$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: 80vNJTC2LuAo5wklLpb03Ut7aS9XzpK4E5yREbyar/c= Subject key identifier: 06:91:3A:F2:C3:9E:3A:1C:12:1C:24:9C:E0:46:B4:25:A9:84:59:FE Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 03A8 Signing time: Sun 15 Jun 2025 00:27:04 +0000 Manifest this update: Sun 15 Jun 2025 00:27:04 +0000 Manifest next update: Sun 22 Jun 2025 00:27:04 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: 3pJfKYwtSAeavs6O3Fun7w3MDTRGUWt/RKd+J4c7w0g=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: o79Sd0r7i63ThJBm1It6/m6+eHRjzs84P0YMiSeldfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Jun 15 00:27:04 2025 GMT Not After : Jun 22 00:27:04 2025 GMT Subject: CN=684e1358-b942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:9a:89:83:d9:2b:d1:a3:28:d2:24:55:8c: c5:4a:a3:83:c1:a3:5a:4f:52:10:b4:01:25:16:c0: 75:9f:bb:fb:3c:4e:83:f1:63:28:23:a0:85:08:84: 8a:23:f5:52:ba:6c:90:c4:86:bc:88:6d:8a:12:e2: 4f:fd:30:67:74:b5:10:a3:28:c6:17:9c:1c:49:7d: b2:1f:a2:ea:76:ae:f6:9f:da:fa:a7:4a:ee:7b:f5: 43:cf:ae:36:b2:dd:c8:03:0e:00:a2:12:3a:94:66: ff:37:8f:c9:42:59:c3:e7:24:2c:29:c7:2b:e7:8b: 29:96:00:68:e3:e4:52:0c:c8:36:06:ef:7a:8d:28: 15:4c:40:19:49:85:4f:b1:4d:c9:1c:ee:11:b8:44: 6e:6d:b7:9e:2c:7e:4c:bb:93:1a:6a:79:65:86:04: dd:7a:cc:73:da:ad:bf:82:20:7c:73:9c:56:75:15: 5e:6f:34:32:4f:2a:55:a5:40:d5:ba:0e:ca:c0:f0: 64:14:8d:06:a0:ec:fd:1b:41:6a:af:cd:ef:60:68: 59:20:5a:ba:7c:26:b2:0d:aa:83:74:0a:c7:f8:24: b3:61:e5:4f:5b:e8:1a:3e:81:9f:fa:4d:4c:b2:56: 63:18:5f:09:2d:74:e9:e9:d0:d1:b6:9a:db:38:d2: a4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:91:3A:F2:C3:9E:3A:1C:12:1C:24:9C:E0:46:B4:25:A9:84:59:FE X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:2f:ac:3d:4b:8b:54:6a:8e:b1:a0:4c:e1:21:a7:7a:ab:55: b1:fd:b9:c7:2f:6f:3c:3f:49:ef:70:fb:af:bb:98:d2:8b:58: b8:7b:67:39:bd:67:3a:d5:84:ee:35:a5:a1:ee:2a:3c:e9:ad: 6f:f6:99:fe:1c:4a:b4:f9:45:3b:e9:25:29:e1:d0:b1:1f:67: 20:48:62:68:ef:d1:13:bf:bd:47:c1:d1:23:67:71:64:7e:fd: 7d:87:b9:9c:a1:5d:fe:e7:7c:97:7f:51:34:51:0c:51:d7:43: f9:48:37:49:ca:68:00:d5:93:f7:64:e6:e2:89:60:d9:f6:66: f8:c0:a6:f3:d2:5e:21:af:7f:8c:ba:dc:61:73:d1:9d:fe:77: 7f:60:8c:13:26:a6:46:a8:ab:b8:0c:39:c2:fc:40:6d:17:d0: 92:42:a5:ed:1c:71:b0:9e:43:f1:12:dd:7a:e1:81:b4:b0:7f: c7:74:81:c5:6a:e9:cb:e5:b4:d4:e0:e9:b3:7e:22:52:71:46: b4:3e:3a:42:f0:34:08:03:e0:f0:c7:ea:ef:8f:3a:0c:5c:4b: 83:21:de:d0:44:65:3c:f3:a9:ce:22:0b:3e:5e:02:bb:1a:f7: d8:78:1a:21:71:f7:bc:43:7e:63:76:ce:d8:d5:ae:e8:79:97: b1:2c:2c:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjUwNjE1MDAyNzA0WhcNMjUwNjIyMDAyNzA0WjAYMRYwFAYD VQQDEw02ODRlMTM1OC1iOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnc2aiYPZK9GjKNIkVYzFSqODwaNaT1IQtAElFsB1n7v7PE6D8WMoI6CFCISK I/VSumyQxIa8iG2KEuJP/TBndLUQoyjGF5wcSX2yH6Lqdq72n9r6p0rue/VDz642 st3IAw4AohI6lGb/N4/JQlnD5yQsKccr54splgBo4+RSDMg2Bu96jSgVTEAZSYVP sU3JHO4RuERubbeeLH5Mu5MaanllhgTdesxz2q2/giB8c5xWdRVebzQyTypVpUDV ug7KwPBkFI0GoOz9G0Fqr83vYGhZIFq6fCayDaqDdArH+CSzYeVPW+gaPoGf+k1M slZjGF8JLXTp6dDRtprbONKkDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaROvLD njocEhwknOBGtCWphFn+MB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsL6w9S4tUao6xoEzhIad6q1Wx/bnHL288P0nvcPuvu5jSi1i4e2c5 vWc61YTuNaWh7io86a1v9pn+HEq0+UU76SUp4dCxH2cgSGJo79ETv71HwdEjZ3Fk fv19h7mcoV3+53yXf1E0UQxR10P5SDdJymgA1ZP3ZObiiWDZ9mb4wKbz0l4hr3+M utxhc9Gd/nd/YIwTJqZGqKu4DDnC/EBtF9CSQqXtHHGwnkPxEt164YG0sH/HdIHF aunL5bTU4OmzfiJScUa0PjpC8DQIA+Dwx+rvjzoMXEuDId7QRGU886nOIgs+XgK7 GvfYeBohcfe8Q35jds7Y1a7oeZexLCwb -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:00 2025 by rpki-client