$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft File: Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json) Hash identifier: N68gJEmGh5v8PF33d4kGWix6Ij1t0yt3llH8fZ5a+k0= Subject key identifier: 10:84:52:91:82:A5:09:A3:36:B9:86:44:2E:15:95:2E:91:1F:8D:0E Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB Certificate issuer: /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB Certificate serial: 3505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft Manifest number: 34CF Signing time: Mon 12 May 2025 14:52:46 +0000 Manifest this update: Mon 12 May 2025 14:52:45 +0000 Manifest next update: Mon 19 May 2025 14:52:45 +0000 Files and hashes: 1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: myxvEV8wDZ/56d8EL0ZtH7dQgbpvmsut5vJMsTSQXak=) 2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: Xb2hPwWdc7QTcQDz+qvvab15wycaCcgbmopek0oJdTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13573 (0x3505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB Validity Not Before: May 12 14:52:45 2025 GMT Not After : May 19 14:52:45 2025 GMT Subject: CN=68220b3d-dcad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:14:36:56:0a:e9:a7:36:a0:f1:6f:9d:ec: fb:19:26:07:a8:89:dc:1d:02:3b:4a:b3:b8:78:d2: c5:53:f3:29:ba:70:3e:40:60:2e:af:04:bd:be:a5: db:1e:54:95:1d:5d:58:fa:7b:cf:b5:b4:93:92:ac: cc:71:bb:5e:4e:32:e2:53:ac:11:62:a4:eb:f9:10: 54:f4:dd:29:cb:04:3b:38:b6:f2:11:18:5b:a7:06: a4:d8:49:4e:79:08:3e:6a:f0:9e:eb:18:1f:ef:a5: 49:8f:8b:68:5c:59:11:9a:94:35:9f:57:ed:4f:f3: a1:42:27:36:ec:8d:45:b8:bf:a8:66:81:3e:aa:05: dc:6a:d8:8a:d6:3e:e4:2e:0f:1b:27:1d:c2:cc:ac: 9f:2a:a1:82:57:ac:aa:ba:f7:2c:cb:b0:d0:b4:01: 79:44:ed:98:70:07:97:be:12:55:ff:d1:97:e4:19: 92:6d:eb:bd:94:c4:3e:e8:53:10:5d:18:c5:a6:47: 2d:d1:1e:a6:cd:6d:2b:2c:c8:83:ad:d6:57:85:9a: c8:7a:4f:25:41:8b:72:e0:32:5c:c0:c1:76:4b:e1: 3e:3b:01:a9:16:d5:5f:9c:9d:a4:e5:e2:f8:42:87: 02:ff:d3:91:6a:dd:c6:ed:cb:96:af:49:e4:9f:e7: 36:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:84:52:91:82:A5:09:A3:36:B9:86:44:2E:15:95:2E:91:1F:8D:0E X509v3 Authority Key Identifier: keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c1:a6:fe:12:d6:5e:b9:49:3a:86:0f:c0:35:4a:6d:5d:20: f9:cf:06:db:d7:91:e6:00:42:8b:c2:fd:c5:1a:e3:ce:84:4e: 20:be:48:58:ef:74:a7:40:8f:26:de:ae:78:ec:90:d5:25:a8: 77:bd:e2:bd:20:c6:2c:bf:80:eb:da:f5:b8:83:2b:1c:db:da: 1e:d8:7d:f1:87:44:1e:40:00:2f:20:8b:55:c9:e3:ac:d2:ff: 42:3e:f6:f9:92:12:06:0f:37:48:48:2c:69:19:f1:77:f2:d3: d9:29:32:e2:1b:ae:98:85:d7:cf:fd:ed:7d:c1:20:1a:b8:0a: 45:eb:82:02:ca:66:eb:22:cb:ad:c1:c2:8b:92:12:4f:ec:cd: 44:b4:4e:e4:d4:11:dd:4c:15:83:79:c9:e6:89:5b:77:49:5f: b9:1b:cc:53:7a:7c:c8:b5:5e:8c:b3:aa:e9:22:c9:63:4b:5b: 92:2e:54:8e:f0:7f:6d:b5:f2:16:ce:b3:33:b4:d5:14:ce:6f: fd:6d:69:cd:3a:8d:df:8d:21:fd:b8:ae:34:83:d1:26:c7:d1: 91:c6:74:81:02:91:cf:1d:f4:d9:1e:24:a3:f6:2f:ac:f5:7c: 9d:ee:70:7d:51:36:f7:03:21:02:47:37:93:a2:f9:0b:54:e3: e5:bb:55:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMyODExMTAvBgNVBAUTKDEzMTc2OEEzNkIzMDM0NkUzREJFQkVCRjg3Qjg0ODFC QUFCRTNFRUIwHhcNMjUwNTEyMTQ1MjQ1WhcNMjUwNTE5MTQ1MjQ1WjAYMRYwFAYD VQQDEw02ODIyMGIzZC1kY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQoUNlYK6ac2oPFvnez7GSYHqIncHQI7SrO4eNLFU/MpunA+QGAurwS9vqXb HlSVHV1Y+nvPtbSTkqzMcbteTjLiU6wRYqTr+RBU9N0pywQ7OLbyERhbpwak2ElO eQg+avCe6xgf76VJj4toXFkRmpQ1n1ftT/OhQic27I1FuL+oZoE+qgXcatiK1j7k Lg8bJx3CzKyfKqGCV6yquvcsy7DQtAF5RO2YcAeXvhJV/9GX5BmSbeu9lMQ+6FMQ XRjFpkct0R6mzW0rLMiDrdZXhZrIek8lQYty4DJcwMF2S+E+OwGpFtVfnJ2k5eL4 QocC/9ORat3G7cuWr0nkn+c2hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCEUpGC pQmjNrmGRC4VlS6RH40OMB8GA1UdIwQYMBaAFBMXaKNrMDRuPb6+v4e4SBuqvj7r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzI4MS8wMDIwMTM0NjFE OTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05HNDl2cjZfaDdoSUc2cS1Q dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4ZG9vMnN3Tkc0OXZyNl9oN2hJRzZxLVB1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzI4MS8wMDIwMTM0NjFEOTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05H NDl2cjZfaDdoSUc2cS1QdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnwab+EtZeuUk6hg/ANUptXSD5zwbb15HmAEKLwv3FGuPOhE4gvkhY 73SnQI8m3q547JDVJah3veK9IMYsv4Dr2vW4gysc29oe2H3xh0QeQAAvIItVyeOs 0v9CPvb5khIGDzdISCxpGfF38tPZKTLiG66YhdfP/e19wSAauApF64ICymbrIsut wcKLkhJP7M1EtE7k1BHdTBWDecnmiVt3SV+5G8xTenzItV6Ms6rpIsljS1uSLlSO 8H9ttfIWzrMztNUUzm/9bWnNOo3fjSH9uK40g9Emx9GRxnSBApHPHfTZHiSj9i+s 9Xyd7nB9UTb3AyECRzeTovkLVOPlu1UP -----END CERTIFICATE-----Generated at Mon May 12 21:59:18 2025 by rpki-client