$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json) Hash identifier: bZKxH6hPWLk35O06TNOMEH0rzbxmnhSX1cXhLN6gyDE= Subject key identifier: 07:41:B4:58:DE:CE:B7:5A:CA:94:41:75:50:33:FE:37:F5:59:DD:D9 Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft Manifest number: CB Signing time: Fri 25 Apr 2025 04:50:33 +0000 Manifest this update: Fri 25 Apr 2025 04:50:33 +0000 Manifest next update: Fri 02 May 2025 04:50:33 +0000 Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: SxeIvhtgGvTvrEzW/kgGX2Q2QEdp5aED+EfGiGRmr0w=) 2: 0E3462143D2D11EFA4B90A1EC4F9AE02.roa (hash: 8YLAmzfkAq7wWaHxcBzfEAiWvy9p4CNzd9sT8leEWdE=) 3: AC82414A392511EF88F70D39C4F9AE02.roa (hash: wtDTYViLvQ71y8LfCWrpB6kCmz/GyFN75jh6EmmBpDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Validity Not Before: Apr 25 04:50:33 2025 GMT Not After : May 2 04:50:33 2025 GMT Subject: CN=680b1499-a347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:60:05:59:f4:e7:b6:29:9c:77:3c:dd:3b:ca: 8f:87:b1:ba:80:42:22:28:a1:ef:13:5a:26:97:ca: 39:f4:fe:7d:31:da:9f:db:fa:ca:00:35:a9:8d:fd: bf:41:07:44:90:9b:5f:03:d9:14:b6:2d:c1:c8:1e: 01:cd:72:b1:a1:00:4d:36:7d:c0:87:ff:dc:d4:5f: 83:07:6e:a7:c3:28:77:b4:55:2f:53:f3:e6:bc:4d: 60:c9:d3:e4:fc:4b:44:1d:af:b0:9c:c5:57:00:9d: b4:d5:10:c9:98:5a:fc:f6:18:91:30:8f:a9:49:f8: 46:c4:5d:54:7a:e9:23:4c:36:f8:0d:bb:71:17:ef: 09:81:59:ec:11:a7:e4:41:27:70:72:34:04:18:c9: a2:8c:57:ef:04:ea:be:3a:6b:13:22:cc:40:0f:bf: c0:55:fd:fb:5d:ce:f2:a5:c1:d0:48:2d:4a:48:4d: 1f:8f:fc:4d:99:e9:f9:c4:3e:f5:80:38:90:c5:55: f3:c6:5e:29:58:b3:1b:e1:3b:b7:bb:ed:28:fd:37: 05:2e:73:8d:a4:57:af:61:c9:3b:3c:26:7c:01:96: fb:75:78:7c:3a:7c:0f:5d:00:ce:03:69:87:9f:53: 52:66:62:c1:b9:a5:78:cc:f7:f6:cb:8d:d6:3d:fa: 31:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:41:B4:58:DE:CE:B7:5A:CA:94:41:75:50:33:FE:37:F5:59:DD:D9 X509v3 Authority Key Identifier: keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d4:b6:0d:61:47:f1:7c:06:3c:3a:72:2c:05:a9:57:d7:9f: 07:c1:85:34:45:c5:ce:29:1e:d0:a0:65:c0:35:bd:f4:b5:52: cb:64:bc:21:fa:9e:fe:2f:d8:99:91:4c:68:5c:db:f2:8b:26: 56:04:c9:b0:15:ec:f1:f5:09:cc:72:14:a2:3c:38:b5:14:5d: 04:1f:70:86:bc:b3:0e:bb:4d:22:b5:56:ac:5d:8d:6d:31:bb: f9:f7:7d:cc:74:b3:2d:10:2a:18:7d:53:00:36:60:62:6d:86: 2e:a7:bf:b0:3b:41:0c:2d:38:5e:70:d0:13:35:da:7f:c5:60: 9e:52:63:d0:2b:21:92:fc:57:8f:ac:04:ec:c2:28:e6:e7:25: 55:0a:35:3d:c0:ee:84:9d:98:c5:43:5b:6d:b7:d8:42:63:27: 69:79:37:26:8d:91:3d:a4:bb:8e:de:ed:43:56:2f:63:89:e6: 55:fd:13:3b:c6:59:8c:a8:73:f1:48:fc:09:f4:09:b0:28:c5: 1e:b1:2c:8f:88:81:29:aa:9e:19:3c:4a:17:88:d8:e4:df:23: 9f:71:0d:29:42:ad:17:e4:67:1f:62:84:82:d0:be:96:0a:66: 5e:39:ae:6c:fb:a1:39:a0:36:8a:88:d2:1b:45:0c:2d:6f:68: 4f:69:95:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxOTMxMTAvBgNVBAUTKDdCMUFFMjdEM0NGNTE0OTlDNTA1NkU3REE4NzM2NjVF NEU0MTUxNzkwHhcNMjUwNDI1MDQ1MDMzWhcNMjUwNTAyMDQ1MDMzWjAYMRYwFAYD VQQDEw02ODBiMTQ5OS1hMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGAFWfTntimcdzzdO8qPh7G6gEIiKKHvE1oml8o59P59Mdqf2/rKADWpjf2/ QQdEkJtfA9kUti3ByB4BzXKxoQBNNn3Ah//c1F+DB26nwyh3tFUvU/PmvE1gydPk /EtEHa+wnMVXAJ201RDJmFr89hiRMI+pSfhGxF1UeukjTDb4DbtxF+8JgVnsEafk QSdwcjQEGMmijFfvBOq+OmsTIsxAD7/AVf37Xc7ypcHQSC1KSE0fj/xNmen5xD71 gDiQxVXzxl4pWLMb4Tu3u+0o/TcFLnONpFevYck7PCZ8AZb7dXh8OnwPXQDOA2mH n1NSZmLBuaV4zPf2y43WPfoxdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdBtFje zrdaypRBdVAz/jf1Wd3ZMB8GA1UdIwQYMBaAFHsa4n089RSZxQVufahzZl5OQVF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjE5My85M0Q0RTQ5MEY2 MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZKbkZCVzU5cUhObVhrNUJV WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4cmlmVHoxRkpuRkJXNTlxSE5tWGs1QlVYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjE5My85M0Q0RTQ5MEY2MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZK bkZCVzU5cUhObVhrNUJVWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN1LYNYUfxfAY8OnIsBalX158HwYU0RcXOKR7QoGXANb30tVLLZLwh +p7+L9iZkUxoXNvyiyZWBMmwFezx9QnMchSiPDi1FF0EH3CGvLMOu00itVasXY1t Mbv5933MdLMtECoYfVMANmBibYYup7+wO0EMLThecNATNdp/xWCeUmPQKyGS/FeP rATswijm5yVVCjU9wO6EnZjFQ1ttt9hCYydpeTcmjZE9pLuO3u1DVi9jieZV/RM7 xlmMqHPxSPwJ9AmwKMUesSyPiIEpqp4ZPEoXiNjk3yOfcQ0pQq0X5GcfYoSC0L6W CmZeOa5s+6E5oDaKiNIbRQwtb2hPaZWP -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:32 2025 by rpki-client