$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft File: E3ay871bTTWtlSsXkNgnRpktQW8.mft (raw, json) Hash identifier: WiX7sc+rtycFQEi8M5iD7Gs8UDCgm2YRPr0Be4IpBrY= Subject key identifier: B5:63:28:0B:22:58:9A:E6:46:E1:63:FB:BA:AD:4A:3B:BC:A9:82:7F Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F Certificate issuer: /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft Manifest number: 047F Signing time: Tue 03 Jun 2025 00:51:18 +0000 Manifest this update: Tue 03 Jun 2025 00:51:18 +0000 Manifest next update: Tue 10 Jun 2025 00:51:18 +0000 Files and hashes: 1: E3ay871bTTWtlSsXkNgnRpktQW8.crl (hash: LnfJrYW8atNw7t/mqUHoRhQxcWXR6M/VMRv32msugRw=) 2: F03F059C391D11EF9A100142C4F9AE02.roa (hash: 5xPsXsO/x9vu20ZDUf9oCZh2wciZeGjOc7UUq3/XpCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183A80, serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F Validity Not Before: Jun 3 00:51:18 2025 GMT Not After : Jun 10 00:51:18 2025 GMT Subject: CN=683e4706-68c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:02:ab:e2:1d:1d:31:ff:d7:d7:19:0b:76: 2b:c8:23:53:8b:a4:59:0a:e4:5e:0e:ee:14:f9:6a: 5e:ad:f7:33:d2:7b:a4:29:e7:74:10:5b:a4:d9:8f: 00:dd:2d:61:ca:25:3d:aa:ad:c4:ee:2d:ec:18:1c: f6:8f:9c:17:9f:84:d5:d3:3f:bc:bc:33:09:05:e3: fe:fa:aa:bc:79:18:f0:9a:03:3c:6b:6e:a2:fc:c0: 1e:a7:e3:a8:ae:90:d3:b7:36:75:5a:b0:f8:2f:e3: 78:90:d6:b9:f1:50:a0:d3:b4:02:40:20:3b:ba:76: 0e:99:24:2a:80:2f:4f:c0:b4:a3:53:3b:7c:6b:72: 2e:cd:45:a4:4b:b2:c2:44:9d:f4:08:10:3c:a3:d1: 24:5f:ee:06:5f:f5:9d:aa:72:b3:b5:a3:49:1c:e0: db:5f:6d:fa:c8:aa:a0:69:0f:87:59:64:3c:1b:14: 66:97:fd:dc:52:5a:43:2a:64:81:b4:7f:82:7f:0d: 39:ae:60:12:e0:6d:1d:8f:ed:5b:db:0d:27:7d:73: 6c:cd:fa:72:9a:0b:3e:89:78:67:e8:1d:c3:74:11: 32:59:d7:c4:e4:aa:73:69:70:b5:6b:2a:e5:eb:6e: 2f:b3:84:5d:38:05:87:5a:c7:4e:d8:e8:b1:04:a9: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:63:28:0B:22:58:9A:E6:46:E1:63:FB:BA:AD:4A:3B:BC:A9:82:7F X509v3 Authority Key Identifier: keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:31:3b:05:6c:bb:5b:87:ca:95:7c:49:a1:d5:61:b4:34:29: 6e:06:68:e6:9f:59:30:5c:3e:cb:7b:48:f9:a2:90:e1:71:0a: 61:87:8c:fc:3b:49:5d:87:52:42:d0:7c:ea:92:4d:b9:8e:6a: 6f:b3:8b:89:5b:5e:65:b4:3f:30:52:8c:51:ec:94:c0:94:d0: 01:45:7d:af:9e:85:66:4c:0a:8d:aa:9d:f5:1a:1e:16:f3:ff: 7e:0f:18:a5:a9:90:c3:12:7a:21:a7:4e:37:d3:20:a9:7d:2a: 2a:3a:05:29:5f:22:e0:30:80:3b:d2:34:91:a7:3f:bb:53:7f: bf:4c:21:b3:7e:9e:d6:85:4b:aa:d2:79:d3:bd:39:30:3d:6a: 09:9b:ed:f2:e1:27:b6:c7:2b:84:52:2c:62:62:51:e8:f9:b8: ca:f1:53:01:61:f5:8b:43:a7:99:43:5b:f4:e1:a5:e0:3b:c8: e0:02:57:fd:a7:61:6d:f3:2c:5b:0f:cb:9a:47:7b:d7:4d:d2: 5b:42:ab:28:3c:84:7c:fc:3a:71:e5:7f:b8:a7:5c:a3:ea:99: b6:28:9d:57:c1:89:ce:2e:5e:a6:3f:a1:6e:d9:98:3b:0f:4a: a9:18:ff:48:03:4d:df:65:8f:78:02:f3:57:7c:6b:12:42:2e: 7a:06:48:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNBODAxMTAvBgNVBAUTKDEzNzZCMkYzQkQ1QjREMzVBRDk1MkIxNzkwRDgyNzQ2 OTkyRDQxNkYwHhcNMjUwNjAzMDA1MTE4WhcNMjUwNjEwMDA1MTE4WjAYMRYwFAYD VQQDEw02ODNlNDcwNi02OGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlUCq+IdHTH/19cZC3YryCNTi6RZCuReDu4U+Wperfcz0nukKed0EFuk2Y8A 3S1hyiU9qq3E7i3sGBz2j5wXn4TV0z+8vDMJBeP++qq8eRjwmgM8a26i/MAep+Oo rpDTtzZ1WrD4L+N4kNa58VCg07QCQCA7unYOmSQqgC9PwLSjUzt8a3IuzUWkS7LC RJ30CBA8o9EkX+4GX/WdqnKztaNJHODbX236yKqgaQ+HWWQ8GxRml/3cUlpDKmSB tH+Cfw05rmAS4G0dj+1b2w0nfXNszfpymgs+iXhn6B3DdBEyWdfE5KpzaXC1ayrl 624vs4RdOAWHWsdO2OixBKkwTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVjKAsi WJrmRuFj+7qtSju8qYJ/MB8GA1UdIwQYMBaAFBN2svO9W001rZUrF5DYJ0aZLUFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4 MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRUV3RsU3NYa05nblJwa3RR VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzYXk4NzFiVFRXdGxTc1hrTmduUnBrdFFXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRU V3RsU3NYa05nblJwa3RRVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3MTsFbLtbh8qVfEmh1WG0NCluBmjmn1kwXD7Le0j5opDhcQphh4z8 O0ldh1JC0Hzqkk25jmpvs4uJW15ltD8wUoxR7JTAlNABRX2vnoVmTAqNqp31Gh4W 8/9+DxilqZDDEnohp0430yCpfSoqOgUpXyLgMIA70jSRpz+7U3+/TCGzfp7WhUuq 0nnTvTkwPWoJm+3y4Se2xyuEUixiYlHo+bjK8VMBYfWLQ6eZQ1v04aXgO8jgAlf9 p2Ft8yxbD8uaR3vXTdJbQqsoPIR8/Dpx5X+4p1yj6pm2KJ1XwYnOLl6mP6Fu2Zg7 D0qpGP9IA03fZY94AvNXfGsSQi56Bkje -----END CERTIFICATE-----Generated at Wed Jun 4 00:15:16 2025 by rpki-client