$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft File: Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json) Hash identifier: DP044HZxBMienUAKzm+z5YDyJ9M/m2eE2uI41mMf/J4= Subject key identifier: 51:04:1C:73:25:43:9C:A9:93:5F:2C:86:7F:C3:2A:3B:B1:84:05:18 Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C Certificate issuer: /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft Manifest number: CC Signing time: Sat 23 Aug 2025 05:53:20 +0000 Manifest this update: Sat 23 Aug 2025 05:53:20 +0000 Manifest next update: Sat 30 Aug 2025 05:53:20 +0000 Files and hashes: 1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: aCnjwzAhGkcQZTO+ht/UCl2GOwzAtPkKAQNl3uChY5o=) 2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: zqJNwHFdCb0AxU+IvLXH1ZXde2U8qe3vhEETfh5OWwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Validity Not Before: Aug 23 05:53:20 2025 GMT Not After : Aug 30 05:53:20 2025 GMT Subject: CN=68a95750-0d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:26:f4:ca:d5:91:41:0f:43:1f:49:ce:b1: 2c:7e:27:f6:09:92:46:4f:c8:97:97:5b:23:e4:56: 41:22:21:2f:15:4d:64:ba:72:3b:f2:ef:4d:08:a5: 41:96:91:fa:fc:ea:75:07:d2:5a:dc:40:50:3b:f6: de:6d:7c:c0:b2:3e:a8:97:c2:ec:9f:b9:84:a1:be: 6a:28:f1:a0:2c:74:31:33:42:96:91:4a:a0:80:ce: 38:bd:db:1b:21:31:71:d0:97:d6:da:99:16:d9:c9: 8f:02:9a:d7:2c:6b:2e:f5:1c:38:6e:53:bc:8c:64: 11:7f:31:01:6c:59:d2:0b:b5:c8:93:ae:f3:f8:88: 37:4a:ab:d9:8d:12:84:80:64:8a:e5:77:10:03:d0: 47:93:15:00:d1:28:44:91:d8:7b:5f:8e:fd:b7:38: 53:6e:d6:dc:a4:30:93:6b:4e:2f:37:d9:31:d4:ae: b7:b1:c2:b5:49:f3:53:11:77:6d:e4:78:01:1b:49: 46:e5:c2:d6:00:15:16:d4:f7:f7:78:c5:5a:5f:fa: 83:4d:eb:cd:1e:8d:86:40:99:85:6c:cc:4f:78:1a: ef:3c:06:07:fd:9d:18:97:00:9d:60:16:94:df:21: 42:2e:85:f4:49:c7:bb:c9:9e:b9:15:76:4a:12:ad: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:04:1C:73:25:43:9C:A9:93:5F:2C:86:7F:C3:2A:3B:B1:84:05:18 X509v3 Authority Key Identifier: keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:6b:3b:90:cc:63:8a:c8:b6:d8:9a:e6:ac:6f:ea:8b:c4:83: 42:0e:54:05:bc:73:b7:f4:9d:b1:bf:4e:22:a1:d8:f3:e9:f0: 38:e2:34:99:3e:40:bb:5c:ab:fd:16:b4:d1:88:41:d1:14:3e: bb:8f:e6:e6:7f:b1:c2:7e:82:e0:6f:1a:e7:5a:af:05:0a:e9: d6:3f:d1:0d:c6:09:76:fd:f3:b6:e0:00:45:18:ab:2e:2d:df: 5a:2d:63:a1:38:23:6b:11:6f:5c:64:72:8a:0d:6f:61:13:16: fc:04:83:02:31:b4:e4:d8:e5:0b:4a:8a:c0:fb:9b:6f:50:22: 10:b7:ec:2c:28:ef:54:b6:93:1b:ea:6c:c9:66:6d:b4:2d:27: 54:2a:63:5f:98:4d:02:3c:a3:e5:66:f8:91:48:fa:8c:7b:ec: 35:f7:cc:df:3b:b4:5b:10:93:75:95:be:65:c0:d7:f6:2c:00: 7e:ab:b7:06:16:b0:7c:0b:a4:d3:6b:10:2b:f9:d9:f8:18:b6: cc:aa:f1:10:60:c9:a3:94:a2:d5:80:24:c5:f8:6e:18:ed:20: 66:ec:5f:ff:70:14:c7:94:8f:d2:c7:92:3d:4c:ce:af:86:39: 97:a8:fd:d1:0b:db:80:d9:91:9c:c5:d9:51:62:e5:cd:3f:ec: 0f:ad:9a:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDEzMUVGNjJFMTIxQjExREU2MTA0MkMzRTIyNUU3MTZC Qjk0NzlFMkMwHhcNMjUwODIzMDU1MzIwWhcNMjUwODMwMDU1MzIwWjAYMRYwFAYD VQQDEw02OGE5NTc1MC0wZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEQm9MrVkUEPQx9JzrEsfif2CZJGT8iXl1sj5FZBIiEvFU1kunI78u9NCKVB lpH6/Op1B9Ja3EBQO/bebXzAsj6ol8Lsn7mEob5qKPGgLHQxM0KWkUqggM44vdsb ITFx0JfW2pkW2cmPAprXLGsu9Rw4blO8jGQRfzEBbFnSC7XIk67z+Ig3SqvZjRKE gGSK5XcQA9BHkxUA0ShEkdh7X479tzhTbtbcpDCTa04vN9kx1K63scK1SfNTEXdt 5HgBG0lG5cLWABUW1Pf3eMVaX/qDTevNHo2GQJmFbMxPeBrvPAYH/Z0YlwCdYBaU 3yFCLoX0Sce7yZ65FXZKEq2ZYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEEHHMl Q5ypk18shn/DKjuxhAUYMB8GA1UdIwQYMBaAFBMe9i4SGxHeYQQsPiJecWu5R54s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xQzEzN0MyMDQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVkNWhCQ3ctSWw1eGE3bEhu aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4NzJMaEliRWQ1aEJDdy1JbDV4YTdsSG5pdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xQzEzN0MyMDQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVk NWhCQ3ctSWw1eGE3bEhuaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoazuQzGOKyLbYmuasb+qLxINCDlQFvHO39J2xv04iodjz6fA44jSZ PkC7XKv9FrTRiEHRFD67j+bmf7HCfoLgbxrnWq8FCunWP9ENxgl2/fO24ABFGKsu Ld9aLWOhOCNrEW9cZHKKDW9hExb8BIMCMbTk2OULSorA+5tvUCIQt+wsKO9UtpMb 6mzJZm20LSdUKmNfmE0CPKPlZviRSPqMe+w198zfO7RbEJN1lb5lwNf2LAB+q7cG FrB8C6TTaxAr+dn4GLbMqvEQYMmjlKLVgCTF+G4Y7SBm7F//cBTHlI/Sx5I9TM6v hjmXqP3RC9uA2ZGcxdlRYuXNP+wPrZqn -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:49 2025 by rpki-client