$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft File: McvtHUoCFwgxgH13RKxKr_JqBuY.mft (raw, json) Hash identifier: U4zPf6yQQ1B01Wy1VgGLj0vqTvdpKtxnRw/prsJ2FGk= Subject key identifier: AA:7E:73:2E:BC:86:0C:2B:FE:DB:FE:DA:E9:1A:5D:1D:9A:79:61:44 Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 Certificate issuer: /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft Manifest number: 0153 Signing time: Mon 21 Jul 2025 04:14:52 +0000 Manifest this update: Mon 21 Jul 2025 04:14:52 +0000 Manifest next update: Mon 28 Jul 2025 04:14:52 +0000 Files and hashes: 1: McvtHUoCFwgxgH13RKxKr_JqBuY.crl (hash: 2VngqSwuhUVcrhdOenVPhcAq5WdDQUevHnVzYxHP7v4=) 2: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (hash: 2icqnjOM7NhkNWNRK/vV/u0TPESMuw0eja9A3sbJDHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C607C, serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6 Validity Not Before: Jul 21 04:14:52 2025 GMT Not After : Jul 28 04:14:52 2025 GMT Subject: CN=687dbebc-2060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:22:b7:39:18:e4:bd:45:74:34:e8:44:56:0f: 3d:15:98:c6:4a:0d:8d:e7:4c:c9:cf:fd:b6:d2:9c: f0:76:2c:13:8e:c1:5c:87:85:50:59:d4:51:2e:d3: 5c:75:25:ab:ad:ef:f7:50:d4:db:81:fa:8b:1d:11: 7d:5e:82:50:4a:ae:40:83:08:54:9d:86:c2:2a:2d: 6e:e4:7e:09:ac:f4:f9:86:c2:79:a5:af:ac:9d:84: 41:b4:1c:8c:81:93:c3:4d:32:a9:e0:9b:c1:98:dc: 88:07:e9:0d:0e:db:70:54:4f:0c:29:35:1c:30:33: 05:87:56:d1:3d:9c:ec:32:56:13:cb:c3:3e:09:1f: 31:22:d5:61:92:2b:06:a2:16:22:79:7c:4c:76:d2: c7:8f:d4:ff:d9:87:19:78:1e:c7:39:5b:4f:fa:8f: 86:c2:de:a2:1b:0c:c5:4b:1b:df:be:f3:25:b3:76: 2f:d3:ef:4e:2c:c1:fa:17:f1:27:26:ba:d9:54:af: ac:cf:ad:7b:b3:21:9d:4b:da:5c:0c:37:34:67:5e: 6d:3a:84:d7:50:c2:89:5b:76:dd:8a:46:22:45:20: b5:77:88:4f:9d:03:0d:4e:9c:43:3f:0c:e0:8c:d5: 73:3a:05:9a:18:3f:3e:0a:81:29:79:41:aa:fc:d7: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7E:73:2E:BC:86:0C:2B:FE:DB:FE:DA:E9:1A:5D:1D:9A:79:61:44 X509v3 Authority Key Identifier: keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:02:90:bf:08:3a:16:10:52:9b:44:44:23:7c:c7:26:0b:28: 91:75:14:33:20:3f:b7:0a:c0:2d:25:49:1f:b8:39:85:1f:99: c6:6c:3c:e9:b3:9a:cc:cb:f5:86:f8:b7:95:28:98:ab:86:fd: 71:ed:37:c8:9d:e7:46:c8:5f:95:7a:c1:67:73:f4:22:07:6e: f2:4d:b3:f8:bb:5a:fd:76:cc:92:fc:75:0d:46:af:0e:47:a1: 65:35:82:37:13:55:80:24:40:2c:c9:05:0c:c2:af:47:25:ce: ef:7b:20:a7:b5:56:73:94:73:a6:ca:d2:4a:74:3c:55:5a:e2: 57:98:ef:94:1c:77:9a:5a:bc:b4:19:b0:9d:e2:51:e2:f1:09: e5:17:c9:94:68:fb:26:b8:f2:e7:da:b8:84:fd:ef:b6:8f:5c: fe:84:ab:b8:10:ae:08:92:9a:88:21:30:85:bc:3f:c5:5e:72: 90:e5:e4:43:a9:db:1d:d6:46:a4:b0:9f:07:da:01:30:42:43: a5:fd:de:ae:33:64:c2:cd:7d:22:07:91:98:8e:da:9d:1f:d2: c7:fa:7f:3a:bb:17:08:92:08:e9:39:c7:fb:00:73:d5:5c:a7: a3:d3:17:07:9b:c8:a6:7d:b5:c6:33:1f:ea:90:b7:8d:45:14: 70:2a:7d:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwN0MxMTAvBgNVBAUTKDMxQ0JFRDFENEEwMjE3MDgzMTgwN0Q3NzQ0QUM0QUFG RjI2QTA2RTYwHhcNMjUwNzIxMDQxNDUyWhcNMjUwNzI4MDQxNDUyWjAYMRYwFAYD VQQDEw02ODdkYmViYy0yMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4CK3ORjkvUV0NOhEVg89FZjGSg2N50zJz/220pzwdiwTjsFch4VQWdRRLtNc dSWrre/3UNTbgfqLHRF9XoJQSq5AgwhUnYbCKi1u5H4JrPT5hsJ5pa+snYRBtByM gZPDTTKp4JvBmNyIB+kNDttwVE8MKTUcMDMFh1bRPZzsMlYTy8M+CR8xItVhkisG ohYieXxMdtLHj9T/2YcZeB7HOVtP+o+Gwt6iGwzFSxvfvvMls3Yv0+9OLMH6F/En JrrZVK+sz617syGdS9pcDDc0Z15tOoTXUMKJW3bdikYiRSC1d4hPnQMNTpxDPwzg jNVzOgWaGD8+CoEpeUGq/NcYCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKp+cy68 hgwr/tv+2ukaXR2aeWFEMB8GA1UdIwQYMBaAFDHL7R1KAhcIMYB9d0SsSq/yagbm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA3Qy9ENEREM0E4ODYy ODgxMUVFOTY0NEE5MENDNEY5QUUwMi9NY3Z0SFVvQ0Z3Z3hnSDEzUkt4S3JfSnFC dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01jdnRIVW9DRndneGdIMTNSS3hLcl9KcUJ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA3Qy9ENEREM0E4ODYyODgxMUVFOTY0NEE5MENDNEY5QUUwMi9NY3Z0SFVvQ0Z3 Z3hnSDEzUkt4S3JfSnFCdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaApC/CDoWEFKbREQjfMcmCyiRdRQzID+3CsAtJUkfuDmFH5nGbDzp s5rMy/WG+LeVKJirhv1x7TfInedGyF+VesFnc/QiB27yTbP4u1r9dsyS/HUNRq8O R6FlNYI3E1WAJEAsyQUMwq9HJc7veyCntVZzlHOmytJKdDxVWuJXmO+UHHeaWry0 GbCd4lHi8QnlF8mUaPsmuPLn2riE/e+2j1z+hKu4EK4IkpqIITCFvD/FXnKQ5eRD qdsd1kaksJ8H2gEwQkOl/d6uM2TCzX0iB5GYjtqdH9LH+n86uxcIkgjpOcf7AHPV XKej0xcHm8imfbXGMx/qkLeNRRRwKn0j -----END CERTIFICATE-----Generated at Tue Jul 22 12:03:10 2025 by rpki-client