$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: Rav8YEMjxWTo4hnkB3BQG2EL3uvh/ERosFTumUE/mA4= Subject key identifier: 4C:16:0B:9A:01:76:EB:7E:2D:32:ED:82:6F:8D:65:F0:22:51:30:3C Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: A9 Signing time: Sun 03 Aug 2025 06:30:54 +0000 Manifest this update: Sun 03 Aug 2025 06:30:54 +0000 Manifest next update: Sun 10 Aug 2025 06:30:54 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: vDlrr8RhVowbUEwWZTQp37dVb5wSv+hR0Bcmjt3+0cA=) 2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: oPt/hUSuzgl3vf6IekNSVwLM4HNHGT76iBnF/i7Fi6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Aug 3 06:30:54 2025 GMT Not After : Aug 10 06:30:54 2025 GMT Subject: CN=688f021e-153f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:c0:ed:c7:45:b0:64:ff:10:69:86:ac:87: c5:ce:74:98:b3:0d:8c:0e:7d:04:a2:e3:02:e3:66: d8:aa:3f:7c:40:8b:f3:50:80:7f:09:fb:4b:37:7e: 2d:1a:c4:4e:87:c7:da:2d:ed:78:11:05:fb:b5:10: fe:7a:d8:bd:06:b2:e0:99:d0:76:0b:aa:3c:db:d8: 0a:7d:bf:cf:8e:97:ce:b8:e1:ee:89:17:10:cb:21: 44:91:19:b1:4b:a0:d6:33:21:b9:18:de:44:7b:b9: ca:b2:54:df:8a:35:2e:67:df:91:ed:36:10:3f:06: 91:ab:f2:1d:b0:25:08:5f:9c:63:39:91:de:36:55: 99:f0:bc:47:b6:2c:6a:81:74:46:ae:2f:ce:7e:ef: 20:47:10:45:15:4c:1a:98:6b:ab:33:82:6c:f3:9a: 38:9f:2c:2e:fc:c2:c8:23:37:b1:1b:82:23:2f:7a: 5f:93:d4:1b:e6:c3:aa:08:0e:e9:23:d9:e9:05:c0: 20:e1:09:81:40:05:63:2e:85:0a:8b:d6:da:1c:44: 7a:82:94:77:6d:84:f4:75:4a:e5:08:1f:53:18:5b: b0:a9:13:8d:1f:d6:19:a6:dc:b9:9a:d5:34:7d:d7: 10:cf:04:7b:9b:2b:53:23:a5:4a:6e:d7:94:11:ad: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:16:0B:9A:01:76:EB:7E:2D:32:ED:82:6F:8D:65:F0:22:51:30:3C X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:78:95:8a:2f:5e:a9:de:c6:53:55:18:a4:3a:c4:85:b2:55: 1b:b8:d4:8f:5c:ff:69:6d:cb:9f:a7:05:de:f2:15:0b:c4:29: 6c:e1:bb:43:bd:77:b0:ef:ba:40:6d:0c:5b:ea:ac:e8:eb:04: 5d:ae:cc:9e:33:9d:82:fd:75:38:c5:4b:cf:ea:eb:d9:64:2f: ea:3e:a9:5f:15:d5:cb:67:22:6a:b7:39:46:06:b6:6f:55:6b: bb:10:5c:4a:e7:97:8b:5b:d3:fa:60:ea:10:33:0d:fb:a9:dd: cb:a1:b0:9d:8d:05:97:49:78:b3:c5:5d:65:2c:df:59:eb:96: d6:41:f4:07:77:2b:32:5b:63:3e:9d:91:7b:bb:7e:f2:59:2e: 1b:33:46:76:28:93:1b:3d:2b:25:5b:0d:4c:32:4d:a8:ac:79: 5f:e2:da:4c:d4:73:3a:40:bd:bf:de:b9:bb:6b:a5:92:63:70: f4:6a:82:9e:95:63:dd:7e:e8:ad:2c:70:55:85:31:45:fe:b9: cf:f0:02:5a:76:48:8f:e4:b5:1a:35:7d:1c:99:c9:38:43:f5: a9:c8:8c:66:36:66:c7:df:e1:ba:96:b4:e6:5a:38:2e:ee:51: 4d:21:73:ef:c4:eb:1c:ba:ff:e9:b2:b3:0b:73:2a:ad:b5:af: dd:e7:f1:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjUwODAzMDYzMDU0WhcNMjUwODEwMDYzMDU0WjAYMRYwFAYD VQQDEw02ODhmMDIxZS0xNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR3A7cdFsGT/EGmGrIfFznSYsw2MDn0EouMC42bYqj98QIvzUIB/CftLN34t GsROh8faLe14EQX7tRD+eti9BrLgmdB2C6o829gKfb/PjpfOuOHuiRcQyyFEkRmx S6DWMyG5GN5Ee7nKslTfijUuZ9+R7TYQPwaRq/IdsCUIX5xjOZHeNlWZ8LxHtixq gXRGri/Ofu8gRxBFFUwamGurM4Js85o4nywu/MLIIzexG4IjL3pfk9Qb5sOqCA7p I9npBcAg4QmBQAVjLoUKi9baHER6gpR3bYT0dUrlCB9TGFuwqRONH9YZpty5mtU0 fdcQzwR7mytTI6VKbteUEa1Z7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwWC5oB dut+LTLtgm+NZfAiUTA8MB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9GNTYwMzdBNjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhB TUNVdzNSTVhSQ01XTUp3WGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAeJWKL16p3sZTVRikOsSFslUbuNSPXP9pbcufpwXe8hULxCls4btD vXew77pAbQxb6qzo6wRdrsyeM52C/XU4xUvP6uvZZC/qPqlfFdXLZyJqtzlGBrZv VWu7EFxK55eLW9P6YOoQMw37qd3LobCdjQWXSXizxV1lLN9Z65bWQfQHdysyW2M+ nZF7u37yWS4bM0Z2KJMbPSslWw1MMk2orHlf4tpM1HM6QL2/3rm7a6WSY3D0aoKe lWPdfuitLHBVhTFF/rnP8AJadkiP5LUaNX0cmck4Q/WpyIxmNmbH3+G6lrTmWjgu 7lFNIXPvxOscuv/psrMLcyqtta/d5/F/ -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:13 2025 by rpki-client