$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft File: EE3r2037i5__46TvfbFlevst9-I.mft (raw, json) Hash identifier: cRyVzXS7PyJB9d4kd2rmB9GcGz+wFfhT3ia4xYimgX0= Subject key identifier: F4:F7:93:CF:75:19:B5:A6:74:9F:CA:C6:8F:E8:E1:B1:28:F1:FE:10 Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2 Certificate issuer: /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft Manifest number: 01C6 Signing time: Thu 21 Aug 2025 03:02:29 +0000 Manifest this update: Thu 21 Aug 2025 03:02:28 +0000 Manifest next update: Thu 28 Aug 2025 03:02:28 +0000 Files and hashes: 1: EE3r2037i5__46TvfbFlevst9-I.crl (hash: Qr69jReyatKghYQvyDc5zIhvIm4jqapS+5kl1eqcm/s=) 2: 01003962C9DC11ED8D68375EC4F9AE02.roa (hash: KSfw6IBecAIXXXtQTk/28sHhzeNjJPQPF3dORiab4B8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F10DC, serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2 Validity Not Before: Aug 21 03:02:28 2025 GMT Not After : Aug 28 03:02:28 2025 GMT Subject: CN=68a68c45-0f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:9d:b2:7c:d6:58:db:57:7b:ab:b1:24:0c: 9d:d5:15:bf:c1:c3:da:13:53:5c:42:5e:bf:6b:dd: 66:8b:b3:8b:0d:d5:6e:fd:50:a0:8c:aa:17:2e:27: 8a:d8:be:fe:3d:46:9d:df:3f:a4:28:80:09:49:e3: 48:0c:e8:68:6a:7c:75:a2:1e:c9:38:1e:01:9f:4c: 26:e0:3c:0f:99:1f:0a:2a:cd:d2:2f:5c:7e:1f:30: 18:4b:63:e2:59:32:67:7e:4f:01:6c:fc:86:49:78: ca:ba:a4:5d:8e:08:95:cc:84:e7:d4:18:ca:56:49: 9d:b7:55:6c:3d:d6:ad:63:14:e1:ce:90:e9:78:10: 97:af:20:72:88:87:cf:ff:74:b5:ca:22:3a:e1:d2: 38:2c:30:54:7e:a7:4f:6e:e3:6e:e8:d1:52:fa:61: 24:1e:b8:df:ae:28:3c:4b:6a:e6:a8:ef:13:fe:ae: df:f1:ab:eb:28:7e:c3:25:1a:19:60:7d:d4:69:f4: cc:77:56:9d:21:39:4f:d0:23:14:21:4e:c1:9a:38: 84:37:3e:cd:c7:56:ce:8d:00:b3:4f:41:19:65:4f: 28:0b:4e:15:e2:28:21:46:f0:bd:9e:a6:7b:0e:38: 34:fb:f8:6b:7d:d0:92:39:a8:16:bb:3e:36:b0:bb: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F7:93:CF:75:19:B5:A6:74:9F:CA:C6:8F:E8:E1:B1:28:F1:FE:10 X509v3 Authority Key Identifier: keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:30:f4:b8:56:05:74:3c:87:cd:b3:66:d2:0b:23:0e:c5:30: 99:58:67:a4:a7:4b:ed:cf:7e:29:85:6d:01:d5:70:9f:ad:a8: 8b:bb:1f:09:cb:c2:4f:16:a1:2f:bc:d9:26:8a:ab:27:0a:44: 3c:03:67:1d:87:85:da:fa:af:e3:f9:14:d0:94:f5:95:ab:56: b4:f3:26:ea:3a:b5:60:55:c5:69:1d:a9:15:08:81:37:c9:73: d1:ac:a8:4b:46:96:35:7a:86:a0:4a:3c:83:0b:08:18:fc:f6: ed:31:40:6e:3c:8e:8c:0a:75:29:14:2d:2b:1b:69:9a:6a:e4: 92:4c:fe:aa:8b:f7:f0:ff:21:b3:56:d8:02:83:1a:59:dc:b1: dc:5e:c4:92:b7:23:3c:10:25:21:bd:16:de:d1:27:9c:6b:13: fc:dd:7d:3f:63:d4:32:68:4b:16:f2:55:a2:8e:ae:49:6d:48: ea:75:0f:e7:1c:95:05:89:53:42:2a:16:50:80:47:a7:06:45: c4:5a:ec:e4:1b:e2:40:de:a7:22:72:66:6f:ef:42:d6:98:90: 97:a7:36:8a:df:69:27:bd:71:14:53:bb:c1:f5:19:ef:44:68: 88:55:76:20:ec:32:b9:9d:c6:06:c7:03:15:6c:8d:30:83:26: 03:4d:68:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEwREMxMTAvBgNVBAUTKDEwNERFQkRCNERGQjhCOUZGRkUzQTRFRjdEQjE2NTdB RkIyREY3RTIwHhcNMjUwODIxMDMwMjI4WhcNMjUwODI4MDMwMjI4WjAYMRYwFAYD VQQDEw02OGE2OGM0NS0wZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcGdsnzWWNtXe6uxJAyd1RW/wcPaE1NcQl6/a91mi7OLDdVu/VCgjKoXLieK 2L7+PUad3z+kKIAJSeNIDOhoanx1oh7JOB4Bn0wm4DwPmR8KKs3SL1x+HzAYS2Pi WTJnfk8BbPyGSXjKuqRdjgiVzITn1BjKVkmdt1VsPdatYxThzpDpeBCXryByiIfP /3S1yiI64dI4LDBUfqdPbuNu6NFS+mEkHrjfrig8S2rmqO8T/q7f8avrKH7DJRoZ YH3UafTMd1adITlP0CMUIU7BmjiENz7Nx1bOjQCzT0EZZU8oC04V4ighRvC9nqZ7 Djg0+/hrfdCSOagWuz42sLuoHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPT3k891 GbWmdJ/Kxo/o4bEo8f4QMB8GA1UdIwQYMBaAFBBN69tN+4uf/+Ok732xZXr7Lffi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTBEQy84NUI4RTRBQUM5 RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1X180NlR2ZmJGbGV2c3Q5 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFM3IyMDM3aTVfXzQ2VHZmYkZsZXZzdDktSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTBEQy84NUI4RTRBQUM5RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1 X180NlR2ZmJGbGV2c3Q5LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMMPS4VgV0PIfNs2bSCyMOxTCZWGekp0vtz34phW0B1XCfraiLux8J y8JPFqEvvNkmiqsnCkQ8A2cdh4Xa+q/j+RTQlPWVq1a08ybqOrVgVcVpHakVCIE3 yXPRrKhLRpY1eoagSjyDCwgY/PbtMUBuPI6MCnUpFC0rG2maauSSTP6qi/fw/yGz VtgCgxpZ3LHcXsSStyM8ECUhvRbe0SecaxP83X0/Y9QyaEsW8lWijq5JbUjqdQ/n HJUFiVNCKhZQgEenBkXEWuzkG+JA3qcicmZv70LWmJCXpzaK32knvXEUU7vB9Rnv RGiIVXYg7DK5ncYGxwMVbI0wgyYDTWj9 -----END CERTIFICATE-----Generated at Fri Aug 22 16:17:04 2025 by rpki-client