$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft File: 8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json) Hash identifier: HOTdeJUVY9f1y0AnGmxDdmKiUSig+hxtEAk8lsfYHbU= Subject key identifier: 39:33:13:66:4C:EE:25:CB:AA:55:70:33:15:42:56:ED:54:34:35:D2 Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft Manifest number: 91 Signing time: Wed 09 Apr 2025 05:17:19 +0000 Manifest this update: Wed 09 Apr 2025 05:17:18 +0000 Manifest next update: Wed 16 Apr 2025 05:17:18 +0000 Files and hashes: 1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: aNETr1+m0jmvm694bOcWOWHIyyKRdoyQwobhy6R/n2g=) 2: E36214403D0011EFAD623342C4F9AE02.roa (hash: 420VAJueRLeEIyuOExcHcsg4aUQyw3PTMA6zp5xTQ8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604 Validity Not Before: Apr 9 05:17:18 2025 GMT Not After : Apr 16 05:17:18 2025 GMT Subject: CN=67f602df-e81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:da:15:b5:19:32:f6:4b:d5:6b:8e:dc:a7:66: fd:e0:90:62:0d:88:9c:90:1b:ce:8a:a3:48:51:ac: c2:e6:46:bf:ee:5b:ea:b5:f4:f2:ba:1e:72:da:d5: 80:cf:3e:d6:8c:5b:14:67:59:79:37:70:d0:d2:b7: 28:ba:68:a5:1c:3e:43:c4:b6:cf:03:2f:8d:f2:78: 68:70:44:3e:42:d5:8f:7b:f0:8b:fb:57:04:ca:07: 0d:f6:9b:a5:f1:29:e9:a2:4c:8c:19:c1:8e:59:a7: 27:39:29:0d:25:8e:62:67:2c:b8:d7:87:a9:58:1b: 4d:fe:66:3e:9c:b3:61:35:08:f5:5d:69:97:42:30: 7d:05:11:ff:ce:7a:04:be:a9:18:49:9b:ba:b0:64: 9a:45:58:1d:c1:82:5f:20:1c:97:ab:3d:2d:65:38: f2:60:cf:d6:cb:d5:a1:f4:9b:c9:7d:31:a7:91:5c: 2e:b5:db:64:53:4b:e4:24:15:6f:51:73:a4:fb:e7: 93:fa:54:e0:54:fb:12:51:10:97:d2:48:1c:da:9d: 9a:92:3a:12:1a:a4:2f:47:42:5d:48:03:88:b3:92: cb:26:01:13:c8:2e:b6:dd:e1:30:3d:b6:57:50:51: 30:4e:ac:ac:4d:06:c1:99:fd:c5:97:cc:55:f9:10: e3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:33:13:66:4C:EE:25:CB:AA:55:70:33:15:42:56:ED:54:34:35:D2 X509v3 Authority Key Identifier: keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:1a:6f:39:7e:58:92:e0:90:f7:33:96:45:81:b9:81:d1:e3: 5e:84:f2:dd:de:98:6e:32:7b:a4:26:14:09:f8:8a:6d:d3:2b: 86:27:b6:8e:ac:4d:1b:ae:52:84:17:60:08:d0:fa:81:b8:09: 8d:bf:08:64:88:64:37:27:89:fb:07:06:54:1f:e9:31:87:8f: 57:14:67:ef:cf:95:98:e4:21:7b:97:42:e6:18:2a:e7:ac:9c: 3d:61:a6:80:8d:20:3c:f5:ae:15:fb:14:67:ef:88:c0:7a:9e: 2a:89:aa:44:a7:7c:96:b5:0d:44:20:ab:fe:27:34:4f:9b:67: 54:d8:db:69:9c:9b:3f:e0:72:e9:56:a3:14:2c:51:15:b8:3d: 01:01:c1:94:75:0e:66:5e:1e:5f:16:5a:3a:70:78:60:cd:fb: cb:e9:fa:d7:81:a8:24:1a:7f:ea:e4:05:ba:af:2a:df:3b:7a: a5:4a:e1:00:fd:d7:6e:90:76:b1:25:ac:56:ce:55:a1:e7:bc: 80:74:53:cc:ec:0b:a0:bc:fe:55:d8:c4:1e:26:65:56:fd:b5: b0:7d:6c:c1:cb:80:54:5d:1b:ff:be:a2:44:4b:4d:90:94:4f: 68:25:ac:7f:11:e7:77:26:83:dc:12:d6:e8:eb:89:a7:88:18: 47:fd:40:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEYyMkNGOEVGNzZBREZERjJDRjlFRkVEQkVDMTIxMzQ4 ODYzNTZGNEQwHhcNMjUwNDA5MDUxNzE4WhcNMjUwNDE2MDUxNzE4WjAYMRYwFAYD VQQDEw02N2Y2MDJkZi1lODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9toVtRky9kvVa47cp2b94JBiDYickBvOiqNIUazC5ka/7lvqtfTyuh5y2tWA zz7WjFsUZ1l5N3DQ0rcoumilHD5DxLbPAy+N8nhocEQ+QtWPe/CL+1cEygcN9pul 8SnpokyMGcGOWacnOSkNJY5iZyy414epWBtN/mY+nLNhNQj1XWmXQjB9BRH/znoE vqkYSZu6sGSaRVgdwYJfIByXqz0tZTjyYM/Wy9Wh9JvJfTGnkVwutdtkU0vkJBVv UXOk++eT+lTgVPsSURCX0kgc2p2akjoSGqQvR0JdSAOIs5LLJgETyC623eEwPbZX UFEwTqysTQbBmf3Fl8xV+RDj+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkzE2ZM 7iXLqlVwMxVCVu1UNDXSMB8GA1UdIwQYMBaAFPIs+O92rf3yz57+2+wSE0iGNW9N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8wOUExMTIzNDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9mTFBudjdiN0JJVFNJWTFi MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhpejQ3M2F0X2ZMUG52N2I3QklUU0lZMWIwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8wOUExMTIzNDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9m TFBudjdiN0JJVFNJWTFiMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnGm85fliS4JD3M5ZFgbmB0eNehPLd3phuMnukJhQJ+Ipt0yuGJ7aO rE0brlKEF2AI0PqBuAmNvwhkiGQ3J4n7BwZUH+kxh49XFGfvz5WY5CF7l0LmGCrn rJw9YaaAjSA89a4V+xRn74jAep4qiapEp3yWtQ1EIKv+JzRPm2dU2NtpnJs/4HLp VqMULFEVuD0BAcGUdQ5mXh5fFlo6cHhgzfvL6frXgagkGn/q5AW6ryrfO3qlSuEA /ddukHaxJaxWzlWh57yAdFPM7AugvP5V2MQeJmVW/bWwfWzBy4BUXRv/vqJES02Q lE9oJax/Eed3JoPcEtbo64mniBhH/UB8 -----END CERTIFICATE-----Generated at Thu Apr 10 23:58:25 2025 by rpki-client