$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: hGOLtJdzLcwvJ6gsox2C9/LdYFMN67/re7FrcKvvneM= Subject key identifier: B6:AB:9F:8F:4D:F4:4A:BA:2E:6D:39:CB:A3:73:A1:FD:2A:95:BE:2D Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 04C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 04C0 Signing time: Sat 14 Jun 2025 23:34:45 +0000 Manifest this update: Sat 14 Jun 2025 23:34:45 +0000 Manifest next update: Sat 21 Jun 2025 23:34:45 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: G1vPbLvrTIBULjQsPNF3bM8pSmpEdx/w6er27yQh0c4=) 2: BC0960102C5A11ECAB4C276BC4F9AE02.roa (hash: DpB3VrHRzT/Tn6zHL/OsD4hRYceSOtqxmkZcheppe/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Jun 14 23:34:45 2025 GMT Not After : Jun 21 23:34:45 2025 GMT Subject: CN=684e0715-26be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:df:06:02:c6:c6:d9:64:0c:63:6f:a4:00:01: 06:e8:ae:e5:35:f3:85:33:b9:22:1f:33:62:a7:f6: 85:62:5b:45:41:ae:49:25:1b:07:38:15:dc:45:64: 96:b5:08:8f:76:75:a6:d7:73:f8:e9:88:99:1f:f7: 89:23:74:02:cf:8b:ca:30:da:39:aa:15:96:d7:0e: 91:4c:13:aa:7d:92:32:8f:30:3e:ba:84:05:6e:9c: f3:20:70:bc:a9:3f:ef:46:7b:a9:cf:f9:5e:7b:33: b9:b8:47:df:dd:af:91:db:77:61:43:87:90:b5:0a: d8:ec:37:d2:c5:86:6a:c5:a0:43:8b:31:d8:92:94: f9:25:fc:16:38:af:40:24:95:c9:e8:14:ef:2c:3f: 3b:07:ef:73:b2:4a:0b:2b:6b:e3:31:e7:cf:2c:27: f5:4d:bf:b4:eb:b2:a4:29:9f:21:d0:17:13:20:9e: 7b:a6:69:0d:60:6f:94:f0:74:df:9f:d6:59:ba:53: 3d:73:e2:a1:67:bf:19:4f:be:40:99:a9:63:8f:91: cf:79:c1:d7:ef:4e:9c:da:9e:81:b4:d2:d6:bf:83: 97:7b:5e:92:b9:55:46:11:16:c7:e4:1b:fc:f0:38: bc:0a:f8:58:66:91:be:db:01:4c:00:ac:6d:58:79: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AB:9F:8F:4D:F4:4A:BA:2E:6D:39:CB:A3:73:A1:FD:2A:95:BE:2D X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:40:67:fd:a4:36:36:64:30:01:32:f9:34:da:60:bf:10:57: ae:26:d5:bd:78:f5:db:8a:8e:f4:36:b7:cb:28:e6:a0:c1:62: 80:70:ea:23:77:5d:0a:1b:97:be:59:b1:06:30:32:51:01:72: 24:20:48:7d:b9:c8:79:11:58:7b:4b:a0:d2:3a:b2:12:bb:21: 44:a1:65:47:4f:ab:4a:5d:0c:c5:3b:80:c1:e9:85:56:ed:8a: 97:82:39:ce:78:78:ad:0e:bb:24:f6:5b:c4:00:f5:f3:44:55: 42:77:1e:a7:97:61:4a:5b:e0:08:2f:b7:73:5b:45:a8:4c:a6: 63:66:c6:78:28:b3:e2:28:c4:19:45:2f:68:4b:14:96:d4:9d: 91:5c:72:82:c8:5a:26:ea:f4:00:9f:98:fe:54:51:4a:7c:11: c5:fa:18:9b:92:b3:2e:80:2a:4e:45:19:97:3a:5f:43:ee:5f: d0:f0:0a:70:58:88:ea:05:ae:7f:13:5c:65:b8:4e:60:e1:f2: a1:38:3f:05:fc:b7:e1:05:2d:d2:29:a1:ac:e6:c6:59:18:6c: f7:de:6c:e4:5c:25:78:81:ef:db:03:d1:83:46:c1:37:2e:04: 8d:85:28:b0:07:52:39:37:ab:ce:ae:bd:c6:14:b6:99:0e:43: ec:a3:23:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUwNjE0MjMzNDQ1WhcNMjUwNjIxMjMzNDQ1WjAYMRYwFAYD VQQDEw02ODRlMDcxNS0yNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkN8GAsbG2WQMY2+kAAEG6K7lNfOFM7kiHzNip/aFYltFQa5JJRsHOBXcRWSW tQiPdnWm13P46YiZH/eJI3QCz4vKMNo5qhWW1w6RTBOqfZIyjzA+uoQFbpzzIHC8 qT/vRnupz/leezO5uEff3a+R23dhQ4eQtQrY7DfSxYZqxaBDizHYkpT5JfwWOK9A JJXJ6BTvLD87B+9zskoLK2vjMefPLCf1Tb+067KkKZ8h0BcTIJ57pmkNYG+U8HTf n9ZZulM9c+KhZ78ZT75Amaljj5HPecHX706c2p6BtNLWv4OXe16SuVVGERbH5Bv8 8Di8CvhYZpG+2wFMAKxtWHm9SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLarn49N 9Eq6Lm05y6Nzof0qlb4tMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrQGf9pDY2ZDABMvk02mC/EFeuJtW9ePXbio70NrfLKOagwWKAcOoj d10KG5e+WbEGMDJRAXIkIEh9uch5EVh7S6DSOrISuyFEoWVHT6tKXQzFO4DB6YVW 7YqXgjnOeHitDrsk9lvEAPXzRFVCdx6nl2FKW+AIL7dzW0WoTKZjZsZ4KLPiKMQZ RS9oSxSW1J2RXHKCyFom6vQAn5j+VFFKfBHF+hibkrMugCpORRmXOl9D7l/Q8Apw WIjqBa5/E1xluE5g4fKhOD8F/LfhBS3SKaGs5sZZGGz33mzkXCV4ge/bA9GDRsE3 LgSNhSiwB1I5N6vOrr3GFLaZDkPsoyNT -----END CERTIFICATE-----Generated at Sun Jun 15 05:02:16 2025 by rpki-client