$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft File: Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json) Hash identifier: +4fZtF+HM07Uig9xf3pRypkpmQjKnTYHicU2wy1qRBU= Subject key identifier: 1B:F1:E7:1D:B9:EB:A6:6F:7A:99:79:28:59:10:C3:90:6E:34:9F:49 Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB Certificate issuer: /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB Certificate serial: 353C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft Manifest number: 3505 Signing time: Fri 22 Aug 2025 14:55:18 +0000 Manifest this update: Fri 22 Aug 2025 14:55:18 +0000 Manifest next update: Fri 29 Aug 2025 14:55:18 +0000 Files and hashes: 1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: GKnhztCqaXSnRSyfw5gbNaxkyKyt+6Mw45RPVb0irK4=) 2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: MDqcYhBOLAd7Ve6t+D2323MIjWFyCpfTNAq4hOx2Ghw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB Validity Not Before: Aug 22 14:55:18 2025 GMT Not After : Aug 29 14:55:18 2025 GMT Subject: CN=68a884d6-7928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:22:a1:7b:b9:cd:e1:77:01:0a:99:f5:40: da:36:83:bf:9d:6a:1f:7a:2f:dc:5b:78:f1:8d:e1: 15:1c:62:d1:9f:8f:96:a0:b4:a6:f9:8a:2d:1e:ea: f3:68:0f:7b:c0:b4:59:d5:6d:c8:55:e1:0c:2d:9a: 68:49:47:3e:a4:9e:2b:61:89:34:71:0b:0a:27:fd: 65:fd:43:4e:12:1b:e2:ff:cb:8a:b5:ae:9c:52:3a: c9:c2:4f:3d:cf:66:04:07:1b:82:e7:8b:3d:87:bf: eb:20:d0:e3:38:4f:37:46:f3:3e:21:99:54:0a:84: 94:69:e3:fd:e7:ba:d9:9b:75:a6:66:d8:b0:1e:a2: 88:10:95:e7:52:93:4e:b1:46:3c:7e:96:ae:e2:fd: a1:5f:f8:98:2c:24:51:21:02:21:36:15:cc:9a:f7: 58:0e:98:51:1c:e9:3d:96:be:c5:75:dd:7f:0b:1d: 81:8e:7d:fa:92:31:7c:70:75:51:60:93:d0:98:7f: 69:54:27:64:60:a7:df:6c:26:4e:83:8f:21:c3:fc: b7:46:92:9d:73:02:49:d2:49:df:29:b9:07:23:c6: d1:b2:37:03:b2:66:cc:0d:77:fd:92:dd:14:ef:dd: 2a:2d:72:71:91:15:ea:04:e3:4a:0e:9d:c9:1b:4b: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F1:E7:1D:B9:EB:A6:6F:7A:99:79:28:59:10:C3:90:6E:34:9F:49 X509v3 Authority Key Identifier: keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:7e:c0:95:1e:65:43:c4:c0:c4:cf:25:8a:c4:18:13:9a:39: 9a:aa:ea:51:e4:54:58:57:a3:7e:7d:d7:1b:15:98:21:c4:43: 5b:8d:02:8d:0b:cd:8d:f3:3e:b5:66:b8:9b:28:d9:7d:25:e3: 11:f8:66:a8:ef:e3:2a:09:11:98:25:c8:39:ba:80:c1:81:e5: d3:e7:24:5d:59:d1:80:03:16:5e:16:ab:2d:aa:d2:1c:04:ce: b7:ad:35:fc:78:39:6c:de:1e:71:ba:55:29:9f:4d:c6:a0:a5: c0:65:02:b4:0e:9c:bd:dd:a0:3c:30:cd:50:39:16:55:f6:a4: e0:19:e8:b0:b6:e3:28:c8:1f:34:ae:b3:ff:86:03:e9:6f:51: 6b:87:d8:74:6c:26:e8:56:6d:53:34:c0:13:a9:40:21:ee:92: b6:1c:ae:61:76:f8:8b:36:4c:6f:3f:f7:7f:c8:6a:78:11:c6: c7:94:30:4a:0c:c6:98:32:a9:90:0e:e4:45:92:41:a2:3e:8b: 4a:a6:e9:39:8f:fc:e7:c3:60:47:22:98:f6:f6:68:15:5e:c5: 25:4e:81:ac:d1:6e:b4:b7:ee:f0:b2:98:95:bd:2d:56:9c:49: 0d:16:f1:7a:c8:92:d1:64:bd:8e:c4:33:9d:f9:16:71:6d:f1: 7b:a3:c9:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMyODExMTAvBgNVBAUTKDEzMTc2OEEzNkIzMDM0NkUzREJFQkVCRjg3Qjg0ODFC QUFCRTNFRUIwHhcNMjUwODIyMTQ1NTE4WhcNMjUwODI5MTQ1NTE4WjAYMRYwFAYD VQQDEw02OGE4ODRkNi03OTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R4ioXu5zeF3AQqZ9UDaNoO/nWofei/cW3jxjeEVHGLRn4+WoLSm+YotHurz aA97wLRZ1W3IVeEMLZpoSUc+pJ4rYYk0cQsKJ/1l/UNOEhvi/8uKta6cUjrJwk89 z2YEBxuC54s9h7/rINDjOE83RvM+IZlUCoSUaeP957rZm3WmZtiwHqKIEJXnUpNO sUY8fpau4v2hX/iYLCRRIQIhNhXMmvdYDphRHOk9lr7Fdd1/Cx2Bjn36kjF8cHVR YJPQmH9pVCdkYKffbCZOg48hw/y3RpKdcwJJ0knfKbkHI8bRsjcDsmbMDXf9kt0U 790qLXJxkRXqBONKDp3JG0tS5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvx5x25 66Zvepl5KFkQw5BuNJ9JMB8GA1UdIwQYMBaAFBMXaKNrMDRuPb6+v4e4SBuqvj7r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzI4MS8wMDIwMTM0NjFE OTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05HNDl2cjZfaDdoSUc2cS1Q dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4ZG9vMnN3Tkc0OXZyNl9oN2hJRzZxLVB1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzI4MS8wMDIwMTM0NjFEOTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05H NDl2cjZfaDdoSUc2cS1QdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQfsCVHmVDxMDEzyWKxBgTmjmaqupR5FRYV6N+fdcbFZghxENbjQKN C82N8z61ZribKNl9JeMR+Gao7+MqCRGYJcg5uoDBgeXT5yRdWdGAAxZeFqstqtIc BM63rTX8eDls3h5xulUpn03GoKXAZQK0Dpy93aA8MM1QORZV9qTgGeiwtuMoyB80 rrP/hgPpb1Frh9h0bCboVm1TNMATqUAh7pK2HK5hdviLNkxvP/d/yGp4EcbHlDBK DMaYMqmQDuRFkkGiPotKpuk5j/znw2BHIpj29mgVXsUlToGs0W60t+7wspiVvS1W nEkNFvF6yJLRZL2OxDOd+RZxbfF7o8lV -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:07 2025 by rpki-client