$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: yJXBhtCvJgQ35DXEQI0YcT/PxkIIzfRhZVuKwSdb0HA= Subject key identifier: C9:5F:D2:D1:6E:39:87:EA:AC:B5:7D:AF:DD:5D:44:58:F7:A1:BA:A8 Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: 88 Signing time: Sat 31 May 2025 06:08:16 +0000 Manifest this update: Sat 31 May 2025 06:08:16 +0000 Manifest next update: Sat 07 Jun 2025 06:08:16 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: ufHdVr6FiDQqevCWuBe2PiFTna3uJOcVEaW3MkDghL4=) 2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: oPt/hUSuzgl3vf6IekNSVwLM4HNHGT76iBnF/i7Fi6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: May 31 06:08:16 2025 GMT Not After : Jun 7 06:08:16 2025 GMT Subject: CN=683a9cd0-ee89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:d5:c2:9c:28:c9:0f:40:b6:5b:1d:22:09: 9a:ca:5d:49:cb:7f:dd:5e:3e:c0:bb:d8:4c:b0:f2: 15:ac:08:eb:f3:00:74:fd:99:ac:61:74:45:8a:1d: c1:b1:70:82:f5:62:1c:6a:b5:d6:5e:26:d6:72:09: 7e:3f:37:11:58:36:a8:77:2b:f0:0c:49:e2:75:74: dc:5c:40:b3:54:b7:23:bd:c9:ac:97:f1:0d:d4:78: 31:02:dc:7a:3f:04:9a:76:46:8d:32:68:cb:2b:d7: 01:a3:d0:f4:97:cc:e8:49:c2:df:31:90:e3:fd:6c: e0:15:ef:23:d5:6a:93:d7:f3:6c:a1:20:64:92:5e: e8:a9:6d:60:3f:0e:6d:14:8c:f7:13:21:19:2a:69: 27:4c:89:6b:2c:cb:9e:ee:94:4b:67:f2:67:c4:eb: 39:7c:3a:be:8d:12:e0:0c:e0:be:60:3a:91:fc:d1: bd:f9:50:72:67:89:62:f1:f2:07:3d:17:0d:97:aa: b3:47:fd:24:98:f8:f2:69:f2:95:1c:0c:39:f5:86: 09:9b:33:1a:13:58:f7:ab:07:cb:1e:3d:88:a5:6d: 83:7a:02:f1:2d:d9:bb:56:98:1a:48:04:e6:54:44: 75:e2:0c:8a:ed:70:e6:28:b2:3b:0d:6f:00:c1:1c: 12:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5F:D2:D1:6E:39:87:EA:AC:B5:7D:AF:DD:5D:44:58:F7:A1:BA:A8 X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f8:4f:8c:4c:9a:2a:a9:8a:8e:4b:d6:e1:93:cf:91:f5:34: fa:e3:03:a5:c7:52:9e:df:ac:dd:5f:08:bd:4b:12:0e:72:97: 1f:96:c6:a7:a9:57:c4:19:4c:8b:92:44:6c:e3:d5:dd:6d:98: 03:6c:a5:d5:24:0f:fa:32:38:24:55:e3:d8:b4:65:44:84:01: 79:bd:dc:0f:e4:a8:7c:40:c2:af:e4:4f:79:6d:65:98:fc:bf: 50:01:05:47:c1:08:c3:c0:6d:42:ab:4b:e5:67:72:f4:fc:30: 3e:d5:43:03:47:c4:9a:d9:7f:b2:47:31:4a:23:88:34:d5:ca: b0:32:6e:20:74:04:eb:3e:03:eb:fe:91:bb:6a:d3:5f:39:c4: 57:1c:5a:58:54:44:9f:69:70:90:64:42:de:08:ed:74:ef:2d: b8:4f:9f:9b:d2:e4:c0:c8:51:62:c6:b2:3c:3c:6e:1e:2a:23: 27:74:41:4f:11:dd:1c:48:cb:f5:3d:e1:9b:81:cb:27:18:3d: d2:9a:23:95:df:c0:83:51:e2:27:86:65:36:cb:2b:9b:a8:bd: 73:9a:7b:e5:20:26:2b:69:09:94:33:ca:65:27:39:62:5f:0e: 79:e5:e3:77:9a:99:11:d2:48:34:19:73:0f:1b:89:00:3d:c0: 8f:24:8d:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjUwNTMxMDYwODE2WhcNMjUwNjA3MDYwODE2WjAYMRYwFAYD VQQDEw02ODNhOWNkMC1lZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoDVwpwoyQ9AtlsdIgmayl1Jy3/dXj7Au9hMsPIVrAjr8wB0/ZmsYXRFih3B sXCC9WIcarXWXibWcgl+PzcRWDaodyvwDEnidXTcXECzVLcjvcmsl/EN1HgxAtx6 PwSadkaNMmjLK9cBo9D0l8zoScLfMZDj/WzgFe8j1WqT1/NsoSBkkl7oqW1gPw5t FIz3EyEZKmknTIlrLMue7pRLZ/JnxOs5fDq+jRLgDOC+YDqR/NG9+VByZ4li8fIH PRcNl6qzR/0kmPjyafKVHAw59YYJmzMaE1j3qwfLHj2IpW2DegLxLdm7VpgaSATm VER14gyK7XDmKLI7DW8AwRwSRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlf0tFu OYfqrLV9r91dRFj3obqoMB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9GNTYwMzdBNjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhB TUNVdzNSTVhSQ01XTUp3WGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX+E+MTJoqqYqOS9bhk8+R9TT64wOlx1Ke36zdXwi9SxIOcpcflsan qVfEGUyLkkRs49XdbZgDbKXVJA/6MjgkVePYtGVEhAF5vdwP5Kh8QMKv5E95bWWY /L9QAQVHwQjDwG1Cq0vlZ3L0/DA+1UMDR8Sa2X+yRzFKI4g01cqwMm4gdATrPgPr /pG7atNfOcRXHFpYVESfaXCQZELeCO107y24T5+b0uTAyFFixrI8PG4eKiMndEFP Ed0cSMv1PeGbgcsnGD3SmiOV38CDUeInhmU2yyubqL1zmnvlICYraQmUM8plJzli Xw555eN3mpkR0kg0GXMPG4kAPcCPJI0y -----END CERTIFICATE-----Generated at Sat May 31 16:26:53 2025 by rpki-client