$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json) Hash identifier: xzdCvzj0Q3GLXeltZSLPDi0XnOn4iU5leou5bcEpalM= Subject key identifier: 58:9E:D1:9C:E6:6F:65:2A:70:46:2F:ED:9E:4F:7A:E0:DD:5C:33:04 Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft Manifest number: 01ED Signing time: Sat 31 May 2025 02:18:40 +0000 Manifest this update: Sat 31 May 2025 02:18:40 +0000 Manifest next update: Sat 07 Jun 2025 02:18:40 +0000 Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: oIngi/LRpu9PeUxTAUNqMoApRbyv6bJlZYGg4SEwau8=) 2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: RQB2RLULGV5D9o8SykaXsVa4IAX2Ix9OkCIOGbXqXJc=) 3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: 1vie/BGCNQgncTtAE895UIuHGNyFzttxRArpojokubI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Validity Not Before: May 31 02:18:40 2025 GMT Not After : Jun 7 02:18:40 2025 GMT Subject: CN=683a6700-c19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:4f:d4:36:b0:49:d6:39:7c:47:67:59:94: 5d:d7:b6:a8:6f:a0:8f:e3:cc:b4:4b:f5:a0:34:ec: 74:29:11:7e:f9:0c:28:8e:bf:78:84:53:60:66:a5: ee:6a:c6:e4:0b:6e:a7:58:5d:ac:c5:f4:82:c7:ac: 32:75:21:41:b2:db:ae:e4:11:6a:ff:b7:38:48:74: a2:13:27:06:59:d6:f4:06:75:7c:4c:8f:a0:04:8f: fa:ed:1f:8f:0c:3e:ae:de:ad:ac:7c:bf:44:5a:44: 62:80:91:25:6b:46:39:b2:05:a6:1c:31:f2:4c:e9: 66:6d:2d:1e:33:dc:b5:44:92:9a:eb:e7:22:2d:91: 9f:fb:4f:83:13:c6:9f:69:06:3e:84:e0:4d:17:99: 52:a6:9e:e2:84:06:9b:f9:9d:aa:a7:ef:48:81:01: 0f:a7:cd:81:4e:31:42:fe:26:4a:ed:ff:f5:67:58: f7:ec:36:b9:d8:1c:f5:4a:24:bf:b9:e5:bd:5e:ea: 04:58:6c:87:d5:cb:c7:08:d0:42:7f:66:6d:98:d8: 91:31:62:bc:2c:76:ff:c8:7a:2e:35:a3:97:eb:e7: 6a:64:cd:22:84:50:83:bb:ca:88:b7:79:62:b0:43: 34:19:8e:91:21:ec:b9:d3:b7:38:3b:9f:b2:b9:4c: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:D1:9C:E6:6F:65:2A:70:46:2F:ED:9E:4F:7A:E0:DD:5C:33:04 X509v3 Authority Key Identifier: keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0a:19:2b:10:4c:7e:4c:70:af:a4:92:3a:d0:77:a4:da:da: 7d:5e:78:da:1f:39:d8:89:b7:cb:ec:f2:7c:51:c9:e9:f9:0b: 8b:92:03:b1:e2:8f:fb:52:58:86:bb:76:a7:f8:de:f2:1c:da: 90:da:00:c1:b3:86:b3:98:48:32:ac:03:ca:a1:29:3e:86:7d: 5d:8e:5b:30:c5:6b:25:24:01:9b:a5:8f:ef:77:78:02:0d:38: 17:8d:f2:ae:99:03:93:7e:dc:cf:ed:20:00:e6:fb:44:d3:72: ca:4c:e3:ab:61:4d:f4:86:aa:14:fb:06:68:8b:ce:98:e6:d8: cc:e5:f4:e3:9f:c4:74:ea:fb:ef:f8:eb:de:f3:63:a9:8b:10: 0a:ee:aa:2f:c3:55:b1:f8:6c:20:1d:e6:e4:e4:51:5e:d9:28: e9:cb:09:c0:5b:2d:d5:f0:c3:06:6c:7a:eb:bc:26:a1:78:d3: 7d:6f:74:0c:9a:2f:32:49:c1:bc:2e:91:04:45:2f:bb:73:4b: c6:71:83:48:6a:24:48:49:b0:01:45:7b:c2:8d:9f:94:ae:cd: e2:4f:60:77:25:8f:ec:6b:03:2e:dd:34:c8:76:1b:56:e5:0d: 59:f9:9d:60:d3:19:39:99:d4:e6:da:5d:2d:d8:70:2b:d6:7d: 75:56:56:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3 MEVGMkIxNEMwHhcNMjUwNTMxMDIxODQwWhcNMjUwNjA3MDIxODQwWjAYMRYwFAYD VQQDEw02ODNhNjcwMC1jMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqVP1DawSdY5fEdnWZRd17aob6CP48y0S/WgNOx0KRF++Qwojr94hFNgZqXu asbkC26nWF2sxfSCx6wydSFBstuu5BFq/7c4SHSiEycGWdb0BnV8TI+gBI/67R+P DD6u3q2sfL9EWkRigJEla0Y5sgWmHDHyTOlmbS0eM9y1RJKa6+ciLZGf+0+DE8af aQY+hOBNF5lSpp7ihAab+Z2qp+9IgQEPp82BTjFC/iZK7f/1Z1j37Da52Bz1SiS/ ueW9XuoEWGyH1cvHCNBCf2ZtmNiRMWK8LHb/yHouNaOX6+dqZM0ihFCDu8qIt3li sEM0GY6RIey507c4O5+yuUxwpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFie0Zzm b2UqcEYv7Z5PeuDdXDMEMB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR M2Uta21VQW9EQzF3N3lzVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8ChkrEEx+THCvpJI60Hek2tp9XnjaHznYibfL7PJ8Ucnp+QuLkgOx 4o/7UliGu3an+N7yHNqQ2gDBs4azmEgyrAPKoSk+hn1djlswxWslJAGbpY/vd3gC DTgXjfKumQOTftzP7SAA5vtE03LKTOOrYU30hqoU+wZoi86Y5tjM5fTjn8R06vvv +Ove82OpixAK7qovw1Wx+GwgHebk5FFe2SjpywnAWy3V8MMGbHrrvCaheNN9b3QM mi8yScG8LpEERS+7c0vGcYNIaiRISbABRXvCjZ+Urs3iT2B3JY/sawMu3TTIdhtW 5Q1Z+Z1g0xk5mdTm2l0t2HAr1n11VlZJ -----END CERTIFICATE-----Generated at Sat May 31 17:04:53 2025 by rpki-client