$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: mesrm3V/HM0FsPtdUGROhaQI8VP+7RZ38CYD7OIG1zQ= Subject key identifier: 42:92:E8:6F:FC:58:C5:36:ED:B5:41:EA:4D:F6:0F:1C:D9:E9:2A:32 Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0C1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0C10 Signing time: Thu 24 Apr 2025 18:36:13 +0000 Manifest this update: Thu 24 Apr 2025 18:36:12 +0000 Manifest next update: Thu 01 May 2025 18:36:12 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: E7w96lqmjARck2qhY8SACnmT4V35uxVpZY98OCrQPX8=) 2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: WnCn74CsMDLUDoWgKsd58XNjQZ+24XZ7nmffYeANshI=) 3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: P2hK1V8n6283lOYlU0zk/lZoroeJfCtrYMgaRe8W0vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3099 (0xc1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Validity Not Before: Apr 24 18:36:12 2025 GMT Not After : May 1 18:36:12 2025 GMT Subject: CN=680a849c-2f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:3f:b7:e2:5c:2a:6f:95:6d:67:52:b2:d2: 44:64:fc:21:24:45:3c:24:61:08:b8:09:b5:c4:6a: d0:05:01:32:4e:10:cd:c7:55:a5:a3:b5:4c:61:0d: ec:00:ca:0b:17:81:02:fc:66:39:4a:32:69:2b:26: 1d:32:90:6a:90:1d:b0:28:41:07:62:99:5a:2e:71: 4d:ba:cc:38:41:bb:cf:d8:c9:e6:4e:10:c8:a9:e1: 4c:90:01:83:62:f9:3d:b3:fd:8b:e0:17:df:f5:48: 1e:9e:d5:79:74:c3:c4:1c:a0:73:06:8b:85:d3:93: ab:57:66:a7:99:fb:de:10:d9:69:25:5d:37:2d:75: 7c:2e:4b:ff:ed:03:30:fe:5d:ee:34:c1:08:c2:0e: 83:33:1f:aa:24:2f:5c:83:8b:53:22:07:f2:60:10: db:91:7a:26:ae:2a:16:6a:28:3e:ba:a2:ff:6f:de: 49:9b:7d:af:ab:3c:fa:52:24:f2:30:d9:aa:8f:73: 91:35:8b:29:a1:af:1a:f4:88:17:cc:84:f8:df:27: 78:9c:9a:27:58:22:db:88:25:3f:85:51:5a:7f:6b: 70:67:9a:8f:a4:5d:74:10:9b:cf:c8:fb:07:6a:70: ee:d9:01:d2:ec:ab:6d:a2:f7:68:10:89:37:29:95: d0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:E8:6F:FC:58:C5:36:ED:B5:41:EA:4D:F6:0F:1C:D9:E9:2A:32 X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ef:14:29:fa:4b:0a:b3:04:43:de:92:ca:67:10:b6:f8:8a: 18:ce:ed:a5:52:c3:9b:af:1b:73:21:e8:6e:fe:ab:1f:d3:0d: 85:75:8b:07:45:2f:55:2e:8b:46:e3:94:df:7a:d9:21:05:9b: f3:02:51:9d:2f:5d:f1:36:02:96:a2:4c:62:90:83:21:18:9c: 9f:d8:fe:b3:a2:47:b2:bf:2c:93:8a:b6:e9:89:4f:d4:f8:b8: cb:9c:a7:da:18:8f:b9:d1:77:76:ff:4f:97:17:ca:7b:fd:d5: 8c:ff:58:e8:71:46:80:17:4a:9a:4b:5b:67:6e:da:f5:ad:c3: 77:17:d9:f4:b0:dd:21:7b:57:fa:b1:e5:3b:7f:aa:b8:6e:e8: 05:dc:63:f1:ad:3d:b8:f3:58:3b:1c:65:77:ab:67:c9:b8:b6: 98:35:a0:40:1b:3e:4d:80:49:d0:1b:a8:77:32:ea:8e:35:c1: 26:15:e7:3a:99:89:b3:be:fb:d5:f8:09:2f:4a:ec:6f:9c:3d: b3:af:ea:05:6a:fd:e7:4b:91:03:b1:ef:72:e4:bd:f4:b2:fa: 36:54:47:46:5b:29:63:05:44:e2:2f:aa:b4:88:1c:d2:13:19: a3:f9:1f:bc:ad:d5:06:8e:b5:8b:17:8e:76:37:a8:f1:24:9c: 65:37:08:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjUwNDI0MTgzNjEyWhcNMjUwNTAxMTgzNjEyWjAYMRYwFAYD VQQDEw02ODBhODQ5Yy0yZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYY/t+JcKm+VbWdSstJEZPwhJEU8JGEIuAm1xGrQBQEyThDNx1Wlo7VMYQ3s AMoLF4EC/GY5SjJpKyYdMpBqkB2wKEEHYplaLnFNusw4QbvP2MnmThDIqeFMkAGD Yvk9s/2L4Bff9UgentV5dMPEHKBzBouF05OrV2anmfveENlpJV03LXV8Lkv/7QMw /l3uNMEIwg6DMx+qJC9cg4tTIgfyYBDbkXomrioWaig+uqL/b95Jm32vqzz6UiTy MNmqj3ORNYspoa8a9IgXzIT43yd4nJonWCLbiCU/hVFaf2twZ5qPpF10EJvPyPsH anDu2QHS7KttovdoEIk3KZXQ2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKS6G/8 WMU27bVB6k32DxzZ6SoyMB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh7xQp+ksKswRD3pLKZxC2+IoYzu2lUsObrxtzIehu/qsf0w2FdYsH RS9VLotG45TfetkhBZvzAlGdL13xNgKWokxikIMhGJyf2P6zokeyvyyTirbpiU/U +LjLnKfaGI+50Xd2/0+XF8p7/dWM/1jocUaAF0qaS1tnbtr1rcN3F9n0sN0he1f6 seU7f6q4bugF3GPxrT2481g7HGV3q2fJuLaYNaBAGz5NgEnQG6h3MuqONcEmFec6 mYmzvvvV+AkvSuxvnD2zr+oFav3nS5EDse9y5L30svo2VEdGWyljBUTiL6q0iBzS Exmj+R+8rdUGjrWLF452N6jxJJxlNwgX -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:53 2025 by rpki-client