$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json) Hash identifier: qrFuab9FUS/VrctwgIJ8lZ4r+6TrBM9TzHckCD2porA= Subject key identifier: E7:EA:D1:4F:37:11:29:AF:74:50:24:55:56:60:C5:95:31:00:86:8F Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 09D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft Manifest number: 09CF Signing time: Thu 24 Apr 2025 19:49:58 +0000 Manifest this update: Thu 24 Apr 2025 19:49:57 +0000 Manifest next update: Thu 01 May 2025 19:49:57 +0000 Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: Y8Oix7dqgsakee4d8jXqm0HFGNeBze8pL93amzqJZRY=) 2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: p9kCZDh5UAqZ2BMmqpg1+O7Ke6v3jmI1iGjmFDJZpjY=) 3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: K7z8kKU5BqzIOHwB0jfNZHDe2Ivnb5VNPYxOnFpEPT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: Apr 24 19:49:57 2025 GMT Not After : May 1 19:49:57 2025 GMT Subject: CN=680a95e5-9825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c1:c0:b9:f3:ee:e5:0d:00:e8:e3:fb:9c:0a: 9b:c7:b6:0d:62:50:2d:9d:c9:10:65:84:c6:67:ee: e9:c6:23:4f:72:12:c5:ed:2e:94:1f:2f:07:57:17: ac:d2:58:a8:04:38:65:d3:f3:47:95:73:67:89:3b: d0:ca:6a:a4:90:20:07:48:79:93:e9:30:db:ef:a6: 74:b2:3b:ad:83:59:e9:ab:cd:82:39:ff:88:3e:97: 1c:c1:e6:98:eb:e4:30:4e:40:6e:3e:e9:99:39:9f: 21:b9:01:ef:24:af:08:76:7b:56:7e:b3:a0:7f:2d: ae:30:c1:d1:ac:37:8a:f5:63:5c:40:70:4c:86:77: a6:ab:2d:64:e6:30:0a:e4:95:16:03:b2:fa:fe:9d: 1b:25:49:61:56:54:09:ad:a4:9e:cf:86:10:60:13: 7d:fc:09:19:ed:bd:05:8f:fe:3c:9f:b1:ea:50:5b: a0:aa:07:67:a6:3f:85:e0:16:42:97:8c:b8:36:4b: 30:02:79:3a:36:0d:c5:bd:97:f6:4a:8a:e7:9c:bc: aa:1f:0e:5e:f6:0b:5f:f1:f4:6c:66:87:a0:64:2e: 19:16:8c:0f:5c:19:36:55:8d:8c:03:12:c7:c4:d7: 96:f7:2f:62:ac:b8:c5:13:7c:93:34:4c:e5:10:97: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EA:D1:4F:37:11:29:AF:74:50:24:55:56:60:C5:95:31:00:86:8F X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b5:0b:86:4b:a6:d1:af:9f:23:5c:4c:2f:da:b1:7e:63:7c: cb:eb:52:cf:e2:28:7d:8c:b9:ac:c0:84:29:31:9e:04:e6:33: 88:ff:71:d6:06:6d:fb:8a:56:89:9f:7f:fa:70:23:77:5d:b8: 82:69:78:8d:bf:ad:ae:54:c6:17:27:29:cd:38:2f:79:72:c3: af:76:62:fc:7f:d1:f9:87:69:be:8a:c8:40:a9:87:36:d1:ab: 21:7e:e0:45:c7:dd:eb:07:66:df:cf:b5:fd:75:88:26:5d:95: aa:e5:a3:32:29:d2:6a:bd:dc:7d:c3:37:e6:8d:6c:5e:57:f7: 0a:20:37:70:59:6a:e0:f9:5c:5e:42:b9:d7:ba:69:81:1c:ae: 35:44:2c:e4:38:c4:46:1a:dc:6f:32:24:15:0e:4c:60:c0:ba: 56:8b:07:55:9e:37:e5:71:26:9d:bb:a8:c3:c6:d0:6f:49:d1: 76:e0:36:92:de:7e:65:c4:43:9b:cb:c3:64:7e:5d:53:72:c0: 66:fc:2f:e2:5b:31:bf:2f:34:09:f2:47:ff:ac:0f:35:62:2e: ff:2a:6d:c7:9c:1a:14:87:13:55:82:9b:65:d1:db:ed:6d:04: e8:96:21:9a:01:b0:1f:de:4f:86:f8:bf:d5:3e:51:a0:db:33: 45:ef:44:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjUwNDI0MTk0OTU3WhcNMjUwNTAxMTk0OTU3WjAYMRYwFAYD VQQDEw02ODBhOTVlNS05ODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycHAufPu5Q0A6OP7nAqbx7YNYlAtnckQZYTGZ+7pxiNPchLF7S6UHy8HVxes 0lioBDhl0/NHlXNniTvQymqkkCAHSHmT6TDb76Z0sjutg1npq82COf+IPpccweaY 6+QwTkBuPumZOZ8huQHvJK8IdntWfrOgfy2uMMHRrDeK9WNcQHBMhnemqy1k5jAK 5JUWA7L6/p0bJUlhVlQJraSez4YQYBN9/AkZ7b0Fj/48n7HqUFugqgdnpj+F4BZC l4y4NkswAnk6Ng3FvZf2SornnLyqHw5e9gtf8fRsZoegZC4ZFowPXBk2VY2MAxLH xNeW9y9irLjFE3yTNEzlEJfTKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfq0U83 ESmvdFAkVVZgxZUxAIaPMB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6 YUVIX1VEVTJfNWtZX3JKY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBstQuGS6bRr58jXEwv2rF+Y3zL61LP4ih9jLmswIQpMZ4E5jOI/3HW Bm37ilaJn3/6cCN3XbiCaXiNv62uVMYXJynNOC95csOvdmL8f9H5h2m+ishAqYc2 0ashfuBFx93rB2bfz7X9dYgmXZWq5aMyKdJqvdx9wzfmjWxeV/cKIDdwWWrg+Vxe QrnXummBHK41RCzkOMRGGtxvMiQVDkxgwLpWiwdVnjflcSadu6jDxtBvSdF24DaS 3n5lxEOby8Nkfl1TcsBm/C/iWzG/LzQJ8kf/rA81Yi7/Km3HnBoUhxNVgptl0dvt bQToliGaAbAf3k+G+L/VPlGg2zNF70Q0 -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:49 2025 by rpki-client