$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json) Hash identifier: btZQBpNQoO7OTrWVUm6++z7cP09LljafCzB/wyM9rBI= Subject key identifier: 23:8F:C2:3A:BF:1A:DE:F8:6B:4A:94:93:4B:24:F0:72:00:E9:82:36 Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft Manifest number: EC Signing time: Tue 01 Jul 2025 05:56:54 +0000 Manifest this update: Tue 01 Jul 2025 05:56:53 +0000 Manifest next update: Tue 08 Jul 2025 05:56:53 +0000 Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: 5mJIIXcWn+lAFl6T+9bx82R81wMoZoDx5cAuW4aMIk4=) 2: 0E3462143D2D11EFA4B90A1EC4F9AE02.roa (hash: 8YLAmzfkAq7wWaHxcBzfEAiWvy9p4CNzd9sT8leEWdE=) 3: AC82414A392511EF88F70D39C4F9AE02.roa (hash: wtDTYViLvQ71y8LfCWrpB6kCmz/GyFN75jh6EmmBpDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Validity Not Before: Jul 1 05:56:53 2025 GMT Not After : Jul 8 05:56:53 2025 GMT Subject: CN=686378a5-d13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:06:0c:4d:3b:19:9b:c6:d9:4b:c6:d7:7b: e7:92:61:88:4a:5d:8c:54:52:3f:23:04:14:db:92: dc:43:00:c4:20:a3:4b:ff:3a:05:b7:4f:95:ff:2c: e4:99:6f:bc:9c:c9:6b:33:4c:9a:0b:40:af:a9:47: 71:4f:d5:6e:83:50:e7:e2:dd:8e:75:c5:59:35:ab: 6e:94:d0:fb:c0:ad:3d:19:4c:d5:89:2a:e1:f0:3d: e4:42:e7:08:9e:e3:eb:e0:be:ab:ce:26:a1:e3:43: 8d:2f:01:a0:9e:fb:69:ee:1b:e9:6f:fe:02:9d:ce: d9:02:dd:6b:fa:ba:b5:97:96:24:04:ee:cc:9c:cd: 48:e1:46:1b:61:0a:fb:d5:e7:78:d0:fd:8f:19:27: 9e:91:cb:19:a8:ee:5b:79:b1:72:90:9f:5e:db:81: 9b:83:24:ea:f3:b3:3a:1e:01:dd:12:00:61:a6:46: 23:aa:96:45:6b:da:d5:20:19:57:03:43:34:53:cc: e7:90:f0:eb:34:cf:2a:12:94:b4:b3:40:74:f1:8c: a7:2a:7f:95:e8:b0:e4:b6:e8:f3:2b:a9:b1:9d:4b: 5a:4c:e8:a9:8e:47:67:e2:31:fb:8b:4f:16:b6:81: 0c:01:ab:05:d9:03:a2:24:3c:6a:71:bc:d1:4f:74: 5b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8F:C2:3A:BF:1A:DE:F8:6B:4A:94:93:4B:24:F0:72:00:E9:82:36 X509v3 Authority Key Identifier: keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:61:ea:5e:d4:9c:01:48:31:78:a8:a6:e8:53:53:6b:23:e6: 91:67:12:3a:d4:ac:11:13:da:2e:c5:6d:bb:be:c4:89:33:c2: d8:0b:96:69:b3:31:4b:1d:d7:13:fd:a9:c3:d5:f0:51:4b:56: 7f:21:a5:40:a2:bb:9e:7a:fc:0d:00:46:c9:49:bf:19:3a:bc: eb:51:e3:eb:46:2c:11:73:0e:c6:70:70:da:ba:83:da:2f:c6: b5:c9:48:6f:71:f2:37:3d:44:c1:94:70:3a:0e:d0:9a:ef:18: eb:bd:99:8f:fb:1d:94:28:74:a4:be:d0:0d:12:3b:25:95:81: 1b:3e:e1:73:c9:c3:66:8d:5e:8f:db:19:15:e0:ca:7f:a9:b7: 2e:43:ee:9d:40:54:38:6d:9e:dd:b6:35:f8:90:0f:90:41:2a: 90:10:01:96:db:e6:b6:df:f5:7f:26:46:af:f8:1e:97:9f:a4: 27:15:2d:ad:29:d5:ae:72:c8:c9:0a:14:b7:ed:dc:bf:9d:28: 69:21:e3:73:0c:b9:8d:ac:68:0e:5f:b7:73:45:85:30:1b:42: 6b:dc:28:f9:61:29:7a:42:ee:19:33:0c:d5:2d:4c:7d:d9:6e: ad:33:91:88:a5:cc:63:fc:ab:a8:74:a5:b5:2b:59:b4:74:3e: 92:d1:b0:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxOTMxMTAvBgNVBAUTKDdCMUFFMjdEM0NGNTE0OTlDNTA1NkU3REE4NzM2NjVF NEU0MTUxNzkwHhcNMjUwNzAxMDU1NjUzWhcNMjUwNzA4MDU1NjUzWjAYMRYwFAYD VQQDEw02ODYzNzhhNS1kMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10sGDE07GZvG2UvG13vnkmGISl2MVFI/IwQU25LcQwDEIKNL/zoFt0+V/yzk mW+8nMlrM0yaC0CvqUdxT9Vug1Dn4t2OdcVZNatulND7wK09GUzViSrh8D3kQucI nuPr4L6rziah40ONLwGgnvtp7hvpb/4Cnc7ZAt1r+rq1l5YkBO7MnM1I4UYbYQr7 1ed40P2PGSeekcsZqO5bebFykJ9e24GbgyTq87M6HgHdEgBhpkYjqpZFa9rVIBlX A0M0U8znkPDrNM8qEpS0s0B08YynKn+V6LDktujzK6mxnUtaTOipjkdn4jH7i08W toEMAasF2QOiJDxqcbzRT3RbOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOPwjq/ Gt74a0qUk0sk8HIA6YI2MB8GA1UdIwQYMBaAFHsa4n089RSZxQVufahzZl5OQVF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjE5My85M0Q0RTQ5MEY2 MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZKbkZCVzU5cUhObVhrNUJV WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4cmlmVHoxRkpuRkJXNTlxSE5tWGs1QlVYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjE5My85M0Q0RTQ5MEY2MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZK bkZCVzU5cUhObVhrNUJVWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXYepe1JwBSDF4qKboU1NrI+aRZxI61KwRE9ouxW27vsSJM8LYC5Zp szFLHdcT/anD1fBRS1Z/IaVAorueevwNAEbJSb8ZOrzrUePrRiwRcw7GcHDauoPa L8a1yUhvcfI3PUTBlHA6DtCa7xjrvZmP+x2UKHSkvtANEjsllYEbPuFzycNmjV6P 2xkV4Mp/qbcuQ+6dQFQ4bZ7dtjX4kA+QQSqQEAGW2+a23/V/Jkav+B6Xn6QnFS2t KdWucsjJChS37dy/nShpIeNzDLmNrGgOX7dzRYUwG0Jr3Cj5YSl6Qu4ZMwzVLUx9 2W6tM5GIpcxj/KuodKW1K1m0dD6S0bD9 -----END CERTIFICATE-----Generated at Wed Jul 2 19:36:33 2025 by rpki-client