$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft File: Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json) Hash identifier: yVFV8PA4/ZjatRl0NvkqLsqN06dLAOA9bN7Td+1A+Z0= Subject key identifier: B8:CF:29:A3:E2:1D:EB:B5:EB:BB:45:44:F6:84:A6:8C:A9:CA:C4:D0 Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C Certificate issuer: /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft Manifest number: 8E Signing time: Fri 25 Apr 2025 05:27:56 +0000 Manifest this update: Fri 25 Apr 2025 05:27:56 +0000 Manifest next update: Fri 02 May 2025 05:27:56 +0000 Files and hashes: 1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: vPSaNy9ldCqcQrUJSrVU1chHPViPVKmyjuRkK2rDXaU=) 2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: x7MCciPiMoC21iI94vanFTmv6Gh7il8p9AlIW1ZpCrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Validity Not Before: Apr 25 05:27:56 2025 GMT Not After : May 2 05:27:56 2025 GMT Subject: CN=680b1d5c-823e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:c9:e5:07:7a:9d:fc:21:b3:dc:25:8e:14: 75:63:9d:45:61:10:b3:a6:ac:d1:3a:94:10:fd:a5: 3b:7a:09:3c:c0:b8:ff:4a:d5:c8:d9:ce:35:c5:c5: 8f:ac:b8:d7:c4:5e:26:c5:97:2c:16:cc:ab:2e:bd: 2c:b4:65:ac:e3:9b:42:b6:e1:24:ca:b0:09:77:c2: 8b:8d:89:45:24:02:40:00:83:8f:48:bf:7a:aa:72: fd:94:c9:f5:3e:10:79:3a:8a:dc:1e:f4:e1:f2:28: 90:7d:e0:14:e1:e8:8c:2b:5c:e1:43:3e:ce:8d:e3: c8:95:ff:84:a1:cb:67:ef:12:18:50:51:d0:b2:19: 15:1f:e0:94:56:72:ff:29:2f:b2:6d:1b:39:71:9c: 63:39:d3:08:f4:34:3d:ec:7c:a4:09:48:45:65:17: 23:dc:ca:e3:b0:a9:2f:10:9e:09:85:e9:1f:47:6b: 2e:d8:e2:ed:52:ec:3b:38:9e:14:15:2b:e4:57:e1: 06:18:80:6a:6c:f0:94:27:b4:0e:f9:f0:b9:31:d7: ff:01:31:ce:f1:17:7c:23:5d:34:b8:1d:55:73:99: 27:65:30:61:a7:ab:4e:21:f7:f8:d1:be:44:57:6b: 9c:64:f9:6a:b1:0c:ca:43:5e:44:0e:fb:53:cd:8b: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CF:29:A3:E2:1D:EB:B5:EB:BB:45:44:F6:84:A6:8C:A9:CA:C4:D0 X509v3 Authority Key Identifier: keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:08:0e:1d:50:f4:b8:fd:7c:da:d8:77:2c:ce:07:aa:7b:f5: cb:05:34:76:eb:f8:c8:a4:b8:96:86:1b:aa:11:b8:c1:86:b3: 03:66:d7:9b:8b:27:2c:87:09:da:c2:0c:51:0d:7f:63:08:10: 34:37:1a:25:fa:a8:5d:3e:e7:34:91:28:24:c6:9e:4c:d9:84: 53:ef:b9:59:56:c7:5d:05:49:29:42:88:87:20:0d:fb:6f:5e: 2d:7a:5b:c9:fd:5c:29:42:5c:35:a2:8b:da:d3:b4:0d:7c:d7: 28:36:42:f8:1e:7e:08:6f:54:05:9e:a7:9f:4e:0d:ad:9e:50: 9c:82:ca:1a:b7:82:69:57:37:87:3c:3e:5f:f5:32:26:78:c7: f7:f6:bd:46:2b:9b:95:5e:1e:19:35:8e:ab:5f:f4:20:6c:32: cf:b6:44:27:04:fd:2a:80:40:8c:13:9f:0c:3d:2a:7a:d1:60: a2:7b:f9:c9:a6:4c:40:c8:d0:48:6a:c2:2b:c4:4f:43:f2:2a: ff:ad:87:77:08:82:73:c5:7b:cc:13:61:6e:86:e8:9f:1e:49: 93:07:f9:0a:5b:41:f8:00:e1:e3:db:cb:a1:52:50:be:c9:99: c8:99:19:20:83:45:2e:a2:d7:73:70:b5:08:17:71:5a:a8:b7: 03:3e:71:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDEzMUVGNjJFMTIxQjExREU2MTA0MkMzRTIyNUU3MTZC Qjk0NzlFMkMwHhcNMjUwNDI1MDUyNzU2WhcNMjUwNTAyMDUyNzU2WjAYMRYwFAYD VQQDEw02ODBiMWQ1Yy04MjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooDJ5Qd6nfwhs9wljhR1Y51FYRCzpqzROpQQ/aU7egk8wLj/StXI2c41xcWP rLjXxF4mxZcsFsyrLr0stGWs45tCtuEkyrAJd8KLjYlFJAJAAIOPSL96qnL9lMn1 PhB5OorcHvTh8iiQfeAU4eiMK1zhQz7OjePIlf+Eoctn7xIYUFHQshkVH+CUVnL/ KS+ybRs5cZxjOdMI9DQ97HykCUhFZRcj3MrjsKkvEJ4JhekfR2su2OLtUuw7OJ4U FSvkV+EGGIBqbPCUJ7QO+fC5Mdf/ATHO8Rd8I100uB1Vc5knZTBhp6tOIff40b5E V2ucZPlqsQzKQ15EDvtTzYtUNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjPKaPi Heu167tFRPaEpoypysTQMB8GA1UdIwQYMBaAFBMe9i4SGxHeYQQsPiJecWu5R54s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xQzEzN0MyMDQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVkNWhCQ3ctSWw1eGE3bEhu aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4NzJMaEliRWQ1aEJDdy1JbDV4YTdsSG5pdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xQzEzN0MyMDQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVk NWhCQ3ctSWw1eGE3bEhuaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeCA4dUPS4/Xza2Hcszgeqe/XLBTR26/jIpLiWhhuqEbjBhrMDZteb iycshwnawgxRDX9jCBA0Nxol+qhdPuc0kSgkxp5M2YRT77lZVsddBUkpQoiHIA37 b14telvJ/VwpQlw1oova07QNfNcoNkL4Hn4Ib1QFnqefTg2tnlCcgsoat4JpVzeH PD5f9TImeMf39r1GK5uVXh4ZNY6rX/QgbDLPtkQnBP0qgECME58MPSp60WCie/nJ pkxAyNBIasIrxE9D8ir/rYd3CIJzxXvME2FuhuifHkmTB/kKW0H4AOHj28uhUlC+ yZnImRkgg0UuotdzcLUIF3FaqLcDPnE4 -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:34 2025 by rpki-client