$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: s3wtQ7kcJUAI7iqH3MVdhnQCJLSjRcC8NwYZihIV03A= Subject key identifier: 8C:40:4E:C8:A9:3A:24:BC:D7:4C:0F:DF:9C:FF:2B:08:DC:B6:62:54 Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: A1 Signing time: Sat 19 Jul 2025 06:28:51 +0000 Manifest this update: Sat 19 Jul 2025 06:28:51 +0000 Manifest next update: Sat 26 Jul 2025 06:28:51 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: 6eFbuz0m4iyl++rCRcAqOQVjjsPaTopMiEatn0R+7e4=) 2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: oPt/hUSuzgl3vf6IekNSVwLM4HNHGT76iBnF/i7Fi6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Jul 19 06:28:51 2025 GMT Not After : Jul 26 06:28:51 2025 GMT Subject: CN=687b3b23-3a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:37:9b:df:08:51:87:3d:b4:d9:28:26:7c: 6d:f2:94:97:81:dd:2d:76:da:ae:3b:44:10:6f:21: 4e:c2:35:e0:21:39:48:68:14:94:2d:51:08:3a:86: 98:91:9a:b9:1f:3a:db:2e:2c:76:39:ad:cd:b6:cd: f6:12:01:26:2c:ef:cd:d5:48:9b:ad:1d:e1:1f:8b: 90:70:76:5c:2b:f7:b5:44:f7:5f:2a:40:84:05:8c: 62:7b:7f:ba:b2:f7:e5:5e:fc:9d:e5:29:c5:0c:89: 30:c5:1c:20:f9:ce:70:15:9d:15:7c:da:f6:34:15: 48:0c:a2:0f:6e:e2:8e:cb:cc:31:63:ed:40:9a:31: a2:3f:ae:56:61:0a:1b:7f:bd:e4:90:c4:d2:4a:c8: a6:68:de:2d:ad:6e:31:4b:be:60:d5:d9:16:b5:a4: e6:45:d6:6b:5e:72:a0:5a:25:14:23:06:1b:64:53: 64:3d:7a:cf:76:45:50:e6:04:2a:8b:79:1b:43:29: 47:2c:7d:92:94:3f:4f:d1:24:42:24:24:eb:df:75: 7d:b5:8c:77:13:77:e5:4e:34:83:cf:4c:d7:0e:a1: de:88:09:82:eb:cb:6b:f9:d5:55:e5:15:47:c6:76: 8d:f3:cb:60:9e:27:cb:c3:0c:f4:73:09:d5:b4:92: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:40:4E:C8:A9:3A:24:BC:D7:4C:0F:DF:9C:FF:2B:08:DC:B6:62:54 X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:79:16:2e:80:7b:7f:11:ea:15:8d:0d:4c:ca:49:47:49:7e: 2b:51:2e:61:7a:41:75:97:ad:3c:20:f4:7d:e5:2d:be:83:d3: cd:6a:1e:b5:72:5c:50:ab:6c:05:1f:34:c7:ab:27:5c:ce:b2: 9e:0b:6b:7f:db:14:8f:70:be:83:83:cb:0b:5f:d3:3a:00:b3: 86:58:96:06:f5:7c:35:7e:7f:a1:ce:4a:9b:1c:09:85:39:26: 8e:7e:f7:79:c8:48:dd:55:6a:b3:1a:c2:33:47:05:f3:67:3b: 74:c4:57:38:98:10:bf:08:f3:91:77:6c:bd:f6:1a:47:9e:8a: 9a:be:c9:44:e4:f8:8b:82:96:4b:5c:d8:e6:8b:52:6f:10:70: 53:b0:42:55:74:5e:84:66:fb:53:92:36:e5:ea:eb:af:06:4f: 81:5b:65:53:8c:31:ce:f2:2d:93:03:40:a5:7f:78:ae:fa:06: 43:ce:21:d6:76:76:b4:74:4e:c0:2d:0b:50:9c:7c:d6:4b:25: e5:97:bb:67:64:ae:c3:b4:61:91:75:4e:05:75:1c:ec:2e:5c: 42:83:78:01:75:f3:a1:70:db:c8:d9:aa:9b:38:bb:82:19:eb: a4:68:01:47:33:88:f6:16:94:2d:4a:14:a9:df:75:93:32:1d: bf:76:50:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjUwNzE5MDYyODUxWhcNMjUwNzI2MDYyODUxWjAYMRYwFAYD VQQDEw02ODdiM2IyMy0zYTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uA3m98IUYc9tNkoJnxt8pSXgd0tdtquO0QQbyFOwjXgITlIaBSULVEIOoaY kZq5HzrbLix2Oa3Nts32EgEmLO/N1UibrR3hH4uQcHZcK/e1RPdfKkCEBYxie3+6 svflXvyd5SnFDIkwxRwg+c5wFZ0VfNr2NBVIDKIPbuKOy8wxY+1AmjGiP65WYQob f73kkMTSSsimaN4trW4xS75g1dkWtaTmRdZrXnKgWiUUIwYbZFNkPXrPdkVQ5gQq i3kbQylHLH2SlD9P0SRCJCTr33V9tYx3E3flTjSDz0zXDqHeiAmC68tr+dVV5RVH xnaN88tgnifLwwz0cwnVtJITPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxATsip OiS810wP35z/KwjctmJUMB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9GNTYwMzdBNjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhB TUNVdzNSTVhSQ01XTUp3WGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHeRYugHt/EeoVjQ1MyklHSX4rUS5hekF1l608IPR95S2+g9PNah61 clxQq2wFHzTHqydczrKeC2t/2xSPcL6Dg8sLX9M6ALOGWJYG9Xw1fn+hzkqbHAmF OSaOfvd5yEjdVWqzGsIzRwXzZzt0xFc4mBC/CPORd2y99hpHnoqavslE5PiLgpZL XNjmi1JvEHBTsEJVdF6EZvtTkjbl6uuvBk+BW2VTjDHO8i2TA0Clf3iu+gZDziHW dna0dE7ALQtQnHzWSyXll7tnZK7DtGGRdU4FdRzsLlxCg3gBdfOhcNvI2aqbOLuC GeukaAFHM4j2FpQtShSp33WTMh2/dlB9 -----END CERTIFICATE-----Generated at Mon Jul 21 06:49:19 2025 by rpki-client