$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft File: ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json) Hash identifier: D1Q99ZhfRT9gEXOj0vUNQDKjIhpXzYkyAxUmRQkPy70= Subject key identifier: C1:44:11:8E:8D:91:4A:E8:BF:36:92:A3:11:58:3D:57:98:FF:A7:0B Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 Certificate issuer: /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft Manifest number: 05B2 Signing time: Thu 24 Apr 2025 22:55:05 +0000 Manifest this update: Thu 24 Apr 2025 22:55:04 +0000 Manifest next update: Thu 01 May 2025 22:55:04 +0000 Files and hashes: 1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: xSS2I97GZ0eNJUpwStRsUx/THq3LaJMHwL+aRmwZlmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Validity Not Before: Apr 24 22:55:04 2025 GMT Not After : May 1 22:55:04 2025 GMT Subject: CN=680ac148-ee00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:09:75:4a:56:80:37:07:69:ec:43:4e:72: dc:0d:e5:6a:31:d3:89:7a:e7:f8:e9:dc:aa:05:6f: 75:91:85:a5:a0:11:04:52:ed:95:24:53:23:07:00: 39:99:97:36:f4:d8:21:22:aa:7c:e7:79:fc:54:c6: 24:62:c4:26:81:73:77:a1:56:72:fc:a2:e1:c7:e2: a7:6d:6c:c8:36:c7:d1:a1:0b:cb:c3:01:d3:08:df: 97:27:5b:99:c6:42:78:67:8a:4f:5c:56:54:7f:e4: c3:f6:f4:04:fb:24:fc:f8:83:ea:54:92:0a:63:e1: 6c:e3:a8:7c:ab:86:91:d2:c3:1b:13:fa:99:cc:84: e0:b3:6a:d2:59:eb:b3:c4:96:6f:db:77:1a:ef:b6: 83:34:81:5c:5a:df:f6:2e:17:2f:9d:40:5c:da:3f: 5b:7a:8b:28:99:d0:2c:46:42:e0:fa:01:1c:0a:95: ac:2f:d9:a6:35:db:59:5a:89:87:6a:9a:0e:77:d8: 79:7d:ad:01:b1:f9:f6:0e:f5:30:ad:14:51:3e:9e: 9a:88:73:9c:2f:03:4f:b2:ad:41:4b:5f:78:95:43: df:ef:5f:c8:42:8f:27:98:0b:bf:dd:17:90:c4:aa: e0:75:b1:8a:a1:54:bb:e3:c7:85:ea:13:93:1b:a3: 54:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:44:11:8E:8D:91:4A:E8:BF:36:92:A3:11:58:3D:57:98:FF:A7:0B X509v3 Authority Key Identifier: keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:5d:1b:21:e1:33:0a:22:f1:0d:fa:f0:a8:15:e2:0e:dd:79: fc:da:c0:29:91:eb:c9:db:dc:de:c3:94:7b:26:c1:40:2d:4e: af:f6:8c:30:4c:87:a8:01:73:79:59:15:79:9d:b9:6e:a8:ad: 80:3f:37:75:7f:5d:34:30:55:5d:13:21:87:d3:3e:b3:8b:9d: 68:14:a6:56:8c:b1:b5:51:10:10:7a:58:c9:ed:0d:e8:dd:da: 6e:66:f1:cb:a3:4b:9e:9a:92:9e:d6:14:5b:a7:dc:f0:6e:ee: 10:2a:e7:bb:cc:c8:0b:29:18:bc:34:59:bf:f9:85:e0:83:c6: 34:f1:6e:0f:a6:9c:2c:04:93:65:fc:67:0b:6f:2e:55:39:75: a0:69:70:28:c7:41:58:00:fa:09:d1:c8:f3:4f:2a:38:a4:76: a6:af:c1:48:14:e3:a3:68:f9:34:7d:22:20:8d:7a:18:f1:82: c9:78:0a:31:c6:d5:fd:39:6f:17:84:a2:fc:b8:34:ca:32:b3: 9b:ad:73:53:38:e1:20:87:99:bf:be:69:56:8e:7d:ef:1e:17: c1:7a:88:05:5d:3a:79:47:c0:d1:fc:a0:86:31:92:0a:f0:1f: 9d:c8:38:ff:88:32:39:f8:2a:53:fa:6d:0e:90:1d:a6:41:55: 68:37:b7:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx RkQxRENFQTgwHhcNMjUwNDI0MjI1NTA0WhcNMjUwNTAxMjI1NTA0WjAYMRYwFAYD VQQDEw02ODBhYzE0OC1lZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJMJdUpWgDcHaexDTnLcDeVqMdOJeuf46dyqBW91kYWloBEEUu2VJFMjBwA5 mZc29NghIqp853n8VMYkYsQmgXN3oVZy/KLhx+KnbWzINsfRoQvLwwHTCN+XJ1uZ xkJ4Z4pPXFZUf+TD9vQE+yT8+IPqVJIKY+Fs46h8q4aR0sMbE/qZzITgs2rSWeuz xJZv23ca77aDNIFcWt/2LhcvnUBc2j9beosomdAsRkLg+gEcCpWsL9mmNdtZWomH apoOd9h5fa0Bsfn2DvUwrRRRPp6aiHOcLwNPsq1BS194lUPf71/IQo8nmAu/3ReQ xKrgdbGKoVS748eF6hOTG6NUzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFEEY6N kUrovzaSoxFYPVeY/6cLMB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi cnlTMnVRVnFlN01mMGR6cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1XRsh4TMKIvEN+vCoFeIO3Xn82sApkevJ29zew5R7JsFALU6v9oww TIeoAXN5WRV5nbluqK2APzd1f100MFVdEyGH0z6zi51oFKZWjLG1URAQeljJ7Q3o 3dpuZvHLo0uempKe1hRbp9zwbu4QKue7zMgLKRi8NFm/+YXgg8Y08W4PppwsBJNl /GcLby5VOXWgaXAox0FYAPoJ0cjzTyo4pHamr8FIFOOjaPk0fSIgjXoY8YLJeAox xtX9OW8XhKL8uDTKMrObrXNTOOEgh5m/vmlWjn3vHhfBeogFXTp5R8DR/KCGMZIK 8B+dyDj/iDI5+CpT+m0OkB2mQVVoN7e3 -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:55 2025 by rpki-client