$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft File: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft (raw, json) Hash identifier: ByRW9UFcBm3Lvv6UuRk/X2aSpcyIT33celKbvy8bPNQ= Subject key identifier: 57:16:DB:6F:88:F2:A8:14:6A:FE:2D:12:67:47:A4:06:D0:AF:35:F1 Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1D5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft Manifest number: 1D4E Signing time: Sat 10 May 2025 16:04:07 +0000 Manifest this update: Sat 10 May 2025 16:04:06 +0000 Manifest next update: Sat 17 May 2025 16:04:06 +0000 Files and hashes: 1: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl (hash: iBQo0lDsgEbdogeYiZP7QnYVq6URxymCxtStJiTTKD8=) 2: 9DC06B6E36A211E893BF3061C4F9AE02.roa (hash: hlCAOqdM82iuB3BtNLbjrR+eENtQp+VFzUFQxq5vFhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7516 (0x1d5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095, serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: May 10 16:04:06 2025 GMT Not After : May 17 16:04:06 2025 GMT Subject: CN=681f78f7-4452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:98:c3:a3:93:c5:34:a9:eb:2b:33:6a:6d: 2c:ed:6c:41:08:4e:54:21:55:8c:8b:b7:c4:98:7d: 6e:38:48:73:ff:59:c2:28:75:2f:55:95:3a:c3:39: 4f:46:25:3a:1b:b2:77:f3:e4:04:c7:88:f6:07:45: 83:04:ff:48:9f:40:a4:fe:cd:4f:29:84:40:92:1d: 0c:33:36:96:42:3d:df:90:ad:1c:49:ea:6e:10:e3: de:dd:75:cd:4d:be:da:ee:73:51:d5:9d:af:6d:ba: 7f:0b:75:bc:eb:ef:c4:73:08:17:38:0f:4d:cf:5b: 85:47:77:7b:ce:bf:87:91:38:b3:45:47:1a:a9:20: 7c:bf:68:38:6f:28:5a:2b:e5:a8:61:a4:f7:1d:db: 56:60:41:af:fe:0d:1a:ff:c2:92:8f:2e:ab:21:30: ee:d7:c2:c2:2c:19:e4:18:c0:c4:cd:da:1c:bd:c7: df:13:16:40:26:06:b9:0d:c7:76:8f:37:20:55:90: ca:43:7b:74:a1:d7:d8:55:53:5d:c3:76:f6:89:24: 26:b2:78:72:a8:95:c9:a2:06:30:c2:4c:4e:8f:b0: c7:87:7d:7e:5a:47:81:c0:a9:a9:74:f2:04:a0:53: 88:bb:ed:6d:18:48:fe:95:e3:6b:a5:f3:32:27:3a: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:16:DB:6F:88:F2:A8:14:6A:FE:2D:12:67:47:A4:06:D0:AF:35:F1 X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c5:c6:43:5c:e3:42:b1:7c:22:1f:73:cd:ad:35:f3:b2:5a: fe:3f:4b:e4:0f:e7:cb:51:19:2f:66:f9:15:45:a3:bb:0f:32: e5:55:49:30:b8:61:55:db:d5:58:47:31:8c:3a:54:09:f9:dd: 9b:3c:0a:55:dd:bb:6a:00:d3:ce:55:05:f8:5a:38:63:cd:fc: fd:3a:00:aa:65:30:8c:4a:73:aa:22:56:7f:e9:9a:a4:81:f3: c6:c6:19:1b:13:4b:fb:fa:61:00:22:b8:47:fd:90:98:16:3d: 50:03:b3:6d:26:04:4a:90:a1:9b:fe:f4:ef:f1:d7:fe:24:8c: d0:dd:b4:39:80:d2:95:89:bd:6a:de:01:ef:7d:2f:53:70:a4: fd:b3:fd:d2:fd:c3:04:e0:22:45:27:4d:45:61:73:f3:a9:18: d7:61:da:fb:98:4d:c2:83:40:89:63:c2:b1:29:be:5d:85:b1: 0d:c7:43:22:58:45:44:f9:1f:46:c6:b9:b6:3a:4c:6a:8b:eb: 7a:20:c9:a4:6c:8d:4e:55:6a:b3:0e:fc:9c:fa:5a:71:38:4d: a7:6d:8c:19:04:74:29:b8:1a:5b:a6:b7:57:19:d0:f2:27:13: 47:3f:2b:50:7e:b5:8a:cf:54:77:34:d9:4e:3a:df:0f:c0:3c: 46:c5:aa:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjUwNTEwMTYwNDA2WhcNMjUwNTE3MTYwNDA2WjAYMRYwFAYD VQQDEw02ODFmNzhmNy00NDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyqYw6OTxTSp6yszam0s7WxBCE5UIVWMi7fEmH1uOEhz/1nCKHUvVZU6wzlP RiU6G7J38+QEx4j2B0WDBP9In0Ck/s1PKYRAkh0MMzaWQj3fkK0cSepuEOPe3XXN Tb7a7nNR1Z2vbbp/C3W86+/EcwgXOA9Nz1uFR3d7zr+HkTizRUcaqSB8v2g4byha K+WoYaT3HdtWYEGv/g0a/8KSjy6rITDu18LCLBnkGMDEzdocvcffExZAJga5Dcd2 jzcgVZDKQ3t0odfYVVNdw3b2iSQmsnhyqJXJogYwwkxOj7DHh31+WkeBwKmpdPIE oFOIu+1tGEj+leNrpfMyJzp4WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcW22+I 8qgUav4tEmdHpAbQrzXxMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjA5NS84Qzg5OUE0MkFCNTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZL ZnpIMU9WLUkzWmZaUncwWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4xcZDXONCsXwiH3PNrTXzslr+P0vkD+fLURkvZvkVRaO7DzLlVUkw uGFV29VYRzGMOlQJ+d2bPApV3btqANPOVQX4Wjhjzfz9OgCqZTCMSnOqIlZ/6Zqk gfPGxhkbE0v7+mEAIrhH/ZCYFj1QA7NtJgRKkKGb/vTv8df+JIzQ3bQ5gNKVib1q 3gHvfS9TcKT9s/3S/cME4CJFJ01FYXPzqRjXYdr7mE3Cg0CJY8KxKb5dhbENx0Mi WEVE+R9Gxrm2Okxqi+t6IMmkbI1OVWqzDvyc+lpxOE2nbYwZBHQpuBpbprdXGdDy JxNHPytQfrWKz1R3NNlOOt8PwDxGxaq6 -----END CERTIFICATE-----Generated at Sat May 10 19:26:14 2025 by rpki-client