$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: C1/z4Mrw44qSzcEb8yhBqDl6F6oI/WndrVpzqW+PjYU= Subject key identifier: E7:F2:9F:BB:AE:35:8C:22:68:F3:9B:94:04:91:39:4D:91:EA:EF:FF Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: 8F Signing time: Fri 13 Jun 2025 05:24:22 +0000 Manifest this update: Fri 13 Jun 2025 05:24:22 +0000 Manifest next update: Fri 20 Jun 2025 05:24:22 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: DUlkmS3coC+CCSDweBvbxKI9Zsnif3JBSC7C0H+wfj8=) 2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: oPt/hUSuzgl3vf6IekNSVwLM4HNHGT76iBnF/i7Fi6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Jun 13 05:24:22 2025 GMT Not After : Jun 20 05:24:22 2025 GMT Subject: CN=684bb606-ee58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:3f:b3:0f:49:8e:86:4a:e6:67:f0:a7:96: b9:8c:cd:f1:f6:66:b8:f0:0c:06:86:26:6e:d5:69: 65:e7:c5:17:f8:0f:38:7d:53:53:74:42:2e:f0:e1: 9c:79:dc:c4:c6:b4:00:b1:85:53:0c:b6:d8:48:95: 17:3e:83:98:e7:f0:bb:9e:7b:80:55:93:af:0b:33: 65:ef:59:d8:a5:c2:f5:52:81:35:89:d3:6d:59:5c: c5:9b:7c:9d:49:f4:66:34:ea:e4:63:9b:ca:4f:e4: e7:d1:68:7d:e7:6b:a9:bf:ae:f5:25:e0:7a:f1:e0: ac:bb:fa:68:d5:31:79:dd:3c:a9:bc:ee:1a:78:f1: 52:e7:69:40:3c:96:d9:66:eb:d2:ed:d5:8f:9e:ca: 7a:16:ae:b3:20:c1:39:3d:c0:5c:4c:65:72:ab:71: 5d:a2:12:bb:ab:f7:7e:7f:1e:0d:e6:a8:0b:98:69: e8:56:35:04:b7:4d:aa:c9:fd:b1:40:3f:ce:74:39: 1b:f1:e6:f5:23:be:a8:b2:14:00:08:cd:c7:23:e2: 4b:b9:64:3e:c7:53:b7:90:6e:6b:33:8b:ce:10:68: 9e:32:59:1b:f2:e7:75:4f:07:6a:74:c7:8d:a5:e4: b0:ca:e5:13:06:e1:df:b2:18:fa:a3:ab:b5:e6:2b: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F2:9F:BB:AE:35:8C:22:68:F3:9B:94:04:91:39:4D:91:EA:EF:FF X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:57:14:7b:95:e7:c3:87:5c:d5:2a:e0:d8:c4:9a:e4:49:f9: 38:84:f3:b4:1b:30:32:67:e4:22:50:5f:15:9c:5c:22:6d:11: a3:e9:da:ea:a3:2e:92:2a:72:65:69:4d:70:57:fd:f9:6e:c6: a8:a7:ed:94:ad:23:78:5f:75:5f:90:bc:d9:79:ac:ee:2f:e3: 30:6f:5a:c3:4f:a6:ca:bb:1e:4d:42:9e:0a:b9:8d:5e:78:66: 7e:82:1d:f1:9c:cf:47:45:fb:31:bd:e8:db:09:9a:a6:79:b6: 23:b7:53:ef:76:b3:a0:f0:12:dd:3e:fd:41:b2:22:f2:84:51: be:9b:5f:14:cf:ea:55:7c:fa:29:3e:56:30:9b:c9:e3:be:32: f2:6b:33:8a:02:c3:4b:f2:f8:36:f6:77:13:dc:45:5a:ea:dd: 00:66:50:dc:33:20:51:18:32:90:0b:3b:81:1f:4c:11:96:ec: f8:a9:8c:bc:f6:4a:c5:f7:01:57:9d:5a:d1:38:3b:fe:20:1d: eb:78:6c:9e:81:7c:30:13:a7:94:d6:4d:4d:1b:92:f5:0e:64: 82:f2:73:de:ef:f7:f5:5b:ba:de:f9:a2:98:90:b0:a5:9f:5d: 22:2a:68:08:c5:7d:95:b8:b2:62:43:e6:05:e3:c6:01:0d:78: 8d:14:de:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjUwNjEzMDUyNDIyWhcNMjUwNjIwMDUyNDIyWjAYMRYwFAYD VQQDEw02ODRiYjYwNi1lZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroQ/sw9JjoZK5mfwp5a5jM3x9ma48AwGhiZu1Wll58UX+A84fVNTdEIu8OGc edzExrQAsYVTDLbYSJUXPoOY5/C7nnuAVZOvCzNl71nYpcL1UoE1idNtWVzFm3yd SfRmNOrkY5vKT+Tn0Wh952upv671JeB68eCsu/po1TF53TypvO4aePFS52lAPJbZ ZuvS7dWPnsp6Fq6zIME5PcBcTGVyq3FdohK7q/d+fx4N5qgLmGnoVjUEt02qyf2x QD/OdDkb8eb1I76oshQACM3HI+JLuWQ+x1O3kG5rM4vOEGieMlkb8ud1TwdqdMeN peSwyuUTBuHfshj6o6u15iu9LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfyn7uu NYwiaPOblASROU2R6u//MB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlEOS9GNTYwMzdBNjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhB TUNVdzNSTVhSQ01XTUp3WGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByVxR7lefDh1zVKuDYxJrkSfk4hPO0GzAyZ+QiUF8VnFwibRGj6drq oy6SKnJlaU1wV/35bsaop+2UrSN4X3VfkLzZeazuL+Mwb1rDT6bKux5NQp4KuY1e eGZ+gh3xnM9HRfsxvejbCZqmebYjt1PvdrOg8BLdPv1BsiLyhFG+m18Uz+pVfPop PlYwm8njvjLyazOKAsNL8vg29ncT3EVa6t0AZlDcMyBRGDKQCzuBH0wRluz4qYy8 9krF9wFXnVrRODv+IB3reGyegXwwE6eU1k1NG5L1DmSC8nPe7/f1W7re+aKYkLCl n10iKmgIxX2VuLJiQ+YF48YBDXiNFN7X -----END CERTIFICATE-----Generated at Sat Jun 14 18:40:05 2025 by rpki-client