKzUZV3hunL6I7HlofeTqMR4Wk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Validity Not Before: Apr 25 03:42:32 2025 GMT Not After : May 2 03:42:32 2025 GMT Subject: CN=680b04a8-6f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ad:f1:c5:34:8a:fd:a0:9c:42:bc:8e:c4:f8: 8f:22:e5:dc:da:ad:5e:65:8b:e4:53:69:dd:7a:bc: 60:10:1b:c1:86:89:13:95:2d:0a:20:6d:ba:3c:55: 20:9f:a3:88:c0:8b:3c:b6:58:92:69:f3:e2:3c:eb: b3:c9:67:40:e1:d8:cc:99:b5:b0:64:dd:61:51:fe: d2:2e:c6:e2:24:28:36:e5:32:22:70:b3:7f:54:2b: 61:81:93:65:72:51:2d:2e:79:ff:ba:80:61:74:df: d7:a5:da:7f:9c:50:0b:ac:99:20:76:70:3b:1c:f0: 84:be:6a:fa:0a:a3:07:ea:d2:67:b8:18:ab:58:c3: d3:2b:12:96:9a:34:4f:04:91:f8:8a:7e:a3:43:a9: 91:10:02:de:0a:06:5c:9f:88:dd:50:98:06:63:ab: 91:8c:d1:96:01:eb:46:a2:f0:ee:6a:20:18:93:96: aa:37:91:5f:31:78:a9:0a:70:69:5f:ef:68:e9:c2: 17:bd:d0:87:05:65:e1:4d:9b:b9:c7:5d:25:6c:c5: 81:7e:4d:83:82:32:04:ce:fe:ad:8a:b4:c1:1c:eb: 8b:d4:b1:5e:95:65:e7:ce:00:04:2c:a7:b4:c2:ab: 16:2b:b7:51:58:ff:ff:13:df:cb:88:e6:90:76:2f: 2b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:12:B7:7A:00:00:3D:84:2C:6E:B6:97:5B:CC:06:24:47:3C:92:F2 X509v3 Authority Key Identifier: keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:63:66:b7:18:69:43:f2:83:0f:74:bf:45:a1:2c:ba:e6:09: ea:70:ec:6e:8d:29:e0:b5:52:c1:80:0c:6a:a3:ed:20:c6:6b: a8:08:59:bb:32:85:94:85:48:8f:8e:76:84:9a:7d:15:40:71: fd:79:ed:cf:5c:9b:86:4b:0b:c2:76:f1:91:be:8f:41:0d:ef: f6:1b:80:5e:8f:e1:57:d8:b5:68:88:45:6e:2f:8b:7e:ea:a5: 6d:7d:a5:3a:38:0f:1c:f2:79:e1:58:c1:b0:5d:c2:4a:45:fb: d4:d7:7a:9a:f2:d9:83:73:38:58:30:76:2f:5f:c2:82:89:22: e5:94:4e:8b:3d:ab:90:02:67:34:8d:4c:c1:8f:b9:a4:71:dd: 5f:1c:65:44:4d:21:20:24:23:47:ab:ff:d1:ea:bb:1e:f7:f3: 82:15:7e:de:03:ed:2f:75:d7:b1:9b:40:5e:0d:c8:a0:4d:46: ca:7c:c7:54:d7:71:c3:af:c2:9b:2a:e0:13:4c:52:d0:0e:87: c0:8a:7f:53:a8:22:b2:1e:c8:56:ea:dd:8a:76:67:ef:ac:b5: 05:2a:3f:e3:5b:1a:d1:78:54:e0:60:ac:be:b1:d9:86:29:a4: 2f:4e:ad:de:48:5a:1b:9d:54:31:e1:1f:f6:ff:6f:cf:a9:a1: 13:09:86:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFMUUxMTAvBgNVBAUTKDMwMTRERDM4N0IxN0YzMzg4NzNBMkE3QTM3RjgyNDRE OTM3MDJFQTgwHhcNMjUwNDI1MDM0MjMyWhcNMjUwNTAyMDM0MjMyWjAYMRYwFAYD VQQDEw02ODBiMDRhOC02ZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA763xxTSK/aCcQryOxPiPIuXc2q1eZYvkU2nderxgEBvBhokTlS0KIG26PFUg n6OIwIs8tliSafPiPOuzyWdA4djMmbWwZN1hUf7SLsbiJCg25TIicLN/VCthgZNl clEtLnn/uoBhdN/Xpdp/nFALrJkgdnA7HPCEvmr6CqMH6tJnuBirWMPTKxKWmjRP BJH4in6jQ6mREALeCgZcn4jdUJgGY6uRjNGWAetGovDuaiAYk5aqN5FfMXipCnBp X+9o6cIXvdCHBWXhTZu5x10lbMWBfk2DgjIEzv6tirTBHOuL1LFelWXnzgAELKe0 wqsWK7dRWP//E9/LiOaQdi8rIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsSt3oA AD2ELG62l1vMBiRHPJLyMB8GA1UdIwQYMBaAFDAU3Th7F/M4hzoqejf4JE2TcC6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkUxRS8yNzg4MTdDMDVD MTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6aUhPaXA2Tl9na1RaTndM cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CVGRPSHNYOHppSE9pcDZOX2drVFpOd0xxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkUxRS8yNzg4MTdDMDVDMTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6 aUhPaXA2Tl9na1RaTndMcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwY2a3GGlD8oMPdL9FoSy65gnqcOxujSngtVLBgAxqo+0gxmuoCFm7 MoWUhUiPjnaEmn0VQHH9ee3PXJuGSwvCdvGRvo9BDe/2G4Bej+FX2LVoiEVuL4t+ 6qVtfaU6OA8c8nnhWMGwXcJKRfvU13qa8tmDczhYMHYvX8KCiSLllE6LPauQAmc0 jUzBj7mkcd1fHGVETSEgJCNHq//R6rse9/OCFX7eA+0vddexm0BeDcigTUbKfMdU 13HDr8KbKuATTFLQDofAin9TqCKyHshW6t2KdmfvrLUFKj/jWxrReFTgYKy+sdmG KaQvTq3eSFobnVQx4R/2/2/PqaETCYbQ -----END CERTIFICATE-----Generated at Sat Apr 26 17:16:24 2025 by rpki-client