$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft File: ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json) Hash identifier: 816EH1SXAUw05twJJkS738RnNHDgFRWk154NvndoofA= Subject key identifier: F5:F2:9D:B2:34:6E:0E:86:B5:A0:E2:5C:BA:47:7E:B9:5A:36:80:3A Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 Certificate issuer: /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft Manifest number: E8 Signing time: Tue 13 May 2025 04:34:59 +0000 Manifest this update: Tue 13 May 2025 04:34:58 +0000 Manifest next update: Tue 20 May 2025 04:34:58 +0000 Files and hashes: 1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: vi6lJna8R+9cbian3iOSiY9G3Bjy39kE3Dpb5JO8Cvw=) 2: ABCCEBB6CDC711EE8A262C4EC4F9AE02.roa (hash: zIOBj5YBTE6pEEkPxatT0lPoJEUY6kzYZZceZ5XmYbM=) 3: 805DA0BCCCF811EEA9723F27C4F9AE02.roa (hash: PVKfYcrhEpkGhk/bRv8ieDCU8VEgQ0tyddxr1XeEq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Validity Not Before: May 13 04:34:58 2025 GMT Not After : May 20 04:34:58 2025 GMT Subject: CN=6822cbf3-b934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:ff:bc:18:88:87:ca:b2:56:af:8d:f4:dd: 14:33:37:3a:c6:47:4f:8d:39:cb:3b:94:f1:50:40: dd:21:8d:29:05:56:59:5f:49:44:5d:9a:73:c4:59: 46:ae:ac:ee:fe:31:06:28:64:9e:20:db:d8:ab:c9: c5:06:a5:b0:ca:ff:17:90:35:cc:21:f1:34:1c:e1: 80:42:72:36:c1:32:47:98:3e:8f:e2:d3:1d:68:ae: f4:d4:8c:28:9f:91:f6:75:fd:06:e8:95:85:5a:4d: f8:6d:a1:cc:d6:0f:d9:3d:c8:ac:4c:17:83:52:bd: 32:09:d3:8a:71:da:73:8f:77:8f:77:40:f3:a5:3f: 45:f5:b7:50:0a:e6:34:01:35:6f:46:5b:90:bc:b6: d1:8b:21:cf:07:5a:df:d5:d1:6f:cd:f6:62:50:ed: 6f:9c:73:80:d7:5d:e1:2b:23:1f:5b:ac:ee:c6:17: bc:be:77:7d:4b:c6:fa:f7:cf:92:56:9d:e9:02:ec: 93:2a:d4:f6:39:ba:ae:fc:57:2b:16:e9:77:2c:2a: f7:16:6d:8e:43:dc:e4:d9:bd:49:96:5d:e0:53:68: 03:9c:1b:67:b8:e6:5d:4a:78:a9:a6:04:de:7f:3f: 65:ff:4c:72:23:a4:e4:14:76:29:b9:61:ee:88:66: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F2:9D:B2:34:6E:0E:86:B5:A0:E2:5C:BA:47:7E:B9:5A:36:80:3A X509v3 Authority Key Identifier: keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:0c:31:ba:bd:b7:46:53:dc:2d:6d:e1:9a:14:40:ad:b6:77: 65:a4:54:1d:ea:f6:14:cc:fe:c7:f6:74:80:3a:5f:70:78:0d: 29:32:68:03:91:8d:ef:b9:cf:aa:55:03:09:fb:d8:a9:c5:78: 6d:69:38:f2:39:5b:cf:42:78:28:fe:6a:99:c9:f4:50:93:70: 66:71:e0:75:d5:eb:9e:0f:fc:61:fe:8a:62:7b:2d:02:e6:a4: e8:f9:40:c1:f8:ec:b0:6b:36:81:0f:ef:c5:34:1c:6b:30:ca: f7:c3:d4:3f:9d:0c:d0:ec:d4:8a:ce:4f:6a:fa:9a:45:ed:33: 5e:5f:e1:6e:55:3c:1b:fd:ca:56:ae:5d:da:42:4b:d9:9a:fe: 97:02:ae:f8:6e:e7:ec:ed:51:96:7b:3a:8c:16:c8:6d:5c:fc: 33:00:a3:d8:44:4f:d9:2b:d8:4d:4a:40:91:26:fc:2f:59:71: 12:e4:4b:ed:96:2b:97:76:cb:44:f7:81:09:bd:a1:cf:ab:f0: 0e:01:1a:69:e1:c9:93:96:6b:dd:b3:07:ea:99:a5:ce:e8:58: f4:35:99:94:68:4e:4c:7b:2a:b6:18:52:62:2a:ff:ea:e1:df: f6:ee:8c:0f:c3:d7:5f:7f:ee:f6:34:93:a6:86:21:6f:56:56: 38:83:94:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKDdCMUZCMUJBM0IwRUM4Q0E1RTVDMTNBRUJDRkM2RUJB OEQyMEVBQTcwHhcNMjUwNTEzMDQzNDU4WhcNMjUwNTIwMDQzNDU4WjAYMRYwFAYD VQQDEw02ODIyY2JmMy1iOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPf/vBiIh8qyVq+N9N0UMzc6xkdPjTnLO5TxUEDdIY0pBVZZX0lEXZpzxFlG rqzu/jEGKGSeINvYq8nFBqWwyv8XkDXMIfE0HOGAQnI2wTJHmD6P4tMdaK701Iwo n5H2df0G6JWFWk34baHM1g/ZPcisTBeDUr0yCdOKcdpzj3ePd0DzpT9F9bdQCuY0 ATVvRluQvLbRiyHPB1rf1dFvzfZiUO1vnHOA113hKyMfW6zuxhe8vnd9S8b698+S Vp3pAuyTKtT2Obqu/FcrFul3LCr3Fm2OQ9zk2b1Jll3gU2gDnBtnuOZdSnippgTe fz9l/0xyI6TkFHYpuWHuiGbrFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXynbI0 bg6GtaDiXLpHfrlaNoA6MB8GA1UdIwQYMBaAFHsfsbo7DsjKXlwTrrz8brqNIOqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS82RjJGRDMzOEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lNcGVYQk91dlB4dXVvMGc2 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V4LXh1anNPeU1wZVhCT3V2UHh1dW8wZzZxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS82RjJGRDMzOENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lN cGVYQk91dlB4dXVvMGc2cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwDDG6vbdGU9wtbeGaFECttndlpFQd6vYUzP7H9nSAOl9weA0pMmgD kY3vuc+qVQMJ+9ipxXhtaTjyOVvPQngo/mqZyfRQk3BmceB11eueD/xh/opiey0C 5qTo+UDB+OywazaBD+/FNBxrMMr3w9Q/nQzQ7NSKzk9q+ppF7TNeX+FuVTwb/cpW rl3aQkvZmv6XAq74bufs7VGWezqMFshtXPwzAKPYRE/ZK9hNSkCRJvwvWXES5Evt liuXdstE94EJvaHPq/AOARpp4cmTlmvdswfqmaXO6Fj0NZmUaE5Meyq2GFJiKv/q 4d/27owPw9dff+72NJOmhiFvVlY4g5SM -----END CERTIFICATE-----Generated at Tue May 13 23:11:10 2025 by rpki-client