$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json) Hash identifier: qmNf4ISzt201MoEaKaAj9GlbBg7a9mdy90RItLZNGGI= Subject key identifier: 26:11:31:D7:5C:48:3D:86:CB:83:6D:DF:57:99:87:2F:1F:A2:26:E4 Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 05C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft Manifest number: 05C0 Signing time: Fri 30 May 2025 23:18:08 +0000 Manifest this update: Fri 30 May 2025 23:18:08 +0000 Manifest next update: Fri 06 Jun 2025 23:18:08 +0000 Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: hBw66GRvE9NP8TnSzQ67t28cQom+V1Z4n3e5I7oa9zc=) 2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: aRYWCiFCI9e+UhsWF2EXBC5D+N3vZVlnQx//tGzToMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1477 (0x5c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: May 30 23:18:08 2025 GMT Not After : Jun 6 23:18:08 2025 GMT Subject: CN=683a3cb0-6f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:ed:86:e3:fa:64:d3:4c:a3:e7:6c:9d:e1: 6c:92:19:3a:bf:3f:2e:fa:41:43:b4:15:5b:07:09: 87:13:b5:40:37:62:3f:e1:92:d7:07:aa:4a:66:b9: f6:c2:2f:5e:3b:a1:39:e5:6b:71:d7:ed:86:e0:98: 2a:27:4e:43:06:f3:7c:9e:c2:fb:62:ba:3d:15:b8: 77:81:39:f3:13:0b:07:85:8d:a1:0c:08:6d:5b:32: 64:5d:f7:a7:e3:b7:c9:3a:77:16:f1:85:2e:6c:0f: 4b:73:0b:f3:c7:b5:7a:d1:1f:74:91:09:a7:6c:e9: 52:0e:76:e4:03:ee:f5:ec:2f:df:90:f9:fc:41:ce: 23:73:5a:f4:ff:7c:8a:16:d7:36:39:0c:25:82:69: be:9b:22:ec:49:46:f0:1e:f8:0e:07:1b:e0:e3:06: ff:1c:e2:b4:fd:01:c0:6d:f4:24:65:42:0b:30:af: 5c:e0:32:10:8d:74:7a:8c:64:c7:7d:82:e9:13:c5: ba:a7:fa:32:dc:7a:51:6a:bc:f8:ab:3b:6a:70:97: 66:db:14:73:a7:39:46:43:9f:07:38:67:bf:76:8e: ba:d2:80:84:f8:9b:39:73:d3:4e:b7:20:17:79:7e: 25:57:0b:c7:d8:62:82:6c:51:5c:4a:a2:8c:10:a2: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:11:31:D7:5C:48:3D:86:CB:83:6D:DF:57:99:87:2F:1F:A2:26:E4 X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d6:e1:b3:a4:cb:c1:f8:89:a7:44:d0:b3:19:37:b6:3f:d6: 61:58:6a:09:99:59:27:8c:ce:7b:93:86:1a:9f:ac:69:7f:87: a8:06:16:75:7e:5d:78:ac:3e:2e:ee:b2:ab:ed:14:d2:6a:02: 22:7e:e6:e4:a8:89:d0:9b:ad:2c:e6:b9:b2:08:82:bb:e3:45: 03:ca:6d:79:5e:ae:02:c3:0f:dc:9b:81:93:24:da:18:7d:26: 47:3d:a9:9c:98:11:bb:7c:1d:46:a7:bf:5b:42:fc:91:78:9b: a1:0c:15:e1:91:44:f4:96:45:10:8c:dc:5b:9c:35:da:c8:61: 75:b6:d7:ce:5e:5f:78:5d:0f:75:23:83:2b:50:19:c2:b9:e9: 76:81:6b:03:34:f7:3e:ed:51:d4:07:ff:e2:17:79:f7:bc:72: 4c:90:01:4a:ac:a4:f0:79:86:fe:a8:23:d0:5a:f1:e1:9b:79: 9e:3d:62:a8:2d:97:44:5c:7f:54:dd:a7:ff:1d:de:d1:0c:ae: b3:53:95:53:f9:90:66:85:be:9c:16:c8:6a:32:7c:fc:17:f1: b6:ef:8e:5b:1b:b9:da:a1:2d:49:4f:7f:ab:80:08:cf:e4:14: 41:81:9d:ef:ad:d8:ac:70:3e:85:6f:05:11:7e:a4:a9:29:88: 82:24:44:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjUwNTMwMjMxODA4WhcNMjUwNjA2MjMxODA4WjAYMRYwFAYD VQQDEw02ODNhM2NiMC02ZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxurthuP6ZNNMo+dsneFskhk6vz8u+kFDtBVbBwmHE7VAN2I/4ZLXB6pKZrn2 wi9eO6E55Wtx1+2G4JgqJ05DBvN8nsL7Yro9Fbh3gTnzEwsHhY2hDAhtWzJkXfen 47fJOncW8YUubA9Lcwvzx7V60R90kQmnbOlSDnbkA+717C/fkPn8Qc4jc1r0/3yK Ftc2OQwlgmm+myLsSUbwHvgOBxvg4wb/HOK0/QHAbfQkZUILMK9c4DIQjXR6jGTH fYLpE8W6p/oy3HpRarz4qztqcJdm2xRzpzlGQ58HOGe/do660oCE+Js5c9NOtyAX eX4lVwvH2GKCbFFcSqKMEKJjhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYRMddc SD2Gy4Nt31eZhy8foibkMB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS YVpoaXpLZnZKSGRqRFZjT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk1uGzpMvB+ImnRNCzGTe2P9ZhWGoJmVknjM57k4Yan6xpf4eoBhZ1 fl14rD4u7rKr7RTSagIifubkqInQm60s5rmyCIK740UDym15Xq4Cww/cm4GTJNoY fSZHPamcmBG7fB1Gp79bQvyReJuhDBXhkUT0lkUQjNxbnDXayGF1ttfOXl94XQ91 I4MrUBnCuel2gWsDNPc+7VHUB//iF3n3vHJMkAFKrKTweYb+qCPQWvHhm3mePWKo LZdEXH9U3af/Hd7RDK6zU5VT+ZBmhb6cFshqMnz8F/G2745bG7naoS1JT3+rgAjP 5BRBgZ3vrdiscD6FbwURfqSpKYiCJERv -----END CERTIFICATE-----Generated at Sat May 31 17:10:15 2025 by rpki-client