$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json) Hash identifier: dRN61/dy7uwxRzPWgJgbWU/w+BDW/iCUFRpAQ8ZeLgA= Subject key identifier: B8:1C:3E:99:AE:DA:13:E4:59:14:78:7D:9C:32:00:61:9E:F9:3D:67 Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft Manifest number: 01B5 Signing time: Fri 25 Apr 2025 02:19:54 +0000 Manifest this update: Fri 25 Apr 2025 02:19:53 +0000 Manifest next update: Fri 02 May 2025 02:19:53 +0000 Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: ALCt3+zYwYz1pVR7qCbGTjQRYPT/cUGWxqnSm4fQdWU=) 2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: hyVOWGrjCzsgaB5t6a964tLdF9KDC2L1JSe9IYMG8n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Validity Not Before: Apr 25 02:19:53 2025 GMT Not After : May 2 02:19:53 2025 GMT Subject: CN=680af149-71a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ca:80:75:2b:97:25:1d:f3:eb:b0:96:97:85: 16:f3:71:f0:20:9d:af:67:ab:36:a9:e7:30:4d:53: 0b:2f:f3:ec:0e:a1:06:95:e9:2f:55:9b:ec:5a:b8: 71:e9:a5:34:c2:b7:86:04:14:00:8b:88:fb:f8:30: cf:c7:70:12:d2:14:3d:0d:36:2c:88:07:14:df:60: ba:1b:2b:24:94:93:bf:ed:8c:74:38:68:de:de:fa: ef:a0:d0:49:ae:0d:09:67:ff:97:2f:f1:37:be:1d: 43:9d:6d:f3:10:00:86:20:56:79:53:27:86:8a:88: b4:00:3b:ed:a8:0a:99:a4:cb:f3:c9:98:39:a5:7f: 72:18:56:33:09:38:4a:53:dd:e8:9e:6d:15:f3:91: f6:92:fc:9c:57:65:32:2c:44:69:23:27:43:35:fc: 17:70:03:fe:36:45:4f:de:73:78:8a:b8:c7:df:22: 0b:a4:ce:e7:9b:0c:e0:5c:41:35:1b:6f:25:2a:cd: 31:2b:ae:ce:f2:86:03:d7:60:d4:66:84:e7:97:6c: 1e:59:0d:ff:8f:68:b4:2e:ab:b5:ce:45:92:ca:c7: f3:10:09:6a:f5:3e:f9:1b:e2:a7:f7:c9:d7:5c:57: c9:e6:bf:54:df:51:a5:28:5b:62:2f:b3:3e:23:d3: b3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1C:3E:99:AE:DA:13:E4:59:14:78:7D:9C:32:00:61:9E:F9:3D:67 X509v3 Authority Key Identifier: keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0d:81:36:01:92:8e:7d:87:bf:14:30:24:83:1d:c3:0d:03: 6d:00:b9:9a:ad:fa:19:19:01:c8:e7:a1:f7:56:19:ee:71:05: 81:26:d9:dd:d1:35:f5:14:17:93:ae:83:2c:b7:cd:2c:84:c8: ed:f2:97:40:98:c9:0a:ec:d1:ba:d1:17:ec:1f:4e:9a:96:92: 69:2c:4b:ab:57:78:eb:df:1e:57:fb:de:85:c8:5f:c4:9b:91: 3e:28:19:33:ec:73:50:29:68:b5:bd:ce:63:54:36:df:6a:4f: 83:e5:c4:77:c6:97:46:b8:a3:cc:be:0c:96:ee:35:dd:40:c9: d2:95:38:99:30:c8:f6:9c:2d:51:b3:2b:bb:9f:ea:97:80:e6: 6f:c0:89:dc:f4:32:a9:a6:c8:ff:cb:b7:d3:8c:d9:17:f5:d6: 58:be:51:29:65:e8:b3:70:6f:d5:a7:30:7f:39:f7:42:6c:71: 3b:6a:76:83:42:ab:20:db:be:52:3c:17:1d:bf:23:6c:ce:14: 99:e3:e2:ed:f5:28:53:4f:df:cf:01:60:fa:a0:fd:af:d6:f7: c2:87:cd:1f:c7:f2:9d:ca:d1:87:a5:d2:3b:02:b1:b5:fe:da: be:02:0e:da:42:18:b1:29:6c:93:1d:5c:cc:5b:06:85:85:a4: b4:a9:5b:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG QTdDREY5NDYwHhcNMjUwNDI1MDIxOTUzWhcNMjUwNTAyMDIxOTUzWjAYMRYwFAYD VQQDEw02ODBhZjE0OS03MWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMqAdSuXJR3z67CWl4UW83HwIJ2vZ6s2qecwTVMLL/PsDqEGlekvVZvsWrhx 6aU0wreGBBQAi4j7+DDPx3AS0hQ9DTYsiAcU32C6GysklJO/7Yx0OGje3vrvoNBJ rg0JZ/+XL/E3vh1DnW3zEACGIFZ5UyeGioi0ADvtqAqZpMvzyZg5pX9yGFYzCThK U93onm0V85H2kvycV2UyLERpIydDNfwXcAP+NkVP3nN4irjH3yILpM7nmwzgXEE1 G28lKs0xK67O8oYD12DUZoTnl2weWQ3/j2i0Lqu1zkWSysfzEAlq9T75G+Kn98nX XFfJ5r9U31GlKFtiL7M+I9OzmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgcPpmu 2hPkWRR4fZwyAGGe+T1nMB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYDYE2AZKOfYe/FDAkgx3DDQNtALmarfoZGQHI56H3VhnucQWBJtnd 0TX1FBeTroMst80shMjt8pdAmMkK7NG60RfsH06alpJpLEurV3jr3x5X+96FyF/E m5E+KBkz7HNQKWi1vc5jVDbfak+D5cR3xpdGuKPMvgyW7jXdQMnSlTiZMMj2nC1R syu7n+qXgOZvwInc9DKppsj/y7fTjNkX9dZYvlEpZeizcG/VpzB/OfdCbHE7anaD Qqsg275SPBcdvyNszhSZ4+Lt9ShTT9/PAWD6oP2v1vfCh80fx/KdytGHpdI7ArG1 /tq+Ag7aQhixKWyTHVzMWwaFhaS0qVsF -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:17 2025 by rpki-client