$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json) Hash identifier: oNfM1XfUY/BLEV9Y7lg5ELWEBQlioeWDf7J8UqefYHI= Subject key identifier: B0:BC:FD:70:C0:C3:90:E9:61:50:3A:1D:0F:53:54:6B:AF:03:A3:57 Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft Manifest number: 01D1 Signing time: Thu 03 Apr 2025 02:12:36 +0000 Manifest this update: Thu 03 Apr 2025 02:12:36 +0000 Manifest next update: Thu 10 Apr 2025 02:12:36 +0000 Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: /Wh1/ytS0Kk6D48kXYl+PVHsz5NgL5p9vAz6X/Lm6jU=) 2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: RQB2RLULGV5D9o8SykaXsVa4IAX2Ix9OkCIOGbXqXJc=) 3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: 1vie/BGCNQgncTtAE895UIuHGNyFzttxRArpojokubI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D937 Validity Not Before: Apr 3 02:12:36 2025 GMT Not After : Apr 10 02:12:36 2025 GMT Subject: CN=67edee94-3da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:19:e0:19:e1:9a:a3:53:6a:bf:67:b0:a1: 80:61:88:b4:67:fc:95:cb:b2:3e:7e:be:5d:b8:d4: b2:31:85:a9:ae:81:2e:7e:7b:e8:b2:ea:81:74:cf: 7d:c7:08:9e:5b:f0:ee:b0:1a:2b:84:4f:8d:13:fb: 46:fa:dd:33:06:a2:d7:21:8c:60:98:4d:bb:29:c2: 01:6c:40:3c:fa:e4:19:e1:ea:98:82:4f:ea:a1:f4: 61:2f:85:24:d8:a0:eb:ec:cd:b8:0b:70:54:9e:6d: 92:02:2d:df:31:41:bd:4f:c8:e8:92:20:8c:2b:ee: b1:68:cf:3f:6e:ae:24:d8:32:58:12:09:78:03:bf: f7:0a:60:ec:5d:a9:8d:5c:bf:9f:e8:3e:03:27:e3: 9c:c5:51:97:bf:ca:50:06:72:c3:85:7c:60:82:cd: e5:cf:3f:f1:1b:08:75:63:b2:8e:28:50:5e:93:90: 97:e1:14:8d:69:30:19:78:0e:24:79:3c:fc:50:a7: c9:ee:0c:44:ef:37:e7:83:60:bc:7f:29:76:e2:ba: 3b:b5:57:e0:09:15:d4:7b:5d:d8:33:93:16:76:5c: 5c:d4:4f:b7:94:fc:2b:07:bc:d6:80:13:cf:4e:2f: 85:a9:05:98:3d:4d:03:65:76:9d:08:af:15:bd:67: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:FD:70:C0:C3:90:E9:61:50:3A:1D:0F:53:54:6B:AF:03:A3:57 X509v3 Authority Key Identifier: keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:85:94:a6:3f:52:32:1d:9c:91:25:01:9e:93:61:89:0f:f0: c6:c0:53:63:13:a5:96:af:b6:c6:62:f6:d1:a6:ac:c4:7e:d7: e3:c5:46:4b:ba:3c:11:38:19:27:c9:2f:4e:27:bd:2e:c3:ed: f0:b0:6c:d5:25:a9:71:0d:f1:60:74:62:fa:8b:a0:62:21:47: 12:bb:b9:b0:89:c9:29:89:ef:d6:c4:44:be:e6:7b:a7:e5:bf: c6:c8:ad:47:3e:f2:d7:c7:ac:58:1a:94:5a:a6:53:27:98:d7: 7a:96:f0:fa:27:35:60:07:fc:14:a1:43:3b:b9:7e:22:e5:b6: 10:85:9f:67:34:2b:5e:92:0f:75:6d:79:74:90:24:82:60:42: bd:e0:57:03:25:4f:9e:0f:b3:6d:47:eb:8e:e4:f9:c7:71:d7: 5e:1b:ce:31:7a:1c:30:ef:cf:74:59:f5:73:0d:ad:4e:6f:eb: 11:de:24:77:e9:f5:d3:38:07:d8:63:ce:f5:5c:c1:df:51:55: b2:15:a7:6b:e7:73:96:1a:db:d0:15:7e:9a:e5:bc:b6:57:29: 9d:33:60:16:bc:1c:c8:77:11:85:93:e4:33:04:39:3a:8a:d6: 6f:d8:f5:c4:ba:fb:2e:12:e0:6b:d1:9a:8c:f6:66:39:b4:79: 60:6c:d3:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3 MEVGMkIxNEMwHhcNMjUwNDAzMDIxMjM2WhcNMjUwNDEwMDIxMjM2WjAYMRYwFAYD VQQDEw02N2VkZWU5NC0zZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxd0Z4BnhmqNTar9nsKGAYYi0Z/yVy7I+fr5duNSyMYWproEufnvosuqBdM99 xwieW/DusBorhE+NE/tG+t0zBqLXIYxgmE27KcIBbEA8+uQZ4eqYgk/qofRhL4Uk 2KDr7M24C3BUnm2SAi3fMUG9T8jokiCMK+6xaM8/bq4k2DJYEgl4A7/3CmDsXamN XL+f6D4DJ+OcxVGXv8pQBnLDhXxggs3lzz/xGwh1Y7KOKFBek5CX4RSNaTAZeA4k eTz8UKfJ7gxE7zfng2C8fyl24ro7tVfgCRXUe13YM5MWdlxc1E+3lPwrB7zWgBPP Ti+FqQWYPU0DZXadCK8VvWesDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC8/XDA w5DpYVA6HQ9TVGuvA6NXMB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR M2Uta21VQW9EQzF3N3lzVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdhZSmP1IyHZyRJQGek2GJD/DGwFNjE6WWr7bGYvbRpqzEftfjxUZL ujwROBknyS9OJ70uw+3wsGzVJalxDfFgdGL6i6BiIUcSu7mwickpie/WxES+5nun 5b/GyK1HPvLXx6xYGpRaplMnmNd6lvD6JzVgB/wUoUM7uX4i5bYQhZ9nNCtekg91 bXl0kCSCYEK94FcDJU+eD7NtR+uO5PnHcddeG84xehww7890WfVzDa1Ob+sR3iR3 6fXTOAfYY871XMHfUVWyFadr53OWGtvQFX6a5by2VymdM2AWvBzIdxGFk+QzBDk6 itZv2PXEuvsuEuBr0ZqM9mY5tHlgbNNb -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:34 2025 by rpki-client