$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: 3Gw9ubagayGZrT37jV27oZVaUqDHW3dtwblW1ChnjJA= Subject key identifier: F5:05:25:63:3F:10:46:CD:74:C3:42:41:28:F2:D4:FA:05:35:42:EF Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 03A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 03A0 Signing time: Sat 31 May 2025 00:57:06 +0000 Manifest this update: Sat 31 May 2025 00:57:06 +0000 Manifest next update: Sat 07 Jun 2025 00:57:06 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: MIh25UNhBcBST+VT4k/tmixSNJo52plunWHVlY+knZo=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: o79Sd0r7i63ThJBm1It6/m6+eHRjzs84P0YMiSeldfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: May 31 00:57:06 2025 GMT Not After : Jun 7 00:57:06 2025 GMT Subject: CN=683a53e2-0cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:2e:61:a1:2c:5e:c0:0e:38:b6:f5:21:a4: 9a:bb:92:79:4c:2b:4d:02:4b:78:15:7f:c3:f4:76: 39:db:dd:cd:1d:ce:56:47:eb:18:5b:4b:38:e7:fa: 56:04:c9:f3:87:0f:85:8a:67:ed:cb:02:f8:84:b9: 87:e7:be:bb:4a:a9:38:c8:6c:a6:b8:6f:7e:d5:93: 64:78:7b:73:65:a9:9b:f2:e8:93:f7:0f:80:62:3e: 3b:74:77:92:f4:34:c6:71:bd:1d:03:c5:01:0f:41: 5a:c8:c9:73:d0:28:a7:86:a2:58:d8:f6:6b:62:61: 52:aa:64:6c:d3:da:bf:2e:85:4e:a2:b8:ee:db:82: b7:dd:78:a0:dd:09:7a:91:5e:bc:d9:b3:41:a2:91: ff:d5:b2:b3:03:84:51:b6:68:f5:78:be:10:f6:5a: d0:91:68:3c:f6:a8:ba:f4:4d:a9:e0:54:23:37:15: 0c:b7:f7:90:16:c4:1c:40:50:51:9c:7b:db:33:43: eb:9d:4b:88:cb:60:78:3a:38:63:6a:6b:39:7c:46: 46:45:5c:90:72:ef:a5:5c:d1:a7:0e:1e:52:67:1a: 06:d2:4f:0c:65:75:b8:36:c8:29:6d:32:8a:17:65: 1c:9d:dd:86:76:14:cc:3e:a0:6b:26:37:ec:44:c5: 1d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:05:25:63:3F:10:46:CD:74:C3:42:41:28:F2:D4:FA:05:35:42:EF X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:19:ca:13:44:f6:4f:50:d8:d7:98:f0:ea:b3:e4:46:87:69: 10:68:84:dc:33:a5:80:60:90:a6:0e:69:92:8e:80:31:f1:67: e8:59:b6:d1:d6:8a:00:df:95:6f:e6:79:4a:3d:a4:fc:88:d2: f4:23:a0:f1:39:ca:fb:c5:02:02:99:2e:40:ff:fc:e2:07:69: 90:52:3e:9c:a2:99:f9:93:ed:26:ed:95:98:02:14:cf:9b:6f: 91:5c:e8:a4:c8:1a:f4:5b:e3:bf:1c:48:10:7e:cb:58:69:9c: 60:6e:7e:3c:3f:6e:ce:41:ee:ad:50:6f:48:ab:4f:01:e5:9b: 73:a4:8d:f7:51:91:68:5c:9b:84:98:79:23:ca:c0:bb:9d:59: 2d:32:a1:67:47:96:2a:ae:82:19:81:be:c1:8a:bc:5c:18:e1: 03:8d:cd:f2:30:d0:f0:f2:fe:21:f4:2f:dd:8f:d4:10:d7:f6: 19:49:01:47:2d:86:f1:51:a0:e6:b4:68:fa:76:56:01:12:4d: af:8c:f3:ef:fb:87:e7:de:c9:88:0e:7c:0e:f6:89:2d:61:ea: 49:7e:d0:6d:d1:70:36:28:95:d5:22:56:26:0f:1f:cc:4a:fe: 2b:a3:7f:a3:57:31:b0:64:ff:23:b6:07:22:b3:ac:dc:b0:ed: 6d:42:87:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjUwNTMxMDA1NzA2WhcNMjUwNjA3MDA1NzA2WjAYMRYwFAYD VQQDEw02ODNhNTNlMi0wY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc0uYaEsXsAOOLb1IaSau5J5TCtNAkt4FX/D9HY5293NHc5WR+sYW0s45/pW BMnzhw+FimftywL4hLmH5767Sqk4yGymuG9+1ZNkeHtzZamb8uiT9w+AYj47dHeS 9DTGcb0dA8UBD0FayMlz0CinhqJY2PZrYmFSqmRs09q/LoVOorju24K33Xig3Ql6 kV682bNBopH/1bKzA4RRtmj1eL4Q9lrQkWg89qi69E2p4FQjNxUMt/eQFsQcQFBR nHvbM0PrnUuIy2B4Ojhjams5fEZGRVyQcu+lXNGnDh5SZxoG0k8MZXW4NsgpbTKK F2Ucnd2GdhTMPqBrJjfsRMUdnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUFJWM/ EEbNdMNCQSjy1PoFNULvMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTGcoTRPZPUNjXmPDqs+RGh2kQaITcM6WAYJCmDmmSjoAx8WfoWbbR 1ooA35Vv5nlKPaT8iNL0I6DxOcr7xQICmS5A//ziB2mQUj6copn5k+0m7ZWYAhTP m2+RXOikyBr0W+O/HEgQfstYaZxgbn48P27OQe6tUG9Iq08B5ZtzpI33UZFoXJuE mHkjysC7nVktMqFnR5YqroIZgb7BirxcGOEDjc3yMNDw8v4h9C/dj9QQ1/YZSQFH LYbxUaDmtGj6dlYBEk2vjPPv+4fn3smIDnwO9oktYepJftBt0XA2KJXVIlYmDx/M Sv4ro3+jVzGwZP8jtgcis6zcsO1tQocx -----END CERTIFICATE-----Generated at Sat May 31 17:12:53 2025 by rpki-client