$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft File: iZOTjIV1ACgOj15T3As-kweu1Kc.mft (raw, json) Hash identifier: BZ23DLLeo9vWXSUSqHc3BpZK0JOTccDgYequxBjaLO4= Subject key identifier: B3:E0:6C:C7:F4:3B:E8:72:AC:41:D3:18:73:28:6C:59:E2:50:6A:E1 Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft Manifest number: 25 Signing time: Fri 25 Apr 2025 06:48:41 +0000 Manifest this update: Fri 25 Apr 2025 06:48:40 +0000 Manifest next update: Fri 02 May 2025 06:48:40 +0000 Files and hashes: 1: iZOTjIV1ACgOj15T3As-kweu1Kc.crl (hash: ll1eEnRf1ylZh6CrtWG9tjc97j3MLah4fZ0vdXqKIlg=) 2: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (hash: t4VsjBzDPnCNqQJ4/+l/e7o+o8AvICh72VVWJ8BMmY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Validity Not Before: Apr 25 06:48:40 2025 GMT Not After : May 2 06:48:40 2025 GMT Subject: CN=680b3048-b47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9b:e0:cc:af:b8:d3:60:8f:69:b3:46:2b:15: d2:8a:cf:bc:cf:98:07:70:37:3a:c5:50:0e:91:f5: bc:7c:36:cb:5b:b4:75:f8:be:8d:13:08:62:a4:7a: b9:b7:07:75:38:fb:8e:0b:a7:c9:fc:70:b8:d4:c5: 5c:9e:17:6f:51:df:44:98:3d:9a:a1:18:fe:4a:1d: 95:8b:23:4b:75:b4:87:dd:75:8f:8b:d4:f2:0f:f3: 4a:c5:c7:11:33:cb:3c:8f:7d:62:eb:43:3d:ff:61: 3b:69:72:c5:cd:81:72:38:c8:6e:39:3b:e9:87:64: f2:ad:9f:8e:a5:b4:1d:38:51:56:f0:ab:85:e8:e6: c0:77:d3:5e:55:60:cc:a8:f6:a2:1d:f8:58:2a:e5: 1e:62:fd:c5:eb:42:84:aa:b6:cb:a7:51:8d:96:95: 4e:12:ee:9e:65:e2:e8:93:47:b9:70:c9:62:da:4c: 3d:9c:1a:48:58:72:18:0b:ee:db:9c:3d:6d:9a:19: a6:e7:c4:1c:7a:9b:09:5c:b5:80:42:52:48:6c:ff: 83:73:0f:51:c2:b9:2d:76:f1:74:a3:87:26:76:f5: 96:15:e3:a8:b1:46:6f:bb:39:eb:35:67:65:80:7d: 93:05:62:09:82:2b:8e:b5:96:83:a8:9c:59:fb:fb: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E0:6C:C7:F4:3B:E8:72:AC:41:D3:18:73:28:6C:59:E2:50:6A:E1 X509v3 Authority Key Identifier: keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:71:67:8e:70:e7:1e:8e:9a:7b:8f:9f:c9:44:ee:81:41:4c: 23:d8:c8:11:04:d5:87:9d:bc:7b:37:9c:b7:9a:71:90:f6:00: 45:f9:d2:cd:29:d8:19:c4:27:62:0b:f0:96:1e:5d:ff:03:38: d3:78:a7:20:5d:16:ae:c2:93:77:2b:2a:ea:61:8a:74:2a:59: 89:51:37:1f:1f:fd:31:4e:40:7f:fe:5b:76:19:69:46:b0:c8: b2:67:53:80:7b:b2:b0:69:75:a3:cd:3c:ea:75:c9:e9:27:87: cd:06:1f:e4:02:63:08:5e:07:50:e8:b8:04:3c:dc:a5:0b:65: 9a:32:bb:d5:a8:e3:fa:a2:d1:a9:74:86:17:21:4e:8b:64:af: 8f:fd:ad:f1:75:89:74:83:c9:fb:2a:eb:e9:d6:d3:56:ac:42: 34:8e:34:be:66:0e:e0:a8:47:2c:a4:c8:4e:c7:53:df:10:be: 46:c3:86:0d:5b:09:fd:17:14:7e:99:3a:d3:59:07:9c:38:22: 76:02:8d:09:16:1e:05:0b:55:c4:dd:10:67:f2:79:79:67:c9: 03:5c:7d:7e:1d:59:df:7a:e3:c8:e2:73:2b:a6:26:49:33:39: 88:4f:98:a1:e1:0b:84:2d:73:69:c3:db:12:af:7b:18:9f:7d: f1:0c:a1:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDNFMTExMC8GA1UEBRMoODk5MzkzOEM4NTc1MDAyODBFOEY1RTUzREMwQjNFOTMw N0FFRDRBNzAeFw0yNTA0MjUwNjQ4NDBaFw0yNTA1MDIwNjQ4NDBaMBgxFjAUBgNV BAMTDTY4MGIzMDQ4LWI0N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCem+DMr7jTYI9ps0YrFdKKz7zPmAdwNzrFUA6R9bx8NstbtHX4vo0TCGKkerm3 B3U4+44Lp8n8cLjUxVyeF29R30SYPZqhGP5KHZWLI0t1tIfddY+L1PIP80rFxxEz yzyPfWLrQz3/YTtpcsXNgXI4yG45O+mHZPKtn46ltB04UVbwq4Xo5sB3015VYMyo 9qId+Fgq5R5i/cXrQoSqtsunUY2WlU4S7p5l4uiTR7lwyWLaTD2cGkhYchgL7tuc PW2aGabnxBx6mwlctYBCUkhs/4NzD1HCuS128XSjhyZ29ZYV46ixRm+7Oes1Z2WA fZMFYgmCK461loOonFn7+z5PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs+Bsx/Q7 6HKsQdMYcyhsWeJQauEwHwYDVR0jBBgwFoAUiZOTjIV1ACgOj15T3As+kweu1Kcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEM0UxLzdDRjA3QkM2RUY0 NzExRUZBRjRDNDk2OEM0RjlBRTAyL2laT1RqSVYxQUNnT2oxNVQzQXMta3dldTFL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVpPVGpJVjFBQ2dPajE1VDNBcy1rd2V1MUtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE M0UxLzdDRjA3QkM2RUY0NzExRUZBRjRDNDk2OEM0RjlBRTAyL2laT1RqSVYxQUNn T2oxNVQzQXMta3dldTFLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJRxZ45w5x6OmnuPn8lE7oFBTCPYyBEE1YedvHs3nLeacZD2AEX50s0p 2BnEJ2IL8JYeXf8DONN4pyBdFq7Ck3crKuphinQqWYlRNx8f/TFOQH/+W3YZaUaw yLJnU4B7srBpdaPNPOp1yeknh80GH+QCYwheB1DouAQ83KULZZoyu9Wo4/qi0al0 hhchTotkr4/9rfF1iXSDyfsq6+nW01asQjSONL5mDuCoRyykyE7HU98QvkbDhg1b Cf0XFH6ZOtNZB5w4InYCjQkWHgULVcTdEGfyeXlnyQNcfX4dWd9648jicyumJkkz OYhPmKHhC4Qtc2nD2xKvexifffEMoZM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:12 2025 by rpki-client