$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft File: EE3r2037i5__46TvfbFlevst9-I.mft (raw, json) Hash identifier: GMT7gpIw5VTOITyJuYtFq9BwUPbuWLjf6PX7n7mQIKg= Subject key identifier: 75:8F:2D:44:5A:BF:D1:BC:27:C9:43:B5:C4:DD:F9:8F:A3:F6:18:5B Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2 Certificate issuer: /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft Manifest number: 018B Signing time: Fri 25 Apr 2025 02:43:34 +0000 Manifest this update: Fri 25 Apr 2025 02:43:33 +0000 Manifest next update: Fri 02 May 2025 02:43:33 +0000 Files and hashes: 1: EE3r2037i5__46TvfbFlevst9-I.crl (hash: fY+NxNYPazE+CpSdEogQK3VqIX0o/6RqVcA0Lm8pq5U=) 2: 01003962C9DC11ED8D68375EC4F9AE02.roa (hash: KSfw6IBecAIXXXtQTk/28sHhzeNjJPQPF3dORiab4B8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F10DC, serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2 Validity Not Before: Apr 25 02:43:33 2025 GMT Not After : May 2 02:43:33 2025 GMT Subject: CN=680af6d5-f36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:3d:7a:3b:de:93:7b:01:90:9b:3b:6d:43: f5:39:15:0e:e3:3a:f6:bc:72:0c:fb:9c:c4:e6:51: cc:55:49:35:c3:81:42:9d:d1:18:ec:98:00:44:42: e9:06:e3:22:f8:0b:5a:0d:ba:64:cc:d6:49:8e:1a: 95:15:a6:f7:32:3c:77:74:d1:d3:61:9a:dd:af:9c: 9c:ad:60:19:bb:2b:f8:32:68:6b:44:f0:71:b8:11: 05:bf:46:30:5c:02:e1:ab:b8:80:bb:2b:4a:33:ea: 91:11:de:ef:28:d4:23:cc:a9:e1:50:be:ab:d4:b9: 5c:99:d7:43:5c:75:88:31:62:1b:6a:55:01:2c:a8: 07:af:4b:7f:8f:6a:84:54:a1:aa:d1:26:3a:63:bf: c2:5a:10:bc:0e:04:a8:55:d7:30:b5:bc:60:7f:c3: 1a:84:91:dd:9b:be:e3:cc:42:30:72:9f:8e:41:a4: ab:52:1c:ce:38:fe:fa:40:ef:ae:0f:b9:d9:12:27: 22:d5:50:10:78:3b:2c:24:34:15:f2:35:3b:3f:32: ac:eb:2d:eb:34:07:7b:43:ba:82:d7:a1:fd:5c:95: e9:f5:28:00:9c:93:33:56:15:a7:82:09:e5:d0:8d: ce:95:0d:37:32:69:a8:85:95:2e:87:6f:1c:ed:76: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8F:2D:44:5A:BF:D1:BC:27:C9:43:B5:C4:DD:F9:8F:A3:F6:18:5B X509v3 Authority Key Identifier: keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:e0:b9:53:24:b0:ab:47:f0:53:72:53:79:a5:18:b4:e7:f7: a3:12:3a:b2:ec:ae:70:0e:c1:fa:f0:bb:34:c5:1e:4c:cc:bb: 45:60:7e:72:73:21:68:c7:cf:b1:f7:89:39:45:a5:62:49:d2: 3c:23:66:67:8c:1d:68:c5:50:86:ad:2a:d6:3f:07:15:55:77: d1:6f:c0:7b:04:6f:06:ef:2b:12:04:1a:d0:8a:b5:5a:ba:a8: db:ad:0f:9d:3f:ab:45:ac:b6:66:b1:5e:06:27:05:05:3c:00: a2:be:9f:68:a4:8f:9c:38:85:66:46:de:db:6b:b9:45:c9:87: 4a:95:ec:59:9c:7e:e7:32:c4:56:6a:b8:b6:15:e1:cb:20:f3: ef:3c:bb:79:83:24:27:8b:07:8d:93:2d:19:0d:a6:b7:46:f1: 0d:d2:1a:02:c0:47:d0:9a:11:36:50:1f:84:26:07:3f:fc:0b: 3e:44:0d:32:e8:63:51:29:27:5e:96:eb:0d:94:89:5c:b8:cf: 14:6f:3b:94:ef:74:da:4e:36:a7:1a:cb:62:02:24:bb:e2:ce: b9:74:43:7a:a0:1b:c9:6e:0f:e6:60:fe:c2:c8:76:56:6b:6e: 92:e8:57:58:77:44:5f:11:97:bd:22:be:d4:20:6a:11:2d:cc: 04:c2:da:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEwREMxMTAvBgNVBAUTKDEwNERFQkRCNERGQjhCOUZGRkUzQTRFRjdEQjE2NTdB RkIyREY3RTIwHhcNMjUwNDI1MDI0MzMzWhcNMjUwNTAyMDI0MzMzWjAYMRYwFAYD VQQDEw02ODBhZjZkNS1mMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryc9ejvek3sBkJs7bUP1ORUO4zr2vHIM+5zE5lHMVUk1w4FCndEY7JgARELp BuMi+AtaDbpkzNZJjhqVFab3Mjx3dNHTYZrdr5ycrWAZuyv4MmhrRPBxuBEFv0Yw XALhq7iAuytKM+qREd7vKNQjzKnhUL6r1LlcmddDXHWIMWIbalUBLKgHr0t/j2qE VKGq0SY6Y7/CWhC8DgSoVdcwtbxgf8MahJHdm77jzEIwcp+OQaSrUhzOOP76QO+u D7nZEici1VAQeDssJDQV8jU7PzKs6y3rNAd7Q7qC16H9XJXp9SgAnJMzVhWnggnl 0I3OlQ03MmmohZUuh28c7Xay6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWPLURa v9G8J8lDtcTd+Y+j9hhbMB8GA1UdIwQYMBaAFBBN69tN+4uf/+Ok732xZXr7Lffi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTBEQy84NUI4RTRBQUM5 RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1X180NlR2ZmJGbGV2c3Q5 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFM3IyMDM3aTVfXzQ2VHZmYkZsZXZzdDktSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTBEQy84NUI4RTRBQUM5RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1 X180NlR2ZmJGbGV2c3Q5LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+4LlTJLCrR/BTclN5pRi05/ejEjqy7K5wDsH68Ls0xR5MzLtFYH5y cyFox8+x94k5RaViSdI8I2ZnjB1oxVCGrSrWPwcVVXfRb8B7BG8G7ysSBBrQirVa uqjbrQ+dP6tFrLZmsV4GJwUFPACivp9opI+cOIVmRt7ba7lFyYdKlexZnH7nMsRW ari2FeHLIPPvPLt5gyQniweNky0ZDaa3RvEN0hoCwEfQmhE2UB+EJgc//As+RA0y 6GNRKSdelusNlIlcuM8UbzuU73TaTjanGstiAiS74s65dEN6oBvJbg/mYP7CyHZW a26S6FdYd0RfEZe9Ir7UIGoRLcwEwtpk -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:46 2025 by rpki-client