$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json) Hash identifier: Gzr99KJGOutbpRFqDNdgADKM7FJk5RcQt7DESa6dXuI= Subject key identifier: 49:0A:36:2A:0C:E5:B2:F1:2B:70:5A:D8:34:A5:3A:EE:E0:84:6A:5D Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft Manifest number: 01FE Signing time: Thu 03 Jul 2025 02:28:43 +0000 Manifest this update: Thu 03 Jul 2025 02:28:42 +0000 Manifest next update: Thu 10 Jul 2025 02:28:42 +0000 Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: KTPkQWM3BBLu2DCMVB4NYpGxfGUELs5hKPR3fsEBopg=) 2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: RQB2RLULGV5D9o8SykaXsVa4IAX2Ix9OkCIOGbXqXJc=) 3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: 1vie/BGCNQgncTtAE895UIuHGNyFzttxRArpojokubI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Validity Not Before: Jul 3 02:28:42 2025 GMT Not After : Jul 10 02:28:42 2025 GMT Subject: CN=6865eada-c849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3d:38:ee:c3:2b:75:4f:84:db:89:82:0f:4a: 9c:ac:a9:5a:66:10:c9:49:72:dc:63:c6:aa:04:19: ab:43:e9:7e:1b:d6:2b:5c:44:70:ea:d0:a2:75:f1: 38:21:d1:83:d4:63:b3:7f:43:6f:51:f3:34:70:59: 2f:c1:ef:a4:cc:6e:de:a4:3d:29:ad:db:7b:ed:7c: 93:77:a2:a0:0d:84:d0:e7:fa:e9:db:33:84:f4:b9: 32:57:69:f9:81:7d:46:f6:a1:dd:a6:d4:9a:36:1c: 5f:71:36:46:98:58:4d:4c:0f:15:1b:4b:1b:63:9d: cc:fd:cf:fc:ef:64:fc:aa:11:4b:c8:37:8d:ad:45: 39:29:4a:dc:7b:cd:c0:64:83:63:bc:1e:e1:53:c1: be:dc:fd:6c:14:fc:84:44:52:4d:c9:c3:de:ce:91: 39:12:71:5c:c3:3d:b6:29:a6:bf:25:3a:5d:3f:bd: 57:b8:a9:d2:52:1f:32:29:2b:73:48:11:f9:55:ef: dc:69:9d:d4:0d:eb:d2:d6:6e:00:d6:d3:2c:c0:2b: dd:91:cf:cf:ce:62:fb:e0:f2:7e:83:66:64:1c:58: da:1a:33:5d:60:88:2b:f9:a6:ec:71:02:bc:05:33: 32:00:38:96:e9:08:55:b0:a0:53:40:b8:97:14:65: 5e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0A:36:2A:0C:E5:B2:F1:2B:70:5A:D8:34:A5:3A:EE:E0:84:6A:5D X509v3 Authority Key Identifier: keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:be:02:f8:70:7a:39:34:c0:47:37:10:38:66:1a:39:2d:57: 30:42:89:1a:86:e6:88:06:32:a3:4a:e1:02:95:47:b8:b5:a6: 3b:21:11:be:47:3b:87:c0:36:08:88:87:96:c0:88:a5:6a:50: 55:61:1d:64:71:8a:0e:12:65:dc:08:8f:9f:cb:75:ca:75:66: 0e:63:cb:70:fa:52:c6:b1:d6:a6:dc:3b:b0:23:e2:ae:6b:9f: df:b0:48:c7:8a:a1:f0:f3:f6:2e:4e:de:ad:30:6d:90:a7:37: 81:13:fa:0b:c7:cd:4d:27:c1:66:eb:69:fd:07:83:c8:4b:2a: 7a:66:08:ea:01:1d:84:4d:9b:ad:37:f6:56:89:92:07:8d:63: 52:d2:14:3e:16:82:a8:6b:43:2b:c3:ab:69:b2:ea:f1:a5:0f: 12:51:da:ef:b9:9f:c7:42:71:63:08:60:59:44:e1:4f:0b:48: cb:e4:e1:d4:19:c8:83:bd:05:b6:d1:61:7c:4a:4a:ba:4c:1e: 13:51:86:6b:68:c2:73:da:72:e4:88:f8:b2:27:65:24:66:1d: e8:f6:aa:8f:dc:aa:dd:d5:32:23:c5:67:26:1e:e9:a0:2b:14: ab:da:88:48:9a:40:67:c5:10:1b:d2:67:91:66:fc:81:05:61: 09:2c:85:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3 MEVGMkIxNEMwHhcNMjUwNzAzMDIyODQyWhcNMjUwNzEwMDIyODQyWjAYMRYwFAYD VQQDEw02ODY1ZWFkYS1jODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2T047sMrdU+E24mCD0qcrKlaZhDJSXLcY8aqBBmrQ+l+G9YrXERw6tCidfE4 IdGD1GOzf0NvUfM0cFkvwe+kzG7epD0prdt77XyTd6KgDYTQ5/rp2zOE9LkyV2n5 gX1G9qHdptSaNhxfcTZGmFhNTA8VG0sbY53M/c/872T8qhFLyDeNrUU5KUrce83A ZINjvB7hU8G+3P1sFPyERFJNycPezpE5EnFcwz22Kaa/JTpdP71XuKnSUh8yKStz SBH5Ve/caZ3UDevS1m4A1tMswCvdkc/PzmL74PJ+g2ZkHFjaGjNdYIgr+abscQK8 BTMyADiW6QhVsKBTQLiXFGVe0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkKNioM 5bLxK3Ba2DSlOu7ghGpdMB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR M2Uta21VQW9EQzF3N3lzVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+vgL4cHo5NMBHNxA4Zho5LVcwQokahuaIBjKjSuEClUe4taY7IRG+ RzuHwDYIiIeWwIilalBVYR1kcYoOEmXcCI+fy3XKdWYOY8tw+lLGsdam3DuwI+Ku a5/fsEjHiqHw8/YuTt6tMG2QpzeBE/oLx81NJ8Fm62n9B4PISyp6ZgjqAR2ETZut N/ZWiZIHjWNS0hQ+FoKoa0Mrw6tpsurxpQ8SUdrvuZ/HQnFjCGBZROFPC0jL5OHU GciDvQW20WF8Skq6TB4TUYZraMJz2nLkiPiyJ2UkZh3o9qqP3Krd1TIjxWcmHumg KxSr2ohImkBnxRAb0meRZvyBBWEJLIUo -----END CERTIFICATE-----Generated at Thu Jul 3 10:21:13 2025 by rpki-client