$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json) Hash identifier: 5daoITaSdSGmiFaMDlr9Zw7R14mAwmhhIpQ7vW6BPdc= Subject key identifier: 65:26:C6:C5:5D:67:18:25:98:9D:DA:D4:9A:D3:D2:66:1B:1E:FB:08 Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft Manifest number: F5 Signing time: Mon 09 Jun 2025 04:17:33 +0000 Manifest this update: Mon 09 Jun 2025 04:17:33 +0000 Manifest next update: Mon 16 Jun 2025 04:17:33 +0000 Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: G1bWnUI+5ZS9c6NFEPoZQYzZNQwkdkkV742kiML3wdM=) 2: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: dRNilESPTQz/Q5N/cLbpDlE/USFMgoC4F5PCG8xDhno=) 3: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: ONnLvdYQIbTLtbVrwQpfNQIQVF7OagH6RPbHX1a91NY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 04:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51 Validity Not Before: Jun 9 04:17:33 2025 GMT Not After : Jun 16 04:17:33 2025 GMT Subject: CN=6846605d-d34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:a9:8a:4a:14:22:8a:53:5c:20:8a:d2:19: 0c:e2:18:bf:23:cb:e0:21:a1:a0:1c:55:4e:5d:34: 96:b9:e6:2c:4f:34:49:ea:a6:dc:ac:de:bd:6d:e1: c3:e1:fe:12:d1:d5:b3:1d:cb:18:e6:fd:f9:41:e0: 6d:0b:7b:d5:85:9d:e8:c1:c9:c5:8a:76:63:1e:92: 96:1f:0e:5d:3e:6c:80:38:54:b0:59:26:e8:0e:9b: 7a:79:5e:3b:e3:eb:89:89:39:3d:48:98:4a:55:37: 31:14:df:74:35:bb:a9:40:5b:be:ca:f6:28:7b:95: ab:ef:ac:35:fc:b1:52:d5:ab:a2:9a:c6:92:12:ed: 48:db:d9:e3:d1:68:ad:b0:ca:f1:be:f4:6d:b7:2a: 71:2a:6c:62:d0:42:6a:7b:88:7e:f5:c4:1d:08:ff: bd:40:66:c6:97:a0:c0:29:d8:29:ba:81:ae:91:6f: 3e:a2:ab:4c:57:d7:0a:e9:0c:b8:e7:3e:a8:bc:43: b8:dc:10:af:d7:51:d4:fa:a3:6b:46:e4:00:17:5e: ec:86:4b:08:17:bf:78:1b:b8:2a:bf:1a:ba:3e:b0: 76:f2:18:0f:c8:4e:5c:c1:33:e9:2f:95:16:a5:4e: ae:f1:1b:0d:70:f3:a7:a9:e1:da:62:f9:5e:bd:a9: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:26:C6:C5:5D:67:18:25:98:9D:DA:D4:9A:D3:D2:66:1B:1E:FB:08 X509v3 Authority Key Identifier: keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:64:82:5d:27:7c:4c:94:03:40:54:68:d7:4f:9f:44:27:f6: e7:e2:b4:d6:d8:9f:2c:d2:b4:d0:6b:9a:e6:68:44:92:f7:40: c8:c4:08:4f:25:61:75:00:55:34:17:3c:b2:64:1c:f1:55:e4: ea:24:e7:81:d5:cb:2d:58:ab:6c:1c:70:7d:c1:e0:55:01:67: 04:ed:8c:59:f3:7f:6b:e3:a8:75:ad:39:63:42:69:1e:99:7e: 91:7c:7a:4d:95:0c:5b:e6:2c:22:26:81:b6:5b:1a:fc:26:a2: c7:1a:5f:08:e0:c5:cd:fd:87:c1:6a:bc:64:07:49:ac:db:6a: 96:b7:38:00:e5:99:1f:69:59:53:33:6c:d8:70:5e:17:21:00: 97:c5:92:34:df:30:7e:db:e5:82:21:27:95:57:6b:2e:c1:c2: e0:95:82:c8:7b:bb:82:6b:41:00:4d:f7:6f:e9:e1:48:ff:ec: 35:94:ef:83:f7:e4:e7:fa:60:f3:4c:e9:eb:94:e9:44:6a:72: fd:8a:00:ee:86:a1:76:0e:53:09:08:b6:49:f1:9b:3b:a0:96: 13:56:6e:7d:14:ad:59:91:37:56:50:a0:e4:67:24:52:5a:81: 3a:b6:58:37:39:ff:83:bb:88:ad:42:4e:93:a2:24:fd:14:c6: 14:a7:0d:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDEzNzM1M0QwRThDMTQ1QTU4MENCMDBCQzMyMjIwODlD NDA0OEFFNTEwHhcNMjUwNjA5MDQxNzMzWhcNMjUwNjE2MDQxNzMzWjAYMRYwFAYD VQQDEw02ODQ2NjA1ZC1kMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyV2pikoUIopTXCCK0hkM4hi/I8vgIaGgHFVOXTSWueYsTzRJ6qbcrN69beHD 4f4S0dWzHcsY5v35QeBtC3vVhZ3owcnFinZjHpKWHw5dPmyAOFSwWSboDpt6eV47 4+uJiTk9SJhKVTcxFN90NbupQFu+yvYoe5Wr76w1/LFS1auimsaSEu1I29nj0Wit sMrxvvRttypxKmxi0EJqe4h+9cQdCP+9QGbGl6DAKdgpuoGukW8+oqtMV9cK6Qy4 5z6ovEO43BCv11HU+qNrRuQAF17shksIF794G7gqvxq6PrB28hgPyE5cwTPpL5UW pU6u8RsNcPOnqeHaYvlevamyCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUmxsVd ZxglmJ3a1JrT0mYbHvsIMB8GA1UdIwQYMBaAFBNzU9DowUWlgMsAvDIiCJxASK5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC85OTE5OEYxMkQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJhV0F5d0M4TWlJSW5FQkly bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC85OTE5OEYxMkQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJh V0F5d0M4TWlJSW5FQklybEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAZIJdJ3xMlANAVGjXT59EJ/bn4rTW2J8s0rTQa5rmaESS90DIxAhP JWF1AFU0FzyyZBzxVeTqJOeB1cstWKtsHHB9weBVAWcE7YxZ839r46h1rTljQmke mX6RfHpNlQxb5iwiJoG2Wxr8JqLHGl8I4MXN/YfBarxkB0ms22qWtzgA5ZkfaVlT M2zYcF4XIQCXxZI03zB+2+WCISeVV2suwcLglYLIe7uCa0EATfdv6eFI/+w1lO+D 9+Tn+mDzTOnrlOlEanL9igDuhqF2DlMJCLZJ8Zs7oJYTVm59FK1ZkTdWUKDkZyRS WoE6tlg3Of+Du4itQk6ToiT9FMYUpw0K -----END CERTIFICATE-----Generated at Mon Jun 9 18:15:20 2025 by rpki-client