$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft File: ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json) Hash identifier: qDvAdwAnf4+/4VB97aa3uvkCgw+dWFIQ0cXH65M/sRU= Subject key identifier: 66:E8:7F:81:0D:68:4B:67:8C:A0:91:DE:81:F7:78:11:38:5F:3F:90 Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 Certificate issuer: /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft Manifest number: 0110 Signing time: Sat 19 Jul 2025 05:12:47 +0000 Manifest this update: Sat 19 Jul 2025 05:12:47 +0000 Manifest next update: Sat 26 Jul 2025 05:12:47 +0000 Files and hashes: 1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: tCWjBKGe6gP+tlbT6itVgKOLMJ6tpoHklUOfOmjz+vQ=) 2: AE9090F83B0F11F08D496424C4F9AE02.roa (hash: umWRD+8bjsaQAgjCl5Z98Y524f2ID68DcmZn0Gw48GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Validity Not Before: Jul 19 05:12:47 2025 GMT Not After : Jul 26 05:12:47 2025 GMT Subject: CN=687b294f-85af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:9e:06:96:65:5d:19:2f:20:37:ee:2e:14: 8a:8e:25:36:b2:61:94:bf:4d:3e:40:5c:8d:6c:84: 2d:43:e7:d8:16:b8:cc:07:3a:c7:18:d0:54:4e:58: 29:21:46:fe:af:71:78:93:b3:ce:7e:af:47:5d:89: ee:67:c1:64:a9:46:7c:34:1d:87:f9:ae:00:c5:dd: 45:1e:ff:4b:a4:72:2a:de:24:d2:12:52:43:90:a3: d4:9b:43:13:43:87:ee:b0:0e:2e:47:55:4a:2b:d3: 8a:d2:28:30:c6:37:e7:32:03:72:fd:55:f8:70:23: 93:24:79:4b:7b:78:cd:4b:1a:a4:8f:3d:65:53:bd: 03:cf:0a:64:44:c8:11:90:ff:28:83:ab:11:5f:5c: d6:ea:d6:73:9e:eb:7f:b7:36:89:d8:80:e0:b0:26: 4c:9e:16:4a:4e:18:e4:7e:9b:7d:0e:a7:72:fe:0e: ef:ad:59:fd:ea:ce:f1:94:cf:99:a5:38:91:89:06: 2e:36:7b:3e:d8:93:9e:bd:76:f1:65:78:ec:16:d9: 08:19:3c:b7:ec:b3:5b:77:96:4e:58:a6:67:ed:51: 06:77:bf:3f:c7:fc:f1:fe:e6:1f:71:40:69:0b:11: 0f:69:36:fc:34:ac:c6:61:51:a5:8c:29:b2:c8:2c: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E8:7F:81:0D:68:4B:67:8C:A0:91:DE:81:F7:78:11:38:5F:3F:90 X509v3 Authority Key Identifier: keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:fb:bb:0d:3c:a8:c8:04:3a:66:31:db:45:77:79:e0:bf:c7: 40:de:39:da:47:ae:ee:fe:3a:9f:4a:da:d4:b0:09:00:ca:7b: 71:6a:07:1b:42:08:28:9d:e6:df:ab:a8:7e:a7:5a:91:c4:ad: 35:60:6f:de:81:90:43:5f:a0:d7:5a:78:dc:d8:37:ad:40:90: 7e:a6:56:44:c2:ab:40:5b:40:d5:ba:76:ce:40:49:05:f1:a1: 5a:4d:41:fc:d9:1d:87:a6:88:b7:2e:de:79:a5:bf:c8:d9:a3: ba:3d:94:9d:fa:8c:9f:94:dc:85:69:1d:c2:03:7f:cc:33:df: 30:5d:15:9c:d0:95:bd:b0:21:6f:02:a8:36:cd:a4:4a:f1:c1: de:2d:a5:02:da:c8:19:10:ff:bc:4d:81:bc:65:ac:72:b0:68: c7:40:c4:dc:bd:79:93:b9:5a:33:fd:b4:35:b5:77:53:69:b2: a3:b7:a4:e5:16:ff:95:a7:bb:f8:b0:bb:bd:5b:1d:35:82:1b: cf:9c:cf:10:64:24:cc:23:d9:2e:10:5d:f1:7e:39:d2:9d:b9: d1:30:c4:2f:13:5c:4f:ae:fe:ef:e5:7f:7f:e4:82:7c:f2:4b: e2:67:ae:9e:b5:5a:e9:ba:9e:32:5a:dd:89:44:3c:be:8c:ea: 2e:85:b5:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKDdCMUZCMUJBM0IwRUM4Q0E1RTVDMTNBRUJDRkM2RUJB OEQyMEVBQTcwHhcNMjUwNzE5MDUxMjQ3WhcNMjUwNzI2MDUxMjQ3WjAYMRYwFAYD VQQDEw02ODdiMjk0Zi04NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcOeBpZlXRkvIDfuLhSKjiU2smGUv00+QFyNbIQtQ+fYFrjMBzrHGNBUTlgp IUb+r3F4k7POfq9HXYnuZ8FkqUZ8NB2H+a4Axd1FHv9LpHIq3iTSElJDkKPUm0MT Q4fusA4uR1VKK9OK0igwxjfnMgNy/VX4cCOTJHlLe3jNSxqkjz1lU70DzwpkRMgR kP8og6sRX1zW6tZznut/tzaJ2IDgsCZMnhZKThjkfpt9Dqdy/g7vrVn96s7xlM+Z pTiRiQYuNns+2JOevXbxZXjsFtkIGTy37LNbd5ZOWKZn7VEGd78/x/zx/uYfcUBp CxEPaTb8NKzGYVGljCmyyCx6AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbof4EN aEtnjKCR3oH3eBE4Xz+QMB8GA1UdIwQYMBaAFHsfsbo7DsjKXlwTrrz8brqNIOqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS82RjJGRDMzOEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lNcGVYQk91dlB4dXVvMGc2 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V4LXh1anNPeU1wZVhCT3V2UHh1dW8wZzZxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS82RjJGRDMzOENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lN cGVYQk91dlB4dXVvMGc2cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt+7sNPKjIBDpmMdtFd3ngv8dA3jnaR67u/jqfStrUsAkAyntxagcb Qggonebfq6h+p1qRxK01YG/egZBDX6DXWnjc2DetQJB+plZEwqtAW0DVunbOQEkF 8aFaTUH82R2Hpoi3Lt55pb/I2aO6PZSd+oyflNyFaR3CA3/MM98wXRWc0JW9sCFv Aqg2zaRK8cHeLaUC2sgZEP+8TYG8ZaxysGjHQMTcvXmTuVoz/bQ1tXdTabKjt6Tl Fv+Vp7v4sLu9Wx01ghvPnM8QZCTMI9kuEF3xfjnSnbnRMMQvE1xPrv7v5X9/5IJ8 8kviZ66etVrpup4yWt2JRDy+jOouhbUz -----END CERTIFICATE-----Generated at Mon Jul 21 00:26:49 2025 by rpki-client