$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft File: Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json) Hash identifier: NTEN99TOCNqgl3XpTPwrOAqsiw7+g2N8wKKFzuaq9MM= Subject key identifier: 1A:42:28:41:AE:79:FA:B3:7C:03:05:2D:1D:80:60:18:20:A1:E9:E7 Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C Certificate issuer: /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft Manifest number: 9F Signing time: Sat 31 May 2025 05:49:31 +0000 Manifest this update: Sat 31 May 2025 05:49:30 +0000 Manifest next update: Sat 07 Jun 2025 05:49:30 +0000 Files and hashes: 1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: pIaMo3YZFOsOyheZ7TSjg1fT6QoKkQkR3kKrfJo/i7g=) 2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: x7MCciPiMoC21iI94vanFTmv6Gh7il8p9AlIW1ZpCrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Validity Not Before: May 31 05:49:30 2025 GMT Not After : Jun 7 05:49:30 2025 GMT Subject: CN=683a986b-4a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:10:80:02:7b:ef:3d:60:d7:fa:6a:cf:e3: fc:6b:82:83:13:f3:05:4d:2c:6c:be:93:3a:c7:11: 2b:35:cb:7f:a7:8f:f9:e9:82:d8:21:f8:f2:0a:04: 32:d0:64:35:94:60:a1:8a:53:3a:66:3a:e4:ee:44: 4a:07:16:10:1d:c2:a4:72:d9:5a:d5:6d:9d:4d:2e: 14:9d:47:c0:17:fa:0b:36:09:0d:9e:51:4a:4a:5e: 48:61:b8:0f:67:ac:58:9b:88:21:ee:b7:0d:13:27: 34:0d:15:17:54:c7:ad:1d:e3:4b:eb:f2:df:8b:dd: e5:44:01:1d:2c:47:0d:f1:ce:ff:0a:b9:df:c1:78: a9:90:64:22:98:94:9b:03:87:f9:31:bb:c9:80:f3: 27:0f:f5:c6:9d:04:42:43:5e:ef:f4:55:4b:af:04: 43:46:61:37:04:f3:82:45:de:51:38:5f:be:33:ab: 49:38:53:b4:6a:84:0b:1c:54:c6:e6:47:75:d6:56: 87:e1:24:c1:78:79:03:49:aa:a1:0b:1b:ff:c0:2e: 6f:1d:00:b8:00:80:22:dd:b3:2f:67:71:be:50:b7: a3:fa:2e:4a:55:b5:49:c5:f3:3b:e6:c9:55:37:1d: 3d:18:ea:56:54:4a:c7:97:a3:67:e4:f5:d8:29:e3: 23:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:42:28:41:AE:79:FA:B3:7C:03:05:2D:1D:80:60:18:20:A1:E9:E7 X509v3 Authority Key Identifier: keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:fa:6f:8a:3f:97:32:d3:c5:b4:76:b3:b6:1a:f8:f4:f8:15: c3:79:8f:8a:7f:af:76:4f:3f:19:b7:b3:af:2c:e3:e8:af:84: 9c:93:97:62:b3:5a:65:fe:a5:0b:49:41:77:fb:ed:64:86:34: 4b:57:14:bb:6c:26:f0:5e:4d:7b:81:a2:8a:7d:0d:37:18:92: a1:9e:db:e8:06:67:fb:6f:7c:6a:01:02:ca:33:9d:58:6d:7f: 6f:26:e9:bf:12:60:a1:81:57:f1:f8:e5:a5:ad:af:a7:bb:c6: 80:a1:a2:0a:80:22:c0:fc:41:8b:cf:89:eb:f2:e4:58:e1:1e: 12:b7:4e:ed:75:96:99:3f:e8:f8:50:ac:d6:73:6f:f0:dc:7b: e6:a4:77:fb:0e:8c:7d:93:13:d4:ea:3c:d4:ec:03:86:eb:dd: 1d:3b:64:3a:e8:72:33:a0:61:59:35:05:32:df:94:22:2a:ca: 4e:2d:19:16:bd:98:3a:dd:10:9d:f9:d2:10:99:8f:30:5c:f8: 58:2c:26:c3:3a:45:43:9f:45:c0:a3:50:bb:cc:8b:13:22:af: 87:f1:1c:b0:c0:77:1c:fc:05:98:6b:5a:aa:8a:d2:84:1a:6d: 04:b3:36:f4:ec:a2:69:ac:e9:d1:1b:50:f4:3d:35:cf:3f:f7: d1:9a:70:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDEzMUVGNjJFMTIxQjExREU2MTA0MkMzRTIyNUU3MTZC Qjk0NzlFMkMwHhcNMjUwNTMxMDU0OTMwWhcNMjUwNjA3MDU0OTMwWjAYMRYwFAYD VQQDEw02ODNhOTg2Yi00YThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZwQgAJ77z1g1/pqz+P8a4KDE/MFTSxsvpM6xxErNct/p4/56YLYIfjyCgQy 0GQ1lGChilM6Zjrk7kRKBxYQHcKkctla1W2dTS4UnUfAF/oLNgkNnlFKSl5IYbgP Z6xYm4gh7rcNEyc0DRUXVMetHeNL6/Lfi93lRAEdLEcN8c7/CrnfwXipkGQimJSb A4f5MbvJgPMnD/XGnQRCQ17v9FVLrwRDRmE3BPOCRd5ROF++M6tJOFO0aoQLHFTG 5kd11laH4STBeHkDSaqhCxv/wC5vHQC4AIAi3bMvZ3G+ULej+i5KVbVJxfM75slV Nx09GOpWVErHl6Nn5PXYKeMjtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpCKEGu efqzfAMFLR2AYBggoennMB8GA1UdIwQYMBaAFBMe9i4SGxHeYQQsPiJecWu5R54s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xQzEzN0MyMDQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVkNWhCQ3ctSWw1eGE3bEhu aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4NzJMaEliRWQ1aEJDdy1JbDV4YTdsSG5pdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xQzEzN0MyMDQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVk NWhCQ3ctSWw1eGE3bEhuaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4+m+KP5cy08W0drO2Gvj0+BXDeY+Kf692Tz8Zt7OvLOPor4Sck5di s1pl/qULSUF3++1khjRLVxS7bCbwXk17gaKKfQ03GJKhntvoBmf7b3xqAQLKM51Y bX9vJum/EmChgVfx+OWlra+nu8aAoaIKgCLA/EGLz4nr8uRY4R4St07tdZaZP+j4 UKzWc2/w3HvmpHf7Dox9kxPU6jzU7AOG690dO2Q66HIzoGFZNQUy35QiKspOLRkW vZg63RCd+dIQmY8wXPhYLCbDOkVDn0XAo1C7zIsTIq+H8RywwHcc/AWYa1qqitKE Gm0Eszb07KJprOnRG1D0PTXPP/fRmnCY -----END CERTIFICATE-----Generated at Sat May 31 17:17:26 2025 by rpki-client