$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft File: MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json) Hash identifier: pFPtDBpX9EzCj74iGG+UgKl3EJbpkuWiYPpSCfIllZU= Subject key identifier: 1B:2E:86:DB:31:7C:8A:EB:E7:3A:FB:AE:13:C2:B9:89:C7:CD:89:C7 Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D Certificate issuer: /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft Manifest number: 049B Signing time: Wed 04 Jun 2025 23:50:49 +0000 Manifest this update: Wed 04 Jun 2025 23:50:48 +0000 Manifest next update: Wed 11 Jun 2025 23:50:48 +0000 Files and hashes: 1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: qNJBXwSMOjbvQxfmZEydAviebcbEQ4AwkVIby9kCX0o=) 2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: O5o2WM89g2GajktjirO4l7am93YdomSAoRe9/bA2z6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 23:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D Validity Not Before: Jun 4 23:50:48 2025 GMT Not After : Jun 11 23:50:48 2025 GMT Subject: CN=6840dbd9-5b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:eb:74:f4:0e:2b:a2:b1:47:b0:56:b3:fa: b0:6f:5c:b0:51:e7:58:81:95:ee:e3:49:bc:7b:20: 0a:76:09:10:dc:ca:52:88:43:d3:15:0d:ad:aa:61: cf:02:1b:b3:98:f5:90:b5:87:dd:bf:0e:74:8f:1e: ed:4e:88:9d:cd:bc:20:72:d0:ca:1f:4f:05:81:4b: 45:31:34:1f:55:77:a1:00:93:1a:d2:5c:d9:3e:2e: e4:00:90:52:ea:6b:2e:83:66:80:57:19:e2:51:ec: 15:a8:68:94:31:4c:ae:f5:2b:64:74:fa:9f:3c:b4: 23:df:c4:67:1a:16:ef:50:cd:46:8c:f1:fc:6c:2d: f4:15:b4:3e:34:f9:21:c9:87:73:f7:16:22:95:f0: f9:6f:f5:cb:f6:0e:37:ff:23:1d:12:41:dd:8e:e3: db:0a:a4:81:24:89:d3:61:18:32:e5:03:5d:e2:30: c9:de:8b:8a:b7:d4:ca:ff:48:a3:8e:a7:0f:0f:1b: b4:92:f2:15:8a:90:26:da:03:e3:12:ca:e6:e2:e9: 6e:c2:dd:ed:1e:02:ff:59:74:ac:89:76:7e:ae:9a: 94:d9:3e:b7:3a:0c:a7:ae:6c:e3:46:22:c2:ac:3f: 69:e4:de:5c:b9:a4:ea:11:51:f9:1f:72:f6:07:3b: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2E:86:DB:31:7C:8A:EB:E7:3A:FB:AE:13:C2:B9:89:C7:CD:89:C7 X509v3 Authority Key Identifier: keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:99:df:87:9c:91:10:87:6c:e5:45:ec:1f:9d:a5:e7:ff:f5: 56:1e:15:30:88:71:f1:f7:de:dc:9c:b1:19:b9:08:c1:f3:0b: 63:01:2b:ce:82:af:bf:9c:64:f5:84:52:d0:f8:11:ea:4b:c6: 77:96:1b:1a:f9:71:aa:cb:52:c0:2c:cb:79:c3:ca:12:a2:88: 6b:6e:4d:0b:c5:59:80:ac:69:46:0c:61:d0:7e:cc:47:d7:ad: 03:92:94:a5:61:c8:ec:94:ec:49:18:ff:c6:62:9d:2c:ea:55: 60:80:77:18:60:cd:31:bb:21:29:a8:97:ea:c7:f2:36:8b:6d: 15:c5:18:90:0d:70:35:5c:ea:c2:57:e1:c8:66:93:ca:4b:50: 74:ed:30:e2:51:b1:c5:1d:9d:e7:98:d6:5b:e6:ca:00:24:c6: eb:c2:6b:ca:a1:6d:3d:5c:a2:c2:61:a0:09:33:26:71:8a:77: 28:aa:d9:7e:fa:3e:84:6e:c7:73:df:83:a7:1e:cd:04:ab:cb: 28:1d:e1:31:93:10:ab:70:02:94:52:9c:ca:d4:41:49:ba:20: 8a:96:d1:f0:3f:2c:ad:cd:ad:3c:a2:53:85:a5:46:53:0f:21: 52:18:29:00:4a:11:0e:13:38:c6:ad:09:f9:55:91:d0:f5:d2: 26:15:6a:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzNzExMTAvBgNVBAUTKDMyRjg5MDBEMzg1NkJFNDNBNzJENkM3RjkzRTkwNEI1 QjgzQ0MzNEQwHhcNMjUwNjA0MjM1MDQ4WhcNMjUwNjExMjM1MDQ4WjAYMRYwFAYD VQQDEw02ODQwZGJkOS01YjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJDrdPQOK6KxR7BWs/qwb1ywUedYgZXu40m8eyAKdgkQ3MpSiEPTFQ2tqmHP AhuzmPWQtYfdvw50jx7tToidzbwgctDKH08FgUtFMTQfVXehAJMa0lzZPi7kAJBS 6msug2aAVxniUewVqGiUMUyu9StkdPqfPLQj38RnGhbvUM1GjPH8bC30FbQ+NPkh yYdz9xYilfD5b/XL9g43/yMdEkHdjuPbCqSBJInTYRgy5QNd4jDJ3ouKt9TK/0ij jqcPDxu0kvIVipAm2gPjEsrm4uluwt3tHgL/WXSsiXZ+rpqU2T63OgynrmzjRiLC rD9p5N5cuaTqEVH5H3L2BzsriQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsuhtsx fIrr5zr7rhPCuYnHzYnHMB8GA1UdIwQYMBaAFDL4kA04Vr5Dpy1sf5PpBLW4PMNN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTM3MS8zNkZFRTdFQTM4 QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3ZrT25MV3hfay1rRXRiZzh3 MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012aVFEVGhXdmtPbkxXeF9rLWtFdGJnOHcwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTM3MS8zNkZFRTdFQTM4QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3Zr T25MV3hfay1rRXRiZzh3MDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAmd+HnJEQh2zlRewfnaXn//VWHhUwiHHx997cnLEZuQjB8wtjASvO gq+/nGT1hFLQ+BHqS8Z3lhsa+XGqy1LALMt5w8oSoohrbk0LxVmArGlGDGHQfsxH 160DkpSlYcjslOxJGP/GYp0s6lVggHcYYM0xuyEpqJfqx/I2i20VxRiQDXA1XOrC V+HIZpPKS1B07TDiUbHFHZ3nmNZb5soAJMbrwmvKoW09XKLCYaAJMyZxincoqtl+ +j6Ebsdz34OnHs0Eq8soHeExkxCrcAKUUpzK1EFJuiCKltHwPyytza08olOFpUZT DyFSGCkAShEOEzjGrQn5VZHQ9dImFWr3 -----END CERTIFICATE-----Generated at Thu Jun 5 19:58:33 2025 by rpki-client