$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft File: MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json) Hash identifier: VGr0gictBLq/eSslPUtFfK+6FI5Dx16GKHMimziQOjQ= Subject key identifier: 35:E5:AB:61:A1:DC:FA:1C:CD:C2:04:95:05:4B:C2:8E:8B:9C:C4:A3 Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC Certificate issuer: /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Certificate serial: 18FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft Manifest number: 18F5 Signing time: Thu 24 Apr 2025 16:26:56 +0000 Manifest this update: Thu 24 Apr 2025 16:26:55 +0000 Manifest next update: Thu 01 May 2025 16:26:55 +0000 Files and hashes: 1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: x7cbsbXSoR3UVeQRzLO8Zr2Xj+PX9VCvndir1RB8sho=) 2: AE929D88823711E782F9A440C4F9AE02.roa (hash: sKS3rMJ6It6/rpeTWZ/r67AylRsKXL//6e7PLZw6fXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6399 (0x18ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5E3, serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC Validity Not Before: Apr 24 16:26:55 2025 GMT Not After : May 1 16:26:55 2025 GMT Subject: CN=680a6650-e02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:92:88:04:c7:e6:5a:d6:0e:f6:4f:3b:f2: 1b:20:e9:1c:02:a4:6c:43:be:6a:a9:16:fd:2b:a0: 44:47:09:33:31:09:03:9a:53:ea:d6:a5:4a:27:fd: 98:e5:d4:1e:11:02:fd:30:d1:da:76:c9:77:14:a3: 51:08:08:93:1d:f5:5b:5f:0c:9a:d2:52:25:af:ad: d1:c7:3f:cf:39:21:b1:a3:d9:61:b1:44:30:81:e4: 61:04:ef:b2:8d:9f:ba:2f:5c:cd:78:19:7e:9d:d7: 3b:27:88:82:48:00:44:cb:46:37:3a:36:be:27:e8: a3:97:e8:06:a7:e6:56:79:f0:a8:c6:3e:4d:9a:1c: de:4b:5b:61:87:b8:94:c6:13:2f:eb:4f:b2:e3:91: e0:c5:04:41:57:11:8c:91:af:80:5e:8d:e4:51:1b: 6d:f5:f4:a1:f9:57:76:3d:40:25:9f:5b:3e:81:6f: 41:5c:8c:af:58:59:42:29:6c:56:56:62:6c:1b:42: 31:74:6d:9d:00:97:a1:ff:6f:de:d4:1a:36:53:77: 38:c3:8f:be:df:e8:04:fd:b2:d9:2a:fc:6e:1b:2f: e7:df:f2:e4:25:53:b9:2b:db:5a:b2:1d:18:45:e7: 56:9c:13:11:c6:45:9a:6a:96:05:37:a8:11:ec:6a: 0f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E5:AB:61:A1:DC:FA:1C:CD:C2:04:95:05:4B:C2:8E:8B:9C:C4:A3 X509v3 Authority Key Identifier: keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:e5:8a:94:26:ac:74:3f:96:42:55:3c:8d:43:2b:fd:90:b2: 0b:57:cd:fa:e0:0f:24:41:73:4f:66:4f:dd:db:23:75:86:e1: f1:b2:95:71:ae:92:ce:f9:d2:59:79:1a:98:29:24:7f:38:7d: 2e:d7:07:4d:2e:a1:1f:d1:4d:8b:f7:3d:b6:42:e8:c9:74:99: c8:01:44:b6:ed:34:a6:04:14:42:9c:97:c6:f3:b2:4f:27:64: 4c:a4:b3:f9:85:f9:ef:25:31:b2:eb:d8:21:61:15:a8:81:20: ce:1f:ab:fe:35:9b:9d:33:01:c9:3a:82:99:f7:01:27:a0:ae: 65:be:fe:cc:8c:8d:bf:9d:7a:0d:c8:ed:36:6b:f6:0c:40:6b: 36:2a:93:4c:5c:06:3e:e5:43:c7:15:68:a3:08:a9:81:70:9a: 00:db:3c:5a:6a:68:f9:45:e2:a6:1e:de:6b:84:9b:7a:7f:bb: 2a:16:5e:e0:11:b1:67:6e:23:75:61:55:d9:a9:be:49:8c:9f: 5b:ce:1d:5f:4c:dd:cf:43:a6:a0:29:56:28:6b:3b:a6:27:4c: d0:29:d2:36:41:85:3c:41:ee:22:57:c2:3a:17:6b:01:6c:ab: 08:85:c7:f1:40:86:ac:77:d9:7b:22:ed:10:d1:58:e4:cd:cb: 12:e3:b0:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1RTMxMTAvBgNVBAUTKDMwQzA0MDc2MjlCQjRGOUZDRDgxNTQ4OUEzNzhEQzFB MzUzREFGRUMwHhcNMjUwNDI0MTYyNjU1WhcNMjUwNTAxMTYyNjU1WjAYMRYwFAYD VQQDEw02ODBhNjY1MC1lMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuseSiATH5lrWDvZPO/IbIOkcAqRsQ75qqRb9K6BERwkzMQkDmlPq1qVKJ/2Y 5dQeEQL9MNHadsl3FKNRCAiTHfVbXwya0lIlr63Rxz/POSGxo9lhsUQwgeRhBO+y jZ+6L1zNeBl+ndc7J4iCSABEy0Y3Oja+J+ijl+gGp+ZWefCoxj5NmhzeS1thh7iU xhMv60+y45HgxQRBVxGMka+AXo3kURtt9fSh+Vd2PUAln1s+gW9BXIyvWFlCKWxW VmJsG0IxdG2dAJeh/2/e1Bo2U3c4w4++3+gE/bLZKvxuGy/n3/LkJVO5K9tash0Y RedWnBMRxkWaapYFN6gR7GoP9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXlq2Gh 3PoczcIElQVLwo6LnMSjMB8GA1UdIwQYMBaAFDDAQHYpu0+fzYFUiaN43Bo1Pa/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVFMy9CNzA5QTVEQTgy MzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1X05nVlNKbzNqY0dqVTly LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NQkFkaW03VDVfTmdWU0pvM2pjR2pVOXItdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzVFMy9CNzA5QTVEQTgyMzUxMUU3OERCM0IxMzlDNEY5QUUwMi9NTUJBZGltN1Q1 X05nVlNKbzNqY0dqVTlyLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg5YqUJqx0P5ZCVTyNQyv9kLILV8364A8kQXNPZk/d2yN1huHxspVx rpLO+dJZeRqYKSR/OH0u1wdNLqEf0U2L9z22QujJdJnIAUS27TSmBBRCnJfG87JP J2RMpLP5hfnvJTGy69ghYRWogSDOH6v+NZudMwHJOoKZ9wEnoK5lvv7MjI2/nXoN yO02a/YMQGs2KpNMXAY+5UPHFWijCKmBcJoA2zxaamj5ReKmHt5rhJt6f7sqFl7g EbFnbiN1YVXZqb5JjJ9bzh1fTN3PQ6agKVYoazumJ0zQKdI2QYU8Qe4iV8I6F2sB bKsIhcfxQIasd9l7Iu0Q0VjkzcsS47Ct -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:31 2025 by rpki-client