$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft File: MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json) Hash identifier: egW8HJ9UiIBspC/W/S5293phPgwPm02v5AEsGe0MEXM= Subject key identifier: 5A:CD:CC:68:6E:C9:71:3A:D9:7A:BC:30:80:5C:7A:B2:16:54:91:71 Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D Certificate issuer: /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D Certificate serial: 04AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft Manifest number: 04A9 Signing time: Thu 03 Jul 2025 00:16:47 +0000 Manifest this update: Thu 03 Jul 2025 00:16:47 +0000 Manifest next update: Thu 10 Jul 2025 00:16:47 +0000 Files and hashes: 1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: hhoT6B6rfhvw/6u+JFIlH3FSmPU8EkvPQ24beweAZoM=) 2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: O5o2WM89g2GajktjirO4l7am93YdomSAoRe9/bA2z6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D Validity Not Before: Jul 3 00:16:47 2025 GMT Not After : Jul 10 00:16:47 2025 GMT Subject: CN=6865cbef-fd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:53:c1:53:5b:2e:54:51:d3:2c:8c:03:cd: 6e:00:47:a0:74:f8:7f:91:20:cf:d4:97:49:92:01: b5:93:3c:6e:f6:6b:42:34:a0:7e:bd:f0:71:f6:fa: a6:df:e5:0a:9e:b8:7f:c1:69:d0:4f:44:8e:42:ed: 1b:58:1f:3b:34:ac:20:6a:ce:77:51:b2:3e:82:51: f2:b3:96:d5:ab:3e:40:32:fc:88:47:94:ac:2c:12: 92:fc:07:55:7f:5a:29:25:aa:11:dd:5c:ca:4f:38: 9b:fa:8a:a1:f0:45:1d:ea:ab:29:f9:c4:eb:77:82: 8a:6b:04:40:bc:11:b6:d2:2d:bf:2a:9a:4c:8f:2a: 86:51:dd:95:f4:b3:70:2b:1a:d3:f9:00:27:2e:3b: 67:40:37:27:f1:2f:bb:39:90:98:71:49:c6:bb:67: 4a:27:5f:04:53:42:90:34:63:6c:b8:23:43:aa:b4: 11:4a:08:72:50:11:db:05:2d:b6:e5:05:3a:59:df: 99:b3:8e:0b:54:61:06:95:42:d0:c9:83:4e:ce:b5: 86:a2:ac:ac:cd:60:39:8c:f2:f2:bb:25:e7:34:a7: 65:dd:cb:d7:9a:01:7d:2c:4e:bf:a2:30:1a:79:b2: ff:8f:d1:ea:c7:bc:25:8e:a4:b8:ae:51:f5:b3:a9: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CD:CC:68:6E:C9:71:3A:D9:7A:BC:30:80:5C:7A:B2:16:54:91:71 X509v3 Authority Key Identifier: keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:65:55:74:3a:6c:80:2a:06:d7:a1:d5:78:8d:e9:d3:e1:76: 85:22:6d:e1:18:d2:fb:ca:25:42:d9:a0:19:c2:e6:21:fd:54: 4e:d2:0f:73:73:48:f4:d8:d3:69:0d:5b:43:b8:6d:79:be:4e: 05:92:76:d4:b8:a2:8a:5f:2c:3c:8a:2c:b4:0c:74:88:e9:48: 18:19:94:3b:23:c2:c2:7f:e4:99:5e:2b:2d:86:78:13:7c:5c: d7:85:02:66:33:50:d0:5b:e9:e3:fe:6f:d5:14:15:22:ae:58: 70:f7:20:bb:a6:b4:54:02:74:91:4d:f7:48:73:d3:33:02:f0: 6c:e3:89:f4:1b:c7:23:39:39:1d:17:1b:02:b1:a5:3d:c8:67: 1d:dd:5c:c0:9b:fb:e0:55:4f:09:1f:05:2a:36:f2:00:ba:ad: 1d:93:95:be:23:1d:0e:d3:91:eb:f4:ce:6a:52:5c:22:63:b6: 30:94:20:0a:d2:c2:6e:7c:8c:5f:25:80:ab:b0:8e:f1:81:db: 45:b5:64:63:5a:f7:9a:37:0a:c3:8e:6f:5f:34:33:e8:f9:01: 1d:9a:51:62:09:2d:27:fc:0d:4a:81:bf:41:49:18:ce:0c:9d: 3e:d1:d1:c5:5a:dd:d2:85:72:f4:28:78:31:9e:d5:7d:f7:75: 55:d9:41:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzNzExMTAvBgNVBAUTKDMyRjg5MDBEMzg1NkJFNDNBNzJENkM3RjkzRTkwNEI1 QjgzQ0MzNEQwHhcNMjUwNzAzMDAxNjQ3WhcNMjUwNzEwMDAxNjQ3WjAYMRYwFAYD VQQDEw02ODY1Y2JlZi1mZDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdZTwVNbLlRR0yyMA81uAEegdPh/kSDP1JdJkgG1kzxu9mtCNKB+vfBx9vqm 3+UKnrh/wWnQT0SOQu0bWB87NKwgas53UbI+glHys5bVqz5AMvyIR5SsLBKS/AdV f1opJaoR3VzKTzib+oqh8EUd6qsp+cTrd4KKawRAvBG20i2/KppMjyqGUd2V9LNw KxrT+QAnLjtnQDcn8S+7OZCYcUnGu2dKJ18EU0KQNGNsuCNDqrQRSghyUBHbBS22 5QU6Wd+Zs44LVGEGlULQyYNOzrWGoqyszWA5jPLyuyXnNKdl3cvXmgF9LE6/ojAa ebL/j9Hqx7wljqS4rlH1s6kZvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrNzGhu yXE62Xq8MIBcerIWVJFxMB8GA1UdIwQYMBaAFDL4kA04Vr5Dpy1sf5PpBLW4PMNN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTM3MS8zNkZFRTdFQTM4 QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3ZrT25MV3hfay1rRXRiZzh3 MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012aVFEVGhXdmtPbkxXeF9rLWtFdGJnOHcwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTM3MS8zNkZFRTdFQTM4QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3Zr T25MV3hfay1rRXRiZzh3MDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLZVV0OmyAKgbXodV4jenT4XaFIm3hGNL7yiVC2aAZwuYh/VRO0g9z c0j02NNpDVtDuG15vk4FknbUuKKKXyw8iiy0DHSI6UgYGZQ7I8LCf+SZXisthngT fFzXhQJmM1DQW+nj/m/VFBUirlhw9yC7prRUAnSRTfdIc9MzAvBs44n0G8cjOTkd FxsCsaU9yGcd3VzAm/vgVU8JHwUqNvIAuq0dk5W+Ix0O05Hr9M5qUlwiY7YwlCAK 0sJufIxfJYCrsI7xgdtFtWRjWveaNwrDjm9fNDPo+QEdmlFiCS0n/A1Kgb9BSRjO DJ0+0dHFWt3ShXL0KHgxntV993VV2UHR -----END CERTIFICATE-----Generated at Thu Jul 3 14:36:52 2025 by rpki-client