$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft File: ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json) Hash identifier: sxDvmjfRwYtoowhREkBjIq72yl0KOpCs6JnXAYoYEMI= Subject key identifier: E7:2A:8A:7A:DB:31:48:5F:D2:71:1F:80:17:AE:0B:B0:F5:5E:5C:A2 Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 Certificate issuer: /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft Manifest number: 05A4 Signing time: Fri 28 Mar 2025 23:26:14 +0000 Manifest this update: Fri 28 Mar 2025 23:26:13 +0000 Manifest next update: Fri 04 Apr 2025 23:26:13 +0000 Files and hashes: 1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: dBrsKwVWJliVEkI5gMnRtd6ClpAS9GyG/jJKcbHUkvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B0D Validity Not Before: Mar 28 23:26:13 2025 GMT Not After : Apr 4 23:26:13 2025 GMT Subject: CN=67e73016-ac90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:a1:cf:1f:a7:e0:08:5a:fd:f4:98:2b:40: 4d:46:8b:1c:e1:f1:1b:02:14:91:60:aa:52:00:3a: a9:e5:a6:4e:95:77:ed:c3:1e:37:d3:26:5d:f8:06: a2:87:7b:10:81:d0:33:08:2e:70:12:b2:21:c6:89: ec:bf:df:e4:10:3e:a8:df:8f:cf:b2:de:dd:15:db: f2:fd:b9:f1:06:7f:a1:45:d9:1b:c1:d1:cd:16:28: f1:5f:49:86:e5:0c:c2:32:e0:76:e6:d5:aa:87:28: 5a:ee:12:4f:bc:35:17:32:ca:53:8c:62:03:29:c4: f9:f9:7d:1e:a8:d7:f0:31:cd:0d:61:64:13:c6:54: 50:57:80:3b:23:bb:36:ff:b9:21:12:dd:89:91:dc: 51:60:7c:4a:27:fb:ec:b7:02:90:a4:46:82:e2:7c: 58:6d:19:ea:23:19:82:51:ac:5e:1f:7a:1d:9b:24: d5:4d:08:95:08:2c:54:63:1d:af:9b:05:06:43:fc: 24:8e:5d:12:60:9d:f9:fb:d3:ca:1a:67:c2:3b:03: bf:50:44:6d:58:9d:e3:e5:2c:b6:b9:c9:b3:2f:2d: 45:2b:79:b8:7e:b2:5a:a7:e4:0f:59:79:00:2f:d0: 54:43:4d:cf:72:41:75:1b:67:48:ea:ff:de:72:c5: f6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2A:8A:7A:DB:31:48:5F:D2:71:1F:80:17:AE:0B:B0:F5:5E:5C:A2 X509v3 Authority Key Identifier: keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c5:11:17:a5:87:36:d6:23:e4:2a:ea:24:99:b1:9c:76:57: 2a:12:69:7c:e8:12:08:3f:2c:0a:d1:1d:f3:fb:2c:5d:7b:11: b9:cd:04:07:95:dd:7a:71:67:da:53:8a:c2:5f:48:fd:1a:9f: eb:19:04:f7:c6:bc:91:74:4d:df:2a:8c:14:f8:1c:2b:f0:a8: 33:db:3a:91:2f:7b:28:43:93:04:72:dd:c1:0e:9d:2d:ad:a1: 96:16:0f:57:97:4b:74:8c:23:be:48:9e:41:18:16:54:62:47: 98:42:71:64:19:26:3b:1d:b2:3c:d4:00:11:22:6b:60:e6:6a: e8:c7:62:d3:ef:ee:00:dc:21:51:7a:06:a9:d6:b9:55:0f:23: f3:17:c7:ce:93:7e:46:49:b9:a8:38:81:f5:4b:23:0d:32:f5: 59:e6:b2:7a:4c:09:0d:e5:8f:25:1a:d5:1d:6c:b7:79:1f:67: 18:f7:30:14:69:f5:ef:96:a6:c1:ac:31:05:1e:c3:f2:a5:49: 50:3d:44:87:74:4a:b7:f4:5b:a6:1f:1e:cb:bd:52:32:b3:1a: 80:9e:fa:39:71:f8:83:88:c8:c0:ee:d0:0f:3d:67:fc:43:77: 34:41:87:a9:a1:0d:bd:69:65:46:93:81:c7:3c:38:76:8e:fd: 37:63:f9:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx RkQxRENFQTgwHhcNMjUwMzI4MjMyNjEzWhcNMjUwNDA0MjMyNjEzWjAYMRYwFAYD VQQDEw02N2U3MzAxNi1hYzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHahzx+n4Aha/fSYK0BNRosc4fEbAhSRYKpSADqp5aZOlXftwx430yZd+Aai h3sQgdAzCC5wErIhxonsv9/kED6o34/Pst7dFdvy/bnxBn+hRdkbwdHNFijxX0mG 5QzCMuB25tWqhyha7hJPvDUXMspTjGIDKcT5+X0eqNfwMc0NYWQTxlRQV4A7I7s2 /7khEt2JkdxRYHxKJ/vstwKQpEaC4nxYbRnqIxmCUaxeH3odmyTVTQiVCCxUYx2v mwUGQ/wkjl0SYJ35+9PKGmfCOwO/UERtWJ3j5Sy2ucmzLy1FK3m4frJap+QPWXkA L9BUQ03PckF1G2dI6v/ecsX2OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcqinrb MUhf0nEfgBeuC7D1XlyiMB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi cnlTMnVRVnFlN01mMGR6cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfxREXpYc21iPkKuokmbGcdlcqEml86BIIPywK0R3z+yxdexG5zQQH ld16cWfaU4rCX0j9Gp/rGQT3xryRdE3fKowU+Bwr8Kgz2zqRL3soQ5MEct3BDp0t raGWFg9Xl0t0jCO+SJ5BGBZUYkeYQnFkGSY7HbI81AARImtg5mrox2LT7+4A3CFR egap1rlVDyPzF8fOk35GSbmoOIH1SyMNMvVZ5rJ6TAkN5Y8lGtUdbLd5H2cY9zAU afXvlqbBrDEFHsPypUlQPUSHdEq39FumHx7LvVIysxqAnvo5cfiDiMjA7tAPPWf8 Q3c0QYepoQ29aWVGk4HHPDh2jv03Y/lg -----END CERTIFICATE-----Generated at Fri Apr 4 18:31:48 2025 by rpki-client