$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft File: E3ay871bTTWtlSsXkNgnRpktQW8.mft (raw, json) Hash identifier: k2P5MWjQSPXlwDBD26n5I93UYK6VugUBgEeOrtRW0TE= Subject key identifier: F0:C9:3E:B3:E6:75:FB:64:7A:3C:5C:A9:48:6E:2B:57:D4:21:96:51 Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F Certificate issuer: /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft Manifest number: 0459 Signing time: Fri 25 Apr 2025 00:26:28 +0000 Manifest this update: Fri 25 Apr 2025 00:26:28 +0000 Manifest next update: Fri 02 May 2025 00:26:28 +0000 Files and hashes: 1: E3ay871bTTWtlSsXkNgnRpktQW8.crl (hash: n8Ql4zfzN+ebzIrCYTe6ZMT+8bYG7bpC3B/iCyFRuns=) 2: F03F059C391D11EF9A100142C4F9AE02.roa (hash: 5xPsXsO/x9vu20ZDUf9oCZh2wciZeGjOc7UUq3/XpCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183A80, serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F Validity Not Before: Apr 25 00:26:28 2025 GMT Not After : May 2 00:26:28 2025 GMT Subject: CN=680ad6b4-04b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a2:1d:b0:f3:18:d4:03:8e:2a:29:ea:37:a3: d1:e3:bc:00:e2:42:f0:f8:75:da:69:e0:12:bb:4f: b9:28:80:94:80:35:63:a6:3d:5a:3b:d6:f8:75:2e: 02:bc:92:0e:52:0f:8e:8b:40:b6:26:40:44:66:cc: f2:57:6b:4e:ae:56:f8:f5:d1:da:52:21:68:c7:41: 66:8e:c6:03:eb:a0:c6:8a:a7:41:fa:b4:38:f0:c7: 3b:34:33:07:07:5b:08:b4:bf:27:a1:bb:8a:bd:03: 40:75:04:ba:b2:a7:5d:d0:5c:24:df:82:ce:bb:d2: a5:08:d9:68:47:13:93:49:7f:32:29:70:bb:e6:54: 11:dc:26:84:8a:0b:c9:a7:ca:1a:63:4f:d1:cb:98: 87:c4:cf:44:b7:51:ff:1c:b3:f6:79:d2:f4:81:e3: 08:ae:30:97:e9:61:21:d9:1d:28:62:ef:df:60:04: 5d:55:49:fa:f2:dd:65:5a:d9:e2:64:f5:bc:9f:97: 1c:44:ea:6f:c8:85:42:c3:4a:71:ef:d6:3d:fb:5a: 58:fa:18:62:d3:c4:37:78:5a:ef:36:33:f5:a6:e4: f8:8e:11:44:10:84:52:58:ff:70:49:54:f3:e7:d9: b7:77:fb:06:02:cf:23:42:c5:31:5f:b3:bf:23:89: 9c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C9:3E:B3:E6:75:FB:64:7A:3C:5C:A9:48:6E:2B:57:D4:21:96:51 X509v3 Authority Key Identifier: keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:89:b4:bd:4a:71:c3:71:62:e2:c9:41:90:b5:04:27:3e:12: c9:c8:4c:5f:c2:ef:e4:b0:f1:21:8f:d0:b4:9f:7d:6c:17:92: bc:4e:c7:93:f8:a2:ed:bc:c9:60:0f:fd:0c:60:af:80:01:b5: 76:d7:23:3b:c2:2e:ae:3d:f6:f6:0b:aa:d6:f3:39:57:b0:1e: c4:2d:ce:d0:03:54:b9:51:30:6c:71:8d:6b:40:99:59:bd:94: c7:e2:5a:10:ec:bd:59:6a:c8:bb:78:f6:2e:ab:13:2d:60:c1: 0a:0a:a1:62:f7:f4:43:9d:89:58:a3:f5:37:92:0d:96:0f:b3: 95:c7:82:4a:23:65:35:3d:ff:5c:d7:98:53:d1:10:58:fd:fe: de:8b:c8:0d:3a:6a:48:79:0a:ee:3f:3d:3c:b3:60:86:23:3d: ff:09:a4:09:ae:f3:a7:ea:d9:18:a7:8e:e1:df:7d:cd:35:fd: c5:f0:00:55:a8:0e:2b:ea:b2:5f:43:10:c2:07:1d:fc:96:55: 29:d5:29:02:4f:ed:5c:6b:3c:a6:e8:3d:75:87:4b:2a:49:ec: f1:b9:fb:9a:83:0e:30:5a:a7:f9:0e:ba:79:90:00:fe:ad:82: 1c:5c:83:8d:09:2b:5d:59:44:06:34:db:b0:ce:a2:b6:da:a9: c7:91:ef:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNBODAxMTAvBgNVBAUTKDEzNzZCMkYzQkQ1QjREMzVBRDk1MkIxNzkwRDgyNzQ2 OTkyRDQxNkYwHhcNMjUwNDI1MDAyNjI4WhcNMjUwNTAyMDAyNjI4WjAYMRYwFAYD VQQDEw02ODBhZDZiNC0wNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8KIdsPMY1AOOKinqN6PR47wA4kLw+HXaaeASu0+5KICUgDVjpj1aO9b4dS4C vJIOUg+Oi0C2JkBEZszyV2tOrlb49dHaUiFox0FmjsYD66DGiqdB+rQ48Mc7NDMH B1sItL8nobuKvQNAdQS6sqdd0Fwk34LOu9KlCNloRxOTSX8yKXC75lQR3CaEigvJ p8oaY0/Ry5iHxM9Et1H/HLP2edL0geMIrjCX6WEh2R0oYu/fYARdVUn68t1lWtni ZPW8n5ccROpvyIVCw0px79Y9+1pY+hhi08Q3eFrvNjP1puT4jhFEEIRSWP9wSVTz 59m3d/sGAs8jQsUxX7O/I4mcsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDJPrPm dftkejxcqUhuK1fUIZZRMB8GA1UdIwQYMBaAFBN2svO9W001rZUrF5DYJ0aZLUFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4 MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRUV3RsU3NYa05nblJwa3RR VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzYXk4NzFiVFRXdGxTc1hrTmduUnBrdFFXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRU V3RsU3NYa05nblJwa3RRVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWibS9SnHDcWLiyUGQtQQnPhLJyExfwu/ksPEhj9C0n31sF5K8TseT +KLtvMlgD/0MYK+AAbV21yM7wi6uPfb2C6rW8zlXsB7ELc7QA1S5UTBscY1rQJlZ vZTH4loQ7L1Zasi7ePYuqxMtYMEKCqFi9/RDnYlYo/U3kg2WD7OVx4JKI2U1Pf9c 15hT0RBY/f7ei8gNOmpIeQruPz08s2CGIz3/CaQJrvOn6tkYp47h333NNf3F8ABV qA4r6rJfQxDCBx38llUp1SkCT+1cazym6D11h0sqSezxufuagw4wWqf5Drp5kAD+ rYIcXIONCStdWUQGNNuwzqK22qnHke9g -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:56 2025 by rpki-client