$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft File: iseesut_a1et3hy6QDxuWCNtNEU.mft (raw, json) Hash identifier: Bw9824FTjiQmV2RSRABMo2ggew3lBeGS+Ge+l91AFt4= Subject key identifier: E1:AB:47:72:37:14:BC:54:34:2D:05:AF:92:CE:D7:3F:4B:84:08:66 Authority key identifier: 8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 Certificate issuer: /CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Certificate serial: 088D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft Manifest number: 1FC8 Signing time: Fri 18 Jul 2025 16:43:15 +0000 Manifest this update: Fri 18 Jul 2025 16:43:15 +0000 Manifest next update: Fri 25 Jul 2025 16:43:15 +0000 Files and hashes: 1: iseesut_a1et3hy6QDxuWCNtNEU.crl (hash: nOzm8BscTRrhRKE3ZYdJcCvjwsn3duW1TdL7ksOmJtQ=) 2: 710575A2635611ED90FD8A69C4F9AE02.roa (hash: Ojjbd1Ng9etxINrkJllS0XvsVkU95FVK8QTd3UlRsHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF026, serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Validity Not Before: Jul 18 16:43:15 2025 GMT Not After : Jul 25 16:43:15 2025 GMT Subject: CN=687a79a3-cf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:6e:c4:f7:7f:12:43:9e:c5:6f:d5:a6:a2: fa:e2:49:4e:fe:b8:22:32:97:19:b0:8a:bc:05:29: 34:99:6c:dc:3c:cd:c4:b5:0b:d6:b1:36:90:db:90: 8e:6b:8b:6e:e8:dc:c3:76:85:6b:df:c3:9f:32:2a: d0:35:96:ea:dd:a4:73:42:1f:e4:62:00:97:ef:a2: e0:97:43:bb:24:8e:f5:bf:c8:6e:1d:3b:42:6a:4b: 9a:b2:1c:8a:de:9b:27:44:11:f1:2a:1a:ab:e4:0b: d1:38:c2:b9:f5:02:30:74:97:f2:6d:7f:51:2b:b3: 05:67:87:d9:83:21:c1:1a:d7:f9:b1:e2:d9:6d:a1: 9d:e3:26:21:c5:87:67:8e:47:93:bb:23:ee:78:12: ac:d3:15:95:97:ab:62:e8:5c:c2:2f:e0:4e:be:9d: 78:c3:29:77:02:71:6b:d8:fe:76:8b:a5:b7:52:01: cd:cb:a9:d3:51:bc:21:a3:50:5e:62:43:de:45:d2: d8:ea:18:e9:77:73:13:97:82:4f:fe:06:fc:b7:59: 87:58:4b:fe:f0:9b:56:33:57:d7:f2:81:33:34:e6: b8:c3:08:b3:57:90:93:26:b5:b1:6f:56:c9:60:1e: 26:a6:38:3c:d2:2d:e8:8e:26:7a:2f:c2:4d:5f:82: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AB:47:72:37:14:BC:54:34:2D:05:AF:92:CE:D7:3F:4B:84:08:66 X509v3 Authority Key Identifier: keyid:8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a5:a7:29:48:86:8e:ed:73:81:38:27:36:a8:0c:63:aa:f2: 90:b9:74:be:27:de:f4:1d:b9:5f:96:18:86:7d:60:c8:6a:fa: a2:b4:7b:bc:ff:34:17:e8:cd:d5:6a:06:d9:d4:a6:e9:b2:23: cc:76:4f:e1:c5:e3:8e:cc:bf:df:13:53:67:7e:f7:e5:03:5a: 20:ab:ea:e7:96:8c:76:de:e5:c3:d5:87:88:57:a5:bf:ec:ce: 1d:72:e7:71:d5:61:a4:ae:c7:e8:3d:32:54:af:61:a5:d2:7a: f2:82:68:66:02:45:f2:1d:81:75:6c:08:2c:68:dc:f6:0d:dc: f1:6a:57:0e:b6:96:1b:26:e9:13:c3:d0:1b:a4:9e:95:b3:5e: 2d:b1:f5:b4:88:1b:57:35:f2:e8:b9:e0:1e:09:ac:62:dd:46: 5f:9e:73:d3:2c:74:04:aa:fa:46:2f:f3:ff:aa:04:bc:9f:e7: 9e:b0:db:4d:37:11:0b:be:90:ba:96:62:44:11:2b:d6:df:60: c5:25:1f:95:7c:30:34:6e:39:33:f5:dc:08:f1:0e:d5:a4:05: 65:14:74:b9:a9:ff:75:5d:93:eb:52:77:0f:8b:7b:e0:d9:6f: af:5a:52:ce:2a:89:76:ac:5f:5c:c0:5a:11:0c:6c:c7:df:b9: 63:3a:fc:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMjYxMTAvBgNVBAUTKDhBQzc5RUIyRUI3RjZCNTdBRERFMUNCQTQwM0M2RTU4 MjM2RDM0NDUwHhcNMjUwNzE4MTY0MzE1WhcNMjUwNzI1MTY0MzE1WjAYMRYwFAYD VQQDEw02ODdhNzlhMy1jZjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5huxPd/EkOexW/VpqL64klO/rgiMpcZsIq8BSk0mWzcPM3EtQvWsTaQ25CO a4tu6NzDdoVr38OfMirQNZbq3aRzQh/kYgCX76Lgl0O7JI71v8huHTtCakuashyK 3psnRBHxKhqr5AvROMK59QIwdJfybX9RK7MFZ4fZgyHBGtf5seLZbaGd4yYhxYdn jkeTuyPueBKs0xWVl6ti6FzCL+BOvp14wyl3AnFr2P52i6W3UgHNy6nTUbwho1Be YkPeRdLY6hjpd3MTl4JP/gb8t1mHWEv+8JtWM1fX8oEzNOa4wwizV5CTJrWxb1bJ YB4mpjg80i3ojiZ6L8JNX4K9YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGrR3I3 FLxUNC0Fr5LO1z9LhAhmMB8GA1UdIwQYMBaAFIrHnrLrf2tXrd4cukA8blgjbTRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9pc2Vlc3V0X2ExZXQzaHk2UUR4dVdDTnRO RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lzZWVzdXRfYTFldDNoeTZRRHh1V0NOdE5FVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAyNi8wMzI4QTg1Q0RERTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9pc2Vlc3V0X2Ex ZXQzaHk2UUR4dVdDTnRORVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPpacpSIaO7XOBOCc2qAxjqvKQuXS+J970HblflhiGfWDIavqitHu8 /zQX6M3VagbZ1KbpsiPMdk/hxeOOzL/fE1NnfvflA1ogq+rnlox23uXD1YeIV6W/ 7M4dcudx1WGkrsfoPTJUr2Gl0nrygmhmAkXyHYF1bAgsaNz2DdzxalcOtpYbJukT w9AbpJ6Vs14tsfW0iBtXNfLoueAeCaxi3UZfnnPTLHQEqvpGL/P/qgS8n+eesNtN NxELvpC6lmJEESvW32DFJR+VfDA0bjkz9dwI8Q7VpAVlFHS5qf91XZPrUncPi3vg 2W+vWlLOKol2rF9cwFoRDGzH37ljOvwx -----END CERTIFICATE-----Generated at Sun Jul 20 03:30:06 2025 by rpki-client