$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: YJb0xYyb60OTMXNQQWyutxJYcICgTh/z6T3Uam1BRmg= Subject key identifier: 85:9F:E1:E8:38:6E:11:44:B2:F6:DC:27:2B:1F:32:64:04:BD:13:9A Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 03A6 Signing time: Fri 25 Apr 2025 00:29:48 +0000 Manifest this update: Fri 25 Apr 2025 00:29:47 +0000 Manifest next update: Fri 02 May 2025 00:29:47 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: 4cnUw78OCedIoblhUBCLmBG/aLiI0XN/Cb/pKB7XYMk=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: iSf3pkGC+96IY56uEQF7L3VqZS/vgXaJcABFmCHB8cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Apr 25 00:29:47 2025 GMT Not After : May 2 00:29:47 2025 GMT Subject: CN=680ad77c-3157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:19:ad:39:78:74:b4:43:49:17:d5:71:e9:c9: 4d:0a:b7:07:02:08:6a:d9:4d:5b:1c:90:a0:f7:91: d0:26:54:72:3f:fc:9f:39:a7:90:53:d3:c3:2d:48: 1a:bf:80:68:67:63:fc:c5:4f:37:bc:1e:63:51:f1: f6:9c:e3:65:db:76:df:72:fa:09:ac:8d:79:fe:f5: 9a:6b:a0:a9:21:2a:52:17:45:df:ae:11:3b:cb:d6: 40:ff:7c:8a:01:e0:46:20:d9:0e:28:82:0e:b9:20: 40:fa:91:83:0f:ae:2a:01:bf:88:95:f1:25:c0:f1: 06:ff:52:da:b5:11:60:0c:c5:5f:3f:a0:7c:1d:23: 2e:16:96:50:b2:16:0f:eb:19:92:4d:1d:b6:c0:97: 53:9e:38:14:d2:a2:41:01:33:04:02:c4:13:56:85: 2f:2e:de:b4:1e:89:51:fb:85:6d:f8:25:2a:86:78: 5b:56:c4:2f:e9:2a:12:35:ce:20:4b:52:b1:a2:03: 89:ca:06:68:41:f7:93:a5:84:fb:43:09:46:8b:50: 18:e7:72:d8:81:d4:73:53:f1:ac:18:10:71:a1:e1: 47:1f:be:6f:e5:e6:ec:fa:4c:f4:f4:8e:df:34:90: ab:fb:cc:2a:ca:ea:ab:37:64:32:16:04:3b:ec:29: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9F:E1:E8:38:6E:11:44:B2:F6:DC:27:2B:1F:32:64:04:BD:13:9A X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:01:97:2a:ee:e9:6e:37:0e:c2:7f:48:98:7e:77:19:4d:eb: ef:a7:aa:b8:7a:ac:20:17:fc:76:a9:8a:20:30:45:d6:3a:02: e6:9e:36:64:95:60:f0:43:d2:87:07:2e:f7:33:e5:0f:82:ab: b0:57:bf:d6:c8:5d:4c:7d:3c:e5:e3:b6:31:25:05:44:e3:67: fe:3a:6a:bb:59:3e:a1:d5:d7:d9:e5:e5:e7:cb:df:ea:c3:ae: 39:7c:62:68:0c:af:ed:79:d5:70:3e:49:93:be:51:01:ad:8c: a7:9f:6f:2d:a1:05:7b:7e:70:30:ea:46:96:d1:14:38:04:3f: 6b:dd:3b:49:07:2d:01:b9:98:dc:db:06:1c:36:2f:e8:27:9f: 01:59:0e:5e:b3:6f:77:6e:bc:ec:58:40:4a:68:8a:12:57:36: 41:77:6d:b7:e9:cf:1f:d0:19:de:b2:35:50:a5:a8:22:e4:f8: 90:76:39:65:bb:0d:f0:f8:a7:9d:9d:10:cd:0a:90:de:b8:0f: d5:f7:3e:af:c1:00:36:b4:5a:8c:bc:58:01:e9:60:2b:bb:7d: fa:33:49:b1:b3:d2:e2:cd:53:b4:2f:a9:12:9b:c1:f1:af:38: 7c:f2:29:9c:4e:54:5e:f8:21:48:30:bd:14:89:3d:21:47:44: 38:52:06:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUwNDI1MDAyOTQ3WhcNMjUwNTAyMDAyOTQ3WjAYMRYwFAYD VQQDEw02ODBhZDc3Yy0zMTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xmtOXh0tENJF9Vx6clNCrcHAghq2U1bHJCg95HQJlRyP/yfOaeQU9PDLUga v4BoZ2P8xU83vB5jUfH2nONl23bfcvoJrI15/vWaa6CpISpSF0XfrhE7y9ZA/3yK AeBGINkOKIIOuSBA+pGDD64qAb+IlfElwPEG/1LatRFgDMVfP6B8HSMuFpZQshYP 6xmSTR22wJdTnjgU0qJBATMEAsQTVoUvLt60HolR+4Vt+CUqhnhbVsQv6SoSNc4g S1KxogOJygZoQfeTpYT7QwlGi1AY53LYgdRzU/GsGBBxoeFHH75v5ebs+kz09I7f NJCr+8wqyuqrN2QyFgQ77Clg1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWf4eg4 bhFEsvbcJysfMmQEvROaMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaAZcq7uluNw7Cf0iYfncZTevvp6q4eqwgF/x2qYogMEXWOgLmnjZk lWDwQ9KHBy73M+UPgquwV7/WyF1MfTzl47YxJQVE42f+Omq7WT6h1dfZ5eXny9/q w645fGJoDK/tedVwPkmTvlEBrYynn28toQV7fnAw6kaW0RQ4BD9r3TtJBy0BuZjc 2wYcNi/oJ58BWQ5es293brzsWEBKaIoSVzZBd2236c8f0BnesjVQpagi5PiQdjll uw3w+KednRDNCpDeuA/V9z6vwQA2tFqMvFgB6WAru336M0mxs9LizVO0L6kSm8Hx rzh88imcTlRe+CFIML0UiT0hR0Q4UgYJ -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:41 2025 by rpki-client