$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft File: ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json) Hash identifier: yLls/SxmV8nJQ39H5YrGl/gxdyy453A2nwCzxuCuhPI= Subject key identifier: EC:F0:29:BE:54:E2:11:90:CF:ED:89:04:7A:D3:CB:69:62:33:D5:80 Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 Certificate issuer: /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft Manifest number: 011B Signing time: Sat 09 Aug 2025 05:16:47 +0000 Manifest this update: Sat 09 Aug 2025 05:16:46 +0000 Manifest next update: Sat 16 Aug 2025 05:16:46 +0000 Files and hashes: 1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: t7g2cnVQIDfplTX7PQ/tLAnXS8SW9Gq0AETeYW5u9y0=) 2: AE9090F83B0F11F08D496424C4F9AE02.roa (hash: umWRD+8bjsaQAgjCl5Z98Y524f2ID68DcmZn0Gw48GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Validity Not Before: Aug 9 05:16:46 2025 GMT Not After : Aug 16 05:16:46 2025 GMT Subject: CN=6896d9be-1c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:ae:89:57:df:34:9b:e2:48:0d:98:d8:1a: fa:a1:37:44:60:31:b9:70:fc:60:35:c3:83:08:02: 8b:6e:e6:c9:aa:d8:8f:a6:ac:c0:34:03:1d:a8:f9: b7:8f:e9:95:67:6c:ed:9c:97:5c:92:3a:17:25:0d: 6f:3b:28:aa:91:6b:83:3f:76:3e:c9:99:20:58:51: a9:7d:e4:ac:63:d5:01:f4:e9:b3:b4:77:71:00:13: c2:2f:8a:30:42:a2:22:a0:d7:fd:c3:58:1a:f0:7e: 38:78:5f:3d:a7:8d:b6:fc:ad:ae:9e:43:4d:dd:7e: 0a:36:f3:3d:03:24:17:8f:0e:1d:9d:9f:ed:12:83: 01:af:f2:f1:a7:d0:e3:95:d7:ba:72:ff:e3:95:9c: 32:3e:e5:65:5f:c7:6d:e2:14:f4:fa:a6:03:68:8b: f2:2a:42:25:29:b6:f9:6e:e4:f6:07:0e:c8:b5:eb: e8:c2:86:b2:5c:08:78:66:51:8e:83:54:30:7a:eb: 51:43:dd:0d:5b:da:64:53:22:63:97:f0:93:da:77: cc:e6:0b:aa:bc:39:a6:8c:8a:65:89:3d:12:42:b9: a6:02:e6:b5:63:76:8e:ad:f5:4f:8f:6c:86:97:da: 35:ae:48:58:78:1d:1d:8f:cb:8f:71:0f:00:91:ca: 01:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F0:29:BE:54:E2:11:90:CF:ED:89:04:7A:D3:CB:69:62:33:D5:80 X509v3 Authority Key Identifier: keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:1e:af:df:21:e3:46:46:93:ea:01:03:9e:be:11:e4:8e:5f: 0d:bb:ac:76:92:13:31:0f:14:a4:f4:31:71:07:ed:bf:8b:f5: a0:85:23:fd:6d:25:a8:37:fb:7e:da:e1:64:b9:7f:37:c9:8a: fe:e5:b0:db:38:e0:26:5b:ad:10:d2:a0:8a:0c:2d:c7:3a:37: 7c:5d:4d:e9:14:c2:75:51:b0:6d:28:e6:82:2c:39:08:06:1f: c5:83:fe:0c:2a:cd:56:87:8d:3a:ef:f5:c9:1d:e7:64:fc:7a: f8:49:c0:45:50:13:27:ab:c0:c3:f6:3c:5b:4e:eb:56:91:79: 06:fd:61:f4:5b:6b:bd:e3:9d:ab:f4:75:60:5f:6f:ec:64:8f: 89:a4:67:ef:a9:f7:fe:f1:00:b5:7f:05:33:29:6b:71:0c:3a: 30:6d:dd:31:ec:88:1a:1c:b1:bd:5c:0e:a4:c9:5d:65:13:c0: 9b:d3:38:2b:28:75:52:f6:84:db:9d:61:b1:fa:b4:7b:4e:c6: 04:c3:41:e0:ee:2b:c9:9b:14:35:98:eb:e2:1d:9c:83:2a:82: 8f:92:89:04:3b:cb:f4:be:c6:8f:50:1a:84:75:05:ad:7f:bd: 67:14:ef:5c:c9:1a:66:00:5b:74:6a:19:e2:d8:ce:41:f5:f6: e2:98:74:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKDdCMUZCMUJBM0IwRUM4Q0E1RTVDMTNBRUJDRkM2RUJB OEQyMEVBQTcwHhcNMjUwODA5MDUxNjQ2WhcNMjUwODE2MDUxNjQ2WjAYMRYwFAYD VQQDEw02ODk2ZDliZS0xYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtriuiVffNJviSA2Y2Br6oTdEYDG5cPxgNcODCAKLbubJqtiPpqzANAMdqPm3 j+mVZ2ztnJdckjoXJQ1vOyiqkWuDP3Y+yZkgWFGpfeSsY9UB9OmztHdxABPCL4ow QqIioNf9w1ga8H44eF89p422/K2unkNN3X4KNvM9AyQXjw4dnZ/tEoMBr/Lxp9Dj lde6cv/jlZwyPuVlX8dt4hT0+qYDaIvyKkIlKbb5buT2Bw7ItevowoayXAh4ZlGO g1QweutRQ90NW9pkUyJjl/CT2nfM5guqvDmmjIpliT0SQrmmAua1Y3aOrfVPj2yG l9o1rkhYeB0dj8uPcQ8AkcoBsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzwKb5U 4hGQz+2JBHrTy2liM9WAMB8GA1UdIwQYMBaAFHsfsbo7DsjKXlwTrrz8brqNIOqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS82RjJGRDMzOEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lNcGVYQk91dlB4dXVvMGc2 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2V4LXh1anNPeU1wZVhCT3V2UHh1dW8wZzZxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS82RjJGRDMzOENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi9leC14dWpzT3lN cGVYQk91dlB4dXVvMGc2cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvHq/fIeNGRpPqAQOevhHkjl8Nu6x2khMxDxSk9DFxB+2/i/WghSP9 bSWoN/t+2uFkuX83yYr+5bDbOOAmW60Q0qCKDC3HOjd8XU3pFMJ1UbBtKOaCLDkI Bh/Fg/4MKs1Wh4067/XJHedk/Hr4ScBFUBMnq8DD9jxbTutWkXkG/WH0W2u9452r 9HVgX2/sZI+JpGfvqff+8QC1fwUzKWtxDDowbd0x7IgaHLG9XA6kyV1lE8Cb0zgr KHVS9oTbnWGx+rR7TsYEw0Hg7ivJmxQ1mOviHZyDKoKPkokEO8v0vsaPUBqEdQWt f71nFO9cyRpmAFt0ahni2M5B9fbimHQV -----END CERTIFICATE-----Generated at Sun Aug 10 13:55:34 2025 by rpki-client