$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json) Hash identifier: R3xyzQ7u4bzjPujqhd5xK0uGyx5+jyCudExuW5V8DQ0= Subject key identifier: B8:99:00:2F:96:49:45:94:C6:64:94:6D:54:35:E4:C6:3E:DC:B2:DB Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft Manifest number: 01E5 Signing time: Tue 13 May 2025 01:56:48 +0000 Manifest this update: Tue 13 May 2025 01:56:48 +0000 Manifest next update: Tue 20 May 2025 01:56:48 +0000 Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: TnJinR3qUo5NXZxTGdTr87obdaHvSZ1xTTEZV9M1l4w=) 2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: RQB2RLULGV5D9o8SykaXsVa4IAX2Ix9OkCIOGbXqXJc=) 3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: 1vie/BGCNQgncTtAE895UIuHGNyFzttxRArpojokubI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Validity Not Before: May 13 01:56:48 2025 GMT Not After : May 20 01:56:48 2025 GMT Subject: CN=6822a6e0-1f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:ce:3f:60:6a:5a:c6:1a:33:21:77:df:78: 78:b5:6b:96:bf:c9:96:fd:c8:27:74:12:5c:09:f8: 6e:88:84:32:39:69:48:ee:1e:6d:fb:38:23:9d:a9: c4:5c:12:d9:29:51:16:a2:76:a4:dd:22:96:c9:7b: f9:f9:c5:23:46:b4:c8:f3:e1:f8:1d:85:f1:6b:e1: 22:1f:be:82:5a:7a:52:4c:df:32:b8:e0:03:16:13: b1:c0:7e:9c:65:f0:10:7a:42:67:02:44:3c:f2:d3: f9:cf:8c:56:17:b6:80:be:77:28:48:81:73:9a:56: 5a:1f:d0:31:8a:40:81:c1:6b:20:a3:99:8a:81:34: 50:77:32:67:fc:19:08:ed:ee:60:e2:b8:8a:f1:84: ea:11:c6:3d:f8:f1:fe:df:b1:07:d8:0b:04:33:40: 6d:70:68:da:38:a5:14:9e:a0:c7:a3:66:ec:56:27: 5e:8e:e4:93:53:c1:84:83:91:62:75:7d:45:31:e3: aa:01:ae:f1:93:7f:b1:6e:d2:b7:67:ec:cb:4a:11: 72:29:0b:65:6a:e3:86:43:f2:c8:11:34:73:0a:2a: 10:f9:d3:22:1c:eb:f0:07:a2:37:93:d2:33:e1:be: 15:de:cb:fc:ad:cd:6d:29:1e:f1:06:0e:7b:18:28: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:99:00:2F:96:49:45:94:C6:64:94:6D:54:35:E4:C6:3E:DC:B2:DB X509v3 Authority Key Identifier: keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ae:0e:dc:9e:a3:74:15:10:9e:40:38:9b:31:8c:9e:e8:dc: 8a:cf:ca:08:1d:17:e4:00:b3:9c:0e:f5:b2:47:72:a3:c8:79: fb:5e:09:e8:bc:8b:06:d1:1a:d1:32:b8:c3:b6:a5:53:e8:5f: 2f:bb:07:89:c3:ef:1d:7b:c1:e7:75:73:03:2d:20:ca:f2:46: 5a:3d:6c:43:cf:30:e3:32:e7:45:f9:16:1b:5b:25:ac:ed:47: 40:71:e6:e7:60:fb:35:e5:9e:72:5c:cc:ed:d4:13:52:9d:f7: 62:ab:40:60:c1:92:87:d0:b2:b5:23:31:56:24:77:79:18:85: 12:7b:7f:94:dc:aa:91:83:fe:eb:50:1d:f8:bd:f3:a6:17:6b: 79:40:93:05:e7:ca:46:45:e4:86:f9:7a:3f:63:04:83:fd:4d: e7:f5:95:e9:c5:86:2b:9d:c7:ac:3d:60:4e:59:40:97:a6:0b: 16:17:cb:74:a8:35:9f:92:02:d1:5d:68:73:5d:7e:8c:0a:67: cb:b6:3e:34:ce:fe:67:67:45:4d:c5:19:e9:1b:9a:c6:d0:36: 6f:ae:29:e8:a2:3f:d0:11:0d:3f:14:26:f0:20:4d:bc:17:a4: 52:b7:fb:08:17:6c:a8:9c:54:f6:23:04:b3:e7:b1:8a:a5:ee: fd:a7:23:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3 MEVGMkIxNEMwHhcNMjUwNTEzMDE1NjQ4WhcNMjUwNTIwMDE1NjQ4WjAYMRYwFAYD VQQDEw02ODIyYTZlMC0xZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNjOP2BqWsYaMyF333h4tWuWv8mW/cgndBJcCfhuiIQyOWlI7h5t+zgjnanE XBLZKVEWonak3SKWyXv5+cUjRrTI8+H4HYXxa+EiH76CWnpSTN8yuOADFhOxwH6c ZfAQekJnAkQ88tP5z4xWF7aAvncoSIFzmlZaH9AxikCBwWsgo5mKgTRQdzJn/BkI 7e5g4riK8YTqEcY9+PH+37EH2AsEM0BtcGjaOKUUnqDHo2bsVidejuSTU8GEg5Fi dX1FMeOqAa7xk3+xbtK3Z+zLShFyKQtlauOGQ/LIETRzCioQ+dMiHOvwB6I3k9Iz 4b4V3sv8rc1tKR7xBg57GCjD5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiZAC+W SUWUxmSUbVQ15MY+3LLbMB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR M2Uta21VQW9EQzF3N3lzVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqrg7cnqN0FRCeQDibMYye6NyKz8oIHRfkALOcDvWyR3KjyHn7Xgno vIsG0RrRMrjDtqVT6F8vuweJw+8de8HndXMDLSDK8kZaPWxDzzDjMudF+RYbWyWs 7UdAcebnYPs15Z5yXMzt1BNSnfdiq0BgwZKH0LK1IzFWJHd5GIUSe3+U3KqRg/7r UB34vfOmF2t5QJMF58pGReSG+Xo/YwSD/U3n9ZXpxYYrncesPWBOWUCXpgsWF8t0 qDWfkgLRXWhzXX6MCmfLtj40zv5nZ0VNxRnpG5rG0DZvrinooj/QEQ0/FCbwIE28 F6RSt/sIF2yonFT2IwSz57GKpe79pyNO -----END CERTIFICATE-----Generated at Tue May 13 16:14:43 2025 by rpki-client