$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft File: e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json) Hash identifier: g2zvCVKypanFuFEFvLQs1UWrTMHdnu1aM/H/RXXQ6Y4= Subject key identifier: 27:B7:C3:74:A7:CF:39:2D:F6:C8:F0:1A:D3:BE:60:03:6B:15:5B:5F Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 Certificate issuer: /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft Manifest number: 075D Signing time: Thu 24 Apr 2025 21:31:26 +0000 Manifest this update: Thu 24 Apr 2025 21:31:25 +0000 Manifest next update: Thu 01 May 2025 21:31:25 +0000 Files and hashes: 1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: PP8fw+e6yRmJUtZopELe62ZzHUQvnUwIAJ/6llpBdY0=) 2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: fq5HCtnKfkn7/JuyPv2TRFDGy6fu3YXaJZP30LJYt74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Validity Not Before: Apr 24 21:31:25 2025 GMT Not After : May 1 21:31:25 2025 GMT Subject: CN=680aadad-701d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c0:d6:6a:2b:f0:be:10:a8:bd:e5:90:ed:4f: 68:1b:9a:71:2b:80:61:ca:11:89:d5:53:88:20:4c: 64:f9:a9:ef:32:97:5a:f2:40:5a:00:dc:35:e3:d8: 49:27:e8:df:60:a5:e7:89:a3:9f:e6:c4:37:68:d2: 39:38:19:38:e4:5a:83:85:b9:69:83:93:87:bc:58: 6b:75:1d:fb:7c:f5:d9:40:e3:dd:ce:50:46:ed:fb: 05:f6:bf:17:56:0a:13:58:7b:d1:04:c3:fc:6e:e1: 02:4d:5e:67:ab:f6:1a:de:90:91:63:4c:ec:c0:31: a8:97:de:aa:dd:f9:ac:13:39:a7:8c:da:84:31:da: e2:8f:f6:b6:45:63:c6:6a:a7:83:93:c4:5d:f6:29: 37:ac:ec:90:33:1b:24:97:2a:1e:4b:e9:3f:2b:64: 65:7e:22:c9:76:0f:a9:29:21:29:8d:23:53:26:c6: 5e:db:5f:46:af:0e:71:88:1d:5b:01:c3:36:ae:92: 5d:11:53:af:a0:c5:0b:68:7c:ae:e4:f6:a0:b3:13: c5:c2:04:39:32:bd:e5:94:ca:a7:20:72:a1:4e:ca: 24:30:0c:46:89:82:72:8f:5d:df:6e:c7:a5:8d:27: 73:b3:ee:7d:07:31:10:ef:bd:b3:e8:86:7f:4a:c7: a1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B7:C3:74:A7:CF:39:2D:F6:C8:F0:1A:D3:BE:60:03:6B:15:5B:5F X509v3 Authority Key Identifier: keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:3d:dc:aa:cd:80:0c:6d:c2:99:2e:9f:cb:3d:11:4c:31:e4: 0e:46:43:3f:50:d0:4f:39:73:0e:42:3f:4a:20:b4:1f:da:72: ee:12:68:a5:c7:fa:3e:18:7e:ed:50:a0:c5:5a:81:47:d0:4c: 18:c1:9d:cb:fa:c8:12:c7:22:83:b6:b8:cb:23:51:7d:7e:44: dc:06:5b:52:9c:2a:c7:12:eb:e2:e0:67:1b:1a:64:43:d4:9d: 87:3b:22:2d:eb:17:dc:90:78:11:88:91:94:44:e4:9a:db:c3: a0:7f:8e:65:a1:47:a9:5d:f9:8c:55:10:72:a4:96:01:af:89: 2a:4e:cb:67:3f:ac:00:7c:fc:78:63:fb:e5:af:3f:f2:20:7e: 68:a7:4c:0a:de:21:b8:b3:a3:66:12:3d:6d:d4:93:60:c0:f4: 04:f1:ab:a8:f6:0e:a0:bc:83:f5:5e:d5:08:96:f1:7d:21:f1: e1:8c:e8:58:38:cc:f2:04:67:39:35:8e:e4:3d:01:7d:af:4b: 92:7b:d2:81:4c:3c:6b:d8:c1:9f:e2:4c:88:f2:36:f5:b6:f0: b9:9f:3b:93:a9:f5:8a:10:e3:89:06:ad:2d:f8:20:17:73:b4: 1b:a7:da:40:99:f9:8e:b7:4f:1e:d1:f3:39:45:52:2b:f6:a0: af:d3:4f:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5NjQxMTAvBgNVBAUTKDdCNzIxMzg4RkQxM0U4QUU0M0M5N0YwMzAxOTgxRDIy OTJDODg4OTcwHhcNMjUwNDI0MjEzMTI1WhcNMjUwNTAxMjEzMTI1WjAYMRYwFAYD VQQDEw02ODBhYWRhZC03MDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48DWaivwvhCoveWQ7U9oG5pxK4BhyhGJ1VOIIExk+anvMpda8kBaANw149hJ J+jfYKXniaOf5sQ3aNI5OBk45FqDhblpg5OHvFhrdR37fPXZQOPdzlBG7fsF9r8X VgoTWHvRBMP8buECTV5nq/Ya3pCRY0zswDGol96q3fmsEzmnjNqEMdrij/a2RWPG aqeDk8Rd9ik3rOyQMxsklyoeS+k/K2RlfiLJdg+pKSEpjSNTJsZe219Grw5xiB1b AcM2rpJdEVOvoMULaHyu5PagsxPFwgQ5Mr3llMqnIHKhTsokMAxGiYJyj13fbsel jSdzs+59BzEQ772z6IZ/SsehjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe3w3Sn zzkt9sjwGtO+YANrFVtfMB8GA1UdIwQYMBaAFHtyE4j9E+iuQ8l/AwGYHSKSyIiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTk2NC9FRkMyQ0NCQzI3 MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZLNUR5WDhEQVpnZElwTElp SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzSVRpUDBUNks1RHlYOERBWmdkSXBMSWlKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTk2NC9FRkMyQ0NCQzI3MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZL NUR5WDhEQVpnZElwTElpSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyPdyqzYAMbcKZLp/LPRFMMeQORkM/UNBPOXMOQj9KILQf2nLuEmil x/o+GH7tUKDFWoFH0EwYwZ3L+sgSxyKDtrjLI1F9fkTcBltSnCrHEuvi4GcbGmRD 1J2HOyIt6xfckHgRiJGUROSa28Ogf45loUepXfmMVRBypJYBr4kqTstnP6wAfPx4 Y/vlrz/yIH5op0wK3iG4s6NmEj1t1JNgwPQE8auo9g6gvIP1XtUIlvF9IfHhjOhY OMzyBGc5NY7kPQF9r0uSe9KBTDxr2MGf4kyI8jb1tvC5nzuTqfWKEOOJBq0t+CAX c7Qbp9pAmfmOt08e0fM5RVIr9qCv00+5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:02 2025 by rpki-client