$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json) Hash identifier: n1hLFQKB/Wfjyuo0TEgwpOXfBfWXCLjZjci648KyBe0= Subject key identifier: BA:A8:EC:B0:1F:72:7B:F7:FB:34:7D:41:30:EA:60:3A:D1:A9:42:5F Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft Manifest number: FF Signing time: Thu 07 Aug 2025 05:41:11 +0000 Manifest this update: Thu 07 Aug 2025 05:41:11 +0000 Manifest next update: Thu 14 Aug 2025 05:41:11 +0000 Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: cGPs0eqwj8e6K3KV+JpPgGBg5iIE+Gg9FDEiC1vgCt0=) 2: 0E3462143D2D11EFA4B90A1EC4F9AE02.roa (hash: 8YLAmzfkAq7wWaHxcBzfEAiWvy9p4CNzd9sT8leEWdE=) 3: AC82414A392511EF88F70D39C4F9AE02.roa (hash: wtDTYViLvQ71y8LfCWrpB6kCmz/GyFN75jh6EmmBpDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Validity Not Before: Aug 7 05:41:11 2025 GMT Not After : Aug 14 05:41:11 2025 GMT Subject: CN=68943c77-ce89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:40:87:eb:ca:f9:fa:6f:50:58:87:6a:29: 3a:36:41:c9:6b:f1:4c:8b:a4:79:25:49:d7:aa:28: a2:d3:1d:91:cb:e5:e0:ba:e4:9b:96:b0:78:f1:1b: a9:e0:1b:39:7f:5f:cc:90:d4:01:aa:63:ca:e7:d2: 97:9a:57:93:8b:a2:8b:cc:a4:bd:aa:7f:c2:63:b0: 0d:ab:3c:10:92:de:1c:98:42:c0:c4:ca:5a:5b:ce: f9:f1:39:bf:84:71:53:37:97:84:d1:4c:d0:86:1b: 73:db:db:6f:90:e9:5a:62:c0:06:04:7c:20:d4:52: 20:fb:5e:2e:ea:59:da:ff:7f:76:d6:c7:57:c2:1e: 70:c6:88:fb:c2:e3:a8:d7:86:9d:f5:ce:dd:e5:e0: 14:f8:f5:f1:cd:9f:1d:1b:b8:94:a4:67:0b:b1:1d: 2e:2b:14:99:35:ba:d9:e6:cc:3e:88:e6:52:81:2d: ce:b6:d3:23:96:cf:9c:5f:1e:fc:b3:9e:df:eb:5a: 7e:03:ac:95:0d:d0:bc:e3:43:78:30:53:78:fe:1c: 84:35:e8:2e:72:f8:27:0d:38:ce:8e:ee:bf:a0:07: 1f:69:35:aa:e5:aa:c4:f0:1a:9a:77:a1:86:cb:ba: 10:68:a5:5f:7a:3b:5d:e0:76:48:6b:a1:ab:4f:2f: d0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A8:EC:B0:1F:72:7B:F7:FB:34:7D:41:30:EA:60:3A:D1:A9:42:5F X509v3 Authority Key Identifier: keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:8c:19:ca:7b:af:49:1a:f0:c7:20:fa:af:75:81:37:9d:0b: 25:f7:cc:9d:73:30:f0:f4:af:e1:26:09:f6:96:c0:06:5d:64: 0a:41:aa:2e:7a:de:f8:cf:e7:f7:33:5a:99:d2:de:40:c0:66: 3d:d9:e8:11:b3:c8:91:97:54:b0:69:a8:31:58:4b:33:03:1e: 49:ad:17:f8:55:8c:66:48:04:24:6b:05:43:99:37:16:f0:7e: 10:00:c7:9b:d7:8f:b6:22:86:3a:3b:32:9c:76:38:6e:2e:f6: 35:24:a6:a7:ac:e8:7c:c2:fc:f2:9a:92:69:c7:ce:b8:2f:39: 69:97:94:c9:4b:25:6a:e5:b4:0e:09:33:dd:74:f3:04:cf:22: 45:42:28:dd:41:ee:ee:96:3f:5b:81:d7:e3:3c:81:6c:73:28: 58:53:3d:96:28:02:dd:91:d7:9a:90:20:b2:ed:47:a8:bd:ab: a7:96:d7:1e:36:6f:83:f6:cb:13:b6:47:91:72:96:85:ec:86: 82:c7:1c:79:ba:e6:a4:4a:de:df:36:52:b6:bc:04:dd:25:09: 44:82:74:61:1f:56:e6:42:2c:8c:ff:a0:45:55:f9:af:90:98: 3f:c2:ca:14:7c:46:60:2f:0f:e8:26:31:ab:53:18:bd:e7:bf: a0:d9:4e:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxOTMxMTAvBgNVBAUTKDdCMUFFMjdEM0NGNTE0OTlDNTA1NkU3REE4NzM2NjVF NEU0MTUxNzkwHhcNMjUwODA3MDU0MTExWhcNMjUwODE0MDU0MTExWjAYMRYwFAYD VQQDEw02ODk0M2M3Ny1jZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrdAh+vK+fpvUFiHaik6NkHJa/FMi6R5JUnXqiii0x2Ry+XguuSblrB48Rup 4Bs5f1/MkNQBqmPK59KXmleTi6KLzKS9qn/CY7ANqzwQkt4cmELAxMpaW8758Tm/ hHFTN5eE0UzQhhtz29tvkOlaYsAGBHwg1FIg+14u6lna/3921sdXwh5wxoj7wuOo 14ad9c7d5eAU+PXxzZ8dG7iUpGcLsR0uKxSZNbrZ5sw+iOZSgS3OttMjls+cXx78 s57f61p+A6yVDdC840N4MFN4/hyENegucvgnDTjOju6/oAcfaTWq5arE8Bqad6GG y7oQaKVfejtd4HZIa6GrTy/QFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqo7LAf cnv3+zR9QTDqYDrRqUJfMB8GA1UdIwQYMBaAFHsa4n089RSZxQVufahzZl5OQVF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjE5My85M0Q0RTQ5MEY2 MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZKbkZCVzU5cUhObVhrNUJV WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4cmlmVHoxRkpuRkJXNTlxSE5tWGs1QlVYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjE5My85M0Q0RTQ5MEY2MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZK bkZCVzU5cUhObVhrNUJVWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQjBnKe69JGvDHIPqvdYE3nQsl98ydczDw9K/hJgn2lsAGXWQKQaou et74z+f3M1qZ0t5AwGY92egRs8iRl1SwaagxWEszAx5JrRf4VYxmSAQkawVDmTcW 8H4QAMeb14+2IoY6OzKcdjhuLvY1JKanrOh8wvzympJpx864Lzlpl5TJSyVq5bQO CTPddPMEzyJFQijdQe7ulj9bgdfjPIFscyhYUz2WKALdkdeakCCy7Ueovaunltce Nm+D9ssTtkeRcpaF7IaCxxx5uuakSt7fNlK2vATdJQlEgnRhH1bmQiyM/6BFVfmv kJg/wsoUfEZgLw/oJjGrUxi957+g2U4h -----END CERTIFICATE-----Generated at Sat Aug 9 02:45:40 2025 by rpki-client