$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft File: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft (raw, json) Hash identifier: jmCf5gCmvhGxu6ObRX9BSeARHyZnRy8UfPxkgu0ZcsU= Subject key identifier: 78:5F:76:E6:9C:C3:95:4C:93:CF:94:DA:21:54:28:04:08:61:03:89 Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft Manifest number: 1D40 Signing time: Sat 12 Apr 2025 16:05:14 +0000 Manifest this update: Sat 12 Apr 2025 16:05:13 +0000 Manifest next update: Sat 19 Apr 2025 16:05:13 +0000 Files and hashes: 1: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl (hash: v1m3oaQJB541rRZhb15wcP5Qqu6ugm/acPuWh76JPgg=) 2: 9DC06B6E36A211E893BF3061C4F9AE02.roa (hash: hlCAOqdM82iuB3BtNLbjrR+eENtQp+VFzUFQxq5vFhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7502 (0x1d4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095, serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: Apr 12 16:05:13 2025 GMT Not After : Apr 19 16:05:13 2025 GMT Subject: CN=67fa8f39-d80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:25:86:9b:c5:a9:0e:6c:5f:75:2f:2b:be:fc: 84:00:72:98:5b:ca:23:ed:dd:33:2e:47:17:bf:a2: dd:ba:5d:c5:79:e8:db:fa:6d:00:60:06:d7:fa:c9: 9b:e2:da:61:ec:e6:8a:a4:03:95:8c:15:19:6f:0e: 74:df:7b:cf:e5:65:d5:92:1e:e8:b8:34:b2:c6:93: 51:03:8a:2f:57:e1:02:74:fd:36:62:c7:ff:a8:0c: b9:dc:ca:92:b5:4d:e0:e6:2c:63:56:cf:74:0b:ab: 1d:1a:19:5c:87:76:91:4a:63:13:21:ea:03:1a:81: 6a:b4:05:2f:5e:df:44:5b:23:02:15:a7:76:cb:d6: 37:14:51:b1:c5:1e:e3:ec:b6:62:9c:2e:43:a8:e6: e7:9c:8a:25:d6:b0:8a:32:90:9c:2a:9a:03:63:cd: 06:1d:b7:d1:d8:79:ed:d8:37:13:11:49:ec:3f:c4: 50:2b:a6:17:63:bf:45:0d:87:2e:7a:7e:d2:72:87: 5d:2f:08:69:31:68:25:4f:1a:04:d8:72:71:ba:29: cb:9d:64:36:89:2e:eb:f6:aa:bf:80:cc:12:17:2c: f3:e7:d7:d2:c4:8e:9e:1f:bb:83:81:e6:26:d6:f0: f4:4d:66:80:0d:04:f9:a0:d2:96:e1:dc:5d:0e:b2: 55:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5F:76:E6:9C:C3:95:4C:93:CF:94:DA:21:54:28:04:08:61:03:89 X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:02:e4:19:52:ef:aa:37:16:aa:b1:a2:66:50:d7:ac:52:e6: bc:b1:ae:27:d3:a3:cd:dd:e5:ac:4a:f6:51:cb:ab:72:fc:c1: 60:a0:61:f8:c2:4d:c2:4d:1d:65:3c:b0:86:66:69:25:ef:27: f9:a5:a3:a2:ce:ce:3c:8c:f6:65:78:91:34:a7:36:a1:9b:fe: d3:49:69:29:2d:80:81:a1:db:d5:b2:07:a1:d4:c1:ac:f8:5e: ed:5d:13:67:b0:15:9b:0d:db:23:eb:ef:b0:22:09:df:c4:fe: 27:1b:88:ca:c4:c7:70:b8:d8:a1:e9:59:71:21:6d:32:37:6b: 90:4c:10:e7:c3:a4:99:f2:d1:9f:66:48:7b:ad:25:9a:6c:e3: 11:e1:d8:49:f3:ee:5f:04:34:ae:1b:d5:37:d7:7b:24:85:f3: 07:ba:61:31:77:87:be:a3:09:18:27:f6:bf:91:ed:ec:ab:c2: b9:37:1a:56:cd:7e:d5:68:86:b8:76:43:fb:7f:dc:2d:ae:62: c8:81:d4:37:a4:e6:b0:fc:dd:31:a3:ca:9a:15:2a:12:90:2f: e7:75:6d:3b:cf:1e:ee:a9:91:f7:f1:19:a3:11:26:e8:b5:f4: ea:c6:57:44:ab:98:81:1a:20:a9:b8:c5:4c:f2:d6:96:30:a4: df:e9:17:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjUwNDEyMTYwNTEzWhcNMjUwNDE5MTYwNTEzWjAYMRYwFAYD VQQDEw02N2ZhOGYzOS1kODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+iWGm8WpDmxfdS8rvvyEAHKYW8oj7d0zLkcXv6Ldul3Feejb+m0AYAbX+smb 4tph7OaKpAOVjBUZbw5033vP5WXVkh7ouDSyxpNRA4ovV+ECdP02Ysf/qAy53MqS tU3g5ixjVs90C6sdGhlch3aRSmMTIeoDGoFqtAUvXt9EWyMCFad2y9Y3FFGxxR7j 7LZinC5DqObnnIol1rCKMpCcKpoDY80GHbfR2Hnt2DcTEUnsP8RQK6YXY79FDYcu en7ScoddLwhpMWglTxoE2HJxuinLnWQ2iS7r9qq/gMwSFyzz59fSxI6eH7uDgeYm 1vD0TWaADQT5oNKW4dxdDrJVOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhfduac w5VMk8+U2iFUKAQIYQOJMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjA5NS84Qzg5OUE0MkFCNTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZL ZnpIMU9WLUkzWmZaUncwWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMAuQZUu+qNxaqsaJmUNesUua8sa4n06PN3eWsSvZRy6ty/MFgoGH4 wk3CTR1lPLCGZmkl7yf5paOizs48jPZleJE0pzahm/7TSWkpLYCBodvVsgeh1MGs +F7tXRNnsBWbDdsj6++wIgnfxP4nG4jKxMdwuNih6VlxIW0yN2uQTBDnw6SZ8tGf Zkh7rSWabOMR4dhJ8+5fBDSuG9U313skhfMHumExd4e+owkYJ/a/ke3sq8K5NxpW zX7VaIa4dkP7f9wtrmLIgdQ3pOaw/N0xo8qaFSoSkC/ndW07zx7uqZH38RmjESbo tfTqxldEq5iBGiCpuMVM8taWMKTf6RdO -----END CERTIFICATE-----Generated at Sat Apr 12 17:29:12 2025 by rpki-client