$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: ge8ozlrgJPTMriTfI6k5nu6WAPrvMXhOghJWJ9Wv6eo= Subject key identifier: 58:FD:E3:FB:6B:8E:81:95:EA:9B:18:BB:D2:75:BC:88:13:BC:3D:05 Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 01D4 Signing time: Fri 25 Apr 2025 01:59:43 +0000 Manifest this update: Fri 25 Apr 2025 01:59:42 +0000 Manifest next update: Fri 02 May 2025 01:59:42 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: fo2ZvCOPke2b62zr5eNebTh94gi7TIj9SZ/CYeMYKJc=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: RxZVoTNoSPk+sPPkKG/4HF99n9loOp00db2bHVAlJ14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Apr 25 01:59:42 2025 GMT Not After : May 2 01:59:42 2025 GMT Subject: CN=680aec8f-97fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:6e:72:a0:0e:80:3d:e3:f0:5d:57:ea:a0: e1:61:e5:4f:ba:00:03:86:61:c0:05:48:95:76:9b: 9d:0b:83:4a:93:a6:7e:62:f2:3e:28:1b:6a:47:5b: b6:be:b8:4c:4b:c2:48:ca:52:0c:96:ea:4a:79:a1: ef:0c:53:52:14:1d:e7:0b:c0:5a:bd:3b:54:ad:b2: dc:9b:5e:80:92:35:69:08:50:b6:1b:fa:9c:f4:0c: f5:ce:91:3f:69:ff:f9:ce:f7:0d:19:ec:98:9e:67: 66:4e:51:32:7a:36:7e:a3:66:59:a7:56:91:d9:5e: 87:48:0e:a5:eb:65:2c:f2:e3:37:35:83:91:20:1e: f3:84:1c:c8:43:6c:df:11:ec:a5:ba:ee:74:8f:ff: f2:cc:63:37:27:48:46:ce:21:08:69:b3:fa:66:47: dc:d6:a4:2a:51:a8:60:ad:6e:32:3a:a1:61:8b:54: ab:8d:4f:f7:45:97:60:3d:05:30:92:25:2c:94:08: 87:80:f3:18:92:79:e5:1f:eb:ef:eb:b6:14:47:b8: 37:43:06:5c:29:60:00:98:8d:08:c8:87:ff:6d:74: e6:8d:aa:91:a6:2c:12:d8:1f:90:9e:2a:1c:3a:8e: c1:98:0f:65:7e:2d:8e:f8:18:5b:d2:aa:40:4d:5f: ef:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FD:E3:FB:6B:8E:81:95:EA:9B:18:BB:D2:75:BC:88:13:BC:3D:05 X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:46:37:34:f8:d4:b6:7e:97:a9:f7:ef:ac:aa:10:d4:37:29: 59:7b:bf:e3:4d:d0:a7:ad:4f:fa:60:fa:cc:c4:41:4c:e7:ca: 18:bb:eb:79:ed:46:1a:7d:00:02:80:77:10:a5:fb:de:90:8b: 7b:6f:20:a2:05:9b:51:5c:06:bc:bb:9e:b8:ab:da:be:8a:12: 2f:d5:a7:22:f9:e1:0c:7e:1f:7a:4c:30:c0:f2:b1:94:2b:bc: 69:55:68:89:8a:ca:14:fd:71:88:b5:f7:f8:80:2e:d8:9b:01: e8:11:20:01:b7:c5:f4:a3:8b:cf:f3:33:87:c3:57:e4:b6:42: 24:92:7e:1c:a7:ec:8d:bd:4f:d7:68:18:46:2b:24:47:e0:0a: 59:4e:b3:3c:1d:fe:93:e2:aa:82:bb:4b:39:aa:c0:b0:91:a9: ff:7d:3a:4c:df:2a:e3:e0:e4:ff:8c:8e:ec:8a:39:ea:2e:39: cc:f8:22:f5:f0:30:f1:99:c7:f8:3b:3b:02:89:9c:d3:a0:40: 19:0f:3b:34:e5:8c:9b:fe:a2:12:dc:4f:bd:5d:2e:c4:75:5b: b5:eb:d9:96:5b:41:8e:1e:a4:37:50:e5:43:a6:9a:8f:7d:e9: 60:05:12:0f:12:a1:77:ff:8f:0d:1f:c4:4b:5f:e4:09:2f:d8: bc:04:49:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUwNDI1MDE1OTQyWhcNMjUwNTAyMDE1OTQyWjAYMRYwFAYD VQQDEw02ODBhZWM4Zi05N2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuStucqAOgD3j8F1X6qDhYeVPugADhmHABUiVdpudC4NKk6Z+YvI+KBtqR1u2 vrhMS8JIylIMlupKeaHvDFNSFB3nC8BavTtUrbLcm16AkjVpCFC2G/qc9Az1zpE/ af/5zvcNGeyYnmdmTlEyejZ+o2ZZp1aR2V6HSA6l62Us8uM3NYORIB7zhBzIQ2zf Eeyluu50j//yzGM3J0hGziEIabP6Zkfc1qQqUahgrW4yOqFhi1SrjU/3RZdgPQUw kiUslAiHgPMYknnlH+vv67YUR7g3QwZcKWAAmI0IyIf/bXTmjaqRpiwS2B+Qnioc Oo7BmA9lfi2O+Bhb0qpATV/v4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFj94/tr joGV6psYu9J1vIgTvD0FMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoRjc0+NS2fpep9++sqhDUNylZe7/jTdCnrU/6YPrMxEFM58oYu+t5 7UYafQACgHcQpfvekIt7byCiBZtRXAa8u564q9q+ihIv1aci+eEMfh96TDDA8rGU K7xpVWiJisoU/XGItff4gC7YmwHoESABt8X0o4vP8zOHw1fktkIkkn4cp+yNvU/X aBhGKyRH4ApZTrM8Hf6T4qqCu0s5qsCwkan/fTpM3yrj4OT/jI7sijnqLjnM+CL1 8DDxmcf4OzsCiZzToEAZDzs05Yyb/qIS3E+9XS7EdVu169mWW0GOHqQ3UOVDppqP felgBRIPEqF3/48NH8RLX+QJL9i8BElq -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:41 2025 by rpki-client