$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft File: ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json) Hash identifier: sK7R5kMA9KgDe7iJdRbaAvJFKTCxHcyTJzzji9RmotE= Subject key identifier: 45:63:D9:41:B2:A6:77:C3:59:52:A0:FA:E1:8A:AA:D9:D1:65:84:E5 Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 Certificate issuer: /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Certificate serial: 05C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft Manifest number: 05C3 Signing time: Fri 30 May 2025 23:16:57 +0000 Manifest this update: Fri 30 May 2025 23:16:56 +0000 Manifest next update: Fri 06 Jun 2025 23:16:56 +0000 Files and hashes: 1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: 5doxF44BPX1r50xBn2lLSietI8f/75yjOwCYDDPgOKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1476 (0x5c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Validity Not Before: May 30 23:16:56 2025 GMT Not After : Jun 6 23:16:56 2025 GMT Subject: CN=683a3c69-cc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ed:e8:b2:1d:5e:bb:1f:7a:13:d3:e0:d3:d1: bf:0f:18:24:81:e7:4c:bb:de:ae:72:25:71:1e:e8: 3e:19:9b:6b:b4:e0:a6:f6:42:62:47:6c:96:27:67: 63:72:fd:2d:1f:7e:3f:aa:38:1f:37:34:e7:12:ec: fa:1d:7f:e9:d7:db:0d:d0:45:4d:30:e6:b2:30:84: c0:5e:7d:66:fe:13:c9:da:a3:fa:8b:d2:b6:82:d3: 2b:f8:0b:34:fd:85:56:78:70:b4:01:47:ec:15:fd: 5e:d8:3b:e6:41:3e:7b:02:2a:bd:09:ad:53:0a:34: 97:ef:22:fe:74:1f:17:08:be:c8:3f:7f:f4:a0:a8: 9a:7c:52:bd:b4:40:0e:e2:b7:e1:b1:59:81:72:4b: 53:eb:47:6e:9d:5d:f1:f7:28:d9:f8:ea:a9:ae:50: 01:5a:c2:55:ba:f2:f7:91:36:58:86:bb:f3:5c:55: 75:43:29:65:fe:20:ae:97:50:60:21:9b:b9:f3:85: 57:08:2a:ae:55:52:1e:6a:c4:d5:64:16:88:dc:ed: b0:06:27:b1:b7:07:ec:a5:78:46:6e:c2:69:1e:13: 6c:71:bd:64:89:4a:a8:bc:72:85:63:69:68:28:85: 4b:ce:27:87:da:73:00:de:a8:7c:db:15:6f:ad:cd: de:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:63:D9:41:B2:A6:77:C3:59:52:A0:FA:E1:8A:AA:D9:D1:65:84:E5 X509v3 Authority Key Identifier: keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:52:44:35:b0:74:03:4a:58:d4:e6:04:b5:51:27:cb:5f:7d: da:72:9c:73:5d:de:ff:a3:d1:f5:8e:0d:e8:3b:f1:e2:08:ab: 2a:41:35:48:e3:58:c9:6e:a2:08:ff:32:30:05:34:7e:c1:79: fb:e2:04:28:d4:fe:6d:69:41:8e:c4:9d:4c:31:a4:65:e4:eb: 09:12:b5:31:f1:82:44:de:c1:06:a6:7b:50:24:a7:f4:24:fa: 79:e6:6b:e6:eb:f4:bb:a0:c6:e5:a6:c8:6e:99:7a:65:4a:8e: 8e:d2:58:11:41:d6:9d:60:d1:c4:2c:f0:ef:55:2c:46:e2:c9: fe:b0:7e:82:ba:1b:6a:15:9d:11:4d:c6:89:ff:ff:9a:11:cf: ff:81:a3:b7:b6:b5:38:b7:82:29:80:76:a5:2d:d7:9e:99:03: a2:b9:6b:ad:a5:09:38:2d:38:76:ed:0a:a9:18:a4:3a:d2:e5: fe:51:75:97:c1:d8:17:23:5d:9e:5c:0c:0a:04:c2:3d:42:d1: 2c:af:58:6b:32:a7:bf:ca:73:5a:f1:ce:c4:6f:c0:17:8a:82: ca:39:28:f4:7a:3c:a5:08:ee:ae:72:13:94:a6:62:0c:b8:01: 9f:1d:70:e0:e4:59:a7:85:6b:e0:d3:6f:98:a7:54:89:14:07: df:db:9f:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx RkQxRENFQTgwHhcNMjUwNTMwMjMxNjU2WhcNMjUwNjA2MjMxNjU2WjAYMRYwFAYD VQQDEw02ODNhM2M2OS1jYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+3osh1eux96E9Pg09G/DxgkgedMu96uciVxHug+GZtrtOCm9kJiR2yWJ2dj cv0tH34/qjgfNzTnEuz6HX/p19sN0EVNMOayMITAXn1m/hPJ2qP6i9K2gtMr+As0 /YVWeHC0AUfsFf1e2DvmQT57Aiq9Ca1TCjSX7yL+dB8XCL7IP3/0oKiafFK9tEAO 4rfhsVmBcktT60dunV3x9yjZ+OqprlABWsJVuvL3kTZYhrvzXFV1Qyll/iCul1Bg IZu584VXCCquVVIeasTVZBaI3O2wBiextwfspXhGbsJpHhNscb1kiUqovHKFY2lo KIVLzieH2nMA3qh82xVvrc3ePQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVj2UGy pnfDWVKg+uGKqtnRZYTlMB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi cnlTMnVRVnFlN01mMGR6cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6UkQ1sHQDSljU5gS1USfLX33acpxzXd7/o9H1jg3oO/HiCKsqQTVI 41jJbqII/zIwBTR+wXn74gQo1P5taUGOxJ1MMaRl5OsJErUx8YJE3sEGpntQJKf0 JPp55mvm6/S7oMblpshumXplSo6O0lgRQdadYNHELPDvVSxG4sn+sH6CuhtqFZ0R TcaJ//+aEc//gaO3trU4t4IpgHalLdeemQOiuWutpQk4LTh27QqpGKQ60uX+UXWX wdgXI12eXAwKBMI9QtEsr1hrMqe/ynNa8c7Eb8AXioLKOSj0ejylCO6uchOUpmIM uAGfHXDg5FmnhWvg02+Yp1SJFAff259m -----END CERTIFICATE-----Generated at Sat May 31 17:47:28 2025 by rpki-client