$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json) Hash identifier: 4ykPVe58gPOIKn/+MchfKgG1+HpkLjEed6l36qOoaEQ= Subject key identifier: 6A:8B:D7:14:F2:C3:49:9B:22:4B:38:26:DB:E0:CA:6F:A7:0A:FA:35 Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft Manifest number: 05ED Signing time: Fri 22 Aug 2025 23:08:45 +0000 Manifest this update: Fri 22 Aug 2025 23:08:44 +0000 Manifest next update: Fri 29 Aug 2025 23:08:44 +0000 Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: LCM+gbZ8ZcX0OwPZJGfmYK82ERKTvBhOyQYmgbFzhR4=) 2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: PfaYVep9sxHm2ekMoNsSTDKRElztgb9iT+RAJOOQJNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: Aug 22 23:08:44 2025 GMT Not After : Aug 29 23:08:44 2025 GMT Subject: CN=68a8f87c-7f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8f:38:45:d6:82:f3:6e:aa:ab:f6:bc:8f:93: cf:6d:5a:67:34:3c:44:8f:74:15:92:b9:59:db:3f: 0c:18:cf:1b:53:f5:c2:76:78:b1:23:51:14:ec:85: bf:77:e8:f6:90:49:f8:61:ac:1b:fd:89:e4:4e:8c: 6a:27:f7:02:04:3a:5c:03:6b:a5:af:e7:5f:eb:00: f3:00:04:9f:b2:2f:13:9c:09:7c:f8:d6:02:ff:c3: 3d:6c:fd:c9:d2:4e:6c:f1:68:87:4d:6c:a5:8b:5c: 4c:3a:10:a2:cd:0c:10:04:d4:03:2f:95:a7:cb:55: 65:70:a7:36:97:8d:b7:81:36:0d:5f:62:83:9b:61: 83:99:a0:70:6c:0f:4a:37:aa:6f:7e:7f:d8:78:a3: aa:c6:ee:9b:ae:2b:b9:df:fb:39:f7:23:c0:9d:b3: 6d:2a:8d:a4:eb:56:ce:db:77:64:77:7f:7f:85:fc: ea:31:b2:3e:26:9a:37:a0:7b:46:77:fd:96:28:cc: 49:64:dc:42:48:a5:85:96:6a:77:9c:cc:52:45:75: 9f:0c:1e:18:6c:18:1f:64:5a:dd:41:a9:a0:c0:9c: cb:a6:65:c4:0e:35:9b:67:b8:c2:46:78:7c:1b:01: 76:bf:fe:4b:1f:86:cb:34:10:9d:63:c9:e9:36:5a: bc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8B:D7:14:F2:C3:49:9B:22:4B:38:26:DB:E0:CA:6F:A7:0A:FA:35 X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8e:53:3e:4d:b2:8c:d4:82:af:1a:b4:17:2d:33:e4:2b:29: f9:aa:e5:98:ec:3a:eb:19:0a:4d:18:91:7e:fa:12:62:68:09: 37:ea:37:d7:34:78:e5:c1:45:cb:18:76:7e:bb:62:92:d8:6c: 5b:08:6e:9b:22:17:2e:50:e1:79:50:57:1c:d2:47:ee:3f:0b: b0:61:59:b1:ee:77:b9:56:bd:a6:e1:a8:01:de:f5:9c:06:4f: 13:5a:f5:9c:02:a0:4d:26:52:bf:85:40:81:53:4f:be:d3:57: 9d:72:0a:cb:3a:a6:6a:76:1a:dd:9b:e5:15:cd:67:af:b0:70: 3b:e3:85:39:8a:e0:b8:64:17:d7:e8:32:8b:1c:9b:17:6e:6f: 27:d0:cf:da:bb:16:99:7a:db:f7:36:2c:f4:4f:fb:ea:0c:1e: 16:a4:db:f2:86:f2:98:08:9e:4d:17:1d:b8:b4:b6:ec:c1:37: 24:f1:62:4c:fc:c0:e5:7e:67:b9:11:85:c2:81:e9:2d:61:9a: 66:13:ca:2e:36:88:8b:22:ef:ff:5e:79:e3:c4:22:3b:6c:7b: 85:23:0d:89:71:17:2e:58:b0:94:5a:99:4e:6a:c9:7a:03:49: 8f:7d:29:77:d3:ab:ab:63:1e:e4:bf:bc:2b:60:1a:c7:60:16: 67:cc:e7:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjUwODIyMjMwODQ0WhcNMjUwODI5MjMwODQ0WjAYMRYwFAYD VQQDEw02OGE4Zjg3Yy03ZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8o84RdaC826qq/a8j5PPbVpnNDxEj3QVkrlZ2z8MGM8bU/XCdnixI1EU7IW/ d+j2kEn4Yawb/YnkToxqJ/cCBDpcA2ulr+df6wDzAASfsi8TnAl8+NYC/8M9bP3J 0k5s8WiHTWyli1xMOhCizQwQBNQDL5Wny1VlcKc2l423gTYNX2KDm2GDmaBwbA9K N6pvfn/YeKOqxu6briu53/s59yPAnbNtKo2k61bO23dkd39/hfzqMbI+Jpo3oHtG d/2WKMxJZNxCSKWFlmp3nMxSRXWfDB4YbBgfZFrdQamgwJzLpmXEDjWbZ7jCRnh8 GwF2v/5LH4bLNBCdY8npNlq8twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqL1xTy w0mbIks4Jtvgym+nCvo1MB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS YVpoaXpLZnZKSGRqRFZjT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsjlM+TbKM1IKvGrQXLTPkKyn5quWY7DrrGQpNGJF++hJiaAk36jfX NHjlwUXLGHZ+u2KS2GxbCG6bIhcuUOF5UFcc0kfuPwuwYVmx7ne5Vr2m4agB3vWc Bk8TWvWcAqBNJlK/hUCBU0++01edcgrLOqZqdhrdm+UVzWevsHA744U5iuC4ZBfX 6DKLHJsXbm8n0M/auxaZetv3Niz0T/vqDB4WpNvyhvKYCJ5NFx24tLbswTck8WJM /MDlfme5EYXCgektYZpmE8ouNoiLIu//XnnjxCI7bHuFIw2JcRcuWLCUWplOasl6 A0mPfSl306urYx7kv7wrYBrHYBZnzOcC -----END CERTIFICATE-----Generated at Sat Aug 23 22:37:32 2025 by rpki-client