$ rpki-client -vvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft File: IEZaOpwIN-e2iDBzNx26CSIvv0o.mft (raw, json) Hash identifier: 1i8o9ATq6otrMG3izMsn/Afpbu5nIxrGBpwQFk10nHg= Subject key identifier: E4:80:90:7F:2E:7E:03:64:AA:A7:09:82:E3:E9:1A:C2:AC:79:F2:D7 Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A Certificate issuer: /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft Manifest number: 06B5 Signing time: Thu 24 Apr 2025 21:56:28 +0000 Manifest this update: Thu 24 Apr 2025 21:56:27 +0000 Manifest next update: Thu 01 May 2025 21:56:27 +0000 Files and hashes: 1: IEZaOpwIN-e2iDBzNx26CSIvv0o.crl (hash: eIZLPBdXGbv5TeiJgIBo+j2jn7rIkWHJ8eUJCPvudFk=) 2: 9CC98174539711EEA9B2324DC4F9AE02.roa (hash: jIuIPn8j5ZccqDe120+/qUjhEXWCn1vWyx6axQilbV8=) 3: 45490AB25AD611EB946A2C37C4F9AE02.roa (hash: bm3yECqfcINDVceeUuebyksKLDGjoVN5Jq0eB4u8roc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D897, serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A Validity Not Before: Apr 24 21:56:27 2025 GMT Not After : May 1 21:56:27 2025 GMT Subject: CN=680ab38b-7c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:15:7c:4b:3b:9b:f9:ea:ae:c4:7a:0f:4f: 43:cd:fa:a2:3c:94:eb:e3:30:e2:6d:71:40:6a:74: df:c8:3c:24:f0:a2:1d:f6:f0:cb:fe:14:dd:fd:c1: c5:90:69:ed:c2:60:c2:0b:fc:ec:44:b3:8b:cc:32: 34:52:f3:d9:66:3f:31:4a:03:a8:d6:1b:d6:f7:12: 85:13:be:5c:d4:ef:b2:c7:be:13:61:15:fa:03:d8: 9f:8e:0b:7a:80:af:f8:d0:c9:8b:79:87:4a:76:01: dd:56:41:b8:2f:eb:ad:ec:67:9a:00:3f:23:ff:3a: 7c:68:4a:92:82:16:78:e7:21:c2:df:eb:0a:29:fb: ba:cd:ec:e2:fb:41:32:b2:50:c9:9f:bf:47:59:f9: f9:94:f8:cb:c3:81:84:a7:9f:77:55:4d:7f:c1:ef: 97:7b:ac:33:25:58:3f:b6:01:b9:f5:67:10:43:fc: 0c:05:04:82:34:e9:b4:5d:1a:ab:c3:67:96:aa:5f: 82:b2:d0:c4:ee:ce:00:a1:67:17:d1:48:88:7a:cf: 75:43:8c:a6:12:21:76:37:3c:bc:d3:12:d6:f3:f0: d5:b3:9b:5b:41:fc:98:a8:77:01:91:12:75:79:d2: c4:07:c0:92:f5:94:76:2a:79:6f:9f:aa:63:5a:7f: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:80:90:7F:2E:7E:03:64:AA:A7:09:82:E3:E9:1A:C2:AC:79:F2:D7 X509v3 Authority Key Identifier: keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:49:91:ed:0f:36:b6:29:d8:2c:b7:98:43:6f:e2:ad:b5:8f: a1:21:f7:67:26:2d:23:7d:f7:4c:36:27:2b:03:98:5b:bb:26: 5a:1e:d8:45:7e:23:7d:6a:79:f3:e6:47:3c:c4:d3:1d:c6:53: 61:2c:e1:a7:60:60:31:48:71:51:f7:0b:5b:1b:25:f0:fa:c5: be:90:09:1a:93:55:a9:a6:02:e9:fd:17:05:34:28:d7:37:69: 4c:c5:6d:92:ee:7e:ee:4a:bb:c3:94:33:93:3f:e4:64:0a:2f: cb:07:f1:f6:f4:23:74:a8:27:c2:fd:02:d0:f9:f1:5e:67:91: e1:fb:bb:36:48:58:f4:51:d1:f2:6f:38:6b:c8:5c:c7:5c:ff: 2c:7d:44:38:9d:02:0a:2b:e3:ea:7a:54:a0:0f:c2:34:9d:c4: 0e:e9:1b:e9:18:1b:e8:65:4c:8c:90:86:57:ea:c1:56:c9:23: f1:b4:c2:f0:ce:df:31:29:44:10:24:c8:77:8d:e9:22:2f:3f: 00:c3:ae:66:d2:2f:ca:8d:41:26:20:eb:3d:8c:6e:0a:22:f0: 28:07:ff:da:c8:ef:67:43:9d:c2:56:47:f9:c7:50:c6:01:20: 85:d1:67:6c:3f:c5:f0:02:2b:d8:1e:00:8b:96:6f:ad:e2:9d: 73:58:62:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4OTcxMTAvBgNVBAUTKDIwNDY1QTNBOUMwODM3RTdCNjg4MzA3MzM3MURCQTA5 MjIyRkJGNEEwHhcNMjUwNDI0MjE1NjI3WhcNMjUwNTAxMjE1NjI3WjAYMRYwFAYD VQQDEw02ODBhYjM4Yi03Yzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDoVfEs7m/nqrsR6D09DzfqiPJTr4zDibXFAanTfyDwk8KId9vDL/hTd/cHF kGntwmDCC/zsRLOLzDI0UvPZZj8xSgOo1hvW9xKFE75c1O+yx74TYRX6A9ifjgt6 gK/40MmLeYdKdgHdVkG4L+ut7GeaAD8j/zp8aEqSghZ45yHC3+sKKfu6zezi+0Ey slDJn79HWfn5lPjLw4GEp593VU1/we+Xe6wzJVg/tgG59WcQQ/wMBQSCNOm0XRqr w2eWql+CstDE7s4AoWcX0UiIes91Q4ymEiF2Nzy80xLW8/DVs5tbQfyYqHcBkRJ1 edLEB8CS9ZR2Knlvn6pjWn83TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSAkH8u fgNkqqcJguPpGsKsefLXMB8GA1UdIwQYMBaAFCBGWjqcCDfntogwczcdugkiL79K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg5Ny8wOTc3MTE5MjVB RDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4tZTJpREJ6TngyNkNTSXZ2 MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFWmFPcHdJTi1lMmlEQnpOeDI2Q1NJdnYwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDg5Ny8wOTc3MTE5MjVBRDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4t ZTJpREJ6TngyNkNTSXZ2MG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBSZHtDza2Kdgst5hDb+KttY+hIfdnJi0jffdMNicrA5hbuyZaHthF fiN9annz5kc8xNMdxlNhLOGnYGAxSHFR9wtbGyXw+sW+kAkak1WppgLp/RcFNCjX N2lMxW2S7n7uSrvDlDOTP+RkCi/LB/H29CN0qCfC/QLQ+fFeZ5Hh+7s2SFj0UdHy bzhryFzHXP8sfUQ4nQIKK+PqelSgD8I0ncQO6RvpGBvoZUyMkIZX6sFWySPxtMLw zt8xKUQQJMh3jekiLz8Aw65m0i/KjUEmIOs9jG4KIvAoB//ayO9nQ53CVkf5x1DG ASCF0WdsP8XwAivYHgCLlm+t4p1zWGKu -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:39 2025 by rpki-client