$ rpki-client -vvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft File: IEZaOpwIN-e2iDBzNx26CSIvv0o.mft (raw, json) Hash identifier: ch8OTV65YEZM1WbdY6ZJ0awoLXYJATxCCzKg6ij8KPg= Subject key identifier: 42:F4:2E:0E:12:8A:7D:2A:FD:DB:5B:E4:54:76:47:60:ED:F4:EC:F1 Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A Certificate issuer: /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft Manifest number: 06D0 Signing time: Mon 16 Jun 2025 21:45:50 +0000 Manifest this update: Mon 16 Jun 2025 21:45:49 +0000 Manifest next update: Mon 23 Jun 2025 21:45:49 +0000 Files and hashes: 1: IEZaOpwIN-e2iDBzNx26CSIvv0o.crl (hash: jHadNASPx8roPrv4NC9uF0/MQGRfqKD2a8N87rYe7lg=) 2: 9CC98174539711EEA9B2324DC4F9AE02.roa (hash: jIuIPn8j5ZccqDe120+/qUjhEXWCn1vWyx6axQilbV8=) 3: 45490AB25AD611EB946A2C37C4F9AE02.roa (hash: bm3yECqfcINDVceeUuebyksKLDGjoVN5Jq0eB4u8roc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D897, serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A Validity Not Before: Jun 16 21:45:49 2025 GMT Not After : Jun 23 21:45:49 2025 GMT Subject: CN=6850908e-49b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:2e:64:50:5f:67:c7:ce:91:f7:a9:fe:df: 5b:d6:b6:87:b7:74:b5:b2:c2:c0:cd:ba:d9:87:62: d2:04:49:8d:37:f2:9a:10:30:87:01:4e:59:a6:fb: c2:b7:9a:33:29:a4:26:ae:06:7b:6a:3d:7c:fb:ac: a5:a4:a3:f5:42:38:7a:33:b6:f5:44:59:eb:d3:68: 3a:ba:7d:5f:bd:9e:e0:03:7e:67:19:09:d9:45:94: f5:17:f2:b0:2a:1f:a8:32:ca:26:11:b0:c9:8a:8e: ca:f9:4d:80:60:df:43:12:a9:48:9a:b6:7b:60:91: a6:68:5d:8c:52:89:28:09:a5:b8:77:2d:bd:a1:2b: c8:d4:19:df:0f:5d:40:de:72:8c:dc:f6:a8:6b:b7: c3:9f:7b:a5:30:60:a1:90:c2:6a:47:77:c2:20:de: 6f:62:71:a3:bb:b9:4f:2d:01:f9:40:55:00:40:2b: f3:96:9a:6b:7d:ef:80:32:b1:90:cf:f8:3e:dc:87: b6:20:1d:0c:79:ed:07:03:0b:05:cf:e6:38:c1:28: 0f:02:37:48:57:89:d4:85:81:22:16:e5:8d:6c:c6: 6b:89:56:cf:c6:e3:1c:27:82:86:ca:0b:dd:40:e2: ee:42:49:3f:8f:49:4c:7f:0c:9a:a9:b4:c4:56:ef: f5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F4:2E:0E:12:8A:7D:2A:FD:DB:5B:E4:54:76:47:60:ED:F4:EC:F1 X509v3 Authority Key Identifier: keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0a:a2:29:d8:c9:c4:78:9d:13:d7:7d:3d:e0:84:5f:6f:18: 71:f4:ee:b4:8e:04:58:b3:a9:bf:1f:34:40:3c:d1:21:c3:b2: c9:37:f0:ca:57:26:2c:c8:f4:7d:33:7c:f7:fe:fd:d9:5e:be: 5b:03:2c:79:8a:b7:ce:06:ac:4f:10:c1:58:96:68:b4:6b:ce: 0d:01:7b:ae:08:22:fc:69:84:fd:93:af:a0:9a:3b:cb:a4:2d: c3:39:e2:c7:0e:25:6a:b5:1d:25:36:64:d1:c9:0f:9c:cd:86: 1c:f7:56:be:00:b5:4b:38:f5:8d:ca:42:86:b5:1d:32:b8:16: 44:e3:c9:dd:79:f1:11:c5:d6:34:5c:4b:69:88:c6:c7:cc:53: ee:7b:87:5b:c1:b3:f4:b9:54:df:94:ab:05:7a:ba:fc:7a:81: 59:66:93:69:06:bb:14:e8:0b:e5:77:83:f9:d8:c0:99:f6:b0: ed:1a:96:34:17:37:5b:09:fe:a7:fd:2b:05:2b:27:42:f9:32: d4:87:bb:f2:c9:ee:15:c0:dd:2f:17:e8:48:d2:bd:75:01:51: 68:e6:95:a2:a7:40:4c:34:25:b5:2f:df:14:a1:80:e3:82:24: b1:c4:e3:93:6d:18:5a:ba:ff:13:9e:73:56:6e:7c:26:68:d4: cc:ff:86:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4OTcxMTAvBgNVBAUTKDIwNDY1QTNBOUMwODM3RTdCNjg4MzA3MzM3MURCQTA5 MjIyRkJGNEEwHhcNMjUwNjE2MjE0NTQ5WhcNMjUwNjIzMjE0NTQ5WjAYMRYwFAYD VQQDEw02ODUwOTA4ZS00OWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDcuZFBfZ8fOkfep/t9b1raHt3S1ssLAzbrZh2LSBEmNN/KaEDCHAU5ZpvvC t5ozKaQmrgZ7aj18+6ylpKP1Qjh6M7b1RFnr02g6un1fvZ7gA35nGQnZRZT1F/Kw Kh+oMsomEbDJio7K+U2AYN9DEqlImrZ7YJGmaF2MUokoCaW4dy29oSvI1BnfD11A 3nKM3Paoa7fDn3ulMGChkMJqR3fCIN5vYnGju7lPLQH5QFUAQCvzlpprfe+AMrGQ z/g+3Ie2IB0Mee0HAwsFz+Y4wSgPAjdIV4nUhYEiFuWNbMZriVbPxuMcJ4KGygvd QOLuQkk/j0lMfwyaqbTEVu/1dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEL0Lg4S in0q/dtb5FR2R2Dt9OzxMB8GA1UdIwQYMBaAFCBGWjqcCDfntogwczcdugkiL79K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg5Ny8wOTc3MTE5MjVB RDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4tZTJpREJ6TngyNkNTSXZ2 MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFWmFPcHdJTi1lMmlEQnpOeDI2Q1NJdnYwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDg5Ny8wOTc3MTE5MjVBRDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4t ZTJpREJ6TngyNkNTSXZ2MG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANCqIp2MnEeJ0T13094IRfbxhx9O60jgRYs6m/HzRAPNEhw7LJN/DK VyYsyPR9M3z3/v3ZXr5bAyx5irfOBqxPEMFYlmi0a84NAXuuCCL8aYT9k6+gmjvL pC3DOeLHDiVqtR0lNmTRyQ+czYYc91a+ALVLOPWNykKGtR0yuBZE48ndefERxdY0 XEtpiMbHzFPue4dbwbP0uVTflKsFerr8eoFZZpNpBrsU6Avld4P52MCZ9rDtGpY0 FzdbCf6n/SsFKydC+TLUh7vyye4VwN0vF+hI0r11AVFo5pWip0BMNCW1L98UoYDj giSxxOOTbRhauv8TnnNWbnwmaNTM/4ac -----END CERTIFICATE-----Generated at Tue Jun 17 07:52:56 2025 by rpki-client