$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: YQ3Lo6T41RW0CTCpOiNIhiP2Ib3m2B8GgkN2lEcEPOE= Subject key identifier: 80:87:6E:91:09:32:AD:F8:0D:B8:93:8D:24:CE:06:72:4A:83:CF:F2 Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 04A4 Signing time: Fri 18 Apr 2025 23:55:17 +0000 Manifest this update: Fri 18 Apr 2025 23:55:16 +0000 Manifest next update: Fri 25 Apr 2025 23:55:16 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: CThDZbhhNCJytWEqGzrzzyhe10ZvoJo8grndflgQMeo=) 2: BC0960102C5A11ECAB4C276BC4F9AE02.roa (hash: DpB3VrHRzT/Tn6zHL/OsD4hRYceSOtqxmkZcheppe/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 23:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Apr 18 23:55:16 2025 GMT Not After : Apr 25 23:55:16 2025 GMT Subject: CN=6802e664-79c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:6f:2b:57:c7:0b:ab:bb:01:70:8b:7a:cb: 64:b9:0e:35:66:78:49:20:44:41:b7:e0:68:0a:65: 24:3e:bb:4a:60:b1:20:3b:b1:f4:c4:65:c8:77:d9: dc:cc:df:99:cc:df:df:4b:f7:7c:3b:df:8b:72:9b: d4:6d:99:51:f4:e0:1d:7c:d1:a3:13:fd:96:94:d8: 76:83:fd:ed:7c:67:cd:b2:35:f9:2d:89:5c:8b:ae: fb:3e:e9:44:bb:00:c3:1d:75:74:61:fc:b4:f5:c7: bb:49:2e:dd:5b:c7:a7:b2:6a:f0:52:6c:b7:08:7a: db:fc:bf:f2:b0:1a:78:39:ea:df:24:c9:3f:0e:76: 80:23:06:a8:de:c2:53:31:a3:51:de:5f:a5:3a:ac: 87:c9:0b:a0:47:28:c2:8c:b0:b5:23:04:9e:09:43: e1:3e:54:4d:8d:cf:cd:68:5e:ce:e9:9d:b7:9f:a1: f6:aa:39:5b:3e:9a:30:65:50:0c:d2:80:6b:1e:24: 57:0f:17:b3:4c:f4:58:a4:c1:ee:58:74:52:e0:ed: 2b:54:82:70:74:e4:44:97:df:30:5f:e3:c3:e6:f5: 40:15:ba:ce:84:c4:b1:47:8d:ee:b3:40:e3:39:b4: 5f:59:6d:05:9d:e4:79:78:9d:08:d2:6d:d5:e0:9c: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:87:6E:91:09:32:AD:F8:0D:B8:93:8D:24:CE:06:72:4A:83:CF:F2 X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:cf:c9:15:5f:85:de:64:8b:14:2b:d5:39:f5:0f:18:06:a0: 38:ff:de:19:ed:ab:92:d8:34:25:e8:73:97:a6:2f:20:a0:96: e6:b8:63:2e:41:95:8d:94:0d:66:0c:eb:73:65:8e:04:ab:e3: 71:32:9c:72:2b:09:6c:0f:92:36:78:a3:cf:a7:c3:50:89:42: fa:27:7e:f6:37:35:4b:5a:25:1b:c4:4c:fe:ca:eb:c4:cd:0c: b7:bc:12:77:58:32:5a:5d:de:f1:60:85:f7:d2:67:e3:86:58: 68:38:64:2d:5b:56:cb:b5:df:0d:b2:50:30:86:d1:e4:8c:1f: cb:ce:4c:12:41:18:f7:32:bc:fb:72:12:28:ba:26:f6:db:a2: 35:41:ed:53:57:d8:e2:d9:02:de:bf:d6:fc:13:8b:c6:1b:25: 98:22:18:ed:40:98:ad:95:e6:70:e7:21:8a:5f:3c:b4:b7:31: a7:76:d7:40:be:15:2e:02:7a:8c:f1:fd:2b:2a:f2:75:2b:4e: c5:d3:bd:1b:05:67:bb:ad:64:29:3d:24:63:d5:e9:dc:3a:b8: 93:e9:89:f4:73:28:55:33:32:34:76:0e:02:6f:93:fa:49:91: 68:23:a1:cd:c8:1a:4b:38:74:60:60:fb:81:c0:ec:e0:42:78: 6d:f7:41:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUwNDE4MjM1NTE2WhcNMjUwNDI1MjM1NTE2WjAYMRYwFAYD VQQDEw02ODAyZTY2NC03OWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn29vK1fHC6u7AXCLestkuQ41ZnhJIERBt+BoCmUkPrtKYLEgO7H0xGXId9nc zN+ZzN/fS/d8O9+LcpvUbZlR9OAdfNGjE/2WlNh2g/3tfGfNsjX5LYlci677PulE uwDDHXV0Yfy09ce7SS7dW8ensmrwUmy3CHrb/L/ysBp4OerfJMk/DnaAIwao3sJT MaNR3l+lOqyHyQugRyjCjLC1IwSeCUPhPlRNjc/NaF7O6Z23n6H2qjlbPpowZVAM 0oBrHiRXDxezTPRYpMHuWHRS4O0rVIJwdOREl98wX+PD5vVAFbrOhMSxR43us0Dj ObRfWW0FneR5eJ0I0m3V4JxS8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICHbpEJ Mq34DbiTjSTOBnJKg8/yMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWz8kVX4XeZIsUK9U59Q8YBqA4/94Z7auS2DQl6HOXpi8goJbmuGMu QZWNlA1mDOtzZY4Eq+NxMpxyKwlsD5I2eKPPp8NQiUL6J372NzVLWiUbxEz+yuvE zQy3vBJ3WDJaXd7xYIX30mfjhlhoOGQtW1bLtd8NslAwhtHkjB/LzkwSQRj3Mrz7 chIouib226I1Qe1TV9ji2QLev9b8E4vGGyWYIhjtQJitleZw5yGKXzy0tzGndtdA vhUuAnqM8f0rKvJ1K07F070bBWe7rWQpPSRj1encOriT6Yn0cyhVMzI0dg4Cb5P6 SZFoI6HNyBpLOHRgYPuBwOzgQnht90Ho -----END CERTIFICATE-----Generated at Sat Apr 19 16:45:06 2025 by rpki-client