$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft File: ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json) Hash identifier: 2DHk4l748ZLYTj4SbCCimKxo3US3grJIa9ubi82Soyo= Subject key identifier: 55:C7:12:23:DD:07:EC:AC:D6:0C:DE:C5:00:82:1E:84:86:8D:6D:C7 Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 Certificate issuer: /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft Manifest number: D5 Signing time: Sat 05 Apr 2025 04:55:18 +0000 Manifest this update: Sat 05 Apr 2025 04:55:17 +0000 Manifest next update: Sat 12 Apr 2025 04:55:17 +0000 Files and hashes: 1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: kt/00ljO7VNQhRsbTt39JbOeb4vnCqZa8rM1oi/l+DI=) 2: ABCCEBB6CDC711EE8A262C4EC4F9AE02.roa (hash: zIOBj5YBTE6pEEkPxatT0lPoJEUY6kzYZZceZ5XmYbM=) 3: 805DA0BCCCF811EEA9723F27C4F9AE02.roa (hash: PVKfYcrhEpkGhk/bRv8ieDCU8VEgQ0tyddxr1XeEq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE Validity Not Before: Apr 5 04:55:17 2025 GMT Not After : Apr 12 04:55:17 2025 GMT Subject: CN=67f0b7b6-e0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:35:fd:b9:bf:6f:03:35:c9:be:62:af:1c:9c: 9a:4a:09:85:66:27:98:ad:b5:70:96:b4:71:8b:4e: 4e:da:dd:ef:55:32:0b:b8:98:f9:27:cc:da:a3:e1: 4c:20:1b:f2:64:a2:3b:59:29:f1:ba:f6:24:da:2e: de:bd:cf:96:91:c7:0a:c8:6c:90:a2:cb:ba:0a:4b: 9c:6c:7e:e7:a4:1d:88:0b:23:7d:2a:44:24:f0:6f: d8:47:19:b0:5d:08:7f:88:04:fe:5a:17:8f:75:ce: 1d:bd:45:02:cd:de:be:21:a9:eb:ab:c2:44:8b:ea: 86:97:c2:d6:9b:d7:9f:e8:b3:cd:22:fb:78:80:ff: ff:b2:26:25:a2:01:31:9a:47:56:f2:6e:13:3d:84: 72:c7:e5:40:2f:c6:83:4c:7b:f0:e6:3b:23:76:0b: a1:fa:45:f8:2c:7f:3d:d5:15:36:aa:04:d2:6a:f0: ff:05:0f:97:8d:53:60:6e:c2:92:11:7a:09:29:d8: c8:97:6d:d7:00:12:9f:f0:86:1f:3e:fd:ac:ad:40: 87:0a:36:fd:af:6d:b4:55:ad:d6:bf:bd:96:7e:60: 24:f1:5c:cb:06:96:23:75:4f:bc:7b:ea:48:73:96: 32:e5:19:c0:be:a6:11:84:9d:19:36:b2:19:8d:f9: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C7:12:23:DD:07:EC:AC:D6:0C:DE:C5:00:82:1E:84:86:8D:6D:C7 X509v3 Authority Key Identifier: keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ec:77:d0:58:51:58:f8:d1:cd:32:e4:26:9a:20:17:4f:1a: 5d:d4:7d:93:a7:91:d0:24:f5:2e:92:92:96:01:87:50:53:4e: 7c:a0:d3:33:04:14:b5:0f:23:92:dc:e7:0b:f4:da:7a:2a:f3: 31:37:b7:fe:fa:a4:01:35:22:3e:bb:74:9f:d9:a5:9e:36:64: 92:88:99:0e:03:dd:b6:d1:1d:a5:e0:90:de:87:67:3c:24:35: f0:86:6d:a6:20:24:d4:bd:d5:f8:33:68:d1:a2:84:f7:cd:8f: a1:3d:6a:9d:ce:9c:76:e6:c1:ed:54:ea:ee:1b:8b:e7:54:df: b4:34:32:28:75:e1:30:6b:b3:10:f2:9d:16:0f:b6:5e:05:44: c3:a4:7a:51:c0:89:37:a9:82:4e:41:2d:da:e4:c1:43:45:23: ac:74:23:a8:f6:15:b0:3b:c0:0a:7c:78:4a:41:2c:09:b1:2b: 76:df:a8:4c:9a:c2:5a:bf:ea:53:b4:b3:ec:29:f0:0e:51:96: 61:9d:fc:86:b6:4a:07:45:6f:21:e1:2b:54:21:86:8b:ab:0e: 48:f7:dd:ce:00:4f:4d:6c:b6:86:5c:6a:79:40:d3:3a:cb:04: bb:0d:02:5f:19:bf:80:cd:41:b7:ac:3a:ba:6d:09:a7:97:c6: 7e:18:45:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKDdCMUZCMUJBM0IwRUM4Q0E1RTVDMTNBRUJDRkM2RUJB OEQyMEVBQTcwHhcNMjUwNDA1MDQ1NTE3WhcNMjUwNDEyMDQ1NTE3WjAYMRYwFAYD VQQDEw02N2YwYjdiNi1lMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DX9ub9vAzXJvmKvHJyaSgmFZieYrbVwlrRxi05O2t3vVTILuJj5J8zao+FM IBvyZKI7WSnxuvYk2i7evc+WkccKyGyQosu6CkucbH7npB2ICyN9KkQk8G/YRxmw XQh/iAT+WhePdc4dvUUCzd6+Ianrq8JEi+qGl8LWm9ef6LPNIvt4gP//siYlogEx mkdW8m4TPYRyx+VAL8aDTHvw5jsjdguh+kX4LH891RU2qgTSavD/BQ+XjVNgbsKS EXoJKdjIl23XABKf8IYfPv2srUCHCjb9r220Va3Wv72WfmAk8VzLBpYjdU+8e+pI c5Yy5RnAvqYRhJ0ZNrIZjfkMNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXHEiPd B+ys1gzexQCCHoSGjW3HMB8GA1UdIwQYMBaAFHsfsbo7DsjKXlwTrrz8brqNIOqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS82RjJGRDMzOEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lNcGVYQk91dlB4dXVvMGc2 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V4LXh1anNPeU1wZVhCT3V2UHh1dW8wZzZxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS82RjJGRDMzOENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lN cGVYQk91dlB4dXVvMGc2cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG7HfQWFFY+NHNMuQmmiAXTxpd1H2Tp5HQJPUukpKWAYdQU058oNMz BBS1DyOS3OcL9Np6KvMxN7f++qQBNSI+u3Sf2aWeNmSSiJkOA9220R2l4JDeh2c8 JDXwhm2mICTUvdX4M2jRooT3zY+hPWqdzpx25sHtVOruG4vnVN+0NDIodeEwa7MQ 8p0WD7ZeBUTDpHpRwIk3qYJOQS3a5MFDRSOsdCOo9hWwO8AKfHhKQSwJsSt236hM msJav+pTtLPsKfAOUZZhnfyGtkoHRW8h4StUIYaLqw5I993OAE9NbLaGXGp5QNM6 ywS7DQJfGb+AzUG3rDq6bQmnl8Z+GEXN -----END CERTIFICATE-----Generated at Sun Apr 6 09:04:54 2025 by rpki-client