$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json) Hash identifier: 1lK9zlpPkbgGGqRZc1KBtWmlTZc6ekFJ0csXAlDUdjU= Subject key identifier: 4E:70:CF:3D:33:5D:CC:33:41:DA:C6:86:9C:E6:72:18:3E:6E:35:F5 Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft Manifest number: 01A7 Signing time: Sat 29 Mar 2025 02:50:47 +0000 Manifest this update: Sat 29 Mar 2025 02:50:46 +0000 Manifest next update: Sat 05 Apr 2025 02:50:46 +0000 Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: rLZo/nkcssD5EB/ALlLrKGIkSfFMqUXmNJZvAOT7slM=) 2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: hyVOWGrjCzsgaB5t6a964tLdF9KDC2L1JSe9IYMG8n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C2D Validity Not Before: Mar 29 02:50:46 2025 GMT Not After : Apr 5 02:50:46 2025 GMT Subject: CN=67e76007-8afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:00:35:51:81:fe:2a:e5:9a:d3:a0:f4:3c:ce: 8d:6a:a7:fe:c1:93:e7:79:74:60:fd:cc:4c:ae:d2: 36:a2:d4:52:86:1c:fd:e3:b2:b2:a0:eb:e6:7a:37: b3:f6:6d:79:16:98:54:b6:53:20:d7:27:a7:4e:a9: 7e:77:b1:a6:76:8c:59:7e:b1:ea:3c:ed:d1:9c:45: 0a:66:ad:f3:a8:a6:e6:ae:85:23:e7:8f:33:73:b5: bd:cf:20:5b:24:2c:4f:6d:ab:47:69:83:e5:ac:76: 06:20:b2:d6:ba:fe:a1:21:19:2b:0c:04:72:b0:1d: d2:94:40:55:d6:68:f5:57:41:9b:61:35:9b:f9:55: 72:b0:63:cf:60:10:19:06:a2:ff:a9:cd:04:2b:09: 7c:9c:a8:b5:9b:d7:b5:ee:87:6e:be:29:53:ea:c3: 92:d6:20:d0:8c:a5:39:c2:ff:06:b0:90:91:51:a0: 16:f5:1b:54:b7:b9:57:26:e6:00:fe:94:2e:9d:1e: ab:75:ba:18:c9:93:5c:25:18:c3:04:a2:e5:0f:94: 61:aa:06:32:50:d4:07:0d:78:74:bf:df:55:0e:16: 39:6c:31:e7:17:6e:8e:bf:17:c8:90:11:e0:a7:39: 2d:76:3c:c7:23:1d:19:5f:d3:d1:93:27:da:94:ce: 0c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:70:CF:3D:33:5D:CC:33:41:DA:C6:86:9C:E6:72:18:3E:6E:35:F5 X509v3 Authority Key Identifier: keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:71:54:4a:85:a3:9c:4f:be:a8:14:08:a0:b8:8c:d1:bb:1d: f9:27:5c:1e:dd:78:65:8d:34:fa:ea:25:e4:0a:43:01:37:7a: 6a:24:20:95:c2:b9:0b:de:1c:2b:f9:fc:43:fa:15:dd:11:bb: f1:e0:b1:eb:25:c7:99:cd:9d:cd:ea:7f:97:a6:3a:fc:ac:9c: 0f:b7:77:78:99:9c:3f:dd:3b:0e:a0:8d:e1:6c:a8:4f:0b:82: c7:9a:26:f7:03:2f:15:e3:b4:fd:d5:8a:f4:fa:46:0e:d9:fb: fe:4e:53:8f:40:36:d4:5d:12:07:ac:2a:5b:a8:a0:da:5a:d0: d3:76:16:e2:93:7f:b3:c6:f6:8c:1e:55:a7:76:8d:10:1b:84: ea:eb:26:cb:96:57:6a:29:68:c4:fd:8f:f9:8d:72:c9:82:84: 1a:3b:a4:70:dd:c9:20:b5:02:c2:6c:ed:c9:c7:6d:14:2f:e2: 5e:44:ac:21:5b:88:ec:82:8d:f8:3a:e4:a6:69:1b:06:a5:fe: e8:df:49:39:f1:f6:06:fe:44:5f:05:bd:e5:18:96:24:52:6a: 18:db:7c:50:e4:4b:86:90:98:af:9f:e6:77:2b:c6:1e:21:c5: 3f:5d:aa:06:77:1e:3d:49:ce:fc:01:48:d7:94:6b:17:e9:b1: fe:b0:40:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG QTdDREY5NDYwHhcNMjUwMzI5MDI1MDQ2WhcNMjUwNDA1MDI1MDQ2WjAYMRYwFAYD VQQDEw02N2U3NjAwNy04YWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQA1UYH+KuWa06D0PM6Naqf+wZPneXRg/cxMrtI2otRShhz947KyoOvmejez 9m15FphUtlMg1yenTql+d7GmdoxZfrHqPO3RnEUKZq3zqKbmroUj548zc7W9zyBb JCxPbatHaYPlrHYGILLWuv6hIRkrDARysB3SlEBV1mj1V0GbYTWb+VVysGPPYBAZ BqL/qc0EKwl8nKi1m9e17oduvilT6sOS1iDQjKU5wv8GsJCRUaAW9RtUt7lXJuYA /pQunR6rdboYyZNcJRjDBKLlD5RhqgYyUNQHDXh0v99VDhY5bDHnF26OvxfIkBHg pzktdjzHIx0ZX9PRkyfalM4MSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5wzz0z XcwzQdrGhpzmchg+bjX1MB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFcVRKhaOcT76oFAiguIzRux35J1we3XhljTT66iXkCkMBN3pqJCCV wrkL3hwr+fxD+hXdEbvx4LHrJceZzZ3N6n+Xpjr8rJwPt3d4mZw/3TsOoI3hbKhP C4LHmib3Ay8V47T91Yr0+kYO2fv+TlOPQDbUXRIHrCpbqKDaWtDTdhbik3+zxvaM HlWndo0QG4Tq6ybLlldqKWjE/Y/5jXLJgoQaO6Rw3ckgtQLCbO3Jx20UL+JeRKwh W4jsgo34OuSmaRsGpf7o30k58fYG/kRfBb3lGJYkUmoY23xQ5EuGkJivn+Z3K8Ye IcU/XaoGdx49Sc78AUjXlGsX6bH+sED0 -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:48 2025 by rpki-client