$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft File: Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json) Hash identifier: +z5xatElQCrN0y+FCoQ8gxJErjAdBigQMXIIXuK+Lq8= Subject key identifier: B7:10:F6:FA:C9:58:70:76:CD:AE:6C:08:35:3A:6C:4C:70:04:DA:E6 Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C Certificate issuer: /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft Manifest number: 97 Signing time: Tue 13 May 2025 05:32:11 +0000 Manifest this update: Tue 13 May 2025 05:32:10 +0000 Manifest next update: Tue 20 May 2025 05:32:10 +0000 Files and hashes: 1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: S4NzKL1+1I42qPd1KaCuPfIANspd+HidBYpzhd5LSNU=) 2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: x7MCciPiMoC21iI94vanFTmv6Gh7il8p9AlIW1ZpCrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Validity Not Before: May 13 05:32:10 2025 GMT Not After : May 20 05:32:10 2025 GMT Subject: CN=6822d95b-0c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a1:02:37:9f:40:90:b8:12:c3:6c:1e:25:ad: e5:d4:fb:58:43:38:da:49:7f:e4:a3:1a:cc:b4:1c: 03:d5:7d:22:c3:6d:4d:f4:71:91:e6:ed:41:28:95: 77:85:01:78:da:1c:d5:d2:d1:07:df:e7:c7:6f:f8: de:ad:94:62:e7:c8:35:ed:b7:32:f4:54:29:93:a6: 08:72:db:95:da:99:1a:dc:7d:e0:81:e5:ee:76:5c: c6:b1:4d:3b:6b:61:4c:71:52:58:27:04:76:72:02: 2a:dc:c5:93:3f:ed:40:70:f0:51:4a:7f:a1:6c:af: 80:af:2d:fc:9c:75:58:03:1e:62:28:32:94:d9:1a: 9f:f6:06:78:92:10:1b:bc:c9:3d:53:ea:a7:cc:8f: ab:a5:eb:cb:70:62:39:6e:26:75:ec:7b:47:21:53: ab:6c:ca:a4:28:0a:57:93:a2:b4:d0:7d:fc:d4:70: 58:df:0b:ab:00:83:bf:e2:9e:40:96:12:dd:a0:cc: 21:09:7c:ce:31:54:85:52:14:6e:73:16:1a:cf:0b: 0c:a0:50:87:fa:e6:27:26:10:34:45:5b:45:44:13: 50:9b:3e:bb:0d:87:d8:d1:b6:70:07:e2:e5:e2:cc: 63:0d:69:82:39:75:df:9a:c9:4d:a2:fb:70:8b:b4: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:10:F6:FA:C9:58:70:76:CD:AE:6C:08:35:3A:6C:4C:70:04:DA:E6 X509v3 Authority Key Identifier: keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a8:28:26:e8:17:59:91:1a:1f:25:dd:00:bd:1f:ab:99:55: ef:16:c3:b6:11:e5:81:f9:85:fd:f6:7a:da:06:bb:42:bc:ca: 72:b8:15:f7:a1:fc:a6:b9:2e:2e:d8:20:df:25:7a:e9:6a:35: 6e:87:fc:cf:79:d5:5f:6a:93:b3:f3:97:b7:2f:e6:7e:c5:19: fb:ed:1d:55:a2:0d:c5:f0:24:c7:be:0e:a2:9b:41:96:4a:35: 94:84:07:d8:e1:5a:e5:bc:c7:61:47:14:03:e6:ec:85:72:2e: 06:f6:99:d9:8a:ec:47:97:31:2b:e0:24:9c:d6:10:04:a8:06: e4:c6:72:24:0a:07:41:56:26:34:3b:40:1f:99:eb:0d:8d:0d: 23:06:85:e6:05:2d:cc:75:f0:0a:dd:2d:e9:a8:d3:03:5f:06: 8c:ae:b0:a8:ce:c3:ce:db:e5:fe:1b:ae:07:c5:c2:66:ad:27: 75:40:ce:92:74:d2:78:64:23:70:be:1b:b0:31:41:f5:09:dd: fe:c2:44:e4:0e:12:f6:bb:d8:05:e3:54:85:b6:6c:be:4a:f5: 08:8e:33:51:85:fc:7f:a3:d3:2c:4d:33:df:37:a5:a0:f9:97: a0:69:76:59:be:2a:62:41:50:8e:0a:fc:0a:99:00:c2:fb:4d: 10:ec:51:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDEzMUVGNjJFMTIxQjExREU2MTA0MkMzRTIyNUU3MTZC Qjk0NzlFMkMwHhcNMjUwNTEzMDUzMjEwWhcNMjUwNTIwMDUzMjEwWjAYMRYwFAYD VQQDEw02ODIyZDk1Yi0wYzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66ECN59AkLgSw2weJa3l1PtYQzjaSX/koxrMtBwD1X0iw21N9HGR5u1BKJV3 hQF42hzV0tEH3+fHb/jerZRi58g17bcy9FQpk6YIctuV2pka3H3ggeXudlzGsU07 a2FMcVJYJwR2cgIq3MWTP+1AcPBRSn+hbK+Ary38nHVYAx5iKDKU2Rqf9gZ4khAb vMk9U+qnzI+rpevLcGI5biZ17HtHIVOrbMqkKApXk6K00H381HBY3wurAIO/4p5A lhLdoMwhCXzOMVSFUhRucxYazwsMoFCH+uYnJhA0RVtFRBNQmz67DYfY0bZwB+Ll 4sxjDWmCOXXfmslNovtwi7T0nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcQ9vrJ WHB2za5sCDU6bExwBNrmMB8GA1UdIwQYMBaAFBMe9i4SGxHeYQQsPiJecWu5R54s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xQzEzN0MyMDQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVkNWhCQ3ctSWw1eGE3bEhu aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4NzJMaEliRWQ1aEJDdy1JbDV4YTdsSG5pdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xQzEzN0MyMDQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVk NWhCQ3ctSWw1eGE3bEhuaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChqCgm6BdZkRofJd0AvR+rmVXvFsO2EeWB+YX99nraBrtCvMpyuBX3 ofymuS4u2CDfJXrpajVuh/zPedVfapOz85e3L+Z+xRn77R1Vog3F8CTHvg6im0GW SjWUhAfY4VrlvMdhRxQD5uyFci4G9pnZiuxHlzEr4CSc1hAEqAbkxnIkCgdBViY0 O0AfmesNjQ0jBoXmBS3MdfAK3S3pqNMDXwaMrrCozsPO2+X+G64HxcJmrSd1QM6S dNJ4ZCNwvhuwMUH1Cd3+wkTkDhL2u9gF41SFtmy+SvUIjjNRhfx/o9MsTTPfN6Wg +ZegaXZZvipiQVCOCvwKmQDC+00Q7FHu -----END CERTIFICATE-----Generated at Wed May 14 08:45:21 2025 by rpki-client