$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: /fKBeKWu7F+ry1yntwJ4mBWaRjWY+84uk8W/xFWQUA4= Subject key identifier: F8:9E:24:AE:E5:92:A3:12:23:F3:90:A5:E8:0F:87:C8:F0:44:5D:14 Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: 0189 Signing time: Fri 25 Apr 2025 02:43:54 +0000 Manifest this update: Fri 25 Apr 2025 02:43:54 +0000 Manifest next update: Fri 02 May 2025 02:43:54 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: Www/8ROAClZG2NaY9nyUDQc+0TbM/XG5hfH+vxd0jRA=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: QOfAhP3S+ePBd5bLXcD9SSvstPxykfxAtUO9d7xqQdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: Apr 25 02:43:54 2025 GMT Not After : May 2 02:43:54 2025 GMT Subject: CN=680af6ea-62f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:43:dd:6e:4f:3e:c1:a8:d6:bb:e2:31:c8: 7a:47:e5:03:d9:dd:10:d1:04:55:02:ef:36:b1:f1: 91:7a:8e:7c:2a:58:8e:e5:93:e2:1a:63:b6:20:11: ee:09:ce:ad:2a:08:ed:eb:5f:bb:e4:6b:9d:cb:bc: 55:61:28:ad:dd:2c:a8:df:ef:25:a3:18:63:86:0d: af:8e:87:88:68:5e:f6:fe:a9:a2:d9:78:27:64:28: 5e:df:e5:fe:15:30:4e:2c:ce:1a:16:07:1a:8a:a6: db:e8:5b:29:3e:f2:83:5a:7f:f6:33:52:00:0f:86: 09:08:a9:af:95:70:c1:e2:1a:f5:e8:d3:97:bf:32: f9:e2:88:13:49:79:66:2f:6d:13:20:ac:37:bd:0d: de:4f:3a:f1:90:ca:7e:27:6a:02:3d:fd:89:72:65: 9e:24:50:c2:61:ff:93:2c:13:b5:12:22:60:f1:09: 04:bc:8c:f2:12:e4:a9:81:36:91:0c:c5:89:2d:51: 39:dc:6a:f0:67:05:f7:23:dc:05:9d:b6:fb:a0:0e: 57:db:5d:2e:1f:f8:18:ea:56:50:19:fa:08:c5:d5: e0:07:e8:3f:25:be:fa:f8:08:d7:39:7b:cd:ee:de: 52:f5:c8:6d:e5:26:71:45:93:f6:85:e1:5e:c0:59: b7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9E:24:AE:E5:92:A3:12:23:F3:90:A5:E8:0F:87:C8:F0:44:5D:14 X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:30:53:cf:8f:41:d8:a2:0f:4b:15:63:05:9c:05:89:f9:a8: 39:d9:4b:05:15:37:ef:51:f5:51:32:70:60:ad:0f:9d:1d:0c: 1c:85:6e:1e:3f:1c:98:49:c0:85:62:c3:10:33:14:3f:84:72: ca:fc:7b:a6:c6:9e:95:a1:27:49:51:fa:f2:33:0a:c5:45:8f: c2:c9:42:b5:6e:cb:96:6a:98:61:bb:3c:ee:5a:06:bb:75:e9: 7f:5c:2c:21:e6:b5:8e:ad:20:b0:a9:66:ad:50:75:ee:09:98: c1:e4:3c:6c:54:ae:53:88:b9:4d:39:9d:5e:87:76:33:b4:1f: 39:b6:e4:5f:4e:a5:1a:a2:71:70:6c:fd:7b:bf:49:d8:af:9f: b3:65:99:68:5d:53:9f:50:71:97:3a:85:3f:22:17:6f:c6:3d: d2:de:a2:70:58:aa:e7:5d:60:f2:84:76:09:82:16:f8:4e:bf: af:ff:88:f1:e1:35:c7:03:4e:14:07:ad:2f:5e:69:ad:38:c4: 6a:62:59:00:30:d4:70:18:b3:19:29:d6:a8:65:21:6b:7e:93: 64:54:d8:87:2f:6d:bd:f3:12:41:bc:81:5d:24:71:c4:e8:a3: ab:f1:2a:c5:ba:d2:83:f7:99:1c:ce:de:0f:4e:b4:9b:d0:42: df:a7:3f:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjUwNDI1MDI0MzU0WhcNMjUwNTAyMDI0MzU0WjAYMRYwFAYD VQQDEw02ODBhZjZlYS02MmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4BD3W5PPsGo1rviMch6R+UD2d0Q0QRVAu82sfGReo58KliO5ZPiGmO2IBHu Cc6tKgjt61+75Gudy7xVYSit3Syo3+8loxhjhg2vjoeIaF72/qmi2XgnZChe3+X+ FTBOLM4aFgcaiqbb6FspPvKDWn/2M1IAD4YJCKmvlXDB4hr16NOXvzL54ogTSXlm L20TIKw3vQ3eTzrxkMp+J2oCPf2JcmWeJFDCYf+TLBO1EiJg8QkEvIzyEuSpgTaR DMWJLVE53GrwZwX3I9wFnbb7oA5X210uH/gY6lZQGfoIxdXgB+g/Jb76+AjXOXvN 7t5S9cht5SZxRZP2heFewFm3wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPieJK7l kqMSI/OQpegPh8jwRF0UMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzMFPPj0HYog9LFWMFnAWJ+ag52UsFFTfvUfVRMnBgrQ+dHQwchW4e PxyYScCFYsMQMxQ/hHLK/Humxp6VoSdJUfryMwrFRY/CyUK1bsuWaphhuzzuWga7 del/XCwh5rWOrSCwqWatUHXuCZjB5DxsVK5TiLlNOZ1eh3YztB85tuRfTqUaonFw bP17v0nYr5+zZZloXVOfUHGXOoU/Ihdvxj3S3qJwWKrnXWDyhHYJghb4Tr+v/4jx 4TXHA04UB60vXmmtOMRqYlkAMNRwGLMZKdaoZSFrfpNkVNiHL2298xJBvIFdJHHE 6KOr8SrFutKD95kczt4PTrSb0ELfpz+2 -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:34 2025 by rpki-client