$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json) Hash identifier: 2tEvrtBxGT5a42/OK9KQIRxBWz0GdP15GeyWjnu4bEc= Subject key identifier: 27:3E:B6:6C:D7:83:71:6A:89:F7:0C:84:38:7B:71:0E:11:A3:F0:D9 Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft Manifest number: 96 Signing time: Fri 25 Apr 2025 05:24:01 +0000 Manifest this update: Fri 25 Apr 2025 05:24:01 +0000 Manifest next update: Fri 02 May 2025 05:24:01 +0000 Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: rPJFcL7+pjBrA8AXjL/NJO/XoPM++MPWvrf8FddaYZA=) 2: A8051CC4508011EF81053074C4F9AE02.roa (hash: cDS5FdTBOYoVAs3WZmJDzExZ2RFGAHrfOHhqQyrBupo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18 Validity Not Before: Apr 25 05:24:01 2025 GMT Not After : May 2 05:24:01 2025 GMT Subject: CN=680b1c71-7235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:46:73:1a:49:e0:ec:e3:77:03:8b:f8:c9: fc:0a:83:f4:92:f0:bb:0d:7a:cf:cd:6b:97:8c:77: 63:6d:80:38:67:ba:9f:58:04:7d:ba:5f:4d:5b:e0: c9:34:1d:4f:cf:8f:4e:7f:3b:0e:1a:69:9d:63:b3: ea:b1:97:56:ae:e4:e1:7e:a1:84:47:fc:a3:06:ad: 27:e4:eb:33:61:bd:27:69:f1:5f:02:88:06:3c:00: c8:a7:25:70:ad:61:bf:8e:44:c9:48:cf:80:a3:62: 58:e6:89:b6:35:ab:40:bc:df:f0:c8:0c:37:25:ab: d5:e7:ed:bd:97:90:62:41:19:1a:9d:ab:7c:6d:d1: 06:2a:5a:dd:1c:e5:6e:66:59:05:50:50:f7:42:ab: c9:32:1f:1d:cd:b4:9d:55:36:06:51:b9:fb:3f:04: 05:94:7b:40:1c:72:c3:ac:47:d1:22:4c:0f:f8:92: 8c:97:54:ea:a7:e2:b5:c1:4c:2b:59:78:ac:e4:48: d5:91:83:aa:7d:d5:47:bf:d6:a1:ae:c8:79:42:29: 26:23:bd:d0:23:d7:58:f1:8e:a2:3f:49:3a:b4:97: be:28:ac:5c:57:17:a4:6e:dc:58:b0:56:24:df:94: db:9e:7f:98:b1:33:c5:83:48:e7:e7:9c:15:10:4e: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3E:B6:6C:D7:83:71:6A:89:F7:0C:84:38:7B:71:0E:11:A3:F0:D9 X509v3 Authority Key Identifier: keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:94:79:95:7e:8d:21:f2:4e:1c:a8:c0:47:15:52:50:58:25: cb:8b:6d:49:5c:f6:09:d4:b2:f6:30:92:d9:ee:4f:64:dc:11: 46:63:4b:5b:88:a9:b3:cc:4c:a4:b4:7a:65:8d:a3:2a:6e:c7: 11:12:05:c7:ba:01:4d:a3:b2:87:68:58:a7:58:14:3d:a2:ff: f8:46:a8:ae:41:18:43:5f:d4:02:f0:e0:45:ba:e9:a5:13:98: 27:0f:bf:f9:d3:90:27:c0:e9:c8:6a:8b:41:24:86:b7:6d:d8: c3:65:2d:53:e8:7c:8c:91:23:fb:ef:df:70:f2:d2:94:db:8c: d0:6a:c8:f6:17:3b:53:2f:3b:30:69:27:28:c2:df:f5:8c:75: 8d:3f:70:ff:ef:dc:50:97:e2:41:b8:7c:b3:f6:e3:5e:1e:1e: f2:3b:ea:df:52:d5:f1:a4:cf:03:4d:52:5b:c0:f1:98:20:84: 18:26:64:9c:64:e3:68:16:fd:77:a8:46:b7:cf:8c:93:e4:6c: ed:ea:2f:65:27:9e:00:8e:1c:54:8b:51:c8:11:70:4f:73:55: 28:7a:0d:98:c9:3d:83:76:95:e8:34:d0:0f:ed:a6:54:b3:c7: 4e:eb:a0:07:31:cb:5d:35:10:58:67:d7:9e:de:1f:18:0a:e7: cd:f1:c7:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyRTIxMTAvBgNVBAUTKDIxMjYxQjg5NzQ5ODkzQzNCMzE4NDFCOTZGRTNGQjYz MjMwMzJGMTgwHhcNMjUwNDI1MDUyNDAxWhcNMjUwNTAyMDUyNDAxWjAYMRYwFAYD VQQDEw02ODBiMWM3MS03MjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZlGcxpJ4OzjdwOL+Mn8CoP0kvC7DXrPzWuXjHdjbYA4Z7qfWAR9ul9NW+DJ NB1Pz49OfzsOGmmdY7PqsZdWruThfqGER/yjBq0n5OszYb0nafFfAogGPADIpyVw rWG/jkTJSM+Ao2JY5om2NatAvN/wyAw3JavV5+29l5BiQRkanat8bdEGKlrdHOVu ZlkFUFD3QqvJMh8dzbSdVTYGUbn7PwQFlHtAHHLDrEfRIkwP+JKMl1Tqp+K1wUwr WXis5EjVkYOqfdVHv9ahrsh5QikmI73QI9dY8Y6iP0k6tJe+KKxcVxekbtxYsFYk 35Tbnn+YsTPFg0jn55wVEE6DEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCc+tmzX g3FqifcMhDh7cQ4Ro/DZMB8GA1UdIwQYMBaAFCEmG4l0mJPDsxhBuW/j+2MjAy8Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJFMi9DNUI2QjkzNjQ0 MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4T3pHRUc1Yi1QN1l5TURM eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4 T3pHRUc1Yi1QN1l5TURMeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZlHmVfo0h8k4cqMBHFVJQWCXLi21JXPYJ1LL2MJLZ7k9k3BFGY0tb iKmzzEyktHpljaMqbscREgXHugFNo7KHaFinWBQ9ov/4RqiuQRhDX9QC8OBFuuml E5gnD7/505AnwOnIaotBJIa3bdjDZS1T6HyMkSP7799w8tKU24zQasj2FztTLzsw aScowt/1jHWNP3D/79xQl+JBuHyz9uNeHh7yO+rfUtXxpM8DTVJbwPGYIIQYJmSc ZONoFv13qEa3z4yT5Gzt6i9lJ54AjhxUi1HIEXBPc1Uoeg2YyT2DdpXoNNAP7aZU s8dO66AHMctdNRBYZ9ee3h8YCufN8ccT -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:13 2025 by rpki-client