$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft File: ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json) Hash identifier: VqC9K2jo/sceF0geHmWhV/kuhdCh/J+N6lNI7zAs1og= Subject key identifier: 9D:BD:F5:9C:7F:ED:06:AB:FD:8C:60:04:EC:E4:D0:EF:38:D8:2C:81 Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 Certificate issuer: /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Certificate serial: 05CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft Manifest number: 05CA Signing time: Thu 12 Jun 2025 22:40:29 +0000 Manifest this update: Thu 12 Jun 2025 22:40:28 +0000 Manifest next update: Thu 19 Jun 2025 22:40:28 +0000 Files and hashes: 1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: beSIKfJHszEFyzpgjl5OW7HuY6zDUtRK/bwTPGNu40M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Validity Not Before: Jun 12 22:40:28 2025 GMT Not After : Jun 19 22:40:28 2025 GMT Subject: CN=684b575d-06d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:1e:c9:b5:f2:5f:8f:56:f8:49:56:20:3a: 35:8e:22:f7:68:ec:e6:84:10:61:14:60:84:ca:c2: 10:df:e4:ad:8d:c4:38:55:e5:fb:95:5a:70:af:50: ba:0b:3d:d1:52:c3:e8:90:60:24:3e:a9:89:d5:5d: 1d:d4:6a:e9:ed:e1:c3:cd:72:4c:04:59:f3:9a:3a: eb:b5:2c:02:17:db:dc:29:62:60:4d:2f:c4:ce:9b: 48:ca:4b:cf:2d:ea:bf:ff:3f:cc:47:25:91:c8:50: e0:51:db:ff:ab:d6:8a:04:3e:a0:fe:93:62:30:44: 4f:c2:45:b6:31:a8:b0:d3:90:15:24:ed:57:74:a5: 28:84:c6:3c:d3:39:21:10:58:00:ed:1a:aa:79:97: 3a:4b:da:50:99:f7:1c:8b:f8:3b:34:62:91:ca:73: f5:d5:1e:e6:23:68:23:ab:0b:d4:80:f7:51:d2:83: 60:17:d1:d3:14:d7:ba:8f:40:d8:af:2e:fa:7a:25: 16:2a:b3:58:aa:f1:7e:89:6b:f8:43:09:b1:43:c6: bb:89:5b:23:dc:45:1c:5f:5d:48:4b:15:a5:72:5b: 44:ee:e1:ba:cf:56:60:df:19:77:0f:39:93:f1:bd: 31:5b:20:2b:26:c3:64:26:73:59:63:ac:2e:1d:cc: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BD:F5:9C:7F:ED:06:AB:FD:8C:60:04:EC:E4:D0:EF:38:D8:2C:81 X509v3 Authority Key Identifier: keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:40:c7:d6:bf:8a:7d:3f:de:1b:83:d2:9e:9f:28:bc:27:e3: 6f:98:61:92:cd:a3:5b:26:7b:5b:11:9d:42:23:ed:7d:bf:24: f7:9c:cd:b9:1f:db:90:1b:f1:1b:76:0a:cb:f9:07:59:d3:a2: 0a:03:7e:f4:39:d8:82:b7:f1:f0:8e:c0:72:ab:6c:7f:7a:f6: 5b:ed:71:8c:7d:c0:62:79:92:3e:dd:3e:bb:1d:d1:9c:07:02: 6e:6a:c8:c1:a2:b6:1d:8d:0e:a6:10:b5:05:20:6a:29:cd:e0: 85:20:d1:92:c0:a4:b7:ea:e7:88:b2:66:66:e0:49:b0:76:c9: b4:56:bd:91:c9:54:c0:bb:6a:3c:b5:b3:40:69:49:85:47:8c: e3:f3:93:03:24:ca:61:30:cc:c7:d5:b4:36:0e:38:39:3a:89: 89:4b:28:0c:d1:23:56:8a:a8:a7:9d:c9:79:05:be:9e:6f:55: 43:15:48:c5:6f:a6:b8:15:20:66:b2:3f:fb:fd:b2:35:c0:eb: 5c:bc:ad:7b:09:71:4d:43:3e:fa:99:b1:dd:59:c3:a9:30:63: 47:d5:13:73:f0:f3:35:47:43:4b:30:d9:0d:8d:3e:2d:09:35: 7b:17:b5:ca:d5:d4:66:df:8c:10:54:0a:e9:3a:5f:7f:c6:43: 6f:e4:26:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx RkQxRENFQTgwHhcNMjUwNjEyMjI0MDI4WhcNMjUwNjE5MjI0MDI4WjAYMRYwFAYD VQQDEw02ODRiNTc1ZC0wNmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoQeybXyX49W+ElWIDo1jiL3aOzmhBBhFGCEysIQ3+StjcQ4VeX7lVpwr1C6 Cz3RUsPokGAkPqmJ1V0d1Grp7eHDzXJMBFnzmjrrtSwCF9vcKWJgTS/EzptIykvP Leq//z/MRyWRyFDgUdv/q9aKBD6g/pNiMERPwkW2Maiw05AVJO1XdKUohMY80zkh EFgA7RqqeZc6S9pQmfcci/g7NGKRynP11R7mI2gjqwvUgPdR0oNgF9HTFNe6j0DY ry76eiUWKrNYqvF+iWv4QwmxQ8a7iVsj3EUcX11ISxWlcltE7uG6z1Zg3xl3DzmT 8b0xWyArJsNkJnNZY6wuHcw1lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ299Zx/ 7Qar/YxgBOzk0O842CyBMB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi cnlTMnVRVnFlN01mMGR6cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvQMfWv4p9P94bg9Kenyi8J+NvmGGSzaNbJntbEZ1CI+19vyT3nM25 H9uQG/EbdgrL+QdZ06IKA370OdiCt/HwjsByq2x/evZb7XGMfcBieZI+3T67HdGc BwJuasjBorYdjQ6mELUFIGopzeCFINGSwKS36ueIsmZm4Emwdsm0Vr2RyVTAu2o8 tbNAaUmFR4zj85MDJMphMMzH1bQ2Djg5OomJSygM0SNWiqinncl5Bb6eb1VDFUjF b6a4FSBmsj/7/bI1wOtcvK17CXFNQz76mbHdWcOpMGNH1RNz8PM1R0NLMNkNjT4t CTV7F7XK1dRm34wQVArpOl9/xkNv5CZ5 -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:38 2025 by rpki-client