$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft File: Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json) Hash identifier: KlCiDZt2Si5bQymV2TcdAu/iCLFZecROs1QIIjapPTA= Subject key identifier: 8C:C9:B3:D7:7E:7D:72:EE:80:69:1C:D2:8E:B0:2B:6A:99:6A:65:B4 Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB Certificate issuer: /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB Certificate serial: 350F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft Manifest number: 34D9 Signing time: Sat 31 May 2025 14:53:55 +0000 Manifest this update: Sat 31 May 2025 14:53:54 +0000 Manifest next update: Sat 07 Jun 2025 14:53:54 +0000 Files and hashes: 1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: WZccYATCM2OjVLXFeC44uXn7BLp9DwCLJmiYA2ZoWJk=) 2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: Xb2hPwWdc7QTcQDz+qvvab15wycaCcgbmopek0oJdTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13583 (0x350f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB Validity Not Before: May 31 14:53:54 2025 GMT Not After : Jun 7 14:53:54 2025 GMT Subject: CN=683b1803-4a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:2f:75:1a:e9:45:5c:ef:b1:28:41:a6:da: 69:c8:90:30:a5:58:a2:42:3c:0d:f2:21:22:46:8d: 19:4f:f4:2f:6c:d8:1e:f2:b8:21:a1:db:c9:84:23: a5:a8:d5:26:9c:fc:71:75:4b:41:88:ae:4b:d3:47: 4f:cc:8d:9c:5d:b0:c9:e7:d5:1d:a4:61:b3:84:a7: 32:6a:2d:f7:e0:18:7f:df:1a:d0:65:d5:af:2f:79: 92:68:c6:13:ea:55:33:d8:84:8d:91:79:a6:3f:04: f6:82:7a:a5:01:90:e3:de:a1:32:89:44:70:d2:6e: 33:9c:7c:3b:17:c7:d3:50:14:6b:bc:6a:bf:81:c2: a4:cc:0a:e3:c5:12:86:c0:b4:e4:b6:61:15:75:ab: 1b:c1:4a:42:23:5a:d6:79:20:64:de:6a:be:20:ad: f9:c4:ef:14:7b:47:84:37:15:a5:2b:75:68:fe:12: c5:c4:e7:69:c8:8e:61:cb:93:e9:b6:84:93:fe:74: 10:06:56:be:c9:37:94:8c:5e:99:15:db:2d:a2:2f: 86:a3:e7:ae:80:e6:6d:b6:de:f7:ee:be:72:80:4d: ca:6b:c6:46:6c:1e:4a:de:f7:74:dd:5b:68:3f:40: 99:0c:94:ed:32:33:cc:4b:65:26:36:9f:c2:62:5c: 18:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C9:B3:D7:7E:7D:72:EE:80:69:1C:D2:8E:B0:2B:6A:99:6A:65:B4 X509v3 Authority Key Identifier: keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cc:ea:d8:2f:c2:0d:53:04:f0:33:01:62:b4:03:54:35:d6: f4:e8:6e:70:d6:08:1c:c9:85:a1:77:37:00:68:59:75:48:b3: 55:0a:46:7c:25:2c:4a:a1:64:8d:92:81:6b:56:c9:31:e0:e3: 3a:c0:d0:30:ee:1a:ac:a9:19:70:2f:aa:3c:0e:05:96:57:71: fa:72:b4:d4:6c:1e:fb:e0:b0:28:ad:84:a8:ad:49:f3:c4:0f: 5b:94:1e:ab:68:84:ad:02:34:bf:7d:ef:13:77:bb:bc:b5:c7: b7:27:b5:4c:5b:f8:45:a2:ef:85:c1:25:dd:f6:62:1f:47:0c: d8:37:c4:37:a3:3f:7c:b9:71:59:b2:30:8f:77:c0:17:91:48: 5d:0c:8e:23:1d:dd:87:b8:69:3a:5d:be:40:6a:9d:90:46:d2: 48:d6:ca:6f:a2:35:96:b7:19:27:57:af:f9:e8:3c:72:13:ce: de:7f:20:b1:de:91:b3:3b:20:85:cf:c0:63:90:ee:28:37:05: 3c:14:b7:2e:4e:06:58:60:db:b2:e6:78:eb:bd:f2:0d:eb:c5: af:29:d8:b4:00:e4:28:72:c9:27:cd:07:7f:40:4f:95:2a:2e: a7:9e:fd:11:25:73:74:27:bd:ac:39:21:e0:62:a3:f5:86:1f: 6c:bc:6c:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMyODExMTAvBgNVBAUTKDEzMTc2OEEzNkIzMDM0NkUzREJFQkVCRjg3Qjg0ODFC QUFCRTNFRUIwHhcNMjUwNTMxMTQ1MzU0WhcNMjUwNjA3MTQ1MzU0WjAYMRYwFAYD VQQDEw02ODNiMTgwMy00YTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwQvdRrpRVzvsShBptppyJAwpViiQjwN8iEiRo0ZT/QvbNge8rghodvJhCOl qNUmnPxxdUtBiK5L00dPzI2cXbDJ59UdpGGzhKcyai334Bh/3xrQZdWvL3mSaMYT 6lUz2ISNkXmmPwT2gnqlAZDj3qEyiURw0m4znHw7F8fTUBRrvGq/gcKkzArjxRKG wLTktmEVdasbwUpCI1rWeSBk3mq+IK35xO8Ue0eENxWlK3Vo/hLFxOdpyI5hy5Pp toST/nQQBla+yTeUjF6ZFdstoi+Go+eugOZttt737r5ygE3Ka8ZGbB5K3vd03Vto P0CZDJTtMjPMS2UmNp/CYlwYNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzJs9d+ fXLugGkc0o6wK2qZamW0MB8GA1UdIwQYMBaAFBMXaKNrMDRuPb6+v4e4SBuqvj7r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzI4MS8wMDIwMTM0NjFE OTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05HNDl2cjZfaDdoSUc2cS1Q dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4ZG9vMnN3Tkc0OXZyNl9oN2hJRzZxLVB1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzI4MS8wMDIwMTM0NjFEOTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05H NDl2cjZfaDdoSUc2cS1QdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqzOrYL8INUwTwMwFitANUNdb06G5w1ggcyYWhdzcAaFl1SLNVCkZ8 JSxKoWSNkoFrVskx4OM6wNAw7hqsqRlwL6o8DgWWV3H6crTUbB774LAorYSorUnz xA9blB6raIStAjS/fe8Td7u8tce3J7VMW/hFou+FwSXd9mIfRwzYN8Q3oz98uXFZ sjCPd8AXkUhdDI4jHd2HuGk6Xb5Aap2QRtJI1spvojWWtxknV6/56DxyE87efyCx 3pGzOyCFz8BjkO4oNwU8FLcuTgZYYNuy5njrvfIN68WvKdi0AOQocsknzQd/QE+V Ki6nnv0RJXN0J72sOSHgYqP1hh9svGxz -----END CERTIFICATE-----Generated at Sat May 31 16:57:49 2025 by rpki-client