$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft File: MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json) Hash identifier: kEnyvbPYeYUqf0SzN6D41YJlzI5xcdSBqI7X3CilxKE= Subject key identifier: 1D:08:7A:29:49:B2:77:DB:24:FE:63:BE:12:A7:77:43:AA:FA:D9:B0 Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC Certificate issuer: /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Certificate serial: 191A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft Manifest number: 1910 Signing time: Mon 16 Jun 2025 16:30:07 +0000 Manifest this update: Mon 16 Jun 2025 16:30:07 +0000 Manifest next update: Mon 23 Jun 2025 16:30:07 +0000 Files and hashes: 1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: VZSiIF7xqsZAjhFTc7nTqB5roQ2ytLD8DXK/jhFNVMo=) 2: AE929D88823711E782F9A440C4F9AE02.roa (hash: sKS3rMJ6It6/rpeTWZ/r67AylRsKXL//6e7PLZw6fXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6426 (0x191a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5E3, serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Validity Not Before: Jun 16 16:30:07 2025 GMT Not After : Jun 23 16:30:07 2025 GMT Subject: CN=6850468f-5ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e9:a1:f0:bb:bc:50:ba:a3:a6:71:a2:44:4a: 02:6d:d1:5d:86:c5:34:e0:1e:70:1d:2a:47:d8:d2: b3:0b:4e:67:82:70:17:55:89:f6:65:41:46:bb:a4: 74:35:29:6c:dd:7c:c5:37:60:64:52:3d:39:72:0b: da:de:60:00:20:d9:03:24:34:48:17:3b:50:f6:33: 26:f7:ca:30:a4:64:77:85:c2:8d:64:11:31:c5:90: 52:cc:c5:28:f6:78:3f:ab:1a:d4:09:13:b5:e0:5d: 4e:ff:d7:05:fd:e4:c9:f6:b2:42:c5:7c:c4:70:2d: 0b:4d:e7:a4:86:5f:32:92:d4:90:25:42:19:3b:5b: eb:0a:2f:9c:04:55:40:5a:e2:5d:5e:e3:ae:49:26: 0b:27:34:4d:be:90:25:4a:83:a4:fd:3f:3f:4f:fe: 0e:ce:79:55:85:66:f4:59:92:b5:00:60:62:f8:38: 51:d1:1c:ed:b6:1f:ae:03:8e:2d:24:82:c5:c3:6e: 8f:94:cc:b4:1d:5f:5a:15:33:0a:6a:22:97:dc:69: 06:f5:01:bd:83:c8:46:93:2c:50:7d:8f:a6:9b:9c: 58:39:c9:36:19:1a:81:df:9a:c6:5b:77:59:3c:0a: d3:10:32:42:02:13:7a:87:cf:4d:db:f0:f9:f8:3b: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:08:7A:29:49:B2:77:DB:24:FE:63:BE:12:A7:77:43:AA:FA:D9:B0 X509v3 Authority Key Identifier: keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:4c:c1:ab:3d:cd:37:5f:e9:04:d4:6b:15:bf:8b:75:e6:50: a2:9a:fe:1a:57:24:8e:cf:a4:d2:a1:51:8a:8a:12:d6:39:cf: cd:e5:36:6d:48:09:c0:71:93:46:52:6c:81:21:dd:26:a2:d1: e4:ff:d5:fa:95:74:7d:8c:5e:1d:4a:28:15:88:6b:6f:3a:0d: 7d:c0:11:80:03:3e:59:15:11:cd:5f:fa:6a:1a:54:35:21:a0: f9:7a:4c:64:0d:04:da:d6:71:93:1a:f7:0f:a5:fa:e8:5e:49: 3e:a0:0e:ee:2d:7d:83:23:4d:29:bf:12:a4:34:1e:cf:63:b9: 3a:57:ad:6a:9f:66:53:43:9c:6f:92:b9:7e:be:7f:c6:b4:0f: ea:5b:a8:d8:4d:74:01:ef:d5:ed:66:b4:35:83:2d:61:af:64: 0b:5b:2b:09:6a:01:0e:1d:48:2a:48:d1:87:45:34:3e:51:8e: 5f:af:96:0f:79:e0:91:f9:eb:bd:e7:3d:a1:fd:27:64:d9:da: 99:c7:c0:1c:46:fd:69:f2:03:bc:60:1a:2f:41:97:49:33:a2: 43:fd:74:ba:56:d3:b8:80:cb:9f:8d:3d:6b:c1:ad:c8:7e:85: 2c:1a:6e:75:83:5b:e1:d7:b7:0e:89:cb:9c:ce:2b:73:1f:43: 3a:03:79:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1RTMxMTAvBgNVBAUTKDMwQzA0MDc2MjlCQjRGOUZDRDgxNTQ4OUEzNzhEQzFB MzUzREFGRUMwHhcNMjUwNjE2MTYzMDA3WhcNMjUwNjIzMTYzMDA3WjAYMRYwFAYD VQQDEw02ODUwNDY4Zi01YmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+mh8Lu8ULqjpnGiREoCbdFdhsU04B5wHSpH2NKzC05ngnAXVYn2ZUFGu6R0 NSls3XzFN2BkUj05cgva3mAAINkDJDRIFztQ9jMm98owpGR3hcKNZBExxZBSzMUo 9ng/qxrUCRO14F1O/9cF/eTJ9rJCxXzEcC0LTeekhl8yktSQJUIZO1vrCi+cBFVA WuJdXuOuSSYLJzRNvpAlSoOk/T8/T/4OznlVhWb0WZK1AGBi+DhR0Rztth+uA44t JILFw26PlMy0HV9aFTMKaiKX3GkG9QG9g8hGkyxQfY+mm5xYOck2GRqB35rGW3dZ PArTEDJCAhN6h89N2/D5+DsdQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0IeilJ snfbJP5jvhKnd0Oq+tmwMB8GA1UdIwQYMBaAFDDAQHYpu0+fzYFUiaN43Bo1Pa/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVFMy9CNzA5QTVEQTgy MzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1X05nVlNKbzNqY0dqVTly LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NQkFkaW03VDVfTmdWU0pvM2pjR2pVOXItdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzVFMy9CNzA5QTVEQTgyMzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1 X05nVlNKbzNqY0dqVTlyLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjTMGrPc03X+kE1GsVv4t15lCimv4aVySOz6TSoVGKihLWOc/N5TZt SAnAcZNGUmyBId0motHk/9X6lXR9jF4dSigViGtvOg19wBGAAz5ZFRHNX/pqGlQ1 IaD5ekxkDQTa1nGTGvcPpfroXkk+oA7uLX2DI00pvxKkNB7PY7k6V61qn2ZTQ5xv krl+vn/GtA/qW6jYTXQB79XtZrQ1gy1hr2QLWysJagEOHUgqSNGHRTQ+UY5fr5YP eeCR+eu95z2h/Sdk2dqZx8AcRv1p8gO8YBovQZdJM6JD/XS6VtO4gMufjT1rwa3I foUsGm51g1vh17cOicuczitzH0M6A3l+ -----END CERTIFICATE-----Generated at Tue Jun 17 06:17:41 2025 by rpki-client