$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft File: E3ay871bTTWtlSsXkNgnRpktQW8.mft (raw, json) Hash identifier: IWIPjPwB0vOQ6HEfFgqp7rriLixrGv2MonDyuv9oZiY= Subject key identifier: 01:52:7D:CA:D7:B7:4E:09:7A:2D:4D:A1:0B:4C:21:D7:99:22:D6:3E Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F Certificate issuer: /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft Manifest number: 049F Signing time: Sat 05 Jul 2025 01:04:53 +0000 Manifest this update: Sat 05 Jul 2025 01:04:52 +0000 Manifest next update: Sat 12 Jul 2025 01:04:52 +0000 Files and hashes: 1: E3ay871bTTWtlSsXkNgnRpktQW8.crl (hash: pRvtKDiPGyMSaO2JVKkoYUqWWlLmgmy4P8sI+uylc8k=) 2: F03F059C391D11EF9A100142C4F9AE02.roa (hash: 5xPsXsO/x9vu20ZDUf9oCZh2wciZeGjOc7UUq3/XpCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183A80, serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F Validity Not Before: Jul 5 01:04:52 2025 GMT Not After : Jul 12 01:04:52 2025 GMT Subject: CN=68687a35-1fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:75:d4:a5:ee:bb:26:b6:d6:7c:53:7e:d6:e3: 31:4c:f5:12:a0:9a:62:ac:61:64:33:cd:1f:d7:2e: 4b:cf:75:d9:49:e9:6c:a4:e3:1c:0e:a1:e0:23:bd: 6b:22:e6:0f:63:b3:da:40:a5:ab:16:92:ed:df:27: cb:09:0d:e8:a0:b2:b4:c8:75:dd:be:5b:44:7c:3e: 19:9a:21:48:55:bf:52:7c:0f:e3:1e:7c:ea:d7:4d: 41:c0:1e:aa:3e:73:98:65:de:0d:72:a3:9a:e0:a9: 9e:16:67:bd:c4:1f:08:cb:24:7f:7f:83:f7:b0:20: 7f:01:14:07:66:7d:c4:1f:b7:55:57:68:f9:ab:75: 52:4c:c3:07:d1:2c:af:1c:d9:d7:45:b9:a4:86:97: 3d:e7:2d:92:96:36:a7:2f:19:c5:e5:cd:24:77:7a: 45:03:98:8f:16:a2:ad:d4:ac:e9:4f:87:c2:0d:b0: 1b:cb:60:33:d8:37:23:70:a6:28:e2:bd:39:ba:e1: e1:68:ed:6c:ba:9b:ab:96:72:ab:04:f4:fd:5f:6a: 55:10:cd:be:42:fb:55:83:af:f1:9a:ed:97:56:34: e4:4f:89:5f:b4:af:f4:89:33:17:b7:02:fc:ff:d6: 39:a8:06:da:5e:c1:3b:f1:ba:6f:ef:ca:14:e9:26: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:52:7D:CA:D7:B7:4E:09:7A:2D:4D:A1:0B:4C:21:D7:99:22:D6:3E X509v3 Authority Key Identifier: keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:57:b2:8a:91:d8:10:10:1c:de:cd:62:1d:62:41:dd:2f:69: 71:fa:91:71:91:5b:c3:95:7a:98:fb:fe:a0:08:d9:0e:45:e1: 9e:e3:cc:db:6c:77:08:0d:d7:78:fb:29:1a:5c:96:2f:8a:dc: 5c:2c:36:e4:17:f7:ae:7a:30:43:ef:33:e1:d2:a8:00:30:54: 1f:be:9f:1f:10:b6:c8:70:f9:46:4a:76:9a:b9:2b:0c:d3:0e: 49:c1:26:25:6f:d1:3c:7a:da:e4:ec:89:8f:14:df:50:69:d4: 55:b0:fc:72:e8:e1:f6:2e:a2:d2:40:49:d8:b4:e4:79:61:b8: 71:b5:68:31:f4:8c:a4:d4:6e:36:02:0b:e4:9c:78:60:2e:79: 14:58:c8:80:7c:b8:63:36:c9:94:59:88:08:a5:8f:f7:f1:8a: b5:68:a7:04:5a:6a:eb:ad:f4:47:f5:fd:a4:4b:bd:61:ee:b9: 5f:c5:d5:a9:96:d3:e1:ec:62:6b:0d:09:95:15:be:2a:10:0f: 93:2b:63:a1:6e:f5:39:d6:32:0e:7e:46:05:31:0e:08:c7:53: 0b:74:00:cc:e6:65:bf:3f:5a:7c:06:17:90:b8:c2:c0:c6:ea: 3f:f0:f5:a6:32:b7:a7:92:39:4a:a6:84:e6:d2:16:06:13:23: d7:3d:f2:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNBODAxMTAvBgNVBAUTKDEzNzZCMkYzQkQ1QjREMzVBRDk1MkIxNzkwRDgyNzQ2 OTkyRDQxNkYwHhcNMjUwNzA1MDEwNDUyWhcNMjUwNzEyMDEwNDUyWjAYMRYwFAYD VQQDEw02ODY4N2EzNS0xZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHXUpe67JrbWfFN+1uMxTPUSoJpirGFkM80f1y5Lz3XZSelspOMcDqHgI71r IuYPY7PaQKWrFpLt3yfLCQ3ooLK0yHXdvltEfD4ZmiFIVb9SfA/jHnzq101BwB6q PnOYZd4NcqOa4KmeFme9xB8IyyR/f4P3sCB/ARQHZn3EH7dVV2j5q3VSTMMH0Syv HNnXRbmkhpc95y2SljanLxnF5c0kd3pFA5iPFqKt1KzpT4fCDbAby2Az2DcjcKYo 4r05uuHhaO1supurlnKrBPT9X2pVEM2+QvtVg6/xmu2XVjTkT4lftK/0iTMXtwL8 /9Y5qAbaXsE78bpv78oU6Sbo4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFSfcrX t04Jei1NoQtMIdeZItY+MB8GA1UdIwQYMBaAFBN2svO9W001rZUrF5DYJ0aZLUFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4 MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRUV3RsU3NYa05nblJwa3RR VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzYXk4NzFiVFRXdGxTc1hrTmduUnBrdFFXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9FM2F5ODcxYlRU V3RsU3NYa05nblJwa3RRVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIV7KKkdgQEBzezWIdYkHdL2lx+pFxkVvDlXqY+/6gCNkOReGe48zb bHcIDdd4+ykaXJYvitxcLDbkF/euejBD7zPh0qgAMFQfvp8fELbIcPlGSnaauSsM 0w5JwSYlb9E8etrk7ImPFN9QadRVsPxy6OH2LqLSQEnYtOR5YbhxtWgx9Iyk1G42 AgvknHhgLnkUWMiAfLhjNsmUWYgIpY/38Yq1aKcEWmrrrfRH9f2kS71h7rlfxdWp ltPh7GJrDQmVFb4qEA+TK2OhbvU51jIOfkYFMQ4Ix1MLdADM5mW/P1p8BheQuMLA xuo/8PWmMrenkjlKpoTm0hYGEyPXPfJO -----END CERTIFICATE-----Generated at Sat Jul 5 02:29:17 2025 by rpki-client