$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft File: E3xUsCE1C4OHmX0BWUrINodrRGw.mft (raw, json) Hash identifier: I/FQ+gwrY6WamU28cOHk42+RMVwk9uzWreqwU4sHiz4= Subject key identifier: 0E:15:90:D3:A5:C3:77:03:43:38:C2:63:1B:18:C8:A6:C4:47:D5:AD Authority key identifier: 13:7C:54:B0:21:35:0B:83:87:99:7D:01:59:4A:C8:36:87:6B:44:6C Certificate issuer: /CN=A9193235/serialNumber=137C54B021350B8387997D01594AC836876B446C Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft Manifest number: 074B Signing time: Fri 30 May 2025 23:01:22 +0000 Manifest this update: Fri 30 May 2025 23:01:22 +0000 Manifest next update: Fri 06 Jun 2025 23:01:21 +0000 Files and hashes: 1: E3xUsCE1C4OHmX0BWUrINodrRGw.crl (hash: LEUoHv2BEko/QGoLgKatw6jt0KFG3dY3Jx7RBXltC0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.crl rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193235, serialNumber=137C54B021350B8387997D01594AC836876B446C Validity Not Before: May 30 23:01:22 2025 GMT Not After : Jun 6 23:01:21 2025 GMT Subject: CN=683a38c2-dd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:d5:da:50:82:ae:d1:4a:bf:c8:a2:21:9a: f0:31:06:f5:b2:e3:e2:e7:49:79:a5:1a:1e:48:5a: ef:fb:c8:8b:7d:10:6d:05:1a:2a:ad:7d:77:3d:36: ee:b4:1b:eb:83:1f:2f:65:ea:51:87:06:49:22:e7: 40:40:00:b7:c3:87:86:38:ab:72:d4:51:b0:09:3c: a7:f3:7e:a6:ec:32:a1:bd:c3:3a:03:30:c1:c7:72: ad:bc:c5:45:45:5c:3d:10:76:ac:bc:80:91:8a:21: 8c:94:21:93:fd:84:6c:51:0f:06:71:c9:34:3d:aa: 58:25:a1:16:3f:e1:eb:94:72:d1:ec:d4:b4:33:6e: ba:e4:9b:5c:3a:cc:6e:51:ee:cf:e9:6d:75:89:49: a1:96:19:84:d3:b3:60:f2:37:d9:42:96:3f:b9:e5: 43:d5:fd:e4:c5:21:79:25:b0:ac:dc:4b:61:6d:56: a2:07:e3:95:99:a7:29:5b:ea:e6:fa:f6:30:c9:2d: e6:5f:99:a1:13:0d:7b:06:45:81:ce:b7:c1:b8:04: 46:46:97:dc:b4:ac:b6:fa:1d:89:b9:c7:53:52:30: e2:9b:46:e2:2d:82:c8:0a:bc:92:46:85:f3:86:33: 54:c4:43:d9:71:e7:b6:16:93:4d:23:6d:e4:24:a2: 00:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:15:90:D3:A5:C3:77:03:43:38:C2:63:1B:18:C8:A6:C4:47:D5:AD X509v3 Authority Key Identifier: keyid:13:7C:54:B0:21:35:0B:83:87:99:7D:01:59:4A:C8:36:87:6B:44:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e0:f8:7a:fc:25:32:5c:65:f9:75:31:4a:54:5f:96:00:a7: b0:f1:e1:c7:3a:da:7f:5d:fd:2d:15:18:aa:c6:17:11:7d:19: 69:45:d3:f7:9e:d3:33:68:99:fa:4a:a0:c6:90:fd:ff:83:68: 96:bc:3b:9a:94:a6:b4:08:a3:87:59:6f:3f:5a:ef:17:a7:0a: 16:5e:d3:c4:78:0f:5d:ec:f9:e8:16:58:a9:f5:89:5b:50:47: b2:58:09:1a:fa:28:d1:a0:cf:95:11:01:2f:f1:42:8b:03:cb: e6:dc:c9:1c:b4:6b:14:8a:dd:15:9f:d7:3d:b4:47:ea:fc:0b: d8:bc:3a:58:b4:3f:b3:9d:8c:c5:65:26:2c:51:4f:70:9c:66: 7a:e1:4b:a7:5e:f6:90:8f:d3:2a:e2:46:21:31:72:b0:e7:d2: 4c:8d:87:fa:f9:da:31:0f:2b:0a:8a:16:a2:a9:48:c3:29:bd: d2:df:e9:c5:3c:a1:46:2d:e3:9b:f1:b0:00:13:1e:bc:0b:31: a2:96:63:ab:02:fb:41:4d:18:e1:58:e7:d9:3e:b1:4d:e4:7f: aa:47:76:6e:3c:e1:7c:50:8b:e4:9f:01:09:2f:c9:e6:61:bb: e3:aa:35:94:17:5e:89:7e:37:85:4e:4e:5f:fa:c5:82:0d:24: 4e:e3:8a:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMyMzUxMTAvBgNVBAUTKDEzN0M1NEIwMjEzNTBCODM4Nzk5N0QwMTU5NEFDODM2 ODc2QjQ0NkMwHhcNMjUwNTMwMjMwMTIyWhcNMjUwNjA2MjMwMTIxWjAYMRYwFAYD VQQDEw02ODNhMzhjMi1kZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kbV2lCCrtFKv8iiIZrwMQb1suPi50l5pRoeSFrv+8iLfRBtBRoqrX13PTbu tBvrgx8vZepRhwZJIudAQAC3w4eGOKty1FGwCTyn836m7DKhvcM6AzDBx3KtvMVF RVw9EHasvICRiiGMlCGT/YRsUQ8Gcck0PapYJaEWP+HrlHLR7NS0M2665JtcOsxu Ue7P6W11iUmhlhmE07Ng8jfZQpY/ueVD1f3kxSF5JbCs3EthbVaiB+OVmacpW+rm +vYwyS3mX5mhEw17BkWBzrfBuARGRpfctKy2+h2JucdTUjDim0biLYLICrySRoXz hjNUxEPZcee2FpNNI23kJKIA1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4VkNOl w3cDQzjCYxsYyKbER9WtMB8GA1UdIwQYMBaAFBN8VLAhNQuDh5l9AVlKyDaHa0Rs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzIzNS9BNEZDM0I1QTlG QTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9FM3hVc0NFMUM0T0htWDBCV1VySU5vZHJS R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzeFVzQ0UxQzRPSG1YMEJXVXJJTm9kclJHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzIzNS9BNEZDM0I1QTlGQTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9FM3hVc0NFMUM0 T0htWDBCV1VySU5vZHJSR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK4Ph6/CUyXGX5dTFKVF+WAKew8eHHOtp/Xf0tFRiqxhcRfRlpRdP3 ntMzaJn6SqDGkP3/g2iWvDualKa0CKOHWW8/Wu8XpwoWXtPEeA9d7PnoFlip9Ylb UEeyWAka+ijRoM+VEQEv8UKLA8vm3MkctGsUit0Vn9c9tEfq/AvYvDpYtD+znYzF ZSYsUU9wnGZ64UunXvaQj9Mq4kYhMXKw59JMjYf6+doxDysKihaiqUjDKb3S3+nF PKFGLeOb8bAAEx68CzGilmOrAvtBTRjhWOfZPrFN5H+qR3ZuPOF8UIvknwEJL8nm YbvjqjWUF16JfjeFTk5f+sWCDSRO44oY -----END CERTIFICATE-----Generated at Sat May 31 17:42:42 2025 by rpki-client