$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft File: mvCw748-tT8U2E-jphBr5kvXgnI.mft (raw, json) Hash identifier: UlEkDafhyVFP5q9BjvzS4cpoSf7ihMBWSwNHSiCUORo= Subject key identifier: 86:08:76:C9:72:6E:BA:AE:42:D8:DB:13:8A:C4:6A:70:EE:18:D1:70 Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 Certificate issuer: /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Certificate serial: 03DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft Manifest number: 03D7 Signing time: Sat 29 Mar 2025 00:49:07 +0000 Manifest this update: Sat 29 Mar 2025 00:49:07 +0000 Manifest next update: Sat 05 Apr 2025 00:49:07 +0000 Files and hashes: 1: mvCw748-tT8U2E-jphBr5kvXgnI.crl (hash: ID4rjKkY3YVX4Xy5YcUe1vtW6rtM/FAEj1IbV/xwCD0=) 2: 8EB98374776E11ECA05F7133C4F9AE02.roa (hash: 0odSjBqkbrai7nHTuGPVDMCVhidqU26/lOEVMrtNDiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 987 (0x3db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B06CA Validity Not Before: Mar 29 00:49:07 2025 GMT Not After : Apr 5 00:49:07 2025 GMT Subject: CN=67e74383-fca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:e3:60:f1:a7:5b:f0:86:33:f6:74:d1:53: 3e:ef:d2:fb:a0:4e:14:86:11:30:3c:be:b1:79:52: 6c:28:36:23:f6:84:30:44:f7:df:8c:9c:37:ff:cf: d3:e1:80:56:02:69:6e:e9:2e:78:e5:6d:a1:b3:c4: 02:65:78:7a:12:e7:e3:f8:90:62:1d:87:4b:3b:a9: b6:23:29:ad:00:bd:b1:f0:31:fd:8d:af:9a:78:32: 8d:d2:74:80:2a:e9:2c:1b:a1:d2:0b:75:2f:bd:e8: b2:1a:77:99:9d:f8:99:39:f8:14:12:44:f7:d3:42: eb:9b:76:f3:d9:fe:c3:3a:bf:99:ff:32:3c:b7:49: 87:72:80:32:5c:42:ae:97:cb:4d:03:47:1c:6b:13: e2:e4:ea:3b:8d:1f:9b:68:73:46:98:7a:e5:b9:e4: 0c:be:65:be:69:83:e3:b0:b7:86:e3:2c:65:44:15: 4f:95:ab:03:4f:fd:9d:81:91:57:f1:a4:f5:87:1d: c0:91:ff:a2:28:92:4f:3c:8b:9d:05:71:ed:31:1b: a7:72:15:e0:2c:e8:9e:54:eb:b2:4c:d7:a8:e8:fd: 4b:ec:db:f1:83:64:0b:3f:8c:b8:18:b5:80:12:70: 91:e0:0e:99:9c:ed:c0:a0:c1:5e:36:f3:3c:e1:6a: 7d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:08:76:C9:72:6E:BA:AE:42:D8:DB:13:8A:C4:6A:70:EE:18:D1:70 X509v3 Authority Key Identifier: keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9d:dc:35:43:e1:23:87:3a:dc:b7:48:e2:b1:2b:87:8b:9e: 76:25:a0:a9:d1:af:31:7d:0c:6e:05:31:f5:20:50:33:69:10: 74:b5:b9:d8:9c:f4:46:49:e6:4c:e7:0f:6b:bd:f7:c4:21:d8: f9:e5:88:e5:a9:b1:f9:6f:47:d6:0d:48:5b:7d:a8:c3:30:a0: 20:bd:50:bc:2e:c8:68:5e:33:89:60:1b:88:a4:88:29:e8:10: b2:79:38:0f:a6:4d:2f:2d:11:3c:5c:73:04:51:f2:c0:bd:d3: c6:5f:59:b9:29:fb:d4:51:32:99:e2:a2:ef:cf:3d:ee:b7:71: 14:c2:78:6d:cf:44:f4:37:0d:3d:0d:4c:2e:97:0d:83:19:00: e0:d2:b0:07:f5:56:e9:9d:50:e0:f3:9d:3a:83:dd:93:1d:f1: 93:50:0c:a0:71:aa:7f:1e:ee:9d:5b:5e:c1:d6:5d:07:c1:ca: aa:39:3b:ed:a2:c1:52:f2:ae:65:f9:ff:5b:0e:63:3c:e9:ea: 11:aa:fb:49:d0:69:26:77:1b:4b:11:3e:43:c6:14:12:b4:fb: fb:0e:c4:f6:1b:8a:b6:11:49:51:3d:95:57:c7:37:85:dd:95: 4e:4e:13:98:96:2e:49:18:84:96:58:b9:fb:28:bf:d4:b1:3a: 50:30:24:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA2Q0ExMTAvBgNVBAUTKDlBRjBCMEVGOEYzRUI1M0YxNEQ4NEZBM0E2MTA2QkU2 NEJENzgyNzIwHhcNMjUwMzI5MDA0OTA3WhcNMjUwNDA1MDA0OTA3WjAYMRYwFAYD VQQDEw02N2U3NDM4My1mY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xvjYPGnW/CGM/Z00VM+79L7oE4UhhEwPL6xeVJsKDYj9oQwRPffjJw3/8/T 4YBWAmlu6S545W2hs8QCZXh6Eufj+JBiHYdLO6m2IymtAL2x8DH9ja+aeDKN0nSA KuksG6HSC3UvveiyGneZnfiZOfgUEkT300Lrm3bz2f7DOr+Z/zI8t0mHcoAyXEKu l8tNA0ccaxPi5Oo7jR+baHNGmHrlueQMvmW+aYPjsLeG4yxlRBVPlasDT/2dgZFX 8aT1hx3Akf+iKJJPPIudBXHtMRunchXgLOieVOuyTNeo6P1L7Nvxg2QLP4y4GLWA EnCR4A6ZnO3AoMFeNvM84Wp9TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYIdsly brquQtjbE4rEanDuGNFwMB8GA1UdIwQYMBaAFJrwsO+PPrU/FNhPo6YQa+ZL14Jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDZDQS9EMkUwMDg3Mjc3 NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRUOFUyRS1qcGhCcjVrdlhn bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL212Q3c3NDgtdFQ4VTJFLWpwaEJyNWt2WGduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDZDQS9EMkUwMDg3Mjc3NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRU OFUyRS1qcGhCcjVrdlhnbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdndw1Q+Ejhzrct0jisSuHi552JaCp0a8xfQxuBTH1IFAzaRB0tbnY nPRGSeZM5w9rvffEIdj55YjlqbH5b0fWDUhbfajDMKAgvVC8LshoXjOJYBuIpIgp 6BCyeTgPpk0vLRE8XHMEUfLAvdPGX1m5KfvUUTKZ4qLvzz3ut3EUwnhtz0T0Nw09 DUwulw2DGQDg0rAH9VbpnVDg8506g92THfGTUAygcap/Hu6dW17B1l0HwcqqOTvt osFS8q5l+f9bDmM86eoRqvtJ0GkmdxtLET5DxhQStPv7DsT2G4q2EUlRPZVXxzeF 3ZVOThOYli5JGISWWLn7KL/UsTpQMCSM -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:47 2025 by rpki-client