$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft File: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft (raw, json) Hash identifier: kCam8Ad/kTJNuXpWQuvsIgBVRhrj+Pk1otX7TKiZQTY= Subject key identifier: F9:82:70:56:3D:7E:A1:64:03:BC:20:0D:1C:27:B4:9B:35:2A:57:FE Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1D7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft Manifest number: 1D6B Signing time: Mon 30 Jun 2025 16:17:15 +0000 Manifest this update: Mon 30 Jun 2025 16:17:15 +0000 Manifest next update: Mon 07 Jul 2025 16:17:15 +0000 Files and hashes: 1: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl (hash: PKvNlpK8/NmrC4QJqefYfV/MX/pdO88N1TQOHE4XTXo=) 2: 7DB839C04C5F11F09A279D41C4F9AE02.roa (hash: 1Kglhggr20KDI8G+GusY7qefa3HmD56lGdxiimkKhgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7546 (0x1d7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095, serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: Jun 30 16:17:15 2025 GMT Not After : Jul 7 16:17:15 2025 GMT Subject: CN=6862b88b-ff57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:aa:50:23:a4:ee:6d:7a:ad:15:71:4f:9c:c7: 7e:07:6c:b9:2f:ee:08:a1:c1:4f:e4:79:ef:fb:b6: e3:9a:05:17:72:1b:ac:0a:b0:69:58:3d:9e:7b:0c: e4:1f:35:e7:fb:c7:92:52:8b:f4:fd:b2:62:1c:2d: f6:12:9a:73:34:6f:1e:01:6f:30:7c:ad:6a:01:f9: 4d:53:b9:2b:e1:93:2a:58:5f:5c:18:02:de:db:45: a3:4f:a8:1c:25:26:d4:1b:6c:af:06:c2:ce:b0:66: 71:65:b6:ef:f6:89:02:a0:c5:50:b1:10:6d:37:fe: ad:c3:e8:92:5d:70:fc:34:dd:df:1e:57:ee:57:b4: ba:d8:af:d7:b3:59:29:4b:9d:79:f6:0f:98:41:f8: c9:ef:ec:7a:e8:12:6d:e2:e1:11:65:cb:45:6e:66: 47:19:54:04:38:2e:a1:3c:f4:9f:f4:7e:5c:df:7c: 1c:29:f6:00:2e:a1:46:39:af:f4:98:0a:2b:5e:01: 08:26:fc:96:0e:a3:dd:ae:ea:eb:55:97:3d:3c:8c: c2:61:bd:b8:a2:1a:3e:06:66:24:65:4e:0c:80:3f: 27:05:c7:8c:58:98:b3:1c:a7:59:47:69:96:7c:14: bc:1f:9e:4a:8d:18:98:56:e0:9a:f3:b6:71:d1:3e: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:82:70:56:3D:7E:A1:64:03:BC:20:0D:1C:27:B4:9B:35:2A:57:FE X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3f:2c:01:97:50:e1:a7:bd:7d:05:07:c8:5d:71:8f:f0:08: ff:8c:91:af:3e:6f:b8:e2:b4:be:19:b4:d4:a1:70:10:e5:8b: 61:47:e7:11:c4:a7:ee:62:fb:b4:e9:2b:de:e8:3f:cf:4f:36: 31:ce:43:23:4b:f5:cb:be:e0:13:90:1c:72:99:f8:b1:7c:3d: 19:2b:3f:dc:49:ca:10:3b:9f:00:14:3f:1f:91:36:24:24:fb: eb:6f:13:88:4a:d4:a3:41:77:36:a2:21:44:38:b0:d1:b5:d2: 85:74:0d:33:41:8a:4d:ce:f0:22:62:8e:a7:69:56:29:94:0d: 0d:80:8a:89:ee:60:09:16:a0:a8:72:c3:1e:9e:11:e4:14:74: c7:f9:9c:10:a9:54:99:6a:fe:9c:2d:31:0c:29:a0:9e:30:fb: 07:3f:dd:ef:7e:a8:65:69:c3:f8:a1:c2:97:ad:09:7a:cb:90: 45:47:d8:e3:61:2e:11:aa:38:3d:9a:5a:1b:f9:1a:9d:7d:c5: f6:0b:22:2e:d2:1f:27:60:c4:a0:71:1f:14:5d:fe:fb:1c:80: 04:d2:94:9d:dd:f3:de:37:3e:e9:2d:bb:5e:b5:83:38:77:d5: 93:f1:f6:c0:b6:7c:09:91:15:2f:57:26:9e:3a:08:d0:1d:b8: 9e:28:99:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjUwNjMwMTYxNzE1WhcNMjUwNzA3MTYxNzE1WjAYMRYwFAYD VQQDEw02ODYyYjg4Yi1mZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KpQI6TubXqtFXFPnMd+B2y5L+4IocFP5Hnv+7bjmgUXchusCrBpWD2eewzk HzXn+8eSUov0/bJiHC32EppzNG8eAW8wfK1qAflNU7kr4ZMqWF9cGALe20WjT6gc JSbUG2yvBsLOsGZxZbbv9okCoMVQsRBtN/6tw+iSXXD8NN3fHlfuV7S62K/Xs1kp S5159g+YQfjJ7+x66BJt4uERZctFbmZHGVQEOC6hPPSf9H5c33wcKfYALqFGOa/0 mAorXgEIJvyWDqPdrurrVZc9PIzCYb24oho+BmYkZU4MgD8nBceMWJizHKdZR2mW fBS8H55KjRiYVuCa87Zx0T4tYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmCcFY9 fqFkA7wgDRwntJs1Klf+MB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjA5NS84Qzg5OUE0MkFCNTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZL ZnpIMU9WLUkzWmZaUncwWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKPywBl1Dhp719BQfIXXGP8Aj/jJGvPm+44rS+GbTUoXAQ5YthR+cR xKfuYvu06Sve6D/PTzYxzkMjS/XLvuATkBxymfixfD0ZKz/cScoQO58AFD8fkTYk JPvrbxOIStSjQXc2oiFEOLDRtdKFdA0zQYpNzvAiYo6naVYplA0NgIqJ7mAJFqCo csMenhHkFHTH+ZwQqVSZav6cLTEMKaCeMPsHP93vfqhlacP4ocKXrQl6y5BFR9jj YS4Rqjg9mlob+RqdfcX2CyIu0h8nYMSgcR8UXf77HIAE0pSd3fPeNz7pLbtetYM4 d9WT8fbAtnwJkRUvVyaeOgjQHbieKJmS -----END CERTIFICATE-----Generated at Tue Jul 1 09:21:11 2025 by rpki-client