$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft File: ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json) Hash identifier: e+E41XSAYI9qHywSY99HUAIB70EM1BcLOVlgvouyEwc= Subject key identifier: D7:94:3B:FC:04:85:B6:11:F5:C0:21:B9:83:7B:17:E4:19:F4:F2:1C Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 Certificate issuer: /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft Manifest number: 0129 Signing time: Fri 05 Sep 2025 05:05:41 +0000 Manifest this update: Fri 05 Sep 2025 05:05:41 +0000 Manifest next update: Fri 12 Sep 2025 05:05:41 +0000 Files and hashes: 1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: d4Pc4v9ETBHmcuGc4rbmgD96Cb70FESFN2KO9myDauE=) 2: AE9090F83B0F11F08D496424C4F9AE02.roa (hash: umWRD+8bjsaQAgjCl5Z98Y524f2ID68DcmZn0Gw48GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Validity Not Before: Sep 5 05:05:41 2025 GMT Not After : Sep 12 05:05:41 2025 GMT Subject: CN=68ba6fa5-dd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f2:e6:7b:40:5b:06:1d:07:c1:53:62:4e:54: 11:59:83:53:97:e9:3c:76:06:bc:28:d9:e7:41:20: d4:d6:9f:d4:49:73:11:f7:66:0e:dc:d1:c3:b2:17: 9d:99:99:e7:61:55:67:60:62:26:ad:5f:64:d3:70: b6:6e:f7:c4:fb:8d:3c:71:b0:b0:6a:17:75:3e:6d: c0:1c:02:84:1f:1f:a7:9b:f0:07:e2:b3:bc:fa:e6: 18:70:8a:07:cb:a3:48:46:62:51:fb:f3:b6:63:59: 30:dd:59:43:bb:82:e0:22:66:2a:6c:58:9b:53:26: ac:67:79:84:c9:0e:eb:25:af:96:03:8f:1c:f0:cf: 47:b9:9c:29:0f:ed:d4:b7:cd:f4:a1:23:b5:b1:d8: 2c:17:f1:c9:8e:22:d3:0a:9a:2c:a1:66:cd:ac:00: 8a:d0:30:21:94:7b:84:a9:b9:14:74:be:a2:63:9c: b4:48:0f:82:c4:06:53:7e:5f:3b:bf:8c:41:99:da: 1a:29:bd:07:88:25:c4:c1:71:5f:e7:61:4b:75:74: 91:bb:ec:7a:9d:27:63:80:51:ae:84:b4:cc:9d:af: c5:10:6e:71:13:5c:85:cf:8e:89:c1:95:5b:43:5d: 85:dd:03:78:9f:af:a5:a8:50:2c:1d:22:2b:56:91: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:94:3B:FC:04:85:B6:11:F5:C0:21:B9:83:7B:17:E4:19:F4:F2:1C X509v3 Authority Key Identifier: keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ab:d0:c0:06:e8:6f:10:fd:7a:68:43:cb:9b:23:16:7c:66: 32:b3:f1:7f:5b:d1:c2:da:11:3e:f2:54:48:3e:5b:7f:8e:9c: eb:e5:e0:61:ce:4a:ec:65:58:80:81:03:61:8f:30:9e:7b:73: 8e:4c:a0:d6:c2:6b:f1:28:a1:01:bf:f9:a0:ca:0e:15:89:bf: 3b:5e:31:73:5d:63:a6:3b:51:0b:17:c6:39:27:e2:ba:60:83: dc:b6:41:10:0a:31:71:58:be:f0:e4:c1:62:ab:72:85:3c:11: b3:d9:32:63:49:3e:73:24:18:53:96:84:51:36:30:0b:8a:cc: 08:00:9d:08:f7:46:4e:fd:7e:ea:42:07:17:49:0e:81:dd:bf: 55:da:0c:8e:f1:7e:a8:8e:0b:5d:aa:79:93:5e:e6:28:54:21: f2:5b:ec:bb:9e:0d:88:9f:3a:df:2a:45:48:4f:82:11:3c:70: bf:ce:d8:84:35:21:ee:25:b5:db:19:a9:90:61:17:b1:64:a1: 07:07:b3:19:9e:a0:26:1a:4d:8f:a5:21:ec:4f:61:99:c7:4c: 69:53:e0:31:1c:9b:cf:c3:66:da:54:10:ff:8b:ce:4a:24:c2: bf:b8:05:50:f7:99:3c:fe:bb:67:63:b9:96:c1:ed:a0:69:b0: 12:80:0e:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKDdCMUZCMUJBM0IwRUM4Q0E1RTVDMTNBRUJDRkM2RUJB OEQyMEVBQTcwHhcNMjUwOTA1MDUwNTQxWhcNMjUwOTEyMDUwNTQxWjAYMRYwFAYD VQQDEw02OGJhNmZhNS1kZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/Lme0BbBh0HwVNiTlQRWYNTl+k8dga8KNnnQSDU1p/USXMR92YO3NHDshed mZnnYVVnYGImrV9k03C2bvfE+408cbCwahd1Pm3AHAKEHx+nm/AH4rO8+uYYcIoH y6NIRmJR+/O2Y1kw3VlDu4LgImYqbFibUyasZ3mEyQ7rJa+WA48c8M9HuZwpD+3U t830oSO1sdgsF/HJjiLTCposoWbNrACK0DAhlHuEqbkUdL6iY5y0SA+CxAZTfl87 v4xBmdoaKb0HiCXEwXFf52FLdXSRu+x6nSdjgFGuhLTMna/FEG5xE1yFz46JwZVb Q12F3QN4n6+lqFAsHSIrVpGpWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeUO/wE hbYR9cAhuYN7F+QZ9PIcMB8GA1UdIwQYMBaAFHsfsbo7DsjKXlwTrrz8brqNIOqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS82RjJGRDMzOEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lNcGVYQk91dlB4dXVvMGc2 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V4LXh1anNPeU1wZVhCT3V2UHh1dW8wZzZxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS82RjJGRDMzOENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lN cGVYQk91dlB4dXVvMGc2cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoq9DABuhvEP16aEPLmyMWfGYys/F/W9HC2hE+8lRIPlt/jpzr5eBh zkrsZViAgQNhjzCee3OOTKDWwmvxKKEBv/mgyg4Vib87XjFzXWOmO1ELF8Y5J+K6 YIPctkEQCjFxWL7w5MFiq3KFPBGz2TJjST5zJBhTloRRNjALiswIAJ0I90ZO/X7q QgcXSQ6B3b9V2gyO8X6ojgtdqnmTXuYoVCHyW+y7ng2InzrfKkVIT4IRPHC/ztiE NSHuJbXbGamQYRexZKEHB7MZnqAmGk2PpSHsT2GZx0xpU+AxHJvPw2baVBD/i85K JMK/uAVQ95k8/rtnY7mWwe2gabASgA61 -----END CERTIFICATE-----Generated at Sat Sep 6 15:34:18 2025 by rpki-client