$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft File: ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json) Hash identifier: kifyFlPYGj7Hll47SFn3SGG+IlVGiIrwYkvAJ4kC8uU= Subject key identifier: FA:AA:91:66:D5:7D:3C:45:E0:67:06:81:83:98:0B:68:DF:4E:7B:F2 Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 Certificate issuer: /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft Manifest number: F8 Signing time: Sun 01 Jun 2025 04:57:31 +0000 Manifest this update: Sun 01 Jun 2025 04:57:31 +0000 Manifest next update: Sun 08 Jun 2025 04:57:31 +0000 Files and hashes: 1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: rV72IZvKL8fhsE5T96H3roLVcj/NuEFnbdsBkqjdNyM=) 2: AE9090F83B0F11F08D496424C4F9AE02.roa (hash: umWRD+8bjsaQAgjCl5Z98Y524f2ID68DcmZn0Gw48GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Validity Not Before: Jun 1 04:57:31 2025 GMT Not After : Jun 8 04:57:31 2025 GMT Subject: CN=683bddbb-f94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:73:bc:c2:a4:f2:01:90:2e:c0:9b:8e:10: 85:bf:c4:87:5f:0a:5f:50:60:bf:a7:83:5b:60:fb: 86:22:b3:7e:12:8c:fd:d9:24:64:fe:35:a0:db:56: 1a:45:c6:64:85:b4:40:5b:c9:82:62:5b:6c:9f:09: 16:8a:15:e1:46:8b:d7:b1:0b:a2:fd:fb:51:04:2d: d0:f5:89:45:30:38:ca:72:46:91:de:ae:16:2f:c1: a9:e8:ba:1d:dd:bd:45:67:83:b7:39:a2:f0:70:25: bb:61:af:75:25:31:72:b7:d0:19:e5:51:a1:c0:00: f5:50:e6:b1:7b:58:15:40:78:73:6d:8c:e3:14:08: a1:5a:4f:82:e2:14:11:30:79:10:d7:5d:d3:de:af: d2:75:20:75:83:d1:c4:a1:b9:5a:87:1e:52:aa:b5: 70:4c:e4:26:de:c3:90:3d:4f:1a:81:4c:1e:cc:78: 9b:9d:5c:10:54:00:b4:21:23:80:f9:02:17:ba:c6: 7d:21:66:4b:1a:9e:59:6c:04:3a:05:0e:60:ac:c3: 26:74:d6:a1:da:b2:03:94:d2:e6:d4:62:85:4c:30: b4:77:f0:7e:e4:f2:93:e0:1c:f1:f6:e7:7a:0f:aa: 6e:8e:84:43:15:9b:47:a6:25:b3:d0:3a:75:66:32: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AA:91:66:D5:7D:3C:45:E0:67:06:81:83:98:0B:68:DF:4E:7B:F2 X509v3 Authority Key Identifier: keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:99:09:af:d9:a3:50:d5:2a:1c:c0:ff:18:3f:b8:fa:69:59: 02:01:e9:14:c6:47:a3:66:5a:e7:f3:d7:76:64:00:bb:d2:ad: d1:6f:4f:d0:83:e5:a3:31:39:f4:96:b1:1b:60:01:19:16:83: 45:05:88:c3:38:19:06:5c:e9:63:40:d9:11:22:de:4c:98:d4: 1f:ba:db:47:96:31:32:0b:da:e9:24:fa:49:01:5e:8c:2f:ce: ce:f2:68:57:b4:b2:fc:05:06:29:fb:99:fe:48:24:78:2b:10: 7b:66:53:2e:32:6d:36:4f:99:10:b5:bd:e1:e5:7a:f5:44:57: 74:03:47:0f:41:cd:a5:0c:37:8e:75:92:b7:5b:2c:b0:0d:6a: 91:63:73:48:3c:e9:8f:07:3f:f9:7c:94:af:c0:c2:ec:d1:65: b8:09:6e:3f:54:38:97:d9:88:91:5e:a8:5d:ac:bb:af:09:de: 20:8d:d1:ce:84:cf:89:68:67:ca:34:c0:05:22:41:46:eb:19: eb:7e:eb:37:f8:94:75:43:f3:0d:4f:d6:9a:64:56:13:04:04: 2c:51:81:ad:b2:22:5b:c3:95:94:ff:e1:ab:5e:b1:22:d8:5f: fd:42:ed:00:8c:ae:9f:5b:cd:3f:b1:d3:80:e6:e6:c3:4c:bb: 92:22:c4:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKDdCMUZCMUJBM0IwRUM4Q0E1RTVDMTNBRUJDRkM2RUJB OEQyMEVBQTcwHhcNMjUwNjAxMDQ1NzMxWhcNMjUwNjA4MDQ1NzMxWjAYMRYwFAYD VQQDEw02ODNiZGRiYi1mOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvR5zvMKk8gGQLsCbjhCFv8SHXwpfUGC/p4NbYPuGIrN+Eoz92SRk/jWg21Ya RcZkhbRAW8mCYltsnwkWihXhRovXsQui/ftRBC3Q9YlFMDjKckaR3q4WL8Gp6Lod 3b1FZ4O3OaLwcCW7Ya91JTFyt9AZ5VGhwAD1UOaxe1gVQHhzbYzjFAihWk+C4hQR MHkQ113T3q/SdSB1g9HEoblahx5SqrVwTOQm3sOQPU8agUwezHibnVwQVAC0ISOA +QIXusZ9IWZLGp5ZbAQ6BQ5grMMmdNah2rIDlNLm1GKFTDC0d/B+5PKT4Bzx9ud6 D6pujoRDFZtHpiWz0Dp1ZjJL+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqqkWbV fTxF4GcGgYOYC2jfTnvyMB8GA1UdIwQYMBaAFHsfsbo7DsjKXlwTrrz8brqNIOqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS82RjJGRDMzOEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lNcGVYQk91dlB4dXVvMGc2 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V4LXh1anNPeU1wZVhCT3V2UHh1dW8wZzZxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS82RjJGRDMzOENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lN cGVYQk91dlB4dXVvMGc2cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlmQmv2aNQ1SocwP8YP7j6aVkCAekUxkejZlrn89d2ZAC70q3Rb0/Q g+WjMTn0lrEbYAEZFoNFBYjDOBkGXOljQNkRIt5MmNQfuttHljEyC9rpJPpJAV6M L87O8mhXtLL8BQYp+5n+SCR4KxB7ZlMuMm02T5kQtb3h5Xr1RFd0A0cPQc2lDDeO dZK3WyywDWqRY3NIPOmPBz/5fJSvwMLs0WW4CW4/VDiX2YiRXqhdrLuvCd4gjdHO hM+JaGfKNMAFIkFG6xnrfus3+JR1Q/MNT9aaZFYTBAQsUYGtsiJbw5WU/+GrXrEi 2F/9Qu0AjK6fW80/sdOA5ubDTLuSIsSv -----END CERTIFICATE-----Generated at Mon Jun 2 20:12:50 2025 by rpki-client