$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft File: ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json) Hash identifier: Gupjop6YC1dIkPWOVXokvMdd84NdXfPE4J39vS215SA= Subject key identifier: 1E:2A:A4:3F:8E:B0:63:C9:A1:24:C5:FF:46:94:28:8B:66:C5:E4:74 Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 Certificate issuer: /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft Manifest number: 05BC Signing time: Wed 14 May 2025 23:08:45 +0000 Manifest this update: Wed 14 May 2025 23:08:44 +0000 Manifest next update: Wed 21 May 2025 23:08:44 +0000 Files and hashes: 1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: 756ay09S929RhOuNHS/zhbG/n4r/MXTkm7PjZBht9GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Validity Not Before: May 14 23:08:44 2025 GMT Not After : May 21 23:08:44 2025 GMT Subject: CN=6825227c-c7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:bd:62:d4:79:41:3b:49:a1:94:d8:5c:7c: ac:25:6f:57:9e:c3:62:e7:7f:e5:1f:1f:2a:fe:cf: 35:bf:bf:dd:b7:12:20:7e:10:23:91:8e:a9:02:d1: 05:bf:1d:02:8a:11:03:ff:b7:b8:31:8a:6d:ca:4f: 3e:28:b3:38:4a:c7:c6:9c:b1:b0:14:b8:ae:69:e0: 52:b3:7c:81:9a:24:e7:72:7a:be:1b:cc:07:ca:a9: 18:ae:a1:17:73:d4:f7:ff:77:28:80:ab:6e:85:9b: e2:1f:c6:a4:5f:8b:b0:d5:61:e4:7b:53:27:30:ce: 6c:0b:9b:85:3b:d8:8f:e3:6e:fa:c2:18:96:f5:47: 52:1d:28:fa:53:65:2f:8d:d9:a8:5e:db:25:8b:a4: 97:04:32:51:70:6e:cd:63:a6:e4:8a:21:68:c8:21: f4:07:75:fe:1a:eb:b3:38:6c:4e:69:d2:4b:9b:d1: f4:3a:66:4c:35:2e:55:15:fb:d5:4b:82:fc:21:12: 14:68:0e:36:ca:f1:ec:43:d6:ee:71:df:f3:b1:ec: ba:14:2e:3e:2f:a4:13:7f:7d:e0:c8:7c:f9:97:7d: 48:b0:c6:bf:a7:de:2e:ea:30:9e:02:e9:73:91:48: 4d:9e:c3:4d:67:15:8f:8c:0e:05:56:8e:43:72:3e: 00:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2A:A4:3F:8E:B0:63:C9:A1:24:C5:FF:46:94:28:8B:66:C5:E4:74 X509v3 Authority Key Identifier: keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:76:af:35:3d:6c:ce:3e:11:7b:4a:9d:62:d9:87:51:c2:8f: bf:99:2c:32:3e:26:e8:26:77:de:0c:b1:44:21:62:4d:a1:60: a5:f8:d1:ee:f9:bd:de:0f:f5:ae:6d:fe:82:6e:11:46:4e:d6: 81:49:9d:ed:14:47:3c:28:56:dc:94:e2:74:39:53:2b:d9:75: a1:6f:c0:cc:33:fe:b0:5a:12:58:65:09:c5:c3:2f:de:ec:f2: cd:99:c8:d9:ea:e6:0e:1a:90:b7:d6:d9:50:e7:43:86:a7:d3: e9:3d:cc:31:28:3a:07:b4:07:38:32:de:9d:3c:fc:ad:c5:d6: 64:d9:e5:24:cc:c9:01:1e:2c:6b:8c:b3:bd:d0:76:5b:8d:f2: 45:2a:7e:b0:79:62:88:1e:2d:27:d4:94:8d:7b:c3:a5:f3:0d: 9b:07:0d:c8:dc:c5:2e:98:f3:d7:53:7c:70:23:b7:77:68:7c: 3c:a1:34:14:91:8b:d8:cf:52:8e:76:dd:16:ae:eb:d4:8a:25: d8:58:8e:f5:c2:26:ce:c5:bb:31:26:7b:50:aa:0b:b6:ee:88: 94:7f:10:d7:ca:bf:9c:01:64:56:46:71:ac:9b:d1:de:f9:b2: b0:51:36:d8:e7:b6:a3:7b:70:d7:8b:10:ab:b6:bd:11:9d:a6: 2b:a3:cc:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx RkQxRENFQTgwHhcNMjUwNTE0MjMwODQ0WhcNMjUwNTIxMjMwODQ0WjAYMRYwFAYD VQQDEw02ODI1MjI3Yy1jN2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Uq9YtR5QTtJoZTYXHysJW9XnsNi53/lHx8q/s81v7/dtxIgfhAjkY6pAtEF vx0CihED/7e4MYptyk8+KLM4SsfGnLGwFLiuaeBSs3yBmiTncnq+G8wHyqkYrqEX c9T3/3cogKtuhZviH8akX4uw1WHke1MnMM5sC5uFO9iP4276whiW9UdSHSj6U2Uv jdmoXtsli6SXBDJRcG7NY6bkiiFoyCH0B3X+GuuzOGxOadJLm9H0OmZMNS5VFfvV S4L8IRIUaA42yvHsQ9bucd/zsey6FC4+L6QTf33gyHz5l31IsMa/p94u6jCeAulz kUhNnsNNZxWPjA4FVo5Dcj4A2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4qpD+O sGPJoSTF/0aUKItmxeR0MB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi cnlTMnVRVnFlN01mMGR6cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChdq81PWzOPhF7Sp1i2YdRwo+/mSwyPiboJnfeDLFEIWJNoWCl+NHu +b3eD/Wubf6CbhFGTtaBSZ3tFEc8KFbclOJ0OVMr2XWhb8DMM/6wWhJYZQnFwy/e 7PLNmcjZ6uYOGpC31tlQ50OGp9PpPcwxKDoHtAc4Mt6dPPytxdZk2eUkzMkBHixr jLO90HZbjfJFKn6weWKIHi0n1JSNe8Ol8w2bBw3I3MUumPPXU3xwI7d3aHw8oTQU kYvYz1KOdt0WruvUiiXYWI71wibOxbsxJntQqgu27oiUfxDXyr+cAWRWRnGsm9He +bKwUTbY57aje3DXixCrtr0RnaYro8zm -----END CERTIFICATE-----Generated at Fri May 16 12:00:09 2025 by rpki-client