$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft File: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft (raw, json) Hash identifier: MeQ3/v7Fl2c1JzH8N9QDggKFwHgpTP0wU4Lc9GohL1M= Subject key identifier: C6:79:95:09:3C:8A:E4:9E:2E:20:0F:EA:08:5E:24:02:4D:6F:06:2E Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1D54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft Manifest number: 1D46 Signing time: Thu 24 Apr 2025 16:08:55 +0000 Manifest this update: Thu 24 Apr 2025 16:08:55 +0000 Manifest next update: Thu 01 May 2025 16:08:55 +0000 Files and hashes: 1: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl (hash: 8E013LgIexkI9TD4V/fmzlmq9Z+8p3j9c1v71efGACs=) 2: 9DC06B6E36A211E893BF3061C4F9AE02.roa (hash: hlCAOqdM82iuB3BtNLbjrR+eENtQp+VFzUFQxq5vFhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7508 (0x1d54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095, serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: Apr 24 16:08:55 2025 GMT Not After : May 1 16:08:55 2025 GMT Subject: CN=680a6217-3fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:9b:04:51:74:5f:42:ca:cb:67:30:79:5a: 1b:7c:09:b9:67:a5:10:5e:10:09:a4:44:8d:30:94: 9c:f2:c5:76:53:ba:68:40:c0:6a:ed:3f:3a:04:02: d6:2b:75:ab:94:56:0c:23:89:0b:e1:a7:77:69:d0: f8:93:03:0f:d6:c5:c7:6c:50:b2:0e:f1:2c:25:3f: 50:c6:eb:b4:01:b5:8e:07:36:f1:ec:79:20:56:51: 94:4e:4c:7d:7e:92:d9:88:70:29:d9:9f:57:0b:27: 8e:01:ab:e5:8d:c3:d0:9b:1d:ea:de:fa:8d:21:59: 12:ad:7b:41:6b:88:94:bb:7a:d7:ba:00:21:ae:95: 6d:d5:96:01:c7:a7:9b:43:41:33:54:8b:e6:d1:16: 26:d5:42:38:c4:a6:ae:b3:f2:3f:9c:dc:6c:d2:43: 97:3c:15:34:92:c2:e9:66:b5:0c:15:aa:fe:99:0c: 0d:f1:3b:be:ff:5d:e2:86:35:7d:cf:6b:30:4b:7f: b8:d7:9a:a9:98:9e:b3:0e:ca:cc:d4:32:9d:21:12: 3a:eb:da:41:ed:82:1c:36:b9:a1:0f:cf:49:7d:1f: ac:f8:3b:41:d4:ad:4b:1a:34:b1:a8:79:5c:7a:76: 03:25:cd:95:b4:b0:08:d5:cf:65:74:7e:a3:29:3d: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:79:95:09:3C:8A:E4:9E:2E:20:0F:EA:08:5E:24:02:4D:6F:06:2E X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:16:1c:a0:9f:7b:6b:e3:5d:6d:27:c9:f9:f5:19:5e:d7:54: eb:f9:b2:b4:7a:58:b3:47:34:c9:bd:5b:88:36:90:fd:79:2a: d1:56:5f:4a:0f:4f:70:01:31:42:d7:70:9b:cc:87:07:cd:9d: 4f:18:0f:9b:ae:0a:18:ad:f3:4e:ab:c3:96:67:57:6b:3f:57: 63:49:47:f0:51:25:48:9d:e8:d0:c6:f9:a9:76:d3:e2:26:5a: a9:ad:61:94:15:e1:d5:32:30:ae:e6:10:67:73:67:6e:d7:4e: b8:32:95:47:64:70:d8:12:10:52:52:27:76:f9:0a:f8:17:e8: 76:99:ed:69:32:29:6d:06:4a:a5:23:4e:4d:bb:ca:5d:e3:10: b3:62:8f:16:66:12:e0:29:fd:98:d7:ca:9c:06:05:2b:1d:ae: 68:04:95:92:1a:cb:6e:fe:13:6e:6b:3a:0b:a4:6d:57:ad:29: cd:1f:0b:5f:3d:3c:f1:49:b7:fb:8f:40:ab:d4:80:b8:47:a4: 6c:ce:ab:8f:8c:cc:dc:b9:dc:6e:db:21:9e:65:c8:26:ba:19: 51:07:f1:98:75:f3:d5:e9:c2:17:c9:c1:bf:15:83:95:77:63: 66:d3:0e:73:d8:da:5e:48:8d:54:a0:9f:aa:dd:6b:a8:c4:91: 7d:47:23:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjUwNDI0MTYwODU1WhcNMjUwNTAxMTYwODU1WjAYMRYwFAYD VQQDEw02ODBhNjIxNy0zZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhybBFF0X0LKy2cweVobfAm5Z6UQXhAJpESNMJSc8sV2U7poQMBq7T86BALW K3WrlFYMI4kL4ad3adD4kwMP1sXHbFCyDvEsJT9Qxuu0AbWOBzbx7HkgVlGUTkx9 fpLZiHAp2Z9XCyeOAavljcPQmx3q3vqNIVkSrXtBa4iUu3rXugAhrpVt1ZYBx6eb Q0EzVIvm0RYm1UI4xKaus/I/nNxs0kOXPBU0ksLpZrUMFar+mQwN8Tu+/13ihjV9 z2swS3+415qpmJ6zDsrM1DKdIRI669pB7YIcNrmhD89JfR+s+DtB1K1LGjSxqHlc enYDJc2VtLAI1c9ldH6jKT3OKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZ5lQk8 iuSeLiAP6gheJAJNbwYuMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjA5NS84Qzg5OUE0MkFCNTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZL ZnpIMU9WLUkzWmZaUncwWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSFhygn3tr411tJ8n59Rle11Tr+bK0elizRzTJvVuINpD9eSrRVl9K D09wATFC13CbzIcHzZ1PGA+brgoYrfNOq8OWZ1drP1djSUfwUSVInejQxvmpdtPi JlqprWGUFeHVMjCu5hBnc2du1064MpVHZHDYEhBSUid2+Qr4F+h2me1pMiltBkql I05Nu8pd4xCzYo8WZhLgKf2Y18qcBgUrHa5oBJWSGstu/hNuazoLpG1XrSnNHwtf PTzxSbf7j0Cr1IC4R6RszquPjMzcudxu2yGeZcgmuhlRB/GYdfPV6cIXycG/FYOV d2Nm0w5z2NpeSI1UoJ+q3WuoxJF9RyP7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:08 2025 by rpki-client