$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft File: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft (raw, json) Hash identifier: C5/zMDn9h8C712C7QyobtXoy6X1Tb9gYEMtZCP14hXg= Subject key identifier: CA:B1:F2:16:D2:9F:19:25:F4:2F:49:30:E3:DF:CB:38:B6:0B:16:30 Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1D66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft Manifest number: 1D58 Signing time: Fri 30 May 2025 16:18:52 +0000 Manifest this update: Fri 30 May 2025 16:18:51 +0000 Manifest next update: Fri 06 Jun 2025 16:18:51 +0000 Files and hashes: 1: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl (hash: XE76XJ7QlM3Eo31/R0PPGdcpSTP8OwzlW1SIbhFTAc4=) 2: 9DC06B6E36A211E893BF3061C4F9AE02.roa (hash: hlCAOqdM82iuB3BtNLbjrR+eENtQp+VFzUFQxq5vFhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7526 (0x1d66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095, serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: May 30 16:18:51 2025 GMT Not After : Jun 6 16:18:51 2025 GMT Subject: CN=6839da6c-2a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:39:9b:29:9e:0c:b4:bd:3b:c5:94:57:98: ce:06:ed:b8:d5:00:7e:6f:df:f0:e5:81:a3:8e:7a: c0:6b:5b:29:8e:16:b8:76:1e:80:d0:2f:dc:45:17: c5:d8:c3:d0:2e:13:a2:60:1d:76:bc:f0:17:bd:7e: fc:0b:f6:d8:d9:7b:49:fd:0b:c7:a1:f1:25:3c:5a: c9:e5:e5:a5:51:0f:43:0d:45:ca:e5:5a:d7:85:d5: f4:63:56:31:70:72:c5:71:10:16:a3:91:c1:89:a1: 1e:a6:c2:a3:70:2b:25:e5:74:26:c8:4d:d0:7f:a5: e0:b8:e0:53:3e:69:1e:33:0f:2f:8c:e2:70:c4:37: 77:eb:29:1d:3d:52:f8:6e:48:42:95:81:34:c7:35: 38:41:55:3f:fd:8a:e6:d7:dc:8a:19:72:69:a8:fe: 50:a7:40:ca:14:2d:9a:28:fe:47:d9:b3:38:b6:f3: c5:24:31:46:73:17:6a:6a:0d:a9:89:10:12:e1:24: ef:86:47:ff:7b:99:d1:bd:ce:7f:1c:61:41:98:22: 03:76:09:21:fb:e1:e6:a5:ec:f7:e1:7e:39:2a:d0: 0c:c1:27:f9:00:43:66:24:ee:f3:52:65:08:80:2d: d7:22:93:da:bd:8a:8b:88:91:b5:ab:74:d2:8e:7e: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B1:F2:16:D2:9F:19:25:F4:2F:49:30:E3:DF:CB:38:B6:0B:16:30 X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7b:82:0c:3d:49:6b:3b:c8:12:41:09:9c:f4:eb:d8:62:73: bf:be:c7:61:59:7c:e1:b5:a5:54:73:26:16:1e:f0:c1:44:61: 6e:21:22:45:77:4e:b9:f1:1e:1d:c7:b4:29:00:80:dd:27:73: 12:0d:55:70:75:9e:44:2e:3e:0d:35:81:02:cb:ad:73:6c:66: a4:d8:04:e1:d3:bc:25:6d:ef:5c:dd:47:4c:73:fa:57:50:6f: 29:e1:93:21:3e:a6:f9:24:91:ed:d6:92:29:4d:56:7b:1a:8c: e6:da:96:47:2b:2a:8e:e9:f3:5d:1d:b5:64:ee:c9:27:53:5e: 77:a5:78:fc:a6:d0:04:35:de:23:7c:ae:78:3e:e1:75:10:3b: 12:0d:34:75:d2:ef:3b:cf:62:97:4b:2d:cf:77:10:03:d7:68: 03:4f:af:d2:68:19:f3:96:99:bc:75:00:d1:ab:92:93:20:7c: 22:bf:93:e2:c0:8c:1c:ef:32:af:46:e4:8b:51:5c:e7:92:64: 5c:66:28:7a:a6:5e:ff:6d:c7:92:79:59:d9:00:75:70:60:36: c9:58:fe:4d:54:f9:00:c4:25:83:6d:34:01:8c:e2:59:ea:3e: f8:97:3e:03:73:3b:7b:98:44:4b:73:d1:21:e6:0e:73:00:ab: b0:b1:5a:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjUwNTMwMTYxODUxWhcNMjUwNjA2MTYxODUxWjAYMRYwFAYD VQQDEw02ODM5ZGE2Yy0yYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtV05mymeDLS9O8WUV5jOBu241QB+b9/w5YGjjnrAa1spjha4dh6A0C/cRRfF 2MPQLhOiYB12vPAXvX78C/bY2XtJ/QvHofElPFrJ5eWlUQ9DDUXK5VrXhdX0Y1Yx cHLFcRAWo5HBiaEepsKjcCsl5XQmyE3Qf6XguOBTPmkeMw8vjOJwxDd36ykdPVL4 bkhClYE0xzU4QVU//Yrm19yKGXJpqP5Qp0DKFC2aKP5H2bM4tvPFJDFGcxdqag2p iRAS4STvhkf/e5nRvc5/HGFBmCIDdgkh++Hmpez34X45KtAMwSf5AENmJO7zUmUI gC3XIpPavYqLiJG1q3TSjn635QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqx8hbS nxkl9C9JMOPfyzi2CxYwMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjA5NS84Qzg5OUE0MkFCNTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZL ZnpIMU9WLUkzWmZaUncwWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBce4IMPUlrO8gSQQmc9OvYYnO/vsdhWXzhtaVUcyYWHvDBRGFuISJF d0658R4dx7QpAIDdJ3MSDVVwdZ5ELj4NNYECy61zbGak2ATh07wlbe9c3UdMc/pX UG8p4ZMhPqb5JJHt1pIpTVZ7Gozm2pZHKyqO6fNdHbVk7sknU153pXj8ptAENd4j fK54PuF1EDsSDTR10u87z2KXSy3PdxAD12gDT6/SaBnzlpm8dQDRq5KTIHwiv5Pi wIwc7zKvRuSLUVznkmRcZih6pl7/bceSeVnZAHVwYDbJWP5NVPkAxCWDbTQBjOJZ 6j74lz4Dczt7mERLc9Eh5g5zAKuwsVoh -----END CERTIFICATE-----Generated at Sat May 31 15:01:21 2025 by rpki-client