$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft File: mvCw748-tT8U2E-jphBr5kvXgnI.mft (raw, json) Hash identifier: tM89EWJboyeXaRH4J1xMBMBOS5wXhnGaWUSPFQa/AOU= Subject key identifier: D4:FD:C6:64:86:B1:27:6C:4A:B3:84:48:81:E8:85:D3:C8:0F:3F:22 Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 Certificate issuer: /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft Manifest number: 03EE Signing time: Tue 13 May 2025 00:17:40 +0000 Manifest this update: Tue 13 May 2025 00:17:39 +0000 Manifest next update: Tue 20 May 2025 00:17:39 +0000 Files and hashes: 1: mvCw748-tT8U2E-jphBr5kvXgnI.crl (hash: TME7uU98kgcoPWcnvjxsuJ+XMRzqsSsL/UWN7GCDLV8=) 2: 8EB98374776E11ECA05F7133C4F9AE02.roa (hash: 0odSjBqkbrai7nHTuGPVDMCVhidqU26/lOEVMrtNDiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B06CA, serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Validity Not Before: May 13 00:17:39 2025 GMT Not After : May 20 00:17:39 2025 GMT Subject: CN=68228fa3-d661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:49:3c:a8:2a:26:b4:6e:15:20:39:91:d7: c9:e1:81:b8:12:b9:a5:12:3a:ce:5a:80:ef:80:a9: 62:59:88:af:cf:73:54:8c:b0:5e:38:38:0a:8a:14: 53:5b:5d:eb:db:13:68:85:6d:05:ff:f2:bc:0e:1b: c9:13:66:a7:c7:cc:0e:ac:1b:ed:8d:ce:33:6a:f9: bb:69:85:aa:e1:63:8a:28:5e:63:de:18:64:9a:85: 15:af:59:12:03:0e:a3:99:4b:f7:f9:0c:c2:40:90: c4:a1:b3:c2:63:60:3a:14:62:53:ea:87:b1:bf:68: 87:6b:39:19:fb:2f:1b:de:49:38:83:3e:f6:1b:e1: 03:30:38:c4:c7:1a:50:44:a9:7d:d3:8a:74:05:0b: 0e:7c:b5:bf:6d:f3:a3:95:d4:89:81:61:a7:d0:6d: 47:2d:78:9e:8d:31:2f:eb:ef:98:10:6d:e1:07:c7: f1:12:fd:82:1a:c3:6a:91:0e:b8:1a:61:48:56:0d: 35:92:c0:49:02:2f:71:89:ee:c8:ba:7c:aa:39:e9: 85:e7:9e:32:e5:7a:cc:da:70:fb:40:f7:d5:5d:6c: 1c:ba:d7:9d:f6:c4:8d:e1:10:cc:7d:0e:0f:47:20: 9d:56:94:18:46:4d:3a:d4:96:cc:d5:a2:a6:e4:0e: 6b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FD:C6:64:86:B1:27:6C:4A:B3:84:48:81:E8:85:D3:C8:0F:3F:22 X509v3 Authority Key Identifier: keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:67:bb:a5:9b:7a:2f:a0:04:06:2f:f2:da:a4:ff:31:9d:92: 6e:0a:14:cc:6e:c4:6f:77:72:bb:ec:74:26:b4:65:19:30:53: ab:91:d5:08:c3:00:69:2e:75:07:5b:80:a7:17:73:01:16:85: f1:4c:31:c2:84:7f:3d:b0:82:83:78:7e:1f:5c:6e:64:0e:04: 30:70:f8:06:e1:60:6c:14:b6:31:c7:22:1a:2f:ae:08:de:d4: f7:3b:7c:b4:fc:1a:f0:77:6b:8e:bb:5a:6d:f2:e7:8b:de:88: 67:ba:6c:54:26:b7:58:a4:4e:03:61:3d:5d:8f:f9:a7:02:37: d5:7a:ae:a4:e7:06:14:ff:42:8d:ce:ec:ce:62:f5:f7:c1:89: 11:99:54:79:48:10:3d:e7:15:88:7a:42:c7:d7:dd:22:d9:d0: 83:b2:d0:89:5c:0e:4b:c5:cc:ba:5e:97:7a:e6:c9:9e:bc:63: 89:56:16:37:b2:4f:a2:58:5c:52:e7:88:ad:4d:4f:ff:22:83: 7a:03:59:ae:fa:b8:8a:4f:47:1b:6f:88:1b:d8:2f:c2:d1:1a: e1:71:84:2f:41:60:21:8d:a6:43:36:b4:86:24:e1:17:5f:d2: c2:96:0c:14:22:5e:e0:36:52:87:c6:a9:37:d3:9e:fd:6a:80: 06:74:51:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA2Q0ExMTAvBgNVBAUTKDlBRjBCMEVGOEYzRUI1M0YxNEQ4NEZBM0E2MTA2QkU2 NEJENzgyNzIwHhcNMjUwNTEzMDAxNzM5WhcNMjUwNTIwMDAxNzM5WjAYMRYwFAYD VQQDEw02ODIyOGZhMy1kNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SdJPKgqJrRuFSA5kdfJ4YG4ErmlEjrOWoDvgKliWYivz3NUjLBeODgKihRT W13r2xNohW0F//K8DhvJE2anx8wOrBvtjc4zavm7aYWq4WOKKF5j3hhkmoUVr1kS Aw6jmUv3+QzCQJDEobPCY2A6FGJT6oexv2iHazkZ+y8b3kk4gz72G+EDMDjExxpQ RKl904p0BQsOfLW/bfOjldSJgWGn0G1HLXiejTEv6++YEG3hB8fxEv2CGsNqkQ64 GmFIVg01ksBJAi9xie7IunyqOemF554y5XrM2nD7QPfVXWwcuted9sSN4RDMfQ4P RyCdVpQYRk061JbM1aKm5A5rcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNT9xmSG sSdsSrOESIHohdPIDz8iMB8GA1UdIwQYMBaAFJrwsO+PPrU/FNhPo6YQa+ZL14Jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDZDQS9EMkUwMDg3Mjc3 NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRUOFUyRS1qcGhCcjVrdlhn bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL212Q3c3NDgtdFQ4VTJFLWpwaEJyNWt2WGduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDZDQS9EMkUwMDg3Mjc3NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRU OFUyRS1qcGhCcjVrdlhnbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiZ7ulm3ovoAQGL/LapP8xnZJuChTMbsRvd3K77HQmtGUZMFOrkdUI wwBpLnUHW4CnF3MBFoXxTDHChH89sIKDeH4fXG5kDgQwcPgG4WBsFLYxxyIaL64I 3tT3O3y0/Brwd2uOu1pt8ueL3ohnumxUJrdYpE4DYT1dj/mnAjfVeq6k5wYU/0KN zuzOYvX3wYkRmVR5SBA95xWIekLH190i2dCDstCJXA5Lxcy6Xpd65smevGOJVhY3 sk+iWFxS54itTU//IoN6A1mu+riKT0cbb4gb2C/C0RrhcYQvQWAhjaZDNrSGJOEX X9LClgwUIl7gNlKHxqk30579aoAGdFEJ -----END CERTIFICATE-----Generated at Thu May 15 00:12:24 2025 by rpki-client