$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: LVB/pHKQWjwIDG8HYuhLjXzTuE68Is8ZMxUA9Uxwbos= Subject key identifier: 2B:88:31:B5:F5:2E:CD:AD:66:2F:36:D9:DF:CF:86:F9:15:72:F5:43 Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 04A7 Signing time: Thu 24 Apr 2025 23:42:22 +0000 Manifest this update: Thu 24 Apr 2025 23:42:22 +0000 Manifest next update: Thu 01 May 2025 23:42:22 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: Og2BrD5TldaP2e4KoX07HeUEaNVr/4qvtPRm83oihis=) 2: BC0960102C5A11ECAB4C276BC4F9AE02.roa (hash: DpB3VrHRzT/Tn6zHL/OsD4hRYceSOtqxmkZcheppe/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Apr 24 23:42:22 2025 GMT Not After : May 1 23:42:22 2025 GMT Subject: CN=680acc5e-b0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:78:dc:a4:b8:fe:ef:7a:b0:bc:91:1e:49:27: 49:2d:cc:54:53:7c:56:a9:87:f6:ba:8c:88:bf:18: 1b:a1:a5:a8:02:02:81:85:e2:66:bc:62:f3:01:e3: 1c:02:8e:89:c6:51:61:f4:96:91:ac:29:55:57:fc: 95:04:94:5c:f5:0c:19:dc:e5:cd:0d:33:1f:56:41: c9:0b:7a:01:da:61:96:83:c2:7a:8e:76:57:d3:2b: 57:ef:47:fa:13:6f:d1:d6:91:95:bf:b1:fb:32:2f: 5c:3c:49:05:ea:0f:52:49:bc:1d:af:6f:17:26:b9: 69:17:15:d4:4d:15:ab:b0:f1:45:f0:9a:ab:3b:0f: fe:83:8b:ec:13:b1:75:8e:c9:f3:06:73:a0:9c:65: 68:00:20:28:b6:c2:3e:33:21:f4:96:4e:56:d9:4a: 66:4a:13:31:e2:b6:59:3d:8d:a8:d3:96:fb:c8:6c: d0:f6:48:b5:87:8a:9c:8c:d7:63:7a:89:5e:0e:93: fe:79:72:39:51:70:61:b8:8c:87:4a:f3:93:2b:70: b2:6b:d8:4e:a5:51:5b:53:2a:77:5f:52:80:4e:05: 72:b9:4d:94:df:69:19:c9:fa:9d:7a:b5:fd:46:6b: 84:f3:6e:8e:e7:42:5d:a0:1d:98:48:0d:25:d5:de: 15:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:88:31:B5:F5:2E:CD:AD:66:2F:36:D9:DF:CF:86:F9:15:72:F5:43 X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6f:dc:72:8f:4c:05:03:ef:95:c7:54:50:f2:c5:ad:41:dc: f8:9a:43:34:dc:b8:c0:c0:d4:b8:10:0b:a1:ed:29:6d:18:e3: 27:f8:34:70:be:6d:dd:45:03:28:58:80:02:d0:7c:e9:18:7b: b5:94:3f:05:7d:d5:9c:d2:57:c5:4d:99:dd:68:cc:97:24:7f: 10:24:13:aa:4d:c5:69:79:a3:2a:fd:89:f6:90:98:7e:dc:be: ec:85:8e:3e:20:32:5b:1d:39:99:9b:27:d2:a4:21:6d:29:6e: 7d:26:43:17:e4:a6:56:2e:46:73:90:d4:5d:91:d4:13:1d:f3: 13:32:a1:b9:03:1e:f8:fe:4b:1a:c6:bd:b9:61:c2:18:e6:83: 94:37:83:51:d0:d0:0e:33:56:7c:bc:69:16:b3:47:b0:2e:4d: 72:1a:e9:74:be:34:15:2a:96:48:8a:fb:9d:56:14:76:5c:f4: 1e:83:fa:02:a6:91:8a:e3:99:97:73:80:1b:82:33:53:e1:cb: 99:7a:81:5e:64:46:17:5b:e2:a8:7a:04:27:e6:0f:7c:ed:c7: 9b:c8:13:64:7e:ff:1f:f8:ed:74:47:fe:d0:b0:50:7a:de:b0: bf:27:b1:c2:bc:71:f4:98:44:c9:58:45:81:30:24:22:99:47: 1e:ec:80:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUwNDI0MjM0MjIyWhcNMjUwNTAxMjM0MjIyWjAYMRYwFAYD VQQDEw02ODBhY2M1ZS1iMGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3jcpLj+73qwvJEeSSdJLcxUU3xWqYf2uoyIvxgboaWoAgKBheJmvGLzAeMc Ao6JxlFh9JaRrClVV/yVBJRc9QwZ3OXNDTMfVkHJC3oB2mGWg8J6jnZX0ytX70f6 E2/R1pGVv7H7Mi9cPEkF6g9SSbwdr28XJrlpFxXUTRWrsPFF8JqrOw/+g4vsE7F1 jsnzBnOgnGVoACAotsI+MyH0lk5W2UpmShMx4rZZPY2o05b7yGzQ9ki1h4qcjNdj eoleDpP+eXI5UXBhuIyHSvOTK3Cya9hOpVFbUyp3X1KATgVyuU2U32kZyfqderX9 RmuE826O50JdoB2YSA0l1d4VWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuIMbX1 Ls2tZi822d/PhvkVcvVDMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyb9xyj0wFA++Vx1RQ8sWtQdz4mkM03LjAwNS4EAuh7SltGOMn+DRw vm3dRQMoWIAC0HzpGHu1lD8FfdWc0lfFTZndaMyXJH8QJBOqTcVpeaMq/Yn2kJh+ 3L7shY4+IDJbHTmZmyfSpCFtKW59JkMX5KZWLkZzkNRdkdQTHfMTMqG5Ax74/ksa xr25YcIY5oOUN4NR0NAOM1Z8vGkWs0ewLk1yGul0vjQVKpZIivudVhR2XPQeg/oC ppGK45mXc4AbgjNT4cuZeoFeZEYXW+KoegQn5g987cebyBNkfv8f+O10R/7QsFB6 3rC/J7HCvHH0mETJWEWBMCQimUce7IDN -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:17 2025 by rpki-client