$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: Ivk9Ui69/bx9ftuUTxCKMMFQ/kEOP0I4FwVzv+tdTvM= Subject key identifier: BC:45:2A:32:9F:F1:61:F5:89:FF:2A:D6:89:42:94:51:12:26:4F:2B Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 0398 Signing time: Tue 13 May 2025 00:35:01 +0000 Manifest this update: Tue 13 May 2025 00:35:01 +0000 Manifest next update: Tue 20 May 2025 00:35:01 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: GABOdbERKiDMnhxcbbPLl8Pl7HO09TQJkY1TxMXe3Qo=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: o79Sd0r7i63ThJBm1It6/m6+eHRjzs84P0YMiSeldfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: May 13 00:35:01 2025 GMT Not After : May 20 00:35:01 2025 GMT Subject: CN=682293b5-7efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:77:b7:de:41:73:8f:58:ff:49:45:e7:98: d7:71:9c:1c:6c:c4:60:81:ea:c1:fb:19:ba:5c:8d: 7c:34:2f:67:e6:d4:dc:34:88:75:a4:e8:e6:c3:79: 72:d7:82:26:31:9a:30:f2:c4:23:8e:4d:4a:98:00: f0:fa:12:83:e3:4b:be:14:6a:96:b1:a3:ac:72:bd: ce:3a:22:f2:57:91:71:3e:6a:92:eb:80:88:bb:22: 75:67:d5:33:a5:8f:d1:ca:38:4e:e4:36:2e:56:38: 19:6d:68:8d:71:48:47:1d:bb:8d:65:b3:56:0a:aa: 2c:da:b4:ee:d5:8d:7e:5d:b6:9f:cf:2a:50:b7:f7: 75:e9:55:40:73:e9:a5:f0:e0:c3:1f:cf:6e:51:8b: b4:2a:0d:bd:5f:d9:c2:db:1d:24:15:d7:99:0c:37: e9:98:89:94:6e:2c:d6:77:c1:cf:50:3c:a0:b5:59: 12:1d:76:0f:c4:af:96:e3:0a:59:2b:2e:0f:c6:2a: 26:f6:e8:b4:e2:03:2b:be:b4:c4:3f:69:03:57:05: 22:97:30:bf:10:14:07:d0:3d:e3:e7:73:20:46:c2: 39:f8:ef:87:51:f3:f8:1e:4c:94:1f:10:97:f4:db: 9d:d5:b2:46:d4:92:53:6c:ee:20:f3:b8:fa:0b:80: 95:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:45:2A:32:9F:F1:61:F5:89:FF:2A:D6:89:42:94:51:12:26:4F:2B X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c1:ed:03:72:d1:a8:59:4d:2d:d9:a2:30:8a:47:d4:43:6e: bf:c9:02:4d:bb:bd:a0:2a:d3:98:af:09:59:fc:a0:b0:d5:92: 49:84:89:d8:1f:2e:f7:c8:77:7f:35:8f:83:b6:8a:80:37:b1: 91:88:e7:35:c1:15:5b:1e:ad:d2:7d:09:46:0d:11:1c:e0:ec: ab:7c:6a:64:b6:4f:d6:9d:b4:3f:bd:2b:43:a9:67:ad:b5:66: 93:af:62:e9:56:e2:6b:14:66:41:7b:78:e4:d5:2f:83:e7:ec: 7a:e6:57:37:7a:9e:77:6c:b1:bb:73:be:64:08:e6:6b:b0:ba: e2:4b:24:a4:d2:8f:99:f5:e1:0c:0d:07:47:ef:2d:a6:de:4e: b2:ad:73:55:29:6e:99:7e:be:68:77:04:92:73:c5:e9:59:f5: fe:da:d3:06:1f:39:4b:8e:4b:19:aa:3e:e2:e9:a7:be:9f:d0: 08:11:5f:30:bc:b1:18:30:bf:74:01:97:9c:dd:ce:09:b2:b8: 1e:92:83:ef:ea:fa:a4:f4:bf:d6:43:25:ce:65:dc:96:f8:6d: a7:14:1f:45:03:92:fa:ec:e7:a6:8b:af:3e:f4:74:fd:46:2a: f7:15:54:b4:3a:b8:c2:33:ef:91:83:fc:78:bc:c4:a0:bc:1c: cd:c4:14:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjUwNTEzMDAzNTAxWhcNMjUwNTIwMDAzNTAxWjAYMRYwFAYD VQQDEw02ODIyOTNiNS03ZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDN3t95Bc49Y/0lF55jXcZwcbMRggerB+xm6XI18NC9n5tTcNIh1pOjmw3ly 14ImMZow8sQjjk1KmADw+hKD40u+FGqWsaOscr3OOiLyV5FxPmqS64CIuyJ1Z9Uz pY/RyjhO5DYuVjgZbWiNcUhHHbuNZbNWCqos2rTu1Y1+XbafzypQt/d16VVAc+ml 8ODDH89uUYu0Kg29X9nC2x0kFdeZDDfpmImUbizWd8HPUDygtVkSHXYPxK+W4wpZ Ky4Pxiom9ui04gMrvrTEP2kDVwUilzC/EBQH0D3j53MgRsI5+O+HUfP4HkyUHxCX 9Nud1bJG1JJTbO4g87j6C4CVnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxFKjKf 8WH1if8q1olClFESJk8rMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFwe0DctGoWU0t2aIwikfUQ26/yQJNu72gKtOYrwlZ/KCw1ZJJhInY Hy73yHd/NY+DtoqAN7GRiOc1wRVbHq3SfQlGDREc4OyrfGpktk/WnbQ/vStDqWet tWaTr2LpVuJrFGZBe3jk1S+D5+x65lc3ep53bLG7c75kCOZrsLriSySk0o+Z9eEM DQdH7y2m3k6yrXNVKW6Zfr5odwSSc8XpWfX+2tMGHzlLjksZqj7i6ae+n9AIEV8w vLEYML90AZec3c4JsrgekoPv6vqk9L/WQyXOZdyW+G2nFB9FA5L67Oemi68+9HT9 Rir3FVS0OrjCM++Rg/x4vMSgvBzNxBRD -----END CERTIFICATE-----Generated at Wed May 14 01:12:10 2025 by rpki-client