$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: GncGSwwZ5yK/eiN0gnFgcqoT2hSgYCL5tvW+AcAb2zM= Subject key identifier: E0:0B:3E:C9:81:CC:FF:3D:D1:09:2E:36:F1:38:71:65:89:62:26:0E Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 03B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 03B1 Signing time: Thu 03 Jul 2025 01:03:52 +0000 Manifest this update: Thu 03 Jul 2025 01:03:52 +0000 Manifest next update: Thu 10 Jul 2025 01:03:52 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: RDKS+gLT3LJ0GgnsjyhwYPK97ZNzkTG2npArjbY/IF4=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: o79Sd0r7i63ThJBm1It6/m6+eHRjzs84P0YMiSeldfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 951 (0x3b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Jul 3 01:03:52 2025 GMT Not After : Jul 10 01:03:52 2025 GMT Subject: CN=6865d6f8-a9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bd:4a:c1:db:e7:cd:c7:b0:b4:db:c7:72:48: e0:f8:43:3b:d1:9c:1f:e8:e5:12:6d:e5:e8:03:d1: 49:50:c7:9a:ae:9f:c2:39:0e:73:3c:78:0f:12:b3: 88:5a:f0:a6:b8:9b:ae:6f:2f:3c:8a:0a:aa:f8:b4: 48:ca:ca:23:43:9b:c7:ae:09:37:bd:e9:59:58:da: 8a:3b:34:13:06:2d:ce:41:6e:e2:f1:18:bb:a8:9a: 47:fe:ce:2f:87:c1:40:6c:90:02:a2:93:27:85:51: 62:ae:67:67:b8:b0:d2:49:16:29:6c:d0:c0:28:1a: 5f:19:94:ef:7e:3b:8c:7c:fe:fd:65:27:39:66:9c: a9:d8:39:71:f4:b1:9a:22:66:2b:0f:3e:1d:e1:96: cb:38:73:83:b8:c0:36:f0:9a:57:27:96:ad:84:b7: e4:cc:4a:cf:a3:30:a3:98:76:e7:e5:71:42:d3:a3: 63:64:ba:c9:8d:5e:a3:b3:50:a0:99:42:47:90:2b: 5b:87:17:45:29:62:26:d1:d3:b1:88:ac:02:e5:cf: f9:ec:76:a8:f0:86:7c:9b:0a:24:f2:3b:4d:8d:8f: f4:3d:5c:3f:77:27:3a:29:87:a0:89:41:1c:c4:b5: 7a:63:42:b4:6d:44:48:39:0f:b0:5f:7a:ac:f1:03: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0B:3E:C9:81:CC:FF:3D:D1:09:2E:36:F1:38:71:65:89:62:26:0E X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:70:3b:d5:d6:4f:5a:67:41:6c:51:15:2c:aa:c5:64:05:e4: 89:1f:e0:ad:41:7b:8a:f6:dd:d5:a0:1d:79:8c:8c:58:50:92: bd:ce:be:9b:da:23:c9:7a:65:c3:41:27:eb:9e:15:1d:36:6c: b0:c0:14:51:f8:f1:f3:cd:62:6c:bc:a5:86:bd:e6:59:81:11: 63:50:4f:ad:36:62:2a:72:50:84:34:50:fe:59:95:7a:fb:14: 43:d2:25:98:10:4c:2b:ba:22:b0:1b:90:58:c2:ec:ac:97:18: 54:a9:62:ff:29:c1:ee:13:da:99:e6:08:68:90:80:c3:f5:2a: 2c:61:ec:31:06:86:d8:60:67:33:6a:7a:50:a3:92:52:42:1e: c5:1e:a6:e7:55:b6:1b:00:98:e8:52:02:50:2f:9e:30:07:18: af:cc:0c:5b:14:f6:89:72:cc:16:cd:9f:db:d1:d7:8f:7f:c8: 85:aa:76:e3:19:0c:a1:a1:f6:9d:5f:a2:d9:26:3f:79:05:9a: 22:23:6b:b5:76:bc:63:0c:c2:e9:41:47:ba:54:35:32:1d:61: 32:08:49:45:35:fa:a5:87:05:e8:88:36:01:a8:89:bc:ee:ee: 2d:51:af:79:30:27:07:a7:5c:62:04:a9:0d:45:64:7a:d6:10: c6:14:a5:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjUwNzAzMDEwMzUyWhcNMjUwNzEwMDEwMzUyWjAYMRYwFAYD VQQDEw02ODY1ZDZmOC1hOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA471KwdvnzcewtNvHckjg+EM70Zwf6OUSbeXoA9FJUMearp/COQ5zPHgPErOI WvCmuJuuby88igqq+LRIysojQ5vHrgk3velZWNqKOzQTBi3OQW7i8Ri7qJpH/s4v h8FAbJACopMnhVFirmdnuLDSSRYpbNDAKBpfGZTvfjuMfP79ZSc5Zpyp2Dlx9LGa ImYrDz4d4ZbLOHODuMA28JpXJ5athLfkzErPozCjmHbn5XFC06NjZLrJjV6js1Cg mUJHkCtbhxdFKWIm0dOxiKwC5c/57Hao8IZ8mwok8jtNjY/0PVw/dyc6KYegiUEc xLV6Y0K0bURIOQ+wX3qs8QMPlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOALPsmB zP890QkuNvE4cWWJYiYOMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWcDvV1k9aZ0FsURUsqsVkBeSJH+CtQXuK9t3VoB15jIxYUJK9zr6b 2iPJemXDQSfrnhUdNmywwBRR+PHzzWJsvKWGveZZgRFjUE+tNmIqclCENFD+WZV6 +xRD0iWYEEwruiKwG5BYwuyslxhUqWL/KcHuE9qZ5ghokIDD9SosYewxBobYYGcz anpQo5JSQh7FHqbnVbYbAJjoUgJQL54wBxivzAxbFPaJcswWzZ/b0dePf8iFqnbj GQyhofadX6LZJj95BZoiI2u1drxjDMLpQUe6VDUyHWEyCElFNfqlhwXoiDYBqIm8 7u4tUa95MCcHp1xiBKkNRWR61hDGFKUE -----END CERTIFICATE-----Generated at Thu Jul 3 07:59:21 2025 by rpki-client