$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json) Hash identifier: eT+FMxxU3UrDLuyB3ay7VYrWGvfO6BRd+n6FnkdyEoE= Subject key identifier: 42:FB:E7:41:06:5D:CB:A3:E4:7B:B2:DE:10:D5:50:3E:F9:CB:6C:E0 Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft Manifest number: 04C7 Signing time: Sat 28 Jun 2025 23:24:32 +0000 Manifest this update: Sat 28 Jun 2025 23:24:32 +0000 Manifest next update: Sat 05 Jul 2025 23:24:32 +0000 Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: 1kEkiFOXkTczwTNtIuyrxLDJkMMGORxadulEh5dRGAs=) 2: BC0960102C5A11ECAB4C276BC4F9AE02.roa (hash: DpB3VrHRzT/Tn6zHL/OsD4hRYceSOtqxmkZcheppe/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Jun 28 23:24:32 2025 GMT Not After : Jul 5 23:24:32 2025 GMT Subject: CN=686079b0-44fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:fa:25:33:47:f6:e9:68:0b:40:41:26:07: 98:e6:e0:df:49:43:69:38:0d:d4:d8:a3:7b:67:db: f7:c6:57:20:16:cd:bb:53:78:ed:85:d8:d1:83:e1: fd:fc:da:c3:22:18:fd:33:ec:d4:1f:0d:34:c2:cd: bc:02:43:e5:f5:2d:15:68:96:a9:cc:e2:af:b8:c4: 6d:16:b5:4f:9f:cb:76:22:83:bc:ff:d2:4c:c6:51: 24:ea:02:f5:85:d2:1b:6b:4a:46:40:94:5b:9c:be: 65:23:be:94:7f:6a:17:7e:19:07:74:06:dd:df:83: df:60:c8:72:1d:ae:f7:eb:06:4d:07:e0:a4:ae:6d: 60:94:83:3f:19:15:6c:81:84:ff:e4:2c:d0:d2:00: f0:4d:b6:5a:a7:fe:bf:d8:5f:c5:d7:73:55:48:a4: 6d:07:38:97:22:89:5a:98:b9:3a:d2:0e:6f:cd:0f: 7d:8c:fd:f4:da:5c:72:3d:2b:df:1a:03:f6:a8:c8: ec:10:da:51:1d:d9:b0:42:87:2a:08:6a:a4:ab:dc: 04:8c:11:72:fe:91:71:7d:cb:1e:67:d0:d4:4a:77: 3a:66:e9:02:3f:2f:99:64:59:ab:6b:d3:e4:f0:78: b1:e4:75:66:b3:96:81:e0:86:46:9b:41:d3:1a:f0: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FB:E7:41:06:5D:CB:A3:E4:7B:B2:DE:10:D5:50:3E:F9:CB:6C:E0 X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f3:45:cc:c8:e6:45:25:7f:3a:e1:0d:ab:b0:d0:32:95:66: e2:06:08:e1:48:5d:dd:6b:1e:3a:d9:38:70:c5:12:21:21:a7: d6:66:fd:13:35:ee:cc:6c:78:df:d9:92:d0:98:88:59:63:19: ca:ee:bc:d0:13:cf:84:d7:d0:7f:b4:c7:3e:c7:34:f8:61:c9: 4b:24:b3:bc:a1:6d:03:1a:c9:0e:69:e4:d0:49:76:59:47:88: b9:f8:e0:ac:f7:f3:ca:5f:6d:63:e5:50:af:8c:92:43:a0:ec: 85:40:86:68:7a:95:0e:dd:d7:5a:c5:0c:f6:67:9f:a8:cb:ce: db:6d:43:ac:a4:cd:26:d6:da:dd:c7:c3:49:40:4a:8f:fd:60: 24:19:4c:16:ca:d0:df:cd:f0:f2:8b:41:c8:c7:ce:62:86:4f: f1:c8:85:b9:fb:d4:46:24:f2:e2:13:29:e6:11:cd:be:a7:2e: db:01:b9:7c:7f:e5:9e:76:1b:09:18:ef:13:10:7d:fa:8b:0b: cc:f5:a0:b2:89:89:bc:4a:91:95:c5:3a:e7:21:54:1c:14:70: 3d:c9:6e:c5:1e:a8:32:0f:d7:c4:c3:f0:18:ce:5a:40:87:7e: 00:3c:11:60:12:05:b3:81:d7:c8:be:ab:20:da:8b:c6:83:8a: fa:9c:8d:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUwNjI4MjMyNDMyWhcNMjUwNzA1MjMyNDMyWjAYMRYwFAYD VQQDEw02ODYwNzliMC00NGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowH6JTNH9uloC0BBJgeY5uDfSUNpOA3U2KN7Z9v3xlcgFs27U3jthdjRg+H9 /NrDIhj9M+zUHw00ws28AkPl9S0VaJapzOKvuMRtFrVPn8t2IoO8/9JMxlEk6gL1 hdIba0pGQJRbnL5lI76Uf2oXfhkHdAbd34PfYMhyHa736wZNB+Ckrm1glIM/GRVs gYT/5CzQ0gDwTbZap/6/2F/F13NVSKRtBziXIolamLk60g5vzQ99jP302lxyPSvf GgP2qMjsENpRHdmwQocqCGqkq9wEjBFy/pFxfcseZ9DUSnc6ZukCPy+ZZFmra9Pk 8Hix5HVms5aB4IZGm0HTGvAZYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEL750EG Xcuj5Huy3hDVUD75y2zgMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI4OC8xRkREQTdCMDJDNTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRU X1BmQ2pjRGZzLW45cC05SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT80XMyOZFJX864Q2rsNAylWbiBgjhSF3dax462ThwxRIhIafWZv0T Ne7MbHjf2ZLQmIhZYxnK7rzQE8+E19B/tMc+xzT4YclLJLO8oW0DGskOaeTQSXZZ R4i5+OCs9/PKX21j5VCvjJJDoOyFQIZoepUO3ddaxQz2Z5+oy87bbUOspM0m1trd x8NJQEqP/WAkGUwWytDfzfDyi0HIx85ihk/xyIW5+9RGJPLiEynmEc2+py7bAbl8 f+WedhsJGO8TEH36iwvM9aCyiYm8SpGVxTrnIVQcFHA9yW7FHqgyD9fEw/AYzlpA h34APBFgEgWzgdfIvqsg2ovGg4r6nI3z -----END CERTIFICATE-----Generated at Sun Jun 29 16:26:30 2025 by rpki-client