$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: qsSGe+lkgPstW8ByYrp+Zt3ND0WF6BSu6aEvVJOBGxs= Subject key identifier: CA:04:88:11:A1:BF:47:78:67:60:F4:68:33:A4:5D:91:4F:0F:0B:C3 Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 03BB Signing time: Wed 23 Jul 2025 01:06:58 +0000 Manifest this update: Wed 23 Jul 2025 01:06:58 +0000 Manifest next update: Wed 30 Jul 2025 01:06:58 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: NDAz3+IRZFJV0TObVnDuv6/QQ/sH7wDI24SyV3vV1oY=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: o79Sd0r7i63ThJBm1It6/m6+eHRjzs84P0YMiSeldfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 01:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Jul 23 01:06:58 2025 GMT Not After : Jul 30 01:06:58 2025 GMT Subject: CN=688035b2-53a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:e3:ec:df:85:ab:8d:96:fc:c2:9d:12:5a: 7a:2c:a7:4a:e0:53:95:5e:f2:bc:8a:4f:0e:43:c6: de:fe:37:4f:8c:b7:43:42:e4:db:ef:a2:66:02:c6: e7:e9:15:88:50:70:f9:8a:30:0f:7d:b1:a0:fd:d3: d6:e3:ff:ef:49:c6:70:13:a3:24:ff:3d:eb:2c:3f: 08:84:b4:dd:80:3f:49:f7:1d:c0:17:a8:e4:ef:64: 10:2c:ac:2c:19:7b:64:24:65:b5:c2:b9:3e:f9:e7: e9:be:2f:83:91:52:22:af:b1:57:49:b6:ab:81:f2: 10:c6:b5:fe:71:32:7a:4e:37:7d:3e:33:18:23:9f: 2b:cb:7b:ed:e0:2f:d6:fb:a6:28:16:51:46:bf:19: 22:77:99:a2:e0:fd:19:d2:b8:d9:c2:92:13:c7:c9: 73:6f:45:86:b0:63:c5:93:ab:a3:0a:06:aa:dd:bc: 14:42:da:18:b7:e8:c1:16:39:01:6b:48:8e:5e:34: 87:b0:d6:3d:24:b8:f7:43:8b:4d:70:ba:67:91:81: 23:96:9f:c5:8f:ba:4f:05:5d:2f:8d:89:5d:72:46: 83:80:07:d6:fa:6e:72:e4:ea:e0:85:a4:c4:fe:58: a6:90:5b:fb:c2:ca:66:ac:07:df:d4:71:54:b9:2c: a0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:04:88:11:A1:BF:47:78:67:60:F4:68:33:A4:5D:91:4F:0F:0B:C3 X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:a8:b4:64:a3:0d:6a:ec:1f:c9:99:4f:25:42:94:dc:36:26: 85:db:c7:eb:ae:3c:02:e5:da:df:42:d1:dd:98:2e:e9:e8:fa: 31:89:d4:37:42:f4:ea:ee:f6:0b:63:26:b4:7a:36:06:ba:d0: f2:db:59:d3:e5:fa:b9:31:54:2e:70:ae:34:3e:b8:c8:d6:60: e0:ad:f9:4f:62:a4:4d:58:49:2b:4e:7d:60:13:05:b3:c3:a6: 60:27:db:3d:23:81:c2:02:49:c1:b5:a1:c8:3b:7b:80:08:70: d1:9a:56:e7:e9:22:b7:8f:33:34:3b:a5:b6:83:0b:e2:51:1e: 41:da:44:b9:3d:a1:49:ef:b9:71:77:07:8a:28:72:4b:7b:49: 8a:69:23:df:cc:63:02:ef:91:d2:0d:fb:91:1d:50:51:30:cb: 83:b0:6d:c1:7d:e2:64:ef:6d:5a:7a:1c:ba:b2:ed:5e:e3:7d: 99:7a:af:67:cf:aa:fc:d9:8a:cc:94:93:72:85:23:53:b4:94: ee:59:be:3c:4c:07:53:3a:6b:ce:8d:58:80:91:d1:5d:5f:df: 11:66:e7:1c:8a:67:27:5d:97:dd:ea:03:97:73:c5:43:c6:95: 7f:cd:af:f7:f7:93:68:30:ef:f4:41:e0:7e:b4:99:7d:23:2e: bc:30:3b:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjUwNzIzMDEwNjU4WhcNMjUwNzMwMDEwNjU4WjAYMRYwFAYD VQQDEw02ODgwMzViMi01M2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudTj7N+Fq42W/MKdElp6LKdK4FOVXvK8ik8OQ8be/jdPjLdDQuTb76JmAsbn 6RWIUHD5ijAPfbGg/dPW4//vScZwE6Mk/z3rLD8IhLTdgD9J9x3AF6jk72QQLKws GXtkJGW1wrk++efpvi+DkVIir7FXSbargfIQxrX+cTJ6Tjd9PjMYI58ry3vt4C/W +6YoFlFGvxkid5mi4P0Z0rjZwpITx8lzb0WGsGPFk6ujCgaq3bwUQtoYt+jBFjkB a0iOXjSHsNY9JLj3Q4tNcLpnkYEjlp/Fj7pPBV0vjYldckaDgAfW+m5y5OrghaTE /limkFv7wspmrAff1HFUuSygjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoEiBGh v0d4Z2D0aDOkXZFPDwvDMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/qLRkow1q7B/JmU8lQpTcNiaF28frrjwC5drfQtHdmC7p6PoxidQ3 QvTq7vYLYya0ejYGutDy21nT5fq5MVQucK40PrjI1mDgrflPYqRNWEkrTn1gEwWz w6ZgJ9s9I4HCAknBtaHIO3uACHDRmlbn6SK3jzM0O6W2gwviUR5B2kS5PaFJ77lx dweKKHJLe0mKaSPfzGMC75HSDfuRHVBRMMuDsG3BfeJk721aehy6su1e432Zeq9n z6r82YrMlJNyhSNTtJTuWb48TAdTOmvOjViAkdFdX98RZuccimcnXZfd6gOXc8VD xpV/za/395NoMO/0QeB+tJl9Iy68MDuO -----END CERTIFICATE-----Generated at Thu Jul 24 12:14:29 2025 by rpki-client