$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft File: E3ay871bTTWtlSsXkNgnRpktQW8.mft (raw, json) Hash identifier: fmGgS3xysXkE3wyZLJGDjGIIQu3wC49ITxRG6dltSrg= Subject key identifier: 05:D4:27:A3:69:97:65:6F:46:82:4E:FD:17:FB:D4:3B:52:89:14:A3 Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F Certificate issuer: /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft Manifest number: 044B Signing time: Fri 11 Apr 2025 00:38:59 +0000 Manifest this update: Fri 11 Apr 2025 00:38:59 +0000 Manifest next update: Fri 18 Apr 2025 00:38:59 +0000 Files and hashes: 1: E3ay871bTTWtlSsXkNgnRpktQW8.crl (hash: 2GKjjPn1aWeRh6Qw7RyyZPJ6XlQ/qzXutNWtW98Io4o=) 2: F03F059C391D11EF9A100142C4F9AE02.roa (hash: 5xPsXsO/x9vu20ZDUf9oCZh2wciZeGjOc7UUq3/XpCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 00:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183A80 Validity Not Before: Apr 11 00:38:59 2025 GMT Not After : Apr 18 00:38:59 2025 GMT Subject: CN=67f864a3-3bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b4:17:99:83:31:f5:59:24:9e:8b:90:ff:d1: 88:9b:11:af:35:bb:b9:9a:f6:c3:11:bf:24:1b:e7: 83:1c:65:fa:88:a9:fb:1a:4b:1f:58:a2:bd:46:90: 13:36:65:d7:f8:41:51:c9:75:e9:63:44:2a:de:9d: c1:92:ff:92:e5:62:fc:c0:00:78:c1:c1:ae:e7:9a: 94:9e:d1:b9:8f:a3:b5:e8:d1:41:27:23:e2:c2:6d: 11:f3:f6:1f:b3:ba:8e:31:2e:d9:02:d1:06:e6:3e: 1e:98:29:4d:34:1f:7e:2e:a6:1a:23:40:ce:27:b4: 2f:41:cf:63:bd:d6:e9:33:55:0c:3a:7f:3a:5b:e9: e7:9b:18:b9:5a:32:20:be:ec:ec:b1:71:6f:37:d1: 77:c1:bd:1f:a7:8a:c0:2c:b6:03:11:5a:db:3d:4f: 98:0a:80:7a:4b:71:de:f2:8a:a4:e4:9f:23:a8:cc: ac:cf:2a:6f:60:b3:ff:fe:99:72:49:cc:78:fb:89: dc:cb:e8:63:f2:a8:2b:4d:d7:1e:9c:ff:15:af:22: 97:fc:10:51:8b:d1:b1:89:22:42:5d:93:66:04:09: 04:73:38:87:fc:06:0e:7b:09:dd:bc:c8:50:9d:a5: 2a:db:4d:aa:7c:7a:66:3d:73:40:69:26:6e:38:d3: df:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D4:27:A3:69:97:65:6F:46:82:4E:FD:17:FB:D4:3B:52:89:14:A3 X509v3 Authority Key Identifier: keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:10:49:71:36:0f:fa:32:8d:22:5a:53:27:8d:bd:81:0e:a3: 96:3f:8e:cb:30:20:ab:72:ec:0e:61:f5:93:b6:29:63:b7:82: fc:50:d2:fd:c5:32:eb:7e:0f:25:eb:f2:78:61:18:1d:18:f5: e7:2d:96:3b:16:97:c7:24:52:54:6d:2f:c2:a0:b2:7c:28:a3: 64:86:21:0a:1e:e4:b8:ee:5b:0a:db:f0:f1:5b:0a:2f:96:2a: 0d:bb:a3:65:f6:04:83:b7:44:b6:96:d2:d0:a7:b0:e5:74:e2: a6:e1:3a:8e:93:7c:0a:38:c0:9c:a9:36:78:bf:45:58:16:c9: 64:6e:17:cd:51:42:e6:a8:0b:b6:e1:53:49:9f:61:b8:39:b1: b0:45:56:76:9b:01:22:7f:38:55:c9:c7:0c:b7:62:cf:b0:54: cc:73:82:8c:81:0f:d3:55:f5:da:fe:cc:82:6a:fe:02:00:47: 83:a6:06:b2:1f:f3:89:9c:d2:ea:12:50:f1:a4:d8:6a:90:2b: 31:d2:d6:ca:0d:f4:1c:eb:a3:a2:31:5f:6d:fb:0d:52:28:f5: e4:f1:cc:05:49:6e:bc:e4:27:21:33:d7:cb:ce:99:6d:63:46: d7:c6:d4:ac:82:f0:26:f7:f7:4b:40:a0:ae:e3:cf:27:c8:41: d7:68:3e:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNBODAxMTAvBgNVBAUTKDEzNzZCMkYzQkQ1QjREMzVBRDk1MkIxNzkwRDgyNzQ2 OTkyRDQxNkYwHhcNMjUwNDExMDAzODU5WhcNMjUwNDE4MDAzODU5WjAYMRYwFAYD VQQDEw02N2Y4NjRhMy0zYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bQXmYMx9VkknouQ/9GImxGvNbu5mvbDEb8kG+eDHGX6iKn7GksfWKK9RpAT NmXX+EFRyXXpY0Qq3p3Bkv+S5WL8wAB4wcGu55qUntG5j6O16NFBJyPiwm0R8/Yf s7qOMS7ZAtEG5j4emClNNB9+LqYaI0DOJ7QvQc9jvdbpM1UMOn86W+nnmxi5WjIg vuzssXFvN9F3wb0fp4rALLYDEVrbPU+YCoB6S3He8oqk5J8jqMyszypvYLP//ply Scx4+4ncy+hj8qgrTdcenP8VryKX/BBRi9GxiSJCXZNmBAkEcziH/AYOewndvMhQ naUq202qfHpmPXNAaSZuONPfGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXUJ6Np l2VvRoJO/Rf71DtSiRSjMB8GA1UdIwQYMBaAFBN2svO9W001rZUrF5DYJ0aZLUFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4 MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRUV3RsU3NYa05nblJwa3RR VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzYXk4NzFiVFRXdGxTc1hrTmduUnBrdFFXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRU V3RsU3NYa05nblJwa3RRVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6EElxNg/6Mo0iWlMnjb2BDqOWP47LMCCrcuwOYfWTtiljt4L8UNL9 xTLrfg8l6/J4YRgdGPXnLZY7FpfHJFJUbS/CoLJ8KKNkhiEKHuS47lsK2/DxWwov lioNu6Nl9gSDt0S2ltLQp7DldOKm4TqOk3wKOMCcqTZ4v0VYFslkbhfNUULmqAu2 4VNJn2G4ObGwRVZ2mwEifzhVyccMt2LPsFTMc4KMgQ/TVfXa/syCav4CAEeDpgay H/OJnNLqElDxpNhqkCsx0tbKDfQc66OiMV9t+w1SKPXk8cwFSW685CchM9fLzplt Y0bXxtSsgvAm9/dLQKCu488nyEHXaD5Y -----END CERTIFICATE-----Generated at Sat Apr 12 09:08:19 2025 by rpki-client