$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: KLzQ3bbSESbikx6+fRdbdCz4dTKVOaCiqqZWciG+6N0= Subject key identifier: 92:43:15:78:E4:44:F4:F4:81:16:94:BA:EC:4B:46:71:04:64:47:57 Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 0396 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 0390 Signing time: Sun 27 Apr 2025 00:27:09 +0000 Manifest this update: Sun 27 Apr 2025 00:27:08 +0000 Manifest next update: Sun 04 May 2025 00:27:08 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: EE1/cFobmQE7haEpAi91KcJIU7+oLBTQSQwdzhM2/NQ=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: o79Sd0r7i63ThJBm1It6/m6+eHRjzs84P0YMiSeldfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Apr 27 00:27:08 2025 GMT Not After : May 4 00:27:08 2025 GMT Subject: CN=680d79dd-8166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:d5:22:11:4e:59:72:09:61:25:02:71:d2: 37:76:f4:5d:d2:85:7c:9b:ae:9a:55:43:e8:37:7c: 51:9e:c1:5a:45:f0:1c:8a:81:81:47:28:65:87:7c: 3b:ac:18:83:93:71:5f:72:8a:b6:3f:4f:ae:79:43: b6:f7:eb:e6:73:d9:35:ef:d3:c9:8d:08:a5:08:54: 3f:c5:ad:35:eb:c0:64:01:dd:5e:dd:ad:9f:d4:6b: 9d:a3:0d:75:7f:d2:1b:8e:fa:c4:a4:9c:ec:5a:ef: a5:24:4f:c9:68:83:0a:6e:2f:c1:25:b0:94:1a:23: 73:8c:89:95:27:67:62:a9:69:b9:6d:50:90:60:76: 45:c0:fb:0b:76:1e:a7:1f:e9:50:b8:77:5b:46:45: 50:32:61:8c:fd:19:30:3e:18:53:8a:93:a5:d9:a1: 15:48:90:01:fc:4c:16:04:ad:8e:21:a6:74:ca:14: 0e:4e:48:a8:62:6a:53:91:dc:2d:c8:9c:67:bb:63: 0e:c7:42:e7:f8:44:2a:ad:01:6a:d5:78:44:b4:56: c2:81:97:2e:80:4e:e3:6d:cf:31:62:be:8b:06:a0: a1:70:76:b5:a5:bc:59:37:48:9b:5d:2c:50:1e:cd: 95:60:84:07:91:42:0b:3f:3b:db:b8:d9:34:66:85: 7c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:43:15:78:E4:44:F4:F4:81:16:94:BA:EC:4B:46:71:04:64:47:57 X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ea:51:2e:d0:86:f6:a6:f6:74:49:ce:56:04:50:b6:86:a0: ac:1b:dc:63:07:1c:08:89:8f:76:bd:fe:9c:3c:52:d6:fb:9d: 05:25:ef:dd:76:eb:d3:d5:b9:78:2b:2c:50:f2:6f:c7:95:ed: 6f:ce:83:97:a9:43:6e:00:c2:2d:94:cf:4d:d3:19:8b:4c:b0: 80:64:be:d0:a5:3f:e7:1e:8f:c5:33:9b:04:1c:8b:b1:fc:bd: ba:18:bd:29:8b:51:4c:1e:8a:60:3f:96:38:0b:9c:9b:48:7a: b5:9e:a9:4d:1e:c2:f8:eb:3b:03:e3:74:06:37:6a:03:2d:df: 21:eb:48:33:05:ac:1d:ed:7c:10:0f:4d:81:f1:43:be:ee:9f: 44:6f:83:63:e5:6c:59:d8:44:3d:62:08:e9:a5:75:28:a6:f8: 39:bf:c4:1d:9a:f7:15:59:73:53:6b:65:a5:d3:33:3d:dd:ab: 48:bc:39:7f:ad:39:a7:d2:39:f1:c6:18:fc:ae:36:4c:ec:81: a1:8b:83:d8:e4:ca:dd:c0:f6:ce:81:b3:1e:45:8f:bf:80:ee: a2:cb:5f:3f:1b:87:35:bd:c9:13:02:30:d1:9d:01:07:16:64: 29:10:47:9c:1e:88:d0:22:75:cf:e7:93:97:8e:87:34:e2:15: 9c:36:e3:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjUwNDI3MDAyNzA4WhcNMjUwNTA0MDAyNzA4WjAYMRYwFAYD VQQDEw02ODBkNzlkZC04MTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpDVIhFOWXIJYSUCcdI3dvRd0oV8m66aVUPoN3xRnsFaRfAcioGBRyhlh3w7 rBiDk3Ffcoq2P0+ueUO29+vmc9k179PJjQilCFQ/xa0168BkAd1e3a2f1Gudow11 f9IbjvrEpJzsWu+lJE/JaIMKbi/BJbCUGiNzjImVJ2diqWm5bVCQYHZFwPsLdh6n H+lQuHdbRkVQMmGM/RkwPhhTipOl2aEVSJAB/EwWBK2OIaZ0yhQOTkioYmpTkdwt yJxnu2MOx0Ln+EQqrQFq1XhEtFbCgZcugE7jbc8xYr6LBqChcHa1pbxZN0ibXSxQ Hs2VYIQHkUILPzvbuNk0ZoV8YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJDFXjk RPT0gRaUuuxLRnEEZEdXMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX6lEu0Ib2pvZ0Sc5WBFC2hqCsG9xjBxwIiY92vf6cPFLW+50FJe/d duvT1bl4KyxQ8m/Hle1vzoOXqUNuAMItlM9N0xmLTLCAZL7QpT/nHo/FM5sEHIux /L26GL0pi1FMHopgP5Y4C5ybSHq1nqlNHsL46zsD43QGN2oDLd8h60gzBawd7XwQ D02B8UO+7p9Eb4Nj5WxZ2EQ9YgjppXUopvg5v8QdmvcVWXNTa2Wl0zM93atIvDl/ rTmn0jnxxhj8rjZM7IGhi4PY5MrdwPbOgbMeRY+/gO6iy18/G4c1vckTAjDRnQEH FmQpEEecHojQInXP55OXjoc04hWcNuON -----END CERTIFICATE-----Generated at Sun Apr 27 05:05:51 2025 by rpki-client