$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json) Hash identifier: pm2Piwd1bLzznDLgB+BTjB30mzLmRr9nYKnWUrzmWpo= Subject key identifier: A5:DB:61:3C:4B:7C:88:56:7C:84:64:CD:E5:29:06:45:F6:57:C5:F4 Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 05B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft Manifest number: 05AF Signing time: Thu 24 Apr 2025 22:56:14 +0000 Manifest this update: Thu 24 Apr 2025 22:56:14 +0000 Manifest next update: Thu 01 May 2025 22:56:14 +0000 Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: gERW/xIrQ6zUfWMgMBvNlxaGnhTST2Z6IgnU13I6PcM=) 2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: aRYWCiFCI9e+UhsWF2EXBC5D+N3vZVlnQx//tGzToMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: Apr 24 22:56:14 2025 GMT Not After : May 1 22:56:14 2025 GMT Subject: CN=680ac18e-f8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:62:a9:8c:0a:49:b0:7e:cc:dc:32:43:c1: 29:e1:b5:13:67:19:1b:ab:ba:8b:42:a0:7d:d1:2a: 61:6a:aa:b4:f8:16:f3:d0:9c:1f:6c:f2:6c:de:49: 67:24:c1:9c:7a:e2:36:33:0b:43:fc:27:34:80:f5: 4f:65:8d:4f:4b:e2:fd:25:09:0c:b1:0c:70:0b:42: ca:dc:65:87:34:04:df:a0:22:a3:71:ab:78:de:66: 57:f4:75:5e:89:ef:a5:f6:1b:97:4d:ce:63:2c:b9: a0:c1:6b:0e:10:89:f4:81:b7:49:1c:35:f3:6b:dd: 04:26:8f:38:3e:9f:6e:4d:e0:e5:ab:56:eb:bf:fa: 07:3e:a9:7b:6f:48:d5:2a:91:a5:97:a5:10:f8:eb: 95:bf:48:cc:5e:05:4a:a5:ec:56:2c:9f:c8:16:62: 6e:10:50:23:fd:1f:54:b8:c0:d2:e2:da:f4:65:5d: 03:ef:1f:c3:97:f4:9a:ed:f8:a0:a9:c7:03:f2:d0: c5:60:bd:48:a5:e9:47:1a:31:5f:f2:93:39:0a:c9: 7c:58:6d:65:62:67:3d:30:d8:68:b9:f5:76:0d:76: d8:bf:e7:f8:55:2d:8a:d6:f0:94:73:35:6b:a8:4a: 98:04:f8:78:7d:f5:a4:be:7d:bf:c7:15:f9:62:97: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DB:61:3C:4B:7C:88:56:7C:84:64:CD:E5:29:06:45:F6:57:C5:F4 X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:55:2a:92:07:42:6d:1e:80:4b:44:9f:86:05:25:ec:4b:17: d2:8b:fb:62:78:30:07:52:fe:ab:d5:75:97:af:42:a8:69:4f: 1f:05:02:c7:5e:44:ab:69:37:c9:a9:93:be:dd:cb:1d:b6:54: a6:07:14:2e:7a:13:75:fe:5b:0b:93:f0:3f:b9:27:70:4b:3b: c4:b4:7f:3c:09:f8:73:97:0e:61:81:ce:51:2d:9e:65:63:a5: 5a:76:33:10:ec:cc:d5:58:ce:28:62:ff:8c:22:7b:aa:e7:2e: a9:23:51:30:92:20:f8:57:35:8c:7a:01:4b:62:09:6d:b5:1f: 15:89:57:f9:e1:a9:93:eb:80:47:5e:c7:c0:2e:e7:15:c9:69: 95:e2:33:c5:b5:2f:de:a1:c2:a3:f2:7b:76:cd:be:32:75:45: 05:1c:8c:51:bf:3f:d7:4e:9d:e5:fa:5b:0b:2f:ee:14:d5:57: cf:2a:58:4f:55:7c:93:ea:01:5a:f3:af:6f:4b:87:25:c4:1a: 5c:e6:eb:9e:7e:08:8f:a7:ce:12:82:1e:a7:6a:e6:a5:81:83: 93:86:54:33:bf:93:17:8e:c5:3d:d1:11:e1:44:fc:33:bb:85: a8:f1:19:3a:8a:74:e2:a7:e0:8e:d7:3a:d4:e6:4b:7b:f1:bc: 0c:72:54:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjUwNDI0MjI1NjE0WhcNMjUwNTAxMjI1NjE0WjAYMRYwFAYD VQQDEw02ODBhYzE4ZS1mOGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiZiqYwKSbB+zNwyQ8Ep4bUTZxkbq7qLQqB90Sphaqq0+Bbz0JwfbPJs3kln JMGceuI2MwtD/Cc0gPVPZY1PS+L9JQkMsQxwC0LK3GWHNATfoCKjcat43mZX9HVe ie+l9huXTc5jLLmgwWsOEIn0gbdJHDXza90EJo84Pp9uTeDlq1brv/oHPql7b0jV KpGll6UQ+OuVv0jMXgVKpexWLJ/IFmJuEFAj/R9UuMDS4tr0ZV0D7x/Dl/Sa7fig qccD8tDFYL1IpelHGjFf8pM5Csl8WG1lYmc9MNhoufV2DXbYv+f4VS2K1vCUczVr qEqYBPh4ffWkvn2/xxX5Ype0EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXbYTxL fIhWfIRkzeUpBkX2V8X0MB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS YVpoaXpLZnZKSGRqRFZjT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0VSqSB0JtHoBLRJ+GBSXsSxfSi/tieDAHUv6r1XWXr0KoaU8fBQLH XkSraTfJqZO+3csdtlSmBxQuehN1/lsLk/A/uSdwSzvEtH88Cfhzlw5hgc5RLZ5l Y6VadjMQ7MzVWM4oYv+MInuq5y6pI1EwkiD4VzWMegFLYglttR8ViVf54amT64BH XsfALucVyWmV4jPFtS/eocKj8nt2zb4ydUUFHIxRvz/XTp3l+lsLL+4U1VfPKlhP VXyT6gFa869vS4clxBpc5uuefgiPp84Sgh6naualgYOThlQzv5MXjsU90RHhRPwz u4Wo8Rk6inTip+CO1zrU5kt78bwMclQA -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:51 2025 by rpki-client