$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft File: e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json) Hash identifier: 9S2J5cvyONGtly0uiNL5Ip2ZgCnxf1m5UHTYO9DpCtk= Subject key identifier: BC:E6:46:13:AD:8F:32:04:9D:5A:EE:5F:59:CF:A2:D1:5F:78:1A:E6 Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 Certificate issuer: /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Certificate serial: 0781 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft Manifest number: 076E Signing time: Fri 30 May 2025 21:52:55 +0000 Manifest this update: Fri 30 May 2025 21:52:55 +0000 Manifest next update: Fri 06 Jun 2025 21:52:55 +0000 Files and hashes: 1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: FrfS9k9cnrGujCFkBhg68jke9beSOlGMZkr3ptD1FKQ=) 2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: fq5HCtnKfkn7/JuyPv2TRFDGy6fu3YXaJZP30LJYt74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Validity Not Before: May 30 21:52:55 2025 GMT Not After : Jun 6 21:52:55 2025 GMT Subject: CN=683a28b7-5b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c0:d8:1b:62:ff:eb:86:27:2b:13:9d:13:d2: 57:db:de:f3:33:1b:a2:82:95:8e:d4:38:5c:49:dd: 29:04:57:30:1c:a7:8a:13:18:f5:4c:43:38:0a:bd: 67:02:6e:7c:54:81:32:2c:bd:96:d3:88:c3:69:a7: 7d:c9:0f:97:d1:55:9a:3c:62:b9:1b:eb:8f:5d:98: 8d:28:6d:89:08:54:e1:c2:a4:85:9e:93:46:28:c2: 2a:13:0a:9c:5e:1e:0c:ec:f2:99:64:49:2a:ac:26: 72:8d:40:61:7d:5b:7f:cf:f1:87:da:6d:df:c1:59: ce:d9:f3:36:a9:fc:0a:1d:5b:7e:17:6c:8e:40:f6: 9e:ce:46:c4:31:86:40:7a:55:e1:ac:a4:74:8d:a7: 4a:23:f2:cb:07:33:38:e2:f9:36:b2:2a:67:a6:99: 04:fd:33:58:fe:4e:88:fb:4a:a4:b9:14:dd:88:5b: df:0c:0b:b0:b8:0f:a6:0c:1b:7b:8a:de:3b:63:d8: b1:f6:d3:20:32:80:1f:d5:78:74:f5:b9:7c:37:02: d0:67:68:ae:fe:4b:2c:45:89:32:61:73:26:90:22: 35:82:6e:54:36:b4:c3:ba:4b:1c:d4:e5:c4:fd:72: d2:22:d6:ed:f7:17:2b:66:e0:34:4e:31:7a:47:74: 88:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E6:46:13:AD:8F:32:04:9D:5A:EE:5F:59:CF:A2:D1:5F:78:1A:E6 X509v3 Authority Key Identifier: keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b2:fc:cd:98:7e:2c:81:cb:74:10:fd:9a:67:7f:96:9a:0d: f1:a0:57:c1:11:64:58:28:6e:f3:57:bf:e0:65:f4:de:8f:a0: 0f:5e:7c:53:e3:68:32:08:de:d2:f9:c3:12:c8:2c:1a:99:54: 31:30:6f:3e:70:3a:fc:e8:7e:4d:95:1a:90:d6:52:22:0e:1c: 6a:bc:7d:0e:2e:f2:09:50:60:e9:05:f0:3a:a9:14:25:df:c5: 37:31:b1:2a:df:c0:08:7d:1a:40:88:f4:58:d7:a0:97:1e:2c: 5c:41:b2:dd:5a:de:8b:b7:fe:e4:89:8b:10:4f:7f:88:e4:d3: 76:6e:04:a3:5a:eb:93:59:01:85:e6:20:22:3a:f6:ae:ac:e3: a2:ff:bf:e0:12:cc:23:8c:d7:b5:43:a5:a2:16:2e:64:1a:46: c6:72:a8:d5:87:74:c0:9f:78:32:6d:d5:89:b4:c4:b1:35:e4: 57:f0:63:16:eb:4d:af:df:79:dd:34:74:29:67:03:98:e7:80: af:eb:d4:8f:37:f5:40:44:82:30:ab:e0:cc:9e:e0:e7:0a:9c: d5:88:82:01:e1:d7:c5:d1:29:ba:fe:ab:5c:b1:59:44:ae:2f: 6f:8f:cd:b8:6d:b6:29:27:3d:fe:c4:e8:8d:4d:a1:40:95:fd: 2b:a0:87:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5NjQxMTAvBgNVBAUTKDdCNzIxMzg4RkQxM0U4QUU0M0M5N0YwMzAxOTgxRDIy OTJDODg4OTcwHhcNMjUwNTMwMjE1MjU1WhcNMjUwNjA2MjE1MjU1WjAYMRYwFAYD VQQDEw02ODNhMjhiNy01YjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcDYG2L/64YnKxOdE9JX297zMxuigpWO1DhcSd0pBFcwHKeKExj1TEM4Cr1n Am58VIEyLL2W04jDaad9yQ+X0VWaPGK5G+uPXZiNKG2JCFThwqSFnpNGKMIqEwqc Xh4M7PKZZEkqrCZyjUBhfVt/z/GH2m3fwVnO2fM2qfwKHVt+F2yOQPaezkbEMYZA elXhrKR0jadKI/LLBzM44vk2sipnppkE/TNY/k6I+0qkuRTdiFvfDAuwuA+mDBt7 it47Y9ix9tMgMoAf1Xh09bl8NwLQZ2iu/kssRYkyYXMmkCI1gm5UNrTDuksc1OXE /XLSItbt9xcrZuA0TjF6R3SIBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzmRhOt jzIEnVruX1nPotFfeBrmMB8GA1UdIwQYMBaAFHtyE4j9E+iuQ8l/AwGYHSKSyIiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTk2NC9FRkMyQ0NCQzI3 MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZLNUR5WDhEQVpnZElwTElp SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzSVRpUDBUNks1RHlYOERBWmdkSXBMSWlKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTk2NC9FRkMyQ0NCQzI3MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZL NUR5WDhEQVpnZElwTElpSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYsvzNmH4sgct0EP2aZ3+Wmg3xoFfBEWRYKG7zV7/gZfTej6APXnxT 42gyCN7S+cMSyCwamVQxMG8+cDr86H5NlRqQ1lIiDhxqvH0OLvIJUGDpBfA6qRQl 38U3MbEq38AIfRpAiPRY16CXHixcQbLdWt6Lt/7kiYsQT3+I5NN2bgSjWuuTWQGF 5iAiOvaurOOi/7/gEswjjNe1Q6WiFi5kGkbGcqjVh3TAn3gybdWJtMSxNeRX8GMW 602v33ndNHQpZwOY54Cv69SPN/VARIIwq+DMnuDnCpzViIIB4dfF0Sm6/qtcsVlE ri9vj824bbYpJz3+xOiNTaFAlf0roIcu -----END CERTIFICATE-----Generated at Sat May 31 16:28:39 2025 by rpki-client