$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json) Hash identifier: g4U/mrGKIsE7SuTuqF4I9FKKh8qLf1cjeJpjvcsn/v0= Subject key identifier: 11:0B:65:37:75:E5:76:0F:F5:68:DB:21:F9:71:30:9C:FB:AC:8D:41 Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft Manifest number: 09E0 Signing time: Fri 30 May 2025 20:06:09 +0000 Manifest this update: Fri 30 May 2025 20:06:08 +0000 Manifest next update: Fri 06 Jun 2025 20:06:08 +0000 Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: IN/8HRIud7ToZyLHKcryJ1EdKkSYs9Fi2aDjFYYYKvc=) 2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: p9kCZDh5UAqZ2BMmqpg1+O7Ke6v3jmI1iGjmFDJZpjY=) 3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: K7z8kKU5BqzIOHwB0jfNZHDe2Ivnb5VNPYxOnFpEPT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: May 30 20:06:08 2025 GMT Not After : Jun 6 20:06:08 2025 GMT Subject: CN=683a0fb0-4040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:89:c6:19:fd:91:b5:c2:86:2a:e8:48:81:7d: 92:75:ae:18:19:7b:62:b7:0a:54:73:db:d4:e1:3a: c3:80:9c:53:c0:ee:1e:a5:c2:a8:a6:26:de:e6:d7: 45:26:8d:ad:31:5b:5b:24:f2:23:5f:7b:2b:e3:d8: 7c:60:83:fc:11:8b:4b:fe:51:df:80:c9:51:3c:3f: d0:fb:c4:ac:4f:57:29:0f:5f:a0:73:c5:a3:36:22: 33:25:52:b2:14:ee:8e:ea:4f:84:54:fa:08:60:5b: 36:0d:8b:03:30:80:4a:6f:05:f6:cb:ee:ed:99:61: f4:33:35:f8:14:ef:82:95:b6:35:f2:13:02:50:2a: 0e:e5:09:41:ef:60:dc:f3:22:59:a6:fe:69:16:fa: f6:1a:5f:cf:ee:29:f1:f3:07:2b:ce:cc:73:fb:2e: 9a:68:00:c5:c1:a5:1f:03:8a:68:4e:c9:c4:77:6b: c2:16:30:80:7c:9f:9c:40:c4:23:a3:de:18:ce:93: 3d:18:74:c0:16:f5:07:ad:b2:f1:f0:c8:59:36:d5: 47:9d:70:03:d9:1e:67:9e:1c:54:32:08:5c:dc:5e: cf:db:6b:7e:4d:58:19:c7:d7:8f:79:93:cd:0a:70: 89:27:43:4e:72:ca:93:e2:04:81:78:88:37:b4:0e: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0B:65:37:75:E5:76:0F:F5:68:DB:21:F9:71:30:9C:FB:AC:8D:41 X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:de:0f:90:72:09:f8:ff:87:e1:22:12:7b:bc:95:f9:58:9f: 3c:d2:ec:8e:a6:02:b0:8e:81:43:ac:55:8f:9f:79:94:ad:ae: 01:c2:b7:8f:92:62:0c:44:d1:80:1d:de:a6:bd:28:eb:c8:dd: f7:56:96:fe:a2:86:e9:42:0b:02:d1:22:ef:55:0b:38:d4:5f: ff:0b:8c:da:f7:ca:cf:5d:1a:2a:cb:0b:08:6d:55:ea:c4:04: d4:97:9a:4c:9b:19:9c:c2:11:8d:7d:da:5a:b2:ee:17:19:44: ba:56:73:96:ff:af:a4:19:10:70:91:a1:dd:65:09:43:e6:ef: c9:24:54:bb:0d:81:ae:d9:66:78:b8:9e:8e:fc:6e:f1:1f:51: 74:c2:f6:8c:91:ae:29:fd:7f:c8:53:79:c3:c6:97:06:6b:21: 49:62:57:c2:0a:16:d5:f6:2b:1a:91:68:85:ad:8f:ca:94:cd: 45:9b:cc:3f:2e:00:b9:6e:24:08:8c:a9:c1:01:eb:c5:c7:fe: 38:82:e4:d0:01:53:1a:26:a9:35:1d:1c:ea:8c:0f:f2:62:04: 7f:95:01:69:9c:79:c3:bb:a3:e8:ed:26:2b:8e:38:4c:da:77: 72:fe:3b:6f:bb:45:cf:f1:ef:f7:23:ca:30:b5:f7:6a:91:a5: 58:df:c4:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjUwNTMwMjAwNjA4WhcNMjUwNjA2MjAwNjA4WjAYMRYwFAYD VQQDEw02ODNhMGZiMC00MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4nGGf2RtcKGKuhIgX2Sda4YGXtitwpUc9vU4TrDgJxTwO4epcKopibe5tdF Jo2tMVtbJPIjX3sr49h8YIP8EYtL/lHfgMlRPD/Q+8SsT1cpD1+gc8WjNiIzJVKy FO6O6k+EVPoIYFs2DYsDMIBKbwX2y+7tmWH0MzX4FO+ClbY18hMCUCoO5QlB72Dc 8yJZpv5pFvr2Gl/P7inx8wcrzsxz+y6aaADFwaUfA4poTsnEd2vCFjCAfJ+cQMQj o94YzpM9GHTAFvUHrbLx8MhZNtVHnXAD2R5nnhxUMghc3F7P22t+TVgZx9ePeZPN CnCJJ0NOcsqT4gSBeIg3tA6LiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBELZTd1 5XYP9WjbIflxMJz7rI1BMB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6 YUVIX1VEVTJfNWtZX3JKY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC13g+Qcgn4/4fhIhJ7vJX5WJ880uyOpgKwjoFDrFWPn3mUra4BwreP kmIMRNGAHd6mvSjryN33Vpb+oobpQgsC0SLvVQs41F//C4za98rPXRoqywsIbVXq xATUl5pMmxmcwhGNfdpasu4XGUS6VnOW/6+kGRBwkaHdZQlD5u/JJFS7DYGu2WZ4 uJ6O/G7xH1F0wvaMka4p/X/IU3nDxpcGayFJYlfCChbV9isakWiFrY/KlM1Fm8w/ LgC5biQIjKnBAevFx/44guTQAVMaJqk1HRzqjA/yYgR/lQFpnHnDu6Po7SYrjjhM 2ndy/jtvu0XP8e/3I8owtfdqkaVY38Sb -----END CERTIFICATE-----Generated at Sat May 31 17:11:24 2025 by rpki-client