$ rpki-client -vvf rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft File: e3dUqC3QY6R-jsNdFj72skSNEts.mft (raw, json) Hash identifier: j989CVpH4+I09sw2pK0d7EHFDBOF1XHxVgWSOCQrKF4= Subject key identifier: F2:39:79:DF:02:46:50:1A:C6:AE:5A:6D:96:32:B6:D1:22:5A:97:23 Authority key identifier: 7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB Certificate issuer: /CN=A9189311/serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB Certificate serial: 277A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft Manifest number: 2767 Signing time: Thu 24 Apr 2025 15:40:06 +0000 Manifest this update: Thu 24 Apr 2025 15:40:05 +0000 Manifest next update: Thu 01 May 2025 15:40:05 +0000 Files and hashes: 1: e3dUqC3QY6R-jsNdFj72skSNEts.crl (hash: o73SngZtnIJ1zPPMRRbEIXvcEvb8wmYAG4RQHMjjDac=) 2: F5BBEA5AF6A611E7B40C7427C4F9AE02.roa (hash: EeUXim59YsvGI7qIffiR5WtPWhD5kVEeYtKpW1EoALs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10106 (0x277a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189311, serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB Validity Not Before: Apr 24 15:40:05 2025 GMT Not After : May 1 15:40:05 2025 GMT Subject: CN=680a5b56-5c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1a:ba:0e:72:ed:6a:7a:3f:11:a8:7c:01:fa: d9:8a:c0:60:25:3d:6c:d8:d7:f9:a9:88:b1:1c:b7: e9:87:2b:2a:b7:e6:95:b2:1e:22:30:97:5c:d9:f8: 78:88:87:87:a7:28:cd:20:f0:df:cb:c6:e4:79:ed: fc:98:7b:ba:66:74:66:6b:98:19:e5:b5:20:a5:eb: d1:e6:b8:a2:9e:a4:d8:8d:b3:09:c3:76:46:31:02: 8d:4a:f4:81:fc:37:ec:ec:3b:85:49:52:c2:a0:84: 8b:bf:48:79:cb:19:f6:dd:95:6d:97:4c:83:63:7c: 49:85:40:d8:4d:22:62:63:98:4e:2d:ce:a5:76:f3: 04:14:eb:16:c9:87:5f:cf:6d:8d:bf:b0:96:13:c6: be:42:33:f7:74:4c:52:dc:6a:70:17:a2:b9:e7:97: a4:be:b6:11:9f:07:4a:33:01:ea:f4:c4:70:78:53: e5:f0:d2:3b:20:e5:22:29:a2:78:d1:d4:96:17:e2: b5:06:b2:bb:af:88:62:f9:97:cb:49:dd:05:f9:69: d9:2f:d3:8f:ec:7e:61:f6:3a:ab:8b:73:1f:6e:14: 18:c0:81:6b:06:4a:95:3b:ad:f1:dd:45:25:73:c0: 62:ad:9e:13:c8:4a:69:26:77:a1:59:af:7c:09:49: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:39:79:DF:02:46:50:1A:C6:AE:5A:6D:96:32:B6:D1:22:5A:97:23 X509v3 Authority Key Identifier: keyid:7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d9:e2:eb:63:41:41:89:b5:84:0a:ef:d9:5d:f7:4e:eb:8d: f1:1a:9a:01:b2:a4:a2:83:d8:f5:19:8d:2c:35:6c:8e:24:c9: 2b:bf:af:d4:ec:ea:b8:f5:e1:25:70:1b:94:28:e0:24:cb:72: 5c:fa:00:8d:a5:a0:ba:9c:9e:12:47:a9:d7:bc:16:3b:14:7e: 9d:91:53:16:bf:7a:5b:9c:b3:3b:38:f6:86:6d:0a:e4:2d:17: 64:d5:a4:f4:95:3c:fd:69:8d:ea:15:eb:ce:3e:28:ba:5a:b5: 65:d2:12:26:ae:71:1b:c5:cf:70:db:64:dc:e7:e9:99:24:92: b7:a7:63:75:dd:50:0e:37:ef:f3:2a:66:18:94:01:2c:9b:bb: af:c2:87:e1:7a:5c:01:f2:9f:f1:ec:e8:62:36:31:7b:e9:f4: f5:b8:b0:7b:3c:c6:64:49:1e:f2:0f:fa:fb:19:1b:17:0d:fc: a6:a2:5a:c7:ef:8f:14:b0:68:99:b2:12:6e:ed:1d:e3:a6:e5: 3b:21:5a:77:a6:c1:7c:4f:f7:95:56:e6:cb:4c:7a:31:8e:08: 10:89:b8:77:02:72:8e:9e:00:1d:56:d3:d1:2a:89:ed:62:32: c0:0e:99:59:0a:6e:43:a7:5e:8e:54:04:4d:39:15:d4:08:a4: 93:6a:7a:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzMTExMTAvBgNVBAUTKDdCNzc1NEE4MkREMDYzQTQ3RThFQzM1RDE2M0VGNkIy NDQ4RDEyREIwHhcNMjUwNDI0MTU0MDA1WhcNMjUwNTAxMTU0MDA1WjAYMRYwFAYD VQQDEw02ODBhNWI1Ni01YzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hq6DnLtano/Eah8AfrZisBgJT1s2Nf5qYixHLfphysqt+aVsh4iMJdc2fh4 iIeHpyjNIPDfy8bkee38mHu6ZnRma5gZ5bUgpevR5riinqTYjbMJw3ZGMQKNSvSB /Dfs7DuFSVLCoISLv0h5yxn23ZVtl0yDY3xJhUDYTSJiY5hOLc6ldvMEFOsWyYdf z22Nv7CWE8a+QjP3dExS3GpwF6K555ekvrYRnwdKMwHq9MRweFPl8NI7IOUiKaJ4 0dSWF+K1BrK7r4hi+ZfLSd0F+WnZL9OP7H5h9jqri3MfbhQYwIFrBkqVO63x3UUl c8BirZ4TyEppJnehWa98CUkXgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPI5ed8C RlAaxq5abZYyttEiWpcjMB8GA1UdIwQYMBaAFHt3VKgt0GOkfo7DXRY+9rJEjRLb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTMxMS8xM0FGRjZGNkIy NEQxMUU0QjY3RjE4NUZDNEY5QUUwMi9lM2RVcUMzUVk2Ui1qc05kRmo3MnNrU05F dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzZFVxQzNRWTZSLWpzTmRGajcyc2tTTkV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTMxMS8xM0FGRjZGNkIyNEQxMUU0QjY3RjE4NUZDNEY5QUUwMi9lM2RVcUMzUVk2 Ui1qc05kRmo3MnNrU05FdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc2eLrY0FBibWECu/ZXfdO643xGpoBsqSig9j1GY0sNWyOJMkrv6/U 7Oq49eElcBuUKOAky3Jc+gCNpaC6nJ4SR6nXvBY7FH6dkVMWv3pbnLM7OPaGbQrk LRdk1aT0lTz9aY3qFevOPii6WrVl0hImrnEbxc9w22Tc5+mZJJK3p2N13VAON+/z KmYYlAEsm7uvwofhelwB8p/x7OhiNjF76fT1uLB7PMZkSR7yD/r7GRsXDfymolrH 748UsGiZshJu7R3jpuU7IVp3psF8T/eVVubLTHoxjggQibh3AnKOngAdVtPRKont YjLADplZCm5Dp16OVARNORXUCKSTanr9 -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:25 2025 by rpki-client