$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft File: ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json) Hash identifier: rypQLHGJ95VBbz/j3q0IbKs6CuEZki1e6dxCDFklR2w= Subject key identifier: C8:4C:D7:7D:2A:9C:6E:D5:85:91:E0:38:8F:C4:89:D0:67:14:E8:8B Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 Certificate issuer: /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft Manifest number: DF Signing time: Fri 25 Apr 2025 04:33:10 +0000 Manifest this update: Fri 25 Apr 2025 04:33:09 +0000 Manifest next update: Fri 02 May 2025 04:33:09 +0000 Files and hashes: 1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: uCVdPmJ2C0AAQ5ryLfLVV88l63NlyrpyZqBZs/D8DWI=) 2: ABCCEBB6CDC711EE8A262C4EC4F9AE02.roa (hash: zIOBj5YBTE6pEEkPxatT0lPoJEUY6kzYZZceZ5XmYbM=) 3: 805DA0BCCCF811EEA9723F27C4F9AE02.roa (hash: PVKfYcrhEpkGhk/bRv8ieDCU8VEgQ0tyddxr1XeEq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Validity Not Before: Apr 25 04:33:09 2025 GMT Not After : May 2 04:33:09 2025 GMT Subject: CN=680b1086-f421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:cc:25:f1:98:73:4f:2d:e9:14:52:b0:d9: 86:83:43:38:12:5a:e0:af:2b:c8:2e:3b:27:b3:ba: d1:ca:83:1a:0d:e7:1c:24:93:a3:de:88:6c:82:c0: d6:ca:11:9a:f9:61:2e:2d:0a:97:d1:1d:19:d2:53: e8:11:fd:fb:30:48:4d:1b:03:e3:9d:f6:49:b3:db: 81:08:fa:73:dc:69:89:c0:7a:73:28:8f:97:d2:5d: 52:0d:d2:44:4b:df:b1:69:7d:b2:28:24:a4:83:62: 3f:3e:6c:fe:9c:91:f7:ad:ba:62:da:27:78:79:c7: 5f:5f:4e:db:7b:08:18:0a:e7:df:40:62:46:c5:54: 9a:58:ab:3e:73:4a:63:ec:ae:9b:15:3f:a5:ad:0c: 13:fd:8e:ea:e1:89:aa:b3:1b:1a:5f:cb:c0:c8:32: 15:15:7e:fb:ed:85:80:5a:a6:da:10:2d:ca:7d:fe: 71:b6:d9:ad:67:59:bb:b8:3e:75:f4:3f:87:98:1f: a6:ae:8e:64:a8:d3:ea:32:bf:8d:87:a8:40:5a:cb: 91:5b:fb:ac:a9:af:80:f2:61:74:67:d3:91:cd:a2: c8:0c:67:50:1b:58:a7:c5:9f:95:77:1c:b5:58:8e: 06:49:4b:28:09:8d:25:ed:3f:e9:79:0d:81:0a:5c: d1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4C:D7:7D:2A:9C:6E:D5:85:91:E0:38:8F:C4:89:D0:67:14:E8:8B X509v3 Authority Key Identifier: keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:89:e0:53:a5:7d:12:b5:5e:3a:00:5c:38:a6:dd:89:3d:b5: c4:bd:d2:f8:73:74:39:1c:ce:75:4b:5c:93:f5:02:cd:c0:bc: 3c:fb:b0:1a:3a:1b:f6:06:cd:b8:c9:6b:1f:3c:0e:e1:1e:02: 13:98:ca:05:df:56:68:7f:ee:f8:44:0c:03:b3:d0:bc:95:41: 9e:cd:29:04:7b:15:93:c6:79:50:67:c9:d6:96:f8:1e:ee:6e: ac:c3:58:38:a2:1d:2a:0a:29:44:d4:47:29:bb:43:45:85:49: dd:07:11:85:5d:55:38:c9:3c:f7:08:de:4c:fb:9f:a8:f4:af: 55:74:9a:ff:0d:4c:66:75:00:21:61:65:e4:68:37:f3:e0:e2: 4a:e1:9a:ed:72:54:a6:56:ae:a8:ac:59:c2:db:66:d3:f4:77: fb:b7:4c:c9:8f:df:14:71:2b:92:f9:eb:31:d8:0f:cf:e2:54: e9:78:dd:d5:ad:d6:05:09:18:8a:e0:51:08:f1:29:9c:39:89: 10:85:b6:6b:f6:c7:c1:76:66:2f:db:68:6a:59:80:0c:19:c8: 48:37:57:f7:cb:f5:aa:0f:aa:1a:6b:6d:c8:80:b9:46:64:b4: e1:77:8c:8c:ae:d6:33:98:f0:7a:e1:43:b8:39:c1:df:f8:a7: 88:d2:3e:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKDdCMUZCMUJBM0IwRUM4Q0E1RTVDMTNBRUJDRkM2RUJB OEQyMEVBQTcwHhcNMjUwNDI1MDQzMzA5WhcNMjUwNTAyMDQzMzA5WjAYMRYwFAYD VQQDEw02ODBiMTA4Ni1mNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaHMJfGYc08t6RRSsNmGg0M4ElrgryvILjsns7rRyoMaDeccJJOj3ohsgsDW yhGa+WEuLQqX0R0Z0lPoEf37MEhNGwPjnfZJs9uBCPpz3GmJwHpzKI+X0l1SDdJE S9+xaX2yKCSkg2I/Pmz+nJH3rbpi2id4ecdfX07bewgYCuffQGJGxVSaWKs+c0pj 7K6bFT+lrQwT/Y7q4YmqsxsaX8vAyDIVFX777YWAWqbaEC3Kff5xttmtZ1m7uD51 9D+HmB+mro5kqNPqMr+Nh6hAWsuRW/usqa+A8mF0Z9ORzaLIDGdQG1inxZ+Vdxy1 WI4GSUsoCY0l7T/peQ2BClzRMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhM130q nG7VhZHgOI/EidBnFOiLMB8GA1UdIwQYMBaAFHsfsbo7DsjKXlwTrrz8brqNIOqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS82RjJGRDMzOEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lNcGVYQk91dlB4dXVvMGc2 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V4LXh1anNPeU1wZVhCT3V2UHh1dW8wZzZxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS82RjJGRDMzOENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lN cGVYQk91dlB4dXVvMGc2cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjieBTpX0StV46AFw4pt2JPbXEvdL4c3Q5HM51S1yT9QLNwLw8+7Aa Ohv2Bs24yWsfPA7hHgITmMoF31Zof+74RAwDs9C8lUGezSkEexWTxnlQZ8nWlvge 7m6sw1g4oh0qCilE1Ecpu0NFhUndBxGFXVU4yTz3CN5M+5+o9K9VdJr/DUxmdQAh YWXkaDfz4OJK4ZrtclSmVq6orFnC22bT9Hf7t0zJj98UcSuS+esx2A/P4lTpeN3V rdYFCRiK4FEI8SmcOYkQhbZr9sfBdmYv22hqWYAMGchIN1f3y/WqD6oaa23IgLlG ZLThd4yMrtYzmPB64UO4OcHf+KeI0j62 -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:08 2025 by rpki-client