$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft File: ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json) Hash identifier: 4ZXmKu+NkwvVPHewrThO3zj6dfWraN0weFur2E7gtsE= Subject key identifier: 05:9E:F0:D8:75:E6:E6:1A:B7:DC:63:B7:F1:79:B9:31:95:A2:E6:45 Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 Certificate issuer: /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft Manifest number: 0108 Signing time: Thu 03 Jul 2025 05:16:29 +0000 Manifest this update: Thu 03 Jul 2025 05:16:29 +0000 Manifest next update: Thu 10 Jul 2025 05:16:29 +0000 Files and hashes: 1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: hGg+cMVCSeCOLl2YYG/Qroiz3yIubE6el2RMJwIComg=) 2: AE9090F83B0F11F08D496424C4F9AE02.roa (hash: umWRD+8bjsaQAgjCl5Z98Y524f2ID68DcmZn0Gw48GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Validity Not Before: Jul 3 05:16:29 2025 GMT Not After : Jul 10 05:16:29 2025 GMT Subject: CN=6866122d-8715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:3e:34:7c:e2:e8:5c:4d:02:b6:6f:66:db: c0:84:65:c1:57:83:97:2b:2a:4b:df:0a:b9:b6:f2: a2:6d:a8:9d:31:42:00:f5:24:09:bd:d2:2b:f0:d1: 03:db:fe:9e:b8:17:93:6a:01:64:d0:e9:83:b2:c5: 29:76:b6:96:f5:12:4e:20:be:e5:33:1d:a9:75:b5: 62:52:ad:d1:2b:6f:ca:26:e8:21:3c:33:52:6f:f5: 65:97:ed:9f:0d:c2:09:47:59:f8:51:0f:58:b0:f5: bb:ee:b3:84:a2:c3:2a:9a:fa:cd:a7:57:e9:dd:b9: 52:55:7f:87:dc:49:66:85:fa:ea:82:f4:14:c5:ec: 94:2e:53:65:1a:83:3a:10:3d:4f:11:58:23:50:83: d0:bd:cf:c6:86:24:7a:98:1b:eb:6f:40:f4:6b:1d: 55:83:86:5d:d5:4c:e8:c9:5e:eb:e2:17:ca:c1:29: 63:62:87:7b:64:a8:2f:96:bf:86:12:d7:87:83:4c: 47:15:f8:e0:f2:6c:20:ea:fe:37:b8:47:05:08:ff: 21:69:c1:fc:08:75:d7:c4:95:a5:f8:c2:fa:16:b9: f1:88:b4:76:ea:39:2f:50:2d:01:e9:8e:7c:61:8e: b4:06:15:55:8c:c4:36:6c:0c:24:bd:94:d3:4f:f5: 7c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9E:F0:D8:75:E6:E6:1A:B7:DC:63:B7:F1:79:B9:31:95:A2:E6:45 X509v3 Authority Key Identifier: keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8f:49:71:c8:e9:c9:3a:67:ac:a9:5b:cb:9f:5b:0e:30:e6: 86:ca:85:3a:15:b6:b8:87:81:45:74:4d:c2:3d:f4:6d:98:97: 66:ce:54:cd:89:97:b4:7d:7d:4e:e6:2d:84:4d:29:ba:7d:66: cc:4b:7a:84:e6:b7:ae:7c:1a:b4:37:eb:53:be:29:1b:82:da: bf:c4:f9:88:0c:a5:3d:8f:6a:ce:91:d9:3b:9e:74:9e:12:2b: 9b:b5:ef:6f:c2:10:e0:e7:18:95:1b:80:97:ac:71:b1:f3:18: 61:40:32:e2:ad:07:c7:63:2b:fe:cc:58:29:53:d9:19:99:ea: 60:59:01:75:33:74:0e:dc:62:09:c9:e6:91:cd:ba:7a:57:1d: e3:a0:ab:31:56:e0:18:82:e4:21:c1:03:3d:52:f5:51:4c:54: 76:fc:ee:66:30:f1:06:aa:51:c7:6c:20:51:a5:de:39:55:30: 4a:ad:e7:cb:80:04:30:51:dd:a7:0e:b4:84:45:b4:44:c0:3c: 42:e3:c5:a1:9b:d1:7d:6d:0a:42:83:83:37:37:65:aa:20:d1: ee:2d:90:c7:5a:92:e5:ac:7e:4e:6f:30:84:dd:e8:45:50:08: bb:5e:63:7c:eb:0f:22:0e:b1:29:60:ed:26:20:92:a6:d8:bf: 6f:fe:49:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKDdCMUZCMUJBM0IwRUM4Q0E1RTVDMTNBRUJDRkM2RUJB OEQyMEVBQTcwHhcNMjUwNzAzMDUxNjI5WhcNMjUwNzEwMDUxNjI5WjAYMRYwFAYD VQQDEw02ODY2MTIyZC04NzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3t4+NHzi6FxNArZvZtvAhGXBV4OXKypL3wq5tvKibaidMUIA9SQJvdIr8NED 2/6euBeTagFk0OmDssUpdraW9RJOIL7lMx2pdbViUq3RK2/KJughPDNSb/Vll+2f DcIJR1n4UQ9YsPW77rOEosMqmvrNp1fp3blSVX+H3ElmhfrqgvQUxeyULlNlGoM6 ED1PEVgjUIPQvc/GhiR6mBvrb0D0ax1Vg4Zd1UzoyV7r4hfKwSljYod7ZKgvlr+G EteHg0xHFfjg8mwg6v43uEcFCP8hacH8CHXXxJWl+ML6FrnxiLR26jkvUC0B6Y58 YY60BhVVjMQ2bAwkvZTTT/V8RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWe8Nh1 5uYat9xjt/F5uTGVouZFMB8GA1UdIwQYMBaAFHsfsbo7DsjKXlwTrrz8brqNIOqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS82RjJGRDMzOEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lNcGVYQk91dlB4dXVvMGc2 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V4LXh1anNPeU1wZVhCT3V2UHh1dW8wZzZxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS82RjJGRDMzOENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lN cGVYQk91dlB4dXVvMGc2cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfj0lxyOnJOmesqVvLn1sOMOaGyoU6Fba4h4FFdE3CPfRtmJdmzlTN iZe0fX1O5i2ETSm6fWbMS3qE5reufBq0N+tTvikbgtq/xPmIDKU9j2rOkdk7nnSe Eiubte9vwhDg5xiVG4CXrHGx8xhhQDLirQfHYyv+zFgpU9kZmepgWQF1M3QO3GIJ yeaRzbp6Vx3joKsxVuAYguQhwQM9UvVRTFR2/O5mMPEGqlHHbCBRpd45VTBKrefL gAQwUd2nDrSERbREwDxC48Whm9F9bQpCg4M3N2WqINHuLZDHWpLlrH5ObzCE3ehF UAi7XmN86w8iDrEpYO0mIJKm2L9v/kke -----END CERTIFICATE-----Generated at Thu Jul 3 23:34:55 2025 by rpki-client