$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: 3YY3a7I6FnBR3Zob2NyEbGpckLsvM1KIad/lR0+Xons= Subject key identifier: 97:E3:3E:BC:46:A4:65:EA:E8:8F:34:3D:02:AE:A4:5D:7A:8D:B6:AF Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: 01A2 Signing time: Sun 15 Jun 2025 02:34:01 +0000 Manifest this update: Sun 15 Jun 2025 02:34:01 +0000 Manifest next update: Sun 22 Jun 2025 02:34:01 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: NJUsfACs6l8K99wrUdD94W/cjjvhQWm+n1I4tOM+f44=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: QOfAhP3S+ePBd5bLXcD9SSvstPxykfxAtUO9d7xqQdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: Jun 15 02:34:01 2025 GMT Not After : Jun 22 02:34:01 2025 GMT Subject: CN=684e3119-22ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:bb:51:37:e6:f3:c1:cd:82:29:7b:81:57: 7a:10:e0:58:bb:9d:c5:ec:0e:d8:e1:ee:20:c8:12: 77:46:9b:b3:ad:17:1f:52:3c:ff:86:be:45:ee:4f: a5:cd:5e:7b:58:44:1d:9b:cc:c0:6c:a0:76:29:45: 40:25:3e:54:63:c9:b9:c0:c2:58:34:a1:fd:e2:55: 3e:dc:a9:40:cc:fa:55:23:67:b0:a8:a4:12:68:97: d2:a6:28:3c:b2:46:f7:2c:75:03:3f:41:38:a0:41: e9:74:74:52:b3:41:1d:df:82:12:cf:ce:8a:af:77: 7b:9b:cb:df:a4:39:e8:26:7e:77:00:5c:5a:7d:a5: 97:62:7e:c3:d6:49:7f:77:99:0e:e2:cd:b2:ea:8b: 87:df:39:31:e7:31:01:27:2f:26:77:68:ec:b0:d0: 86:bc:16:87:7a:b5:9c:bf:94:52:b0:20:83:f2:7d: a8:67:87:75:08:a4:7b:37:29:ce:9f:eb:19:19:b9: 21:ca:da:6e:e8:f5:64:c7:26:b2:4f:9b:9e:cd:ca: ea:5f:22:d6:e1:d3:4b:c1:b6:9d:ef:0c:4b:17:9c: cc:4c:77:69:37:45:88:cb:ea:1e:2c:37:0e:e2:60: 59:23:9b:6e:63:28:3a:84:ce:33:95:30:1a:6b:d1: 3e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E3:3E:BC:46:A4:65:EA:E8:8F:34:3D:02:AE:A4:5D:7A:8D:B6:AF X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a7:c9:98:4c:84:8e:9e:c8:1d:eb:63:f8:54:82:79:d5:77: d9:89:c7:91:29:a3:66:ac:d2:84:f6:d1:8c:cb:72:87:48:e0: e6:88:10:f2:dd:9f:76:cd:7e:97:38:68:ae:d6:b1:cd:64:84: ca:a5:80:cb:72:26:03:c8:98:dc:eb:d4:af:d7:74:8f:a8:ce: 4f:54:22:ae:aa:c6:7f:4e:42:0f:43:2e:fa:21:dd:4b:03:54: 22:d8:6f:7c:fe:7f:df:2f:cf:8f:ca:96:d0:bc:76:26:83:0b: 96:5c:fe:a0:d1:d7:39:00:6e:d0:66:e0:bd:12:1c:6c:9d:62: 32:5b:15:ab:2d:27:55:b2:c3:0f:ba:07:8d:1b:18:b0:1c:74: 09:54:f0:a7:3b:23:b8:62:21:7e:4f:df:c5:17:b8:96:e6:bd: 4f:5d:d8:44:c2:6b:d9:c0:d2:1e:1b:63:6f:12:2e:5f:65:1e: 93:f2:3c:a8:e0:ac:cb:0a:69:cb:70:a8:9b:cd:50:19:8b:6f: ee:8b:86:33:04:ad:b7:d4:a9:d7:e7:66:c9:72:38:8b:21:84: 79:69:a7:42:83:d4:d6:97:23:33:42:d7:92:b1:3f:f8:d7:fc: 27:18:88:3f:9b:a3:bb:de:76:53:39:5c:3e:a6:16:23:e3:2f: 62:81:c5:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjUwNjE1MDIzNDAxWhcNMjUwNjIyMDIzNDAxWjAYMRYwFAYD VQQDEw02ODRlMzExOS0yMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSa7UTfm88HNgil7gVd6EOBYu53F7A7Y4e4gyBJ3RpuzrRcfUjz/hr5F7k+l zV57WEQdm8zAbKB2KUVAJT5UY8m5wMJYNKH94lU+3KlAzPpVI2ewqKQSaJfSpig8 skb3LHUDP0E4oEHpdHRSs0Ed34ISz86Kr3d7m8vfpDnoJn53AFxafaWXYn7D1kl/ d5kO4s2y6ouH3zkx5zEBJy8md2jssNCGvBaHerWcv5RSsCCD8n2oZ4d1CKR7NynO n+sZGbkhytpu6PVkxyayT5uezcrqXyLW4dNLwbad7wxLF5zMTHdpN0WIy+oeLDcO 4mBZI5tuYyg6hM4zlTAaa9E+OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfjPrxG pGXq6I80PQKupF16jbavMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQp8mYTISOnsgd62P4VIJ51XfZiceRKaNmrNKE9tGMy3KHSODmiBDy 3Z92zX6XOGiu1rHNZITKpYDLciYDyJjc69Sv13SPqM5PVCKuqsZ/TkIPQy76Id1L A1Qi2G98/n/fL8+PypbQvHYmgwuWXP6g0dc5AG7QZuC9EhxsnWIyWxWrLSdVssMP ugeNGxiwHHQJVPCnOyO4YiF+T9/FF7iW5r1PXdhEwmvZwNIeG2NvEi5fZR6T8jyo 4KzLCmnLcKibzVAZi2/ui4YzBK231KnX52bJcjiLIYR5aadCg9TWlyMzQteSsT/4 1/wnGIg/m6O73nZTOVw+phYj4y9igcW7 -----END CERTIFICATE-----Generated at Sun Jun 15 08:50:01 2025 by rpki-client