$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json) Hash identifier: HtbyAJ1PooenPx/J+doDp/tyxOz04Fi+AqZQbH7xa3w= Subject key identifier: C4:A6:0E:55:F3:AB:0C:EB:09:71:68:55:39:29:D3:62:82:F9:CD:9A Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft Manifest number: 01F6 Signing time: Thu 03 Jul 2025 02:32:08 +0000 Manifest this update: Thu 03 Jul 2025 02:32:07 +0000 Manifest next update: Thu 10 Jul 2025 02:32:07 +0000 Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: ZfxsgKwEWh909jowgIw4g0LLoaVn2+HSDR7LBZktgys=) 2: FC589960568411EDAE93DA7FC4F9AE02.roa (hash: RxZVoTNoSPk+sPPkKG/4HF99n9loOp00db2bHVAlJ14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Jul 3 02:32:07 2025 GMT Not After : Jul 10 02:32:07 2025 GMT Subject: CN=6865eba7-5301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:0c:cc:07:25:83:f6:54:67:25:57:f6:de: b8:8f:1c:ab:50:94:7e:88:6d:a0:6a:1c:aa:24:95: 93:57:0b:f2:6a:22:7c:be:01:7f:99:27:5d:12:6a: 91:a0:a8:0a:cb:4b:1e:4b:cc:2a:c8:dc:5e:18:6f: 37:fd:a8:88:df:57:e6:3c:99:0a:be:18:45:ed:97: e0:28:f7:2e:ee:e3:cd:13:e5:ef:a1:15:c4:13:78: ec:d6:b6:8a:3f:66:0e:d3:6e:9d:22:4b:af:f8:60: 5e:76:d1:a1:1e:09:c5:22:d0:a7:06:ff:ce:3d:ae: 89:31:df:95:51:e9:d3:81:0d:06:88:a4:46:f4:21: c4:39:d6:de:ab:34:79:69:6c:31:a2:43:ed:c8:09: 44:0f:69:bf:74:7c:a2:c8:e4:a8:ba:0d:41:35:30: 71:8e:dd:4d:ad:f6:0b:e1:a5:eb:65:38:be:db:c4: 35:9e:b9:05:5d:91:81:f2:7c:7a:85:ab:73:f0:fa: 87:3f:55:76:f4:ad:2a:74:cb:f0:05:ce:7e:e5:00: e3:9f:8c:89:52:7f:87:66:f8:e3:ba:99:37:c7:1e: 66:5e:ed:05:8c:85:77:2b:02:a5:06:69:6a:9a:fb: 7b:b1:33:8b:22:81:4d:a0:43:9e:08:5e:78:7c:fd: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A6:0E:55:F3:AB:0C:EB:09:71:68:55:39:29:D3:62:82:F9:CD:9A X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:a1:0b:e0:83:b2:dd:cf:24:9e:76:2a:eb:59:3f:ed:d8:a5: bf:19:b1:12:21:8e:a5:f0:5b:a3:6b:a1:5e:ea:ce:ff:54:bc: 54:9f:8c:92:8b:ba:69:fa:ef:b0:9f:2d:ab:ff:55:17:4d:c0: 4a:ea:b1:89:37:99:9b:39:9f:a3:8e:9c:8c:76:1d:f7:bc:24: f4:e4:51:df:f2:51:f2:d5:a6:64:e6:d7:4d:9a:cf:ad:66:b4: 64:c0:b4:12:d1:5c:d8:ab:ef:6c:a6:da:06:2e:c3:4f:c9:34: c2:df:f8:ea:87:b2:2d:48:fd:16:0d:4c:ce:9e:8b:9a:13:1d: 91:ff:fa:66:cb:08:10:3b:a6:75:23:31:ff:52:63:4c:6a:a4: ff:d0:e0:8f:94:62:5d:0b:40:01:83:a1:60:94:cf:74:49:ea: 98:4a:19:ca:c5:d3:93:18:3e:97:e6:0c:cb:8b:de:00:9e:1d: 3e:8b:ec:fb:c3:23:ec:0a:b6:24:36:e5:3c:1b:88:a3:78:a2: c0:d3:79:64:7a:29:07:c6:2d:dd:64:9a:66:89:78:a2:36:63: a3:9b:fa:25:59:c0:58:d3:15:6f:67:0d:8f:f7:4a:52:ba:75: d7:ec:f0:49:b2:c3:e5:3b:19:83:63:fe:ee:7b:9f:40:34:de: ac:3b:46:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUwNzAzMDIzMjA3WhcNMjUwNzEwMDIzMjA3WjAYMRYwFAYD VQQDEw02ODY1ZWJhNy01MzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyi0MzAclg/ZUZyVX9t64jxyrUJR+iG2gahyqJJWTVwvyaiJ8vgF/mSddEmqR oKgKy0seS8wqyNxeGG83/aiI31fmPJkKvhhF7ZfgKPcu7uPNE+XvoRXEE3js1raK P2YO026dIkuv+GBedtGhHgnFItCnBv/OPa6JMd+VUenTgQ0GiKRG9CHEOdbeqzR5 aWwxokPtyAlED2m/dHyiyOSoug1BNTBxjt1NrfYL4aXrZTi+28Q1nrkFXZGB8nx6 hatz8PqHP1V29K0qdMvwBc5+5QDjn4yJUn+HZvjjupk3xx5mXu0FjIV3KwKlBmlq mvt7sTOLIoFNoEOeCF54fP1dcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSmDlXz qwzrCXFoVTkp02KC+c2aMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB UXptUHQ3STVzRlRjOGpmTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhoQvgg7LdzySedirrWT/t2KW/GbESIY6l8Fuja6Fe6s7/VLxUn4yS i7pp+u+wny2r/1UXTcBK6rGJN5mbOZ+jjpyMdh33vCT05FHf8lHy1aZk5tdNms+t ZrRkwLQS0VzYq+9sptoGLsNPyTTC3/jqh7ItSP0WDUzOnouaEx2R//pmywgQO6Z1 IzH/UmNMaqT/0OCPlGJdC0ABg6FglM90SeqYShnKxdOTGD6X5gzLi94Anh0+i+z7 wyPsCrYkNuU8G4ijeKLA03lkeikHxi3dZJpmiXiiNmOjm/olWcBY0xVvZw2P90pS unXX7PBJssPlOxmDY/7ue59ANN6sO0YO -----END CERTIFICATE-----Generated at Fri Jul 4 14:42:57 2025 by rpki-client