$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json) Hash identifier: FhoUXY7c+hsLJ9vX28XlD2tQZ0zCOuZN60bF4OzM+ek= Subject key identifier: 27:71:E8:FB:02:DF:32:25:C6:E8:69:FC:BC:5B:F8:6E:08:92:79:C3 Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Certificate serial: 0BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft Manifest number: 0BF3 Signing time: Sun 08 Jun 2025 18:34:29 +0000 Manifest this update: Sun 08 Jun 2025 18:34:29 +0000 Manifest next update: Sun 15 Jun 2025 18:34:29 +0000 Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: RVgn2s37v/Ioxbg2WEShjV30l6HcAFTsfDksUY1MmhU=) 2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: ZFOmsL5bJSLH6PZ2YkIqaVTwufEfPYg2DbDADn/8Z+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Validity Not Before: Jun 8 18:34:29 2025 GMT Not After : Jun 15 18:34:29 2025 GMT Subject: CN=6845d7b5-8d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:68:a5:05:87:f6:b8:44:b3:fa:68:c0:19:37: b6:4c:cf:36:32:64:83:c1:70:f3:f7:2c:93:90:b7: 1e:b4:99:e2:99:f3:8d:56:41:59:c6:4d:79:d2:4e: c8:0d:3c:52:0b:eb:1b:d8:98:77:ea:d4:0d:63:05: 0e:18:a6:0f:75:73:10:d8:7d:d1:c0:a5:e6:54:21: eb:68:13:93:00:14:fd:f3:87:4f:99:7d:65:31:f9: 15:4d:a7:6d:c6:7a:56:0d:64:e8:6f:21:93:0c:4d: d5:0e:8a:b4:3b:9a:71:40:e6:0a:97:6f:70:fc:32: e1:6e:1e:7c:2b:f2:4e:db:c7:50:be:90:e7:d5:4e: 7d:c3:49:34:83:1d:67:ab:df:ba:62:1e:62:4d:23: c5:95:97:60:5e:2d:3a:d2:1d:a5:83:75:48:98:20: 60:23:6f:01:cc:6b:dd:5f:a8:db:f0:13:81:2c:a9: 12:1e:98:60:1c:63:7b:70:9a:27:00:3d:fc:b3:e6: 17:5e:09:33:11:d5:b0:e7:62:03:a8:95:41:b6:b1: e3:51:e9:f0:86:88:01:97:75:57:a6:9e:3e:b6:80: 05:79:f3:3a:48:fe:49:ba:98:17:6b:d0:c2:d9:d8: d9:25:6f:44:50:bd:97:dd:c0:12:92:52:55:67:a2: 15:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:71:E8:FB:02:DF:32:25:C6:E8:69:FC:BC:5B:F8:6E:08:92:79:C3 X509v3 Authority Key Identifier: keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c5:dc:e1:4a:76:27:a8:6d:ea:83:37:a8:03:e7:fe:26:59: d7:0d:99:27:ab:2c:43:fe:a3:d6:21:10:e0:ff:d6:31:1f:55: b4:2a:cd:3f:02:f6:2f:82:80:1f:25:66:85:3d:08:9d:1f:ac: b4:fe:cd:b9:29:c2:02:26:47:ed:7d:24:e1:74:14:39:50:64: 32:bf:82:17:d3:33:e8:be:99:84:d3:f0:72:cf:94:d5:8d:07: 1f:bd:7c:d4:29:95:74:bb:2d:20:40:37:63:c1:00:d8:47:60: 3e:f2:11:92:0a:86:ca:8a:6d:4f:3f:0f:84:f8:22:b7:a1:85: e3:16:2a:13:b7:ed:29:d4:d5:02:41:2f:5c:57:cf:94:04:c4: 57:53:5c:40:57:1e:f4:80:95:a0:6b:60:b7:c3:0b:5b:c6:ec: 51:06:5e:25:1f:4c:c6:c9:b9:17:8d:30:91:00:17:7e:01:9a: 84:f7:dd:11:42:67:32:75:b9:5f:90:91:83:75:8d:81:60:cb: ae:1b:71:2d:c0:88:52:a6:ae:ac:9c:33:11:94:36:bd:13:ab: ec:f6:08:4e:25:1d:34:aa:9d:b8:be:4e:d5:67:9a:43:d0:0f: 85:c0:32:1d:c4:ac:39:b7:6e:69:76:3f:dc:b1:bb:69:94:14: 9c:63:ea:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF NDNDNThBODgwHhcNMjUwNjA4MTgzNDI5WhcNMjUwNjE1MTgzNDI5WjAYMRYwFAYD VQQDEw02ODQ1ZDdiNS04ZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WilBYf2uESz+mjAGTe2TM82MmSDwXDz9yyTkLcetJnimfONVkFZxk150k7I DTxSC+sb2Jh36tQNYwUOGKYPdXMQ2H3RwKXmVCHraBOTABT984dPmX1lMfkVTadt xnpWDWTobyGTDE3VDoq0O5pxQOYKl29w/DLhbh58K/JO28dQvpDn1U59w0k0gx1n q9+6Yh5iTSPFlZdgXi060h2lg3VImCBgI28BzGvdX6jb8BOBLKkSHphgHGN7cJon AD38s+YXXgkzEdWw52IDqJVBtrHjUenwhogBl3VXpp4+toAFefM6SP5JupgXa9DC 2djZJW9EUL2X3cASklJVZ6IVUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdx6PsC 3zIlxuhp/Lxb+G4IknnDMB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1 RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk4NC8yODc0NUU0QzE1RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hT eWU4MFBscjBFUUhrUEZpb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXxdzhSnYnqG3qgzeoA+f+JlnXDZknqyxD/qPWIRDg/9YxH1W0Ks0/ AvYvgoAfJWaFPQidH6y0/s25KcICJkftfSThdBQ5UGQyv4IX0zPovpmE0/Byz5TV jQcfvXzUKZV0uy0gQDdjwQDYR2A+8hGSCobKim1PPw+E+CK3oYXjFioTt+0p1NUC QS9cV8+UBMRXU1xAVx70gJWga2C3wwtbxuxRBl4lH0zGybkXjTCRABd+AZqE990R QmcydblfkJGDdY2BYMuuG3EtwIhSpq6snDMRlDa9E6vs9ghOJR00qp24vk7VZ5pD 0A+FwDIdxKw5t25pdj/csbtplBScY+ow -----END CERTIFICATE-----Generated at Mon Jun 9 11:16:49 2025 by rpki-client