$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: +zNy6RreWn3cEUxWb7x0raWjgYNiN/COHfTcq1AaG+c= Subject key identifier: BE:6E:5C:38:81:C4:C5:7C:7F:E1:A8:3E:2E:E9:49:5F:71:B6:25:20 Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 01E5 Signing time: Sat 31 May 2025 02:21:54 +0000 Manifest this update: Sat 31 May 2025 02:21:54 +0000 Manifest next update: Sat 07 Jun 2025 02:21:54 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: yLJh4JJa+p7lrjEilPW9Jh0dTuGmS2bVK5gxmf/3Efk=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: RxZVoTNoSPk+sPPkKG/4HF99n9loOp00db2bHVAlJ14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: May 31 02:21:54 2025 GMT Not After : Jun 7 02:21:54 2025 GMT Subject: CN=683a67c2-d8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:05:c8:37:da:ef:7f:9b:3a:b2:de:5a:f1: 98:f3:fd:dd:6c:90:57:fa:11:20:e7:bc:de:88:92: 1e:19:af:42:f0:a8:61:f4:24:03:fd:97:e4:5c:2b: 19:7d:ad:e9:da:f4:2e:f1:92:73:fb:69:98:b0:ff: ad:fe:43:6b:94:82:5e:22:fb:27:70:24:9e:af:8c: 2f:b0:62:b2:f5:c1:cd:92:fb:ac:6f:d2:a0:c2:88: 9f:c6:a3:9d:64:fc:99:f6:f0:d3:e6:64:8e:79:de: cb:e0:5e:74:42:5a:f3:06:6a:7f:91:57:b4:40:78: 5e:05:f4:ec:0f:7d:8f:d8:06:8e:8a:19:73:df:39: 1f:f9:3a:71:36:60:d2:73:37:16:da:ef:af:c3:c5: ab:bc:ef:f1:3d:39:a4:63:a4:a4:71:df:d4:0e:a6: 82:4c:cd:91:ca:ab:3a:2e:d9:88:eb:ac:90:33:54: 05:a5:aa:2d:f3:8f:9a:95:ef:e1:15:3b:86:d6:c4: 51:ac:fa:09:a9:79:24:dc:14:60:11:21:03:d9:79: 31:4b:74:d3:13:9e:fd:59:c3:5b:37:32:23:91:61: a3:30:a5:72:0c:31:fa:0d:fd:5c:10:d8:3e:0b:31: 30:7c:d7:a3:0b:ac:09:42:30:ee:66:22:f1:6a:63: 26:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6E:5C:38:81:C4:C5:7C:7F:E1:A8:3E:2E:E9:49:5F:71:B6:25:20 X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:54:b6:ac:cb:56:ca:46:9d:28:13:3d:89:c7:81:41:ee:91: 92:b7:0d:3c:29:e6:ef:70:fb:a6:f6:6d:86:14:2a:13:f5:25: de:fe:2e:e6:54:3f:4e:f3:e3:35:05:8d:45:d8:12:52:5f:39: 21:c5:64:6f:5c:7b:aa:0c:ea:b0:26:1d:68:a4:77:ca:76:34: 73:f4:51:2d:5e:11:53:f0:e4:e8:b9:eb:2a:f6:05:f7:59:b0: d7:f8:8d:9f:dc:28:96:4b:36:bd:fa:3e:48:a3:e0:54:ba:1e: 3a:b4:96:40:b4:bb:17:83:72:5b:79:09:c8:a0:78:d8:29:83: 4e:29:29:48:7b:c0:f8:1e:d1:78:b1:78:6c:1a:5f:fd:84:8c: 17:cb:23:80:ff:14:dc:1f:53:6a:c2:eb:21:98:18:41:77:c5: bc:1a:f6:cd:0e:83:24:ed:95:d7:00:00:5d:6b:71:5e:dc:4e: 4a:e9:9b:5c:c2:4c:a5:11:3c:0e:02:ff:ec:10:dc:fe:9a:5a: 6c:2c:52:0b:1f:6e:0d:11:58:eb:f0:91:85:5b:96:39:3e:25: 90:27:be:a9:cb:33:89:0e:c7:cb:6d:5d:06:0c:e1:21:fb:38: 2d:32:1f:aa:4a:cf:59:cd:14:d7:7a:e0:6f:f7:6c:89:55:6c: ec:dc:b2:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUwNTMxMDIyMTU0WhcNMjUwNjA3MDIyMTU0WjAYMRYwFAYD VQQDEw02ODNhNjdjMi1kOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDUFyDfa73+bOrLeWvGY8/3dbJBX+hEg57zeiJIeGa9C8Khh9CQD/ZfkXCsZ fa3p2vQu8ZJz+2mYsP+t/kNrlIJeIvsncCSer4wvsGKy9cHNkvusb9KgwoifxqOd ZPyZ9vDT5mSOed7L4F50QlrzBmp/kVe0QHheBfTsD32P2AaOihlz3zkf+TpxNmDS czcW2u+vw8WrvO/xPTmkY6Skcd/UDqaCTM2Ryqs6LtmI66yQM1QFpaot84+ale/h FTuG1sRRrPoJqXkk3BRgESED2XkxS3TTE579WcNbNzIjkWGjMKVyDDH6Df1cENg+ CzEwfNejC6wJQjDuZiLxamMmYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5uXDiB xMV8f+GoPi7pSV9xtiUgMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXVLasy1bKRp0oEz2Jx4FB7pGStw08KebvcPum9m2GFCoT9SXe/i7m VD9O8+M1BY1F2BJSXzkhxWRvXHuqDOqwJh1opHfKdjRz9FEtXhFT8OTouesq9gX3 WbDX+I2f3CiWSza9+j5Io+BUuh46tJZAtLsXg3JbeQnIoHjYKYNOKSlIe8D4HtF4 sXhsGl/9hIwXyyOA/xTcH1NqwushmBhBd8W8GvbNDoMk7ZXXAABda3Fe3E5K6Ztc wkylETwOAv/sENz+mlpsLFILH24NEVjr8JGFW5Y5PiWQJ76pyzOJDsfLbV0GDOEh +zgtMh+qSs9ZzRTXeuBv92yJVWzs3LLl -----END CERTIFICATE-----Generated at Sat May 31 17:30:18 2025 by rpki-client