$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft File: McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json) Hash identifier: uberYk4XghKxjc/tNt0J9KccvTKx6fqadPsoWhUOX94= Subject key identifier: 58:81:A4:52:F1:9D:20:7E:3A:CC:A2:BB:8B:62:57:1F:30:36:58:62 Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 Certificate issuer: /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft Manifest number: 0149 Signing time: Tue 01 Jul 2025 04:45:20 +0000 Manifest this update: Tue 01 Jul 2025 04:45:20 +0000 Manifest next update: Tue 08 Jul 2025 04:45:20 +0000 Files and hashes: 1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: VcAhqwIu9KPhu01zkO2woECA2FzsbvW2SDT3tTfRjzk=) 2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: 2icqnjOM7NhkNWNRK/vV/u0TPESMuw0eja9A3sbJDHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C607C, serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6 Validity Not Before: Jul 1 04:45:20 2025 GMT Not After : Jul 8 04:45:20 2025 GMT Subject: CN=686367e0-2574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:2b:35:bf:f4:21:b4:ac:42:27:8f:6f:37: ea:ba:74:87:fb:fe:7d:67:b0:2c:46:14:f4:b1:78: 4e:a1:3c:28:9d:69:81:eb:c3:d7:91:da:f9:76:0e: a3:77:de:bb:b6:65:64:91:28:8d:68:ce:27:82:0d: 4c:25:7b:9c:8a:48:1e:86:2b:aa:70:e2:cb:0d:46: 75:8b:11:04:75:65:f8:91:f6:0d:01:12:07:06:aa: f2:a0:63:a8:0b:6c:26:0d:0e:11:e0:1c:f9:a7:94: 27:a5:be:56:36:73:2b:f8:b5:67:e8:2f:a3:f4:3c: 53:9e:ab:8a:c0:ee:86:08:52:1c:54:6b:34:52:24: 06:cc:41:f2:60:b8:b7:41:86:d1:bb:37:b9:e3:7e: b7:4f:73:93:36:ca:f2:a5:b9:78:02:da:71:92:38: 1d:7c:c8:ed:dd:34:c2:5b:c8:b4:6b:ba:d1:35:fc: c5:66:df:6f:e6:bb:de:f6:c3:92:a2:45:dc:48:59: 2e:93:23:e7:38:f0:99:ef:98:10:ae:41:ee:55:0e: 6d:80:d0:43:71:fc:61:0e:e5:a3:92:9e:3e:dd:ac: a3:5f:3f:e4:f4:bd:b4:91:ad:c0:26:95:e9:ab:cd: d2:97:26:81:1e:bc:12:00:85:9e:d0:c1:65:3f:f7: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:81:A4:52:F1:9D:20:7E:3A:CC:A2:BB:8B:62:57:1F:30:36:58:62 X509v3 Authority Key Identifier: keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:23:91:ee:6b:24:40:04:6d:04:84:ee:3d:64:cc:5d:4a:f8: 65:59:7d:fc:6c:a3:99:b5:8f:a5:88:70:b1:e8:2c:b9:65:8b: b0:c3:17:b5:e4:14:59:f9:cc:57:0e:1b:26:36:d4:73:f7:fd: b3:cd:a9:53:1e:4f:07:44:10:5e:88:c9:b4:4e:f7:fb:14:4a: 77:c0:87:3a:fd:68:67:75:50:b4:42:7c:a9:61:3c:07:f3:e7: 7b:9a:36:91:fc:15:d2:76:80:fd:eb:42:0a:ba:51:d8:6f:23: af:17:a5:9e:01:f5:a7:d7:d8:32:8b:64:17:46:92:f4:2c:0b: 2a:da:50:f3:bb:1d:15:86:1d:dc:ca:37:ce:4b:51:2f:2d:12: bc:05:a6:b2:8c:b4:e6:91:06:68:f5:f1:bd:9c:28:74:3b:bb: 14:2c:03:51:e0:21:d7:ed:db:43:eb:a2:88:4e:55:b0:da:5b: ae:dd:41:28:11:4e:45:b5:42:fe:6c:d3:82:64:e4:89:f8:ad: e7:7e:98:8c:20:7e:19:2e:b6:f5:5f:c2:e8:86:5b:1f:da:42: 79:59:4c:c1:2d:2d:b1:30:26:4a:d3:00:f5:2f:77:62:1a:d3: 8d:fc:01:f9:8c:74:65:7e:af:3c:47:c5:f1:53:99:16:fa:36: d3:86:ce:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwN0MxMTAvBgNVBAUTKDMxQ0JFRDFENEEwMjE3MDgzMTgwN0Q3NzQ0QUM0QUFG RjI2QTA2RTYwHhcNMjUwNzAxMDQ0NTIwWhcNMjUwNzA4MDQ0NTIwWjAYMRYwFAYD VQQDEw02ODYzNjdlMC0yNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvwrNb/0IbSsQiePbzfqunSH+/59Z7AsRhT0sXhOoTwonWmB68PXkdr5dg6j d967tmVkkSiNaM4ngg1MJXucikgehiuqcOLLDUZ1ixEEdWX4kfYNARIHBqryoGOo C2wmDQ4R4Bz5p5Qnpb5WNnMr+LVn6C+j9DxTnquKwO6GCFIcVGs0UiQGzEHyYLi3 QYbRuze54363T3OTNsrypbl4AtpxkjgdfMjt3TTCW8i0a7rRNfzFZt9v5rve9sOS okXcSFkukyPnOPCZ75gQrkHuVQ5tgNBDcfxhDuWjkp4+3ayjXz/k9L20ka3AJpXp q83SlyaBHrwSAIWe0MFlP/dyOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiBpFLx nSB+Osyiu4tiVx8wNlhiMB8GA1UdIwQYMBaAFDHL7R1KAhcIMYB9d0SsSq/yagbm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA3Qy9ENEREM0E4ODYy ODgxMUVFOTY0NEE5MENDNEY5QUUwMi9NY3Z0SFVvQ0Z3Z3hnSDEzUkt4S3JfSnFC dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01jdnRIVW9DRndneGdIMTNSS3hLcl9KcUJ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA3Qy9ENEREM0E4ODYyODgxMUVFOTY0NEE5MENDNEY5QUUwMi9NY3Z0SFVvQ0Z3 Z3hnSDEzUkt4S3JfSnFCdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2I5HuayRABG0EhO49ZMxdSvhlWX38bKOZtY+liHCx6Cy5ZYuwwxe1 5BRZ+cxXDhsmNtRz9/2zzalTHk8HRBBeiMm0Tvf7FEp3wIc6/WhndVC0QnypYTwH 8+d7mjaR/BXSdoD960IKulHYbyOvF6WeAfWn19gyi2QXRpL0LAsq2lDzux0Vhh3c yjfOS1EvLRK8BaayjLTmkQZo9fG9nCh0O7sULANR4CHX7dtD66KITlWw2luu3UEo EU5FtUL+bNOCZOSJ+K3nfpiMIH4ZLrb1X8Lohlsf2kJ5WUzBLS2xMCZK0wD1L3di GtON/AH5jHRlfq88R8XxU5kW+jbThs7m -----END CERTIFICATE-----Generated at Thu Jul 3 03:56:53 2025 by rpki-client