$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft File: mvCw748-tT8U2E-jphBr5kvXgnI.mft (raw, json) Hash identifier: 4+EbQ5+YvKcPE4obaxclT9frhyf+HdqYfRLoTk3e2/I= Subject key identifier: 97:D7:DD:CF:47:52:93:21:7E:A2:49:B9:BA:BC:DD:53:68:DD:60:93 Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 Certificate issuer: /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft Manifest number: 0410 Signing time: Mon 21 Jul 2025 00:37:45 +0000 Manifest this update: Mon 21 Jul 2025 00:37:44 +0000 Manifest next update: Mon 28 Jul 2025 00:37:44 +0000 Files and hashes: 1: mvCw748-tT8U2E-jphBr5kvXgnI.crl (hash: k19k/Z2NVlgOkxKaaXu0TDw0RwNDSzduDyqEhWD/HIE=) 2: 8EB98374776E11ECA05F7133C4F9AE02.roa (hash: 0odSjBqkbrai7nHTuGPVDMCVhidqU26/lOEVMrtNDiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B06CA, serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Validity Not Before: Jul 21 00:37:44 2025 GMT Not After : Jul 28 00:37:44 2025 GMT Subject: CN=687d8bd8-a696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c0:dc:76:92:22:e5:76:a8:6b:f1:45:19:76: 02:35:2d:61:47:7b:57:e2:b8:ca:d3:0b:f9:1c:cc: 38:9c:49:5a:b0:43:c6:28:4e:12:56:68:26:54:36: fb:b5:47:c2:6d:f1:d9:09:ed:a5:94:79:d2:5f:20: 02:6d:e0:36:ad:ec:ce:99:ce:ff:3a:1c:93:e0:98: 04:5b:d1:4f:b8:b7:a4:69:d5:ff:1a:96:18:02:c2: 74:11:a3:42:08:96:d2:21:74:aa:24:bc:35:5c:59: 6e:79:f0:81:12:21:b0:07:8c:b1:a5:a2:a6:1d:4b: 2b:f3:52:3f:6a:34:4b:1a:41:5a:43:97:50:7d:10: b1:3e:dd:51:39:00:ec:dc:bc:ea:b1:c4:b1:a1:55: 54:b4:02:4f:c2:83:fb:7c:47:a5:56:63:e2:f0:2d: 76:66:dd:13:ce:d7:f5:62:a7:7f:c3:0a:8d:e4:5c: 7e:45:39:19:ff:8a:a3:d6:0e:cc:76:91:8b:7a:81: 0f:8d:40:2a:d2:09:a3:b2:e4:cd:45:60:53:07:63: 10:3b:13:95:1c:e2:f2:38:0c:86:fb:6a:e3:1d:99: df:3d:16:5b:1c:44:df:91:59:22:8b:41:9f:76:14: 03:9e:72:9a:a9:bf:4b:cb:d8:c3:d1:d6:d1:ef:a4: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D7:DD:CF:47:52:93:21:7E:A2:49:B9:BA:BC:DD:53:68:DD:60:93 X509v3 Authority Key Identifier: keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c9:9a:d6:77:a0:82:71:7c:3c:91:73:96:06:4e:ad:1f:3b: f6:ef:6b:95:f9:14:f0:f5:ec:f1:76:bf:34:11:15:3d:27:e6: 9e:27:3b:7b:09:2f:ab:f9:c0:9c:f9:ed:dd:c3:48:b7:9d:aa: bc:b8:3d:e0:ff:53:97:4b:3b:4f:41:05:ab:30:56:36:c9:c4: 14:3b:81:6a:03:45:d3:1c:0e:95:a1:67:43:76:fc:af:89:75: b5:2b:1d:dc:bd:4e:ee:88:27:c8:5f:c4:4b:be:77:6d:63:e9: 21:25:42:f5:5c:48:8e:a7:50:a9:47:e4:7b:cd:31:2a:50:ad: 83:70:5f:a0:e1:b0:8b:40:53:47:a0:52:11:75:9c:fe:e7:77: 13:e1:c0:b8:72:b0:87:00:e7:b7:63:1d:05:c5:58:33:10:3b: ce:00:72:c7:ab:10:63:32:29:3a:e4:e8:9b:49:74:c4:a6:e2: 1d:bf:af:8a:36:9c:b7:70:88:7c:b7:3d:f5:90:52:10:2a:bb: b1:01:ab:1d:62:78:3c:ed:f1:bc:da:73:19:50:33:57:b6:d5: 7e:10:c6:8f:e5:9a:25:c2:18:72:71:f6:1d:60:24:d7:dd:1c: 5d:59:90:42:b4:ad:50:61:7a:48:c7:57:10:a5:d5:55:4c:c4: d7:1c:89:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA2Q0ExMTAvBgNVBAUTKDlBRjBCMEVGOEYzRUI1M0YxNEQ4NEZBM0E2MTA2QkU2 NEJENzgyNzIwHhcNMjUwNzIxMDAzNzQ0WhcNMjUwNzI4MDAzNzQ0WjAYMRYwFAYD VQQDEw02ODdkOGJkOC1hNjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38DcdpIi5Xaoa/FFGXYCNS1hR3tX4rjK0wv5HMw4nElasEPGKE4SVmgmVDb7 tUfCbfHZCe2llHnSXyACbeA2rezOmc7/OhyT4JgEW9FPuLekadX/GpYYAsJ0EaNC CJbSIXSqJLw1XFluefCBEiGwB4yxpaKmHUsr81I/ajRLGkFaQ5dQfRCxPt1ROQDs 3LzqscSxoVVUtAJPwoP7fEelVmPi8C12Zt0Tztf1Yqd/wwqN5Fx+RTkZ/4qj1g7M dpGLeoEPjUAq0gmjsuTNRWBTB2MQOxOVHOLyOAyG+2rjHZnfPRZbHETfkVkii0Gf dhQDnnKaqb9Ly9jD0dbR76QEfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfX3c9H UpMhfqJJubq83VNo3WCTMB8GA1UdIwQYMBaAFJrwsO+PPrU/FNhPo6YQa+ZL14Jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDZDQS9EMkUwMDg3Mjc3 NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRUOFUyRS1qcGhCcjVrdlhn bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL212Q3c3NDgtdFQ4VTJFLWpwaEJyNWt2WGduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDZDQS9EMkUwMDg3Mjc3NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRU OFUyRS1qcGhCcjVrdlhnbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4yZrWd6CCcXw8kXOWBk6tHzv272uV+RTw9ezxdr80ERU9J+aeJzt7 CS+r+cCc+e3dw0i3naq8uD3g/1OXSztPQQWrMFY2ycQUO4FqA0XTHA6VoWdDdvyv iXW1Kx3cvU7uiCfIX8RLvndtY+khJUL1XEiOp1CpR+R7zTEqUK2DcF+g4bCLQFNH oFIRdZz+53cT4cC4crCHAOe3Yx0FxVgzEDvOAHLHqxBjMik65OibSXTEpuIdv6+K Npy3cIh8tz31kFIQKruxAasdYng87fG82nMZUDNXttV+EMaP5ZolwhhycfYdYCTX 3RxdWZBCtK1QYXpIx1cQpdVVTMTXHInb -----END CERTIFICATE-----Generated at Mon Jul 21 23:51:43 2025 by rpki-client