$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft File: mvCw748-tT8U2E-jphBr5kvXgnI.mft (raw, json) Hash identifier: WV7grc1cEe0qRXPSWYgIlmgcpcpr0Ze4jeONEIdv5eo= Subject key identifier: 16:9F:19:49:3C:6A:B9:A8:75:49:A1:A7:F8:E3:86:F0:E4:57:0B:66 Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 Certificate issuer: /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Certificate serial: 040B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft Manifest number: 0407 Signing time: Thu 03 Jul 2025 00:44:44 +0000 Manifest this update: Thu 03 Jul 2025 00:44:43 +0000 Manifest next update: Thu 10 Jul 2025 00:44:43 +0000 Files and hashes: 1: mvCw748-tT8U2E-jphBr5kvXgnI.crl (hash: EZKimbBVpyoetlotAEu9eBhcmyzqmrCXTvW3P/C3FiU=) 2: 8EB98374776E11ECA05F7133C4F9AE02.roa (hash: 0odSjBqkbrai7nHTuGPVDMCVhidqU26/lOEVMrtNDiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B06CA, serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Validity Not Before: Jul 3 00:44:43 2025 GMT Not After : Jul 10 00:44:43 2025 GMT Subject: CN=6865d27b-7bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e8:2c:2c:96:e8:b1:05:c5:fb:4d:ae:9c:6e: a7:1f:6c:e7:9a:96:5d:04:40:25:e3:91:f5:41:a7: 6c:cb:92:64:4d:86:a5:0a:40:d6:30:71:6b:3f:d0: c8:4a:9d:b8:ec:00:09:02:f2:bf:34:5a:80:98:87: a7:c0:9a:1e:cc:1f:fb:e2:99:d9:a1:e7:b3:72:22: 34:0b:6c:5e:70:1c:10:1e:45:d9:69:e6:cf:61:2a: da:56:d8:31:db:ac:72:19:40:93:8f:3b:70:25:8d: 00:28:d5:28:07:77:82:45:4d:05:fa:4a:85:be:84: c8:7e:54:f7:ea:c6:c4:4d:c7:9d:62:96:e4:af:fc: 29:20:26:c9:f5:35:f2:da:f1:fd:20:40:da:d2:46: ce:37:91:91:c9:ba:9c:fb:ff:a2:06:c5:f2:a0:10: 88:0c:e3:48:4e:9b:44:a9:dc:a4:a3:99:ec:6c:cf: 6a:f0:10:d1:45:10:c1:27:ed:af:6d:60:a0:b6:f6: 74:22:20:7c:46:b5:46:de:42:d3:5e:b8:66:7e:f0: 0a:13:1c:98:66:dd:37:e2:9f:2f:73:91:a7:1a:de: a5:88:e4:16:79:09:71:07:c8:2f:9f:ce:18:cc:a8: 28:8c:09:33:af:39:6e:ce:c2:48:6c:7e:f2:7b:1a: a7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9F:19:49:3C:6A:B9:A8:75:49:A1:A7:F8:E3:86:F0:E4:57:0B:66 X509v3 Authority Key Identifier: keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a6:31:e8:0a:b8:1e:13:b4:ff:bd:8c:15:50:97:5c:2a:69: 63:bb:a5:da:21:c5:73:b1:94:1e:b3:a8:db:ae:60:2c:88:ab: 29:c4:70:68:11:0b:2b:59:2b:b3:38:71:4d:7a:b1:d4:b7:69: 68:98:5a:e6:15:a1:90:de:41:4d:66:7e:0d:3e:a8:f1:07:2a: 18:3b:c5:05:bd:13:d6:77:6f:47:db:5e:f0:e2:44:27:33:b7: f4:69:72:1c:fd:f9:51:81:d0:32:5c:b6:34:78:1b:c3:9a:7a: 42:e1:7c:b8:15:c9:72:80:2d:07:41:34:09:5f:02:96:75:69: 4d:d2:f6:9f:47:81:92:d4:fa:10:ff:19:6d:b3:b2:50:88:89: 14:45:ea:37:32:80:1d:c4:16:d4:46:67:70:ca:e1:6c:9b:61: 7c:a3:62:a5:b9:66:05:d4:a0:7a:13:e7:b2:9a:6b:f2:cd:60: 5e:3b:93:25:9d:de:b9:dc:3b:25:eb:92:03:02:c2:e0:16:af: f6:70:6b:e2:d7:47:9d:cb:c8:96:fa:29:1c:9d:6d:36:c0:9d: d0:bd:24:a1:02:9e:b2:58:7b:f3:25:16:44:a9:08:92:cb:53: b1:01:f0:d0:84:f2:79:c3:4f:67:01:f5:79:2c:45:cc:c8:3b: 8d:8c:82:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA2Q0ExMTAvBgNVBAUTKDlBRjBCMEVGOEYzRUI1M0YxNEQ4NEZBM0E2MTA2QkU2 NEJENzgyNzIwHhcNMjUwNzAzMDA0NDQzWhcNMjUwNzEwMDA0NDQzWjAYMRYwFAYD VQQDEw02ODY1ZDI3Yi03YmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ugsLJbosQXF+02unG6nH2znmpZdBEAl45H1Qadsy5JkTYalCkDWMHFrP9DI Sp247AAJAvK/NFqAmIenwJoezB/74pnZoeezciI0C2xecBwQHkXZaebPYSraVtgx 26xyGUCTjztwJY0AKNUoB3eCRU0F+kqFvoTIflT36sbETcedYpbkr/wpICbJ9TXy 2vH9IEDa0kbON5GRybqc+/+iBsXyoBCIDONITptEqdyko5nsbM9q8BDRRRDBJ+2v bWCgtvZ0IiB8RrVG3kLTXrhmfvAKExyYZt034p8vc5GnGt6liOQWeQlxB8gvn84Y zKgojAkzrzluzsJIbH7yexqnowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBafGUk8 armodUmhp/jjhvDkVwtmMB8GA1UdIwQYMBaAFJrwsO+PPrU/FNhPo6YQa+ZL14Jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDZDQS9EMkUwMDg3Mjc3 NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRUOFUyRS1qcGhCcjVrdlhn bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL212Q3c3NDgtdFQ4VTJFLWpwaEJyNWt2WGduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDZDQS9EMkUwMDg3Mjc3NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRU OFUyRS1qcGhCcjVrdlhnbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTpjHoCrgeE7T/vYwVUJdcKmlju6XaIcVzsZQes6jbrmAsiKspxHBo EQsrWSuzOHFNerHUt2lomFrmFaGQ3kFNZn4NPqjxByoYO8UFvRPWd29H217w4kQn M7f0aXIc/flRgdAyXLY0eBvDmnpC4Xy4FclygC0HQTQJXwKWdWlN0vafR4GS1PoQ /xlts7JQiIkUReo3MoAdxBbURmdwyuFsm2F8o2KluWYF1KB6E+eymmvyzWBeO5Ml nd653Dsl65IDAsLgFq/2cGvi10edy8iW+ikcnW02wJ3QvSShAp6yWHvzJRZEqQiS y1OxAfDQhPJ5w09nAfV5LEXMyDuNjII/ -----END CERTIFICATE-----Generated at Thu Jul 3 14:31:22 2025 by rpki-client