$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft File: iseesut_a1et3hy6QDxuWCNtNEU.mft (raw, json) Hash identifier: /7j6Cz/U5mno8ds8+dq1r3XToin9r8goYi8OWztLRtQ= Subject key identifier: 37:56:B1:7C:C2:BE:D2:BA:88:10:6F:EF:31:C1:15:45:62:89:24:FF Authority key identifier: 8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 Certificate issuer: /CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft Manifest number: 1F6C Signing time: Thu 24 Apr 2025 16:38:09 +0000 Manifest this update: Thu 24 Apr 2025 16:38:09 +0000 Manifest next update: Thu 01 May 2025 16:38:09 +0000 Files and hashes: 1: iseesut_a1et3hy6QDxuWCNtNEU.crl (hash: XI+E7YJakbgRjkRx79xBs+TT5GvjkI9SCsGtSklFOyE=) 2: 710575A2635611ED90FD8A69C4F9AE02.roa (hash: C8MKsyPVWAimK6phH4+d0OSiM41QQRf2a7Iq+R3FboQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF026, serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Validity Not Before: Apr 24 16:38:09 2025 GMT Not After : May 1 16:38:09 2025 GMT Subject: CN=680a68f1-edf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:73:ee:21:85:87:8d:11:6b:f1:24:3f:ae:c6: 68:91:e8:42:06:14:d5:4c:9d:5b:5a:0d:bc:49:ce: a4:41:a0:21:d8:2a:41:e3:f7:99:80:a5:3d:ec:a2: da:d5:27:2a:8d:03:48:b3:bd:11:f7:92:db:0a:87: e6:a9:f6:c9:6d:93:f5:54:31:d6:d3:e7:2c:0f:7e: 49:93:a8:fd:14:3d:ef:89:05:d6:1c:5c:a8:37:04: c2:f4:f8:be:51:a8:fe:a6:e2:05:39:ea:53:4d:c4: 09:99:35:4a:62:ef:9f:12:30:c7:8c:7c:1e:75:ed: 9a:96:d0:bd:08:1d:7c:b8:69:ba:48:ef:e9:e9:1a: 9d:08:4a:00:74:a5:63:e6:d6:f4:19:4d:10:8e:9e: 2d:8c:95:ca:56:a0:19:e0:36:d1:77:b1:45:ac:cc: 1e:97:c0:c7:71:cf:04:e7:12:7f:7b:24:4f:4c:48: ae:ec:26:1b:75:67:2e:ca:0c:f9:56:99:04:bb:dd: 85:21:64:c2:a3:ae:ec:de:c9:f5:a5:d1:9a:f6:2a: 92:01:da:c7:15:e5:73:6f:f5:a0:86:f4:fb:45:e2: 1a:88:8c:ce:c6:bc:66:5a:4d:a7:64:b8:26:a7:4c: 7d:19:59:6d:4b:3d:09:09:e2:f2:37:ae:94:b0:91: b3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:56:B1:7C:C2:BE:D2:BA:88:10:6F:EF:31:C1:15:45:62:89:24:FF X509v3 Authority Key Identifier: keyid:8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5f:61:b8:e8:15:cd:31:5f:3d:b9:61:9d:f6:32:7e:48:7f: 0b:48:99:ca:3b:42:0f:89:9e:46:ae:e6:fe:61:e5:be:67:fc: 9b:dc:f7:60:82:ca:a4:4a:89:92:26:85:03:de:a3:f3:fa:fb: 5d:05:c2:86:52:39:98:5f:28:a6:97:4b:db:39:df:1b:23:04: df:dd:a0:57:66:f3:08:5a:e5:cf:92:a2:b4:29:5d:91:1e:16: f6:07:c9:e5:5e:63:0a:d2:42:52:b6:4b:87:f8:d5:a9:94:a0: 9b:ae:3c:70:55:5d:7b:f0:54:39:0a:1a:a6:d3:36:28:40:14: 65:1d:be:e5:7d:7d:15:9c:71:0a:c1:2c:ad:6f:1b:a7:6a:ca: f2:a8:22:ed:32:60:55:aa:79:66:4b:c9:7c:73:0d:2d:33:24: c5:dd:ac:87:48:9b:de:56:86:f2:26:8d:1a:d7:2d:be:fe:47: 4d:49:0a:53:3a:c5:a3:89:cc:f8:17:ce:2f:71:ff:05:bb:cf: 94:45:eb:bf:21:df:6d:a9:07:2c:64:e8:9b:c8:e3:14:d4:a8: 2a:33:89:16:ff:26:2d:4d:6e:04:71:78:8d:64:78:fb:58:07: 68:5b:39:3f:3d:12:c3:e8:b8:72:23:52:91:ed:9d:61:c7:93: 19:86:ad:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMjYxMTAvBgNVBAUTKDhBQzc5RUIyRUI3RjZCNTdBRERFMUNCQTQwM0M2RTU4 MjM2RDM0NDUwHhcNMjUwNDI0MTYzODA5WhcNMjUwNTAxMTYzODA5WjAYMRYwFAYD VQQDEw02ODBhNjhmMS1lZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7nPuIYWHjRFr8SQ/rsZokehCBhTVTJ1bWg28Sc6kQaAh2CpB4/eZgKU97KLa 1ScqjQNIs70R95LbCofmqfbJbZP1VDHW0+csD35Jk6j9FD3viQXWHFyoNwTC9Pi+ Uaj+puIFOepTTcQJmTVKYu+fEjDHjHwede2altC9CB18uGm6SO/p6RqdCEoAdKVj 5tb0GU0Qjp4tjJXKVqAZ4DbRd7FFrMwel8DHcc8E5xJ/eyRPTEiu7CYbdWcuygz5 VpkEu92FIWTCo67s3sn1pdGa9iqSAdrHFeVzb/WghvT7ReIaiIzOxrxmWk2nZLgm p0x9GVltSz0JCeLyN66UsJGzKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdWsXzC vtK6iBBv7zHBFUViiST/MB8GA1UdIwQYMBaAFIrHnrLrf2tXrd4cukA8blgjbTRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9pc2Vlc3V0X2ExZXQzaHk2UUR4dVdDTnRO RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lzZWVzdXRfYTFldDNoeTZRRHh1V0NOdE5FVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAyNi8wMzI4QTg1Q0RERTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9pc2Vlc3V0X2Ex ZXQzaHk2UUR4dVdDTnRORVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcX2G46BXNMV89uWGd9jJ+SH8LSJnKO0IPiZ5Grub+YeW+Z/yb3Pdg gsqkSomSJoUD3qPz+vtdBcKGUjmYXyiml0vbOd8bIwTf3aBXZvMIWuXPkqK0KV2R Hhb2B8nlXmMK0kJStkuH+NWplKCbrjxwVV178FQ5Chqm0zYoQBRlHb7lfX0VnHEK wSytbxunasryqCLtMmBVqnlmS8l8cw0tMyTF3ayHSJveVobyJo0a1y2+/kdNSQpT OsWjicz4F84vcf8Fu8+UReu/Id9tqQcsZOibyOMU1KgqM4kW/yYtTW4EcXiNZHj7 WAdoWzk/PRLD6LhyI1KR7Z1hx5MZhq2L -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:26 2025 by rpki-client