$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: 83c3lgXMy8h0XOsDsBG3swG8i8FdOBVyZbCsKfg0S0s= Subject key identifier: 7E:CF:FE:5E:C8:1D:F0:DF:B8:AD:BE:B7:6B:45:01:39:CE:16:10:E5 Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 04E3 Signing time: Fri 22 Aug 2025 23:56:55 +0000 Manifest this update: Fri 22 Aug 2025 23:56:54 +0000 Manifest next update: Fri 29 Aug 2025 23:56:54 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: 43wKSpwdk9rplxat3IkhzFG2xO4aBejV4+OsgPpQpmo=) 2: BC0960102C5A11ECAB4C276BC4F9AE02.roa (hash: DpB3VrHRzT/Tn6zHL/OsD4hRYceSOtqxmkZcheppe/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Aug 22 23:56:54 2025 GMT Not After : Aug 29 23:56:54 2025 GMT Subject: CN=68a903c7-4903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:54:54:80:4a:11:5f:e5:97:39:65:28:6a: 4e:ce:42:eb:78:5b:9b:a0:74:74:f7:ea:a7:6a:8b: 01:f6:37:7e:62:f3:d4:72:d5:e2:64:7d:0d:d0:fc: 59:dd:14:53:1a:2f:c9:c7:b3:4c:a4:1d:f9:73:23: 94:0f:9f:5e:ce:45:c3:43:79:54:7f:c1:bc:69:31: 2a:db:d3:0b:de:af:13:74:ab:b2:41:75:60:42:f6: e2:be:0b:1a:1c:cf:46:96:d8:b3:d8:2e:26:c5:9f: 77:1c:8d:fd:d7:3b:6f:58:4f:eb:f9:eb:8a:e5:c1: 31:92:85:0c:8a:a7:dc:9d:6f:0d:b6:85:0a:32:44: 66:37:ff:58:cd:a4:42:b5:ee:21:20:3a:3d:cc:06: ea:69:51:26:3c:4e:20:34:ce:b8:9d:67:14:40:4d: 4f:cf:73:c8:60:f1:ac:5e:89:59:92:68:94:a0:10: 70:f9:6d:b0:99:a6:21:46:f2:9b:4c:18:67:3d:2e: 8c:73:c5:07:1d:6b:b8:43:85:9c:da:60:b4:21:7c: a8:e4:44:7c:30:4e:96:5d:43:2f:12:55:9d:b4:04: 16:e5:36:bf:47:ae:90:7b:03:de:b7:80:4d:b8:79: d5:34:d1:85:3a:9a:6c:0a:e7:f4:26:d9:3b:4d:e9: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CF:FE:5E:C8:1D:F0:DF:B8:AD:BE:B7:6B:45:01:39:CE:16:10:E5 X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:56:db:e7:b1:c3:33:a2:85:5a:1d:e3:97:96:bd:f3:1c:65: 8f:76:ad:44:9e:fe:dc:84:59:72:43:3b:25:6d:f6:33:9f:04: 9d:97:49:84:6a:b2:61:f2:9d:1b:b2:92:f8:8a:6c:ef:12:d8: 0f:71:85:3f:37:77:8c:33:e9:f9:e1:72:92:26:41:2e:98:7f: b4:6e:c9:86:96:d0:f0:1a:d7:a6:61:a8:77:23:f9:cf:aa:a7: 39:61:ea:4c:62:01:fb:9e:52:7a:7a:4e:ef:ea:05:f2:f6:b1: 67:b9:28:41:f3:80:8b:a3:57:cf:a2:0d:ca:1d:ce:13:5d:c1: bc:91:98:a9:ee:ac:dc:da:52:34:10:be:21:7d:82:d8:c3:44: 99:f3:28:83:f1:52:ec:f7:cc:ef:9e:66:91:3a:5a:e3:08:15: 9a:ac:df:26:6b:7a:8f:b2:9c:26:73:e3:df:f9:d7:59:93:45: e5:20:dd:97:a7:b1:82:1a:c8:1d:3f:82:e9:35:58:db:9d:e1: 62:36:1d:29:8d:2f:8d:e4:32:98:cb:5f:43:f4:b1:54:8b:a1: e4:0c:b2:17:15:d7:bd:e5:86:d1:9c:e9:04:41:56:66:71:ab: f7:8e:e3:2c:9a:f1:cc:6b:1e:bc:c0:92:a2:4c:b0:66:d8:36: 37:30:23:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUwODIyMjM1NjU0WhcNMjUwODI5MjM1NjU0WjAYMRYwFAYD VQQDEw02OGE5MDNjNy00OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjRUVIBKEV/llzllKGpOzkLreFuboHR09+qnaosB9jd+YvPUctXiZH0N0PxZ 3RRTGi/Jx7NMpB35cyOUD59ezkXDQ3lUf8G8aTEq29ML3q8TdKuyQXVgQvbivgsa HM9Gltiz2C4mxZ93HI391ztvWE/r+euK5cExkoUMiqfcnW8NtoUKMkRmN/9YzaRC te4hIDo9zAbqaVEmPE4gNM64nWcUQE1Pz3PIYPGsXolZkmiUoBBw+W2wmaYhRvKb TBhnPS6Mc8UHHWu4Q4Wc2mC0IXyo5ER8ME6WXUMvElWdtAQW5Ta/R66QewPet4BN uHnVNNGFOppsCuf0Jtk7TenK5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7P/l7I HfDfuK2+t2tFATnOFhDlMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4VtvnscMzooVaHeOXlr3zHGWPdq1Env7chFlyQzslbfYznwSdl0mE arJh8p0bspL4imzvEtgPcYU/N3eMM+n54XKSJkEumH+0bsmGltDwGtemYah3I/nP qqc5YepMYgH7nlJ6ek7v6gXy9rFnuShB84CLo1fPog3KHc4TXcG8kZip7qzc2lI0 EL4hfYLYw0SZ8yiD8VLs98zvnmaROlrjCBWarN8ma3qPspwmc+Pf+ddZk0XlIN2X p7GCGsgdP4LpNVjbneFiNh0pjS+N5DKYy19D9LFUi6HkDLIXFde95YbRnOkEQVZm cav3juMsmvHMax68wJKiTLBm2DY3MCOS -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:15 2025 by rpki-client