$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json) Hash identifier: teF4FkdBEQGsgB3zFanOvFpExM4lDntvuHNBq3WgI2k= Subject key identifier: B2:A9:3A:1A:F9:BE:FF:FA:05:0E:19:DE:61:42:FC:94:FA:68:19:9A Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft Manifest number: 05B8 Signing time: Mon 12 May 2025 22:54:20 +0000 Manifest this update: Mon 12 May 2025 22:54:19 +0000 Manifest next update: Mon 19 May 2025 22:54:19 +0000 Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: 7x1Y7VB55MQcd5U/JKZomk0lXGDlQ0iI26QGjJjK4UU=) 2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: aRYWCiFCI9e+UhsWF2EXBC5D+N3vZVlnQx//tGzToMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: May 12 22:54:19 2025 GMT Not After : May 19 22:54:19 2025 GMT Subject: CN=68227c1c-2764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:67:3a:6b:54:40:30:62:51:39:c5:73:36: dc:b6:cd:dd:42:85:c3:37:a1:c7:b7:05:59:5d:55: 17:5e:54:c6:84:54:6c:1b:87:f2:be:a9:2d:24:a4: 5a:d8:69:10:8f:97:b2:f9:89:bf:93:58:20:19:fb: 93:b1:a7:ee:55:f9:40:76:7c:61:81:b4:23:cf:37: a2:07:83:79:c7:ae:c5:18:0b:69:25:6a:b2:fb:ef: b3:62:2f:87:6b:5f:3a:08:e6:2d:8c:a5:c4:71:43: 4c:c4:0b:43:f1:cd:4f:b7:d9:f0:fb:1b:1e:3d:e6: ab:b4:25:57:b1:2c:b3:74:2f:c9:2f:2c:8c:53:21: 1b:da:86:52:db:c1:5c:80:96:3f:85:ee:b2:94:cc: 07:df:99:9e:42:66:9e:4f:82:f5:12:fd:ae:99:41: 63:af:be:ef:c8:70:82:de:53:e4:dd:b3:2e:b0:3e: d3:fa:60:68:b1:02:e5:d2:dd:5b:fe:b9:69:10:48: 67:b9:d7:5e:df:76:ae:36:79:78:91:ee:ae:f0:10: 0b:19:b5:12:72:97:7e:7a:2f:88:e5:b6:f7:cf:73: 5e:10:16:c9:c5:24:7d:1f:21:ec:19:60:af:6e:4e: 12:7d:55:3d:87:74:d3:a2:66:89:7f:f4:75:eb:89: 8e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A9:3A:1A:F9:BE:FF:FA:05:0E:19:DE:61:42:FC:94:FA:68:19:9A X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b0:fc:b1:77:86:2c:27:07:31:75:3a:ab:36:a2:c1:2c:d6: 64:68:ad:55:f7:eb:31:31:f4:44:eb:c7:18:81:12:96:c7:84: 93:ae:e4:b7:9e:0c:1a:5c:a7:7c:52:f7:f0:9b:bd:bd:6d:9b: cb:40:51:e7:33:b6:31:8d:2c:34:93:b1:de:a6:72:83:26:bf: 97:55:a4:ae:62:85:a4:d6:b4:f0:2c:f6:98:09:ba:ca:03:bf: 8b:ea:2e:78:96:85:d0:c3:13:f2:e8:e1:70:3b:ce:1b:a2:0c: 47:bc:67:c6:a8:5e:3f:2a:d0:2e:fd:c9:5c:14:21:69:62:d5: 54:b8:91:0d:73:9a:f3:39:8a:76:45:6d:2b:e7:f2:b1:9d:67: 9f:4d:32:37:c8:90:da:df:84:5a:82:ec:8c:eb:1b:14:92:bc: 38:3e:87:d0:98:c4:6c:97:bb:1b:3e:b4:62:0a:8c:91:17:65: 78:d6:5c:40:f5:db:27:68:11:75:bf:b4:97:b6:02:df:05:6a: 4c:f6:bb:02:cd:42:da:11:62:0e:cc:6d:b1:6b:c4:d1:67:b2: f8:29:70:f2:ff:19:56:db:53:70:ad:31:0c:7e:b4:ea:f7:49: 7e:f5:89:32:57:cd:69:50:4b:13:ba:10:05:06:22:bd:bd:00: c2:b3:d7:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjUwNTEyMjI1NDE5WhcNMjUwNTE5MjI1NDE5WjAYMRYwFAYD VQQDEw02ODIyN2MxYy0yNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOdnOmtUQDBiUTnFczbcts3dQoXDN6HHtwVZXVUXXlTGhFRsG4fyvqktJKRa 2GkQj5ey+Ym/k1ggGfuTsafuVflAdnxhgbQjzzeiB4N5x67FGAtpJWqy+++zYi+H a186COYtjKXEcUNMxAtD8c1Pt9nw+xsePeartCVXsSyzdC/JLyyMUyEb2oZS28Fc gJY/he6ylMwH35meQmaeT4L1Ev2umUFjr77vyHCC3lPk3bMusD7T+mBosQLl0t1b /rlpEEhnudde33auNnl4ke6u8BALGbUScpd+ei+I5bb3z3NeEBbJxSR9HyHsGWCv bk4SfVU9h3TTomaJf/R164mONwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKpOhr5 vv/6BQ4Z3mFC/JT6aBmaMB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS YVpoaXpLZnZKSGRqRFZjT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcsPyxd4YsJwcxdTqrNqLBLNZkaK1V9+sxMfRE68cYgRKWx4STruS3 ngwaXKd8Uvfwm729bZvLQFHnM7YxjSw0k7HepnKDJr+XVaSuYoWk1rTwLPaYCbrK A7+L6i54loXQwxPy6OFwO84bogxHvGfGqF4/KtAu/clcFCFpYtVUuJENc5rzOYp2 RW0r5/KxnWefTTI3yJDa34RaguyM6xsUkrw4PofQmMRsl7sbPrRiCoyRF2V41lxA 9dsnaBF1v7SXtgLfBWpM9rsCzULaEWIOzG2xa8TRZ7L4KXDy/xlW21NwrTEMfrTq 90l+9YkyV81pUEsTuhAFBiK9vQDCs9f5 -----END CERTIFICATE-----Generated at Tue May 13 12:58:02 2025 by rpki-client