$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft File: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft (raw, json) Hash identifier: 7wq5pCQBaw542rqRZdidHowUreQNkR87sb1pNf2Q3bI= Subject key identifier: 14:45:FA:53:93:FD:24:46:33:57:EC:68:56:62:22:FC:DF:5D:07:E5 Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1D84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft Manifest number: 1D75 Signing time: Sun 20 Jul 2025 16:09:19 +0000 Manifest this update: Sun 20 Jul 2025 16:09:18 +0000 Manifest next update: Sun 27 Jul 2025 16:09:18 +0000 Files and hashes: 1: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl (hash: mRj0xfRAijwN6fuYndGij8mMSky9XMvx/kkswtgksWU=) 2: 7DB839C04C5F11F09A279D41C4F9AE02.roa (hash: 1Kglhggr20KDI8G+GusY7qefa3HmD56lGdxiimkKhgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7556 (0x1d84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095, serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: Jul 20 16:09:18 2025 GMT Not After : Jul 27 16:09:18 2025 GMT Subject: CN=687d14af-7720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:ef:a4:08:a7:bf:0b:9f:f2:bd:0c:e3:66: 51:b3:cf:f1:75:81:71:d2:31:7f:b1:d7:86:32:f3: b7:3e:4c:23:95:8d:83:a8:f7:f8:42:c5:15:b2:e8: 86:ad:92:ff:5c:e2:85:d6:24:39:12:44:c2:85:9e: 03:3b:4c:91:c9:a1:36:6d:8e:98:5f:9f:dc:3b:78: 71:01:dc:18:dd:2d:a2:94:11:f6:2b:3f:28:fc:f7: 35:65:04:35:52:52:4f:22:8b:7b:54:ff:8d:b8:f4: 91:d0:22:a0:67:8c:7a:9c:35:f8:0a:aa:90:d5:65: ad:ed:cb:57:51:1e:73:fe:47:5b:de:15:b6:8e:5f: 0d:09:4e:9a:24:4d:f6:b2:27:5f:7e:33:c9:cf:a4: a2:4a:08:30:2c:1e:3f:1a:22:2a:b4:f4:db:23:e8: 8a:a9:e4:e3:4a:8f:60:9e:2a:cd:6f:82:af:8c:18: 86:d8:b5:48:b0:e1:7b:bd:b3:a3:a6:c4:44:7f:ee: dc:2b:1b:9b:4f:ab:f2:e7:a6:07:ad:85:94:3c:01: c2:9f:14:3f:fd:6e:8a:04:f3:ee:0b:92:5f:00:18: da:fe:1c:80:16:82:c6:bf:70:57:48:00:2f:d6:17: 36:22:23:3a:9e:57:e6:e9:18:70:79:d4:70:b8:94: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:FA:53:93:FD:24:46:33:57:EC:68:56:62:22:FC:DF:5D:07:E5 X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:f4:85:6b:98:4c:3f:7d:e0:d5:8d:9f:91:90:6e:05:06:18: 0c:81:3a:f8:0a:ae:27:ff:38:91:fe:23:ef:a2:64:bd:f5:47: 02:bb:22:d5:de:6a:02:42:9a:0c:ec:56:d7:90:8d:b5:19:fd: 7c:df:16:33:f9:c4:9e:69:ea:23:ce:9d:3a:6e:86:df:39:14: 30:f5:0f:8c:32:35:5e:43:9a:c7:c2:5f:1b:5b:6b:5c:b4:50: da:17:df:8f:5b:91:96:28:46:64:bb:d0:9f:1d:1f:30:c7:ff: e6:42:4c:a5:e8:5d:ca:e1:5c:ae:78:cc:f4:f5:a5:63:54:c0: 5f:72:2d:57:49:1b:a4:25:52:8e:f5:f5:de:fb:18:5a:10:3e: 9b:bb:ef:69:20:61:55:f4:54:3e:a0:8e:68:f4:83:9b:6b:aa: 0e:a6:be:5a:11:c7:b6:55:44:c5:df:07:d4:e7:28:99:af:df: 62:3f:be:66:bd:02:6d:68:b3:ce:1c:c7:b8:eb:8c:9e:47:5e: bd:2d:38:41:c2:39:7c:83:09:1a:d6:af:66:4d:48:d8:ae:be: 62:d0:b5:91:9b:a7:83:15:70:4b:be:d5:27:94:06:f5:74:39: 0c:3d:df:bf:d9:2a:2c:b2:e3:f4:dc:c7:bc:37:b3:d2:ad:b5: 3e:3f:c0:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjUwNzIwMTYwOTE4WhcNMjUwNzI3MTYwOTE4WjAYMRYwFAYD VQQDEw02ODdkMTRhZi03NzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1XvpAinvwuf8r0M42ZRs8/xdYFx0jF/sdeGMvO3PkwjlY2DqPf4QsUVsuiG rZL/XOKF1iQ5EkTChZ4DO0yRyaE2bY6YX5/cO3hxAdwY3S2ilBH2Kz8o/Pc1ZQQ1 UlJPIot7VP+NuPSR0CKgZ4x6nDX4CqqQ1WWt7ctXUR5z/kdb3hW2jl8NCU6aJE32 sidffjPJz6SiSggwLB4/GiIqtPTbI+iKqeTjSo9gnirNb4KvjBiG2LVIsOF7vbOj psREf+7cKxubT6vy56YHrYWUPAHCnxQ//W6KBPPuC5JfABja/hyAFoLGv3BXSAAv 1hc2IiM6nlfm6RhwedRwuJRJ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRF+lOT /SRGM1fsaFZiIvzfXQflMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjA5NS84Qzg5OUE0MkFCNTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZL ZnpIMU9WLUkzWmZaUncwWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD9IVrmEw/feDVjZ+RkG4FBhgMgTr4Cq4n/ziR/iPvomS99UcCuyLV 3moCQpoM7FbXkI21Gf183xYz+cSeaeojzp06bobfORQw9Q+MMjVeQ5rHwl8bW2tc tFDaF9+PW5GWKEZku9CfHR8wx//mQkyl6F3K4VyueMz09aVjVMBfci1XSRukJVKO 9fXe+xhaED6bu+9pIGFV9FQ+oI5o9IOba6oOpr5aEce2VUTF3wfU5yiZr99iP75m vQJtaLPOHMe464yeR169LThBwjl8gwka1q9mTUjYrr5i0LWRm6eDFXBLvtUnlAb1 dDkMPd+/2SossuP03Me8N7PSrbU+P8Ao -----END CERTIFICATE-----Generated at Mon Jul 21 05:48:59 2025 by rpki-client