$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: F7DKM7YeauKdtKN1Xbdp7fu/NrWGi6WlfqzJPMSjGGQ= Subject key identifier: F5:0A:D3:CD:40:E2:92:A0:BD:9C:FF:2C:92:1D:AC:A6:4A:C8:33:63 Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 04AD Signing time: Tue 06 May 2025 23:46:07 +0000 Manifest this update: Tue 06 May 2025 23:46:07 +0000 Manifest next update: Tue 13 May 2025 23:46:07 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: kar/a4oIiXX+hR+emRrSozunoImxttyVLXSOMePw5ak=) 2: BC0960102C5A11ECAB4C276BC4F9AE02.roa (hash: DpB3VrHRzT/Tn6zHL/OsD4hRYceSOtqxmkZcheppe/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: May 6 23:46:07 2025 GMT Not After : May 13 23:46:07 2025 GMT Subject: CN=681a9f3f-de0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6c:10:6c:39:7d:ac:a2:0d:6c:2d:d2:fc:f6: 31:76:f2:a2:bc:de:44:cb:f1:c1:db:2f:e7:cc:89: a6:cf:d2:fc:04:10:d3:ce:3c:86:e6:b7:43:7c:c4: f1:62:0a:63:da:a4:5b:c7:5d:2e:f6:dd:ee:1f:6a: a5:97:54:2a:75:99:90:3f:75:3b:7d:05:50:d6:6e: ba:08:19:71:27:d6:c1:7e:2c:9c:c7:8c:cb:66:9b: c7:7c:09:92:5f:3e:ab:68:93:af:69:55:ce:0b:e3: 75:8d:c7:3e:04:cc:42:fc:00:90:22:62:05:79:c7: 04:29:64:6d:5f:d2:8d:8d:50:f1:6f:c5:30:12:f0: a6:9b:5f:c1:ec:cb:09:cc:fd:46:4a:fd:4e:8f:6f: 7f:32:5d:75:a9:c1:2b:b7:d4:79:d9:95:5e:1f:f8: 9e:f4:25:1e:96:31:5e:8a:6d:ba:8e:3c:ed:fb:22: 6a:83:8d:ef:3c:1a:58:45:a0:43:05:00:62:2a:0d: 9e:c6:08:fd:90:f9:6e:6d:6b:77:65:02:23:fd:0e: 59:82:37:22:00:80:f6:83:7c:10:b8:be:66:d5:1e: c8:ca:8e:98:9b:35:aa:fc:ee:87:ef:19:02:2f:7f: 26:ef:38:af:35:39:f9:76:e5:d6:6d:1c:2b:fe:d6: 52:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0A:D3:CD:40:E2:92:A0:BD:9C:FF:2C:92:1D:AC:A6:4A:C8:33:63 X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:89:91:b3:a8:80:35:53:c3:97:4d:ff:c5:9a:c7:7b:ff:15: ad:c9:ce:97:e2:bd:a5:76:f6:ea:fa:41:dc:5a:3c:35:58:e3: f4:2f:c5:b3:a9:a5:9e:42:d6:c8:7e:9b:94:c2:73:93:1d:5d: e9:3b:7f:e7:1f:f2:f4:c1:f9:68:51:1b:33:64:db:47:33:bd: a5:f9:f2:a6:a7:1a:c9:4f:63:90:65:c8:10:78:37:78:01:24: 82:31:f4:57:d8:1e:bb:e4:50:97:b2:11:eb:af:55:a8:ff:70: 93:39:5f:7b:6c:ec:62:f6:4d:7b:c0:56:dc:ab:3e:d4:4e:62: df:ae:bc:c7:ee:45:c4:3e:b7:96:a3:ec:9a:c3:d4:f2:23:f9: 25:fb:ae:b0:54:b7:b9:e5:12:33:9a:16:44:83:ff:37:59:1d: 10:87:71:a4:7a:bd:0f:d4:33:9c:03:39:a1:54:0b:40:e8:d3: 09:71:45:74:6d:5c:f2:35:c3:d2:dc:e3:61:9a:b4:41:05:97: a9:01:8d:cd:72:05:4f:a3:6d:dc:a3:c4:d5:7c:5f:47:87:70: 60:42:e9:e0:4d:58:be:ea:3f:39:fe:a8:b5:ad:cc:5d:d1:62: bd:dd:48:30:44:ee:80:7e:a0:10:04:75:68:e6:f4:7d:1a:7c: d9:51:7d:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUwNTA2MjM0NjA3WhcNMjUwNTEzMjM0NjA3WjAYMRYwFAYD VQQDEw02ODFhOWYzZi1kZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGwQbDl9rKINbC3S/PYxdvKivN5Ey/HB2y/nzImmz9L8BBDTzjyG5rdDfMTx Ygpj2qRbx10u9t3uH2qll1QqdZmQP3U7fQVQ1m66CBlxJ9bBfiycx4zLZpvHfAmS Xz6raJOvaVXOC+N1jcc+BMxC/ACQImIFeccEKWRtX9KNjVDxb8UwEvCmm1/B7MsJ zP1GSv1Oj29/Ml11qcErt9R52ZVeH/ie9CUeljFeim26jjzt+yJqg43vPBpYRaBD BQBiKg2exgj9kPlubWt3ZQIj/Q5ZgjciAID2g3wQuL5m1R7Iyo6YmzWq/O6H7xkC L38m7zivNTn5duXWbRwr/tZSSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUK081A 4pKgvZz/LJIdrKZKyDNjMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuiZGzqIA1U8OXTf/Fmsd7/xWtyc6X4r2ldvbq+kHcWjw1WOP0L8Wz qaWeQtbIfpuUwnOTHV3pO3/nH/L0wfloURszZNtHM72l+fKmpxrJT2OQZcgQeDd4 ASSCMfRX2B675FCXshHrr1Wo/3CTOV97bOxi9k17wFbcqz7UTmLfrrzH7kXEPreW o+yaw9TyI/kl+66wVLe55RIzmhZEg/83WR0Qh3Gker0P1DOcAzmhVAtA6NMJcUV0 bVzyNcPS3ONhmrRBBZepAY3NcgVPo23co8TVfF9Hh3BgQungTVi+6j85/qi1rcxd 0WK93UgwRO6AfqAQBHVo5vR9GnzZUX2E -----END CERTIFICATE-----Generated at Thu May 8 06:48:56 2025 by rpki-client