$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft File: mvCw748-tT8U2E-jphBr5kvXgnI.mft (raw, json) Hash identifier: 9kbwqdPlBTwPto+5rel5JgWudgwJ8SNU4F/3M9tUl8I= Subject key identifier: 4F:02:C5:AD:93:D3:4B:78:4A:33:68:64:37:46:76:A0:0D:FB:A0:AB Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 Certificate issuer: /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Certificate serial: 042F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft Manifest number: 042A Signing time: Fri 05 Sep 2025 00:36:49 +0000 Manifest this update: Fri 05 Sep 2025 00:36:48 +0000 Manifest next update: Fri 12 Sep 2025 00:36:48 +0000 Files and hashes: 1: mvCw748-tT8U2E-jphBr5kvXgnI.crl (hash: I8dQ8moS2wU3ManOZtfL0xZmo3ift/XSfqFsYdNAwxw=) 2: 8EB98374776E11ECA05F7133C4F9AE02.roa (hash: VmrxYzvVkdO/i8G3xK4fpHSWBTRD5+zxdo/h6L8f+7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1071 (0x42f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B06CA, serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Validity Not Before: Sep 5 00:36:48 2025 GMT Not After : Sep 12 00:36:48 2025 GMT Subject: CN=68ba30a1-f796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:44:26:e2:09:43:c1:48:67:0a:ee:c2:28: ca:88:11:b4:33:ee:7f:93:5e:78:b6:38:31:be:3c: 16:b6:76:d3:e6:4b:31:d4:a1:5e:58:26:f4:8f:73: f3:47:c4:17:14:c5:b6:0a:64:b9:2e:f5:3e:8c:3c: 5a:be:4e:37:64:20:80:83:11:73:fd:02:8c:96:15: cf:68:4e:bd:eb:90:49:5a:99:73:11:90:19:80:06: fc:0f:7f:0a:45:29:ea:0c:a1:6f:e3:ce:31:7b:82: 0a:16:52:7f:ed:42:0f:2f:5d:36:60:62:e8:88:7e: f9:59:9f:49:2f:cf:b3:4d:bd:c6:84:00:8b:8b:71: 84:bc:84:b0:8f:60:31:60:52:d8:e7:d7:e2:76:c3: 51:be:0e:12:aa:8f:30:18:01:df:52:d9:1a:0b:24: 3e:7d:81:66:c6:ca:36:cb:20:0d:29:2d:24:41:c0: ba:dc:55:c2:78:40:36:83:99:9c:e5:dc:c2:8b:40: e4:14:47:b9:52:e3:fa:d7:92:4d:de:f1:97:47:10: 6b:e2:2e:15:da:ec:3f:d6:aa:34:ad:ec:c1:e5:f9: e9:ea:5a:bc:a5:a7:ec:91:38:d5:c7:78:ba:f1:14: dd:9a:12:a3:9b:24:ce:a1:c4:fa:f9:f2:5b:e6:0a: b1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:02:C5:AD:93:D3:4B:78:4A:33:68:64:37:46:76:A0:0D:FB:A0:AB X509v3 Authority Key Identifier: keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:83:51:9e:ed:2f:c3:f8:76:aa:1d:3a:9c:da:44:b5:28:cc: d3:02:73:d5:07:0e:26:36:93:25:3d:0f:40:16:e0:bb:38:6a: c4:6e:48:18:81:3c:bc:37:58:62:5d:eb:25:c7:31:a2:8b:cd: fd:1a:d0:47:ee:a3:ee:d7:dc:3a:b7:d7:71:92:e7:86:2a:70: 53:19:91:2c:af:15:69:dd:ed:e9:b2:c4:57:d8:92:ae:95:fe: 65:ed:66:af:cc:87:75:cf:bd:fe:c5:6f:4c:83:9d:35:61:a5: 64:58:f0:45:6a:99:91:06:bb:b8:b3:d3:9b:83:26:20:c0:9d: 9f:c6:65:af:27:f8:f3:64:9a:2d:a6:94:93:97:f7:d9:fd:26: 80:b5:19:6a:91:b5:71:29:9b:27:b7:98:36:ec:fd:a9:3f:4f: d9:e4:78:89:6d:51:66:2f:24:87:da:a7:89:78:7e:7c:1f:b9: 3a:77:6c:91:e7:6f:8a:12:04:cd:e1:b9:6a:d9:cb:cc:fe:2b: 06:29:d2:40:00:ab:d5:5c:be:8c:14:e5:23:34:9a:d3:27:f6: 44:e6:24:04:7b:38:73:4b:27:20:be:e6:36:19:d1:2e:68:3c: f8:12:b5:5c:28:36:cd:e3:fc:58:13:75:59:97:c7:5d:e0:e8: 76:8c:8c:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA2Q0ExMTAvBgNVBAUTKDlBRjBCMEVGOEYzRUI1M0YxNEQ4NEZBM0E2MTA2QkU2 NEJENzgyNzIwHhcNMjUwOTA1MDAzNjQ4WhcNMjUwOTEyMDAzNjQ4WjAYMRYwFAYD VQQDEw02OGJhMzBhMS1mNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0REJuIJQ8FIZwruwijKiBG0M+5/k154tjgxvjwWtnbT5ksx1KFeWCb0j3Pz R8QXFMW2CmS5LvU+jDxavk43ZCCAgxFz/QKMlhXPaE6965BJWplzEZAZgAb8D38K RSnqDKFv484xe4IKFlJ/7UIPL102YGLoiH75WZ9JL8+zTb3GhACLi3GEvISwj2Ax YFLY59fidsNRvg4Sqo8wGAHfUtkaCyQ+fYFmxso2yyANKS0kQcC63FXCeEA2g5mc 5dzCi0DkFEe5UuP615JN3vGXRxBr4i4V2uw/1qo0rezB5fnp6lq8pafskTjVx3i6 8RTdmhKjmyTOocT6+fJb5gqx6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8Cxa2T 00t4SjNoZDdGdqAN+6CrMB8GA1UdIwQYMBaAFJrwsO+PPrU/FNhPo6YQa+ZL14Jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDZDQS9EMkUwMDg3Mjc3 NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRUOFUyRS1qcGhCcjVrdlhn bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL212Q3c3NDgtdFQ4VTJFLWpwaEJyNWt2WGduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDZDQS9EMkUwMDg3Mjc3NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRU OFUyRS1qcGhCcjVrdlhnbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVg1Ge7S/D+HaqHTqc2kS1KMzTAnPVBw4mNpMlPQ9AFuC7OGrEbkgY gTy8N1hiXeslxzGii839GtBH7qPu19w6t9dxkueGKnBTGZEsrxVp3e3pssRX2JKu lf5l7WavzId1z73+xW9Mg501YaVkWPBFapmRBru4s9ObgyYgwJ2fxmWvJ/jzZJot ppSTl/fZ/SaAtRlqkbVxKZsnt5g27P2pP0/Z5HiJbVFmLySH2qeJeH58H7k6d2yR 52+KEgTN4blq2cvM/isGKdJAAKvVXL6MFOUjNJrTJ/ZE5iQEezhzSycgvuY2GdEu aDz4ErVcKDbN4/xYE3VZl8dd4Oh2jIyK -----END CERTIFICATE-----Generated at Sat Sep 6 11:49:58 2025 by rpki-client