$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json) Hash identifier: JV10qaVy8Vv6+chqoT629VlfAtajqaIFzrXvp82SPbI= Subject key identifier: 48:96:F2:76:56:F1:31:03:34:2F:FE:20:DA:15:9C:71:EA:95:6E:BD Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft Manifest number: 05E6 Signing time: Fri 08 Aug 2025 23:24:59 +0000 Manifest this update: Fri 08 Aug 2025 23:24:58 +0000 Manifest next update: Fri 15 Aug 2025 23:24:58 +0000 Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: H+GByeQ1fK/JJGEAJWuKXGZ7756+6Phdggy0/rq/8zM=) 2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: PfaYVep9sxHm2ekMoNsSTDKRElztgb9iT+RAJOOQJNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: Aug 8 23:24:58 2025 GMT Not After : Aug 15 23:24:58 2025 GMT Subject: CN=6896874a-7b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:3a:1d:c7:4f:de:3e:fb:d6:2b:3c:29:94: f1:26:68:5f:83:90:64:63:9b:56:d9:0f:cc:ad:35: 30:2a:89:27:da:1c:7a:a3:67:d5:3e:a2:c9:07:4f: 15:6c:50:e7:2f:f4:b9:99:5d:49:60:0a:e3:6e:f1: ea:3a:a9:20:a1:9a:de:20:c1:49:97:f1:3d:b7:c9: 2c:cf:8c:5a:72:ff:63:4f:a2:0a:ff:1e:59:3c:f4: 90:4f:4a:99:94:13:7d:de:2b:99:91:c5:13:88:c7: 77:63:7f:c7:3c:62:50:dd:c4:10:40:ff:3e:6b:0d: 55:53:77:5f:cc:38:ea:b8:a3:5c:2d:e1:24:99:fb: 29:26:b4:67:fd:70:07:d2:07:e4:27:f3:63:ad:87: d1:69:85:43:17:34:27:49:40:75:68:17:f5:02:85: ca:f0:48:70:4f:35:9a:cd:8f:78:4c:fe:fe:6d:f3: bb:8b:38:d8:87:7b:89:bc:fb:56:a8:89:ea:c4:5c: a1:2a:bc:1c:a8:c9:18:38:da:7e:7c:04:43:1f:83: 64:4f:14:4c:ba:2c:fe:13:af:a2:c4:66:1d:18:3f: 97:c5:e0:a4:1e:8c:61:09:ef:38:2c:87:16:4d:02: 6e:5c:67:a9:d9:72:38:8e:5f:c9:93:d2:a1:45:8a: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:96:F2:76:56:F1:31:03:34:2F:FE:20:DA:15:9C:71:EA:95:6E:BD X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:df:79:62:42:04:2d:db:73:2f:86:5b:0d:21:a5:0a:b7:19: ef:3d:6e:00:60:9d:28:3b:df:e9:d3:5e:db:18:d6:69:9c:6c: fe:6e:94:b6:dd:84:6d:7b:f7:78:76:48:3c:b7:e2:24:e2:05: 15:31:a1:e5:b4:95:75:80:66:62:53:3a:0e:2a:78:99:33:d1: 68:b3:86:54:fb:b0:90:29:2c:34:11:9f:25:83:79:76:50:ad: 2d:3e:b0:45:b9:9d:9e:71:cc:3a:ec:8b:e9:d6:a5:9b:46:2a: 8c:26:0a:9f:67:82:f9:ba:7c:b5:b6:e6:4c:58:77:e8:b2:db: 66:28:8d:74:46:51:b7:1d:25:22:90:b9:82:67:27:1a:e0:d8: bd:ee:35:06:b4:04:43:ac:52:b6:48:6c:81:8d:38:06:c1:ce: 21:f9:9e:5e:6e:a0:c8:bc:84:49:10:08:b7:53:cf:0d:21:6e: 04:c8:5d:43:52:4f:1c:9c:64:b8:aa:bb:cf:6c:b1:a5:cb:71: a8:22:d9:87:be:d5:1a:fc:f2:13:ba:4a:ed:d4:12:5e:f5:7c: 75:07:c3:a4:70:85:24:23:df:4b:46:ac:59:26:79:5a:6b:29: 59:7d:13:c9:d0:eb:57:44:3d:25:ba:53:05:b3:e1:88:7b:81: ca:28:f2:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjUwODA4MjMyNDU4WhcNMjUwODE1MjMyNDU4WjAYMRYwFAYD VQQDEw02ODk2ODc0YS03YjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+c6HcdP3j771is8KZTxJmhfg5BkY5tW2Q/MrTUwKokn2hx6o2fVPqLJB08V bFDnL/S5mV1JYArjbvHqOqkgoZreIMFJl/E9t8ksz4xacv9jT6IK/x5ZPPSQT0qZ lBN93iuZkcUTiMd3Y3/HPGJQ3cQQQP8+aw1VU3dfzDjquKNcLeEkmfspJrRn/XAH 0gfkJ/NjrYfRaYVDFzQnSUB1aBf1AoXK8EhwTzWazY94TP7+bfO7izjYh3uJvPtW qInqxFyhKrwcqMkYONp+fARDH4NkTxRMuiz+E6+ixGYdGD+XxeCkHoxhCe84LIcW TQJuXGep2XI4jl/Jk9KhRYp35QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiW8nZW 8TEDNC/+INoVnHHqlW69MB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS YVpoaXpLZnZKSGRqRFZjT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk33liQgQt23MvhlsNIaUKtxnvPW4AYJ0oO9/p017bGNZpnGz+bpS2 3YRte/d4dkg8t+Ik4gUVMaHltJV1gGZiUzoOKniZM9Fos4ZU+7CQKSw0EZ8lg3l2 UK0tPrBFuZ2eccw67Ivp1qWbRiqMJgqfZ4L5uny1tuZMWHfosttmKI10RlG3HSUi kLmCZyca4Ni97jUGtARDrFK2SGyBjTgGwc4h+Z5ebqDIvIRJEAi3U88NIW4EyF1D Uk8cnGS4qrvPbLGly3GoItmHvtUa/PITukrt1BJe9Xx1B8OkcIUkI99LRqxZJnla aylZfRPJ0OtXRD0lulMFs+GIe4HKKPIt -----END CERTIFICATE-----Generated at Sun Aug 10 10:33:51 2025 by rpki-client