$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft File: iseesut_a1et3hy6QDxuWCNtNEU.mft (raw, json) Hash identifier: aD7RQyr6LqX00oyL3LVhBX81V6v6Nx9DjFpTXslCAD8= Subject key identifier: D7:5F:75:AD:F5:E2:ED:4B:8A:42:4E:B0:77:03:BF:D3:3F:C0:5C:68 Authority key identifier: 8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 Certificate issuer: /CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft Manifest number: 1F90 Signing time: Fri 30 May 2025 16:47:35 +0000 Manifest this update: Fri 30 May 2025 16:47:34 +0000 Manifest next update: Fri 06 Jun 2025 16:47:34 +0000 Files and hashes: 1: iseesut_a1et3hy6QDxuWCNtNEU.crl (hash: rmlBhtrf6Tr1Z87aoj3kapeF8O5m7qj7YBcNUBocUfc=) 2: 710575A2635611ED90FD8A69C4F9AE02.roa (hash: C8MKsyPVWAimK6phH4+d0OSiM41QQRf2a7Iq+R3FboQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF026, serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Validity Not Before: May 30 16:47:34 2025 GMT Not After : Jun 6 16:47:34 2025 GMT Subject: CN=6839e127-c397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e8:e0:44:3f:4e:26:fd:92:bb:59:3c:ae:44: 0c:fb:a9:34:e4:00:1d:2e:8f:75:6e:61:35:22:a1: 0d:08:a5:eb:61:25:11:a7:de:b2:9f:82:57:bb:04: b5:4a:91:d2:47:d5:a4:ea:1e:d0:fa:1e:50:b0:04: 7e:80:fb:9e:c7:ef:dd:7a:f7:70:24:cb:5e:94:95: 90:44:f9:c6:98:db:04:3f:dc:24:e0:67:87:65:7a: 70:bf:66:40:f0:88:03:75:bd:03:10:8c:bd:fa:dc: b6:2c:30:bd:5b:de:5c:1c:a0:9a:45:1c:c3:40:89: 0e:9a:fd:1a:16:cd:04:8d:e3:96:a7:78:68:59:61: 42:ff:ba:43:64:10:1d:c4:e7:49:78:85:d6:6c:b3: 8e:5c:c2:26:b6:c4:00:f1:b7:27:ce:99:35:43:14: b3:52:1b:e1:e1:a9:8a:01:3e:fe:2c:c2:6b:73:98: 56:9e:79:f7:0f:a9:39:17:d1:cb:cf:5f:2f:90:b2: af:a2:7a:34:46:eb:80:a8:da:05:71:26:2a:a7:61: a6:17:f9:86:df:d5:85:0f:85:b0:52:cb:7b:88:f4: 7b:77:8d:f6:26:81:07:4f:1a:77:03:d2:e7:ae:bb: b1:53:d1:ae:c9:da:fb:d8:c9:88:61:8a:63:14:4c: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5F:75:AD:F5:E2:ED:4B:8A:42:4E:B0:77:03:BF:D3:3F:C0:5C:68 X509v3 Authority Key Identifier: keyid:8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a2:34:91:3c:8a:fe:36:be:5b:4c:26:f8:76:c0:43:92:60: 98:01:51:be:e6:7c:22:df:6e:59:90:fa:ba:e0:ed:d0:8c:8e: a6:01:f4:6a:1e:98:c9:22:ce:54:82:10:a7:84:06:3f:85:9a: 03:b5:32:39:0e:6e:f5:6b:a1:cb:fe:bc:90:5b:79:73:6c:2b: a0:eb:fa:7d:9c:a9:18:40:4c:ee:15:d3:6f:44:4b:08:14:da: bd:c6:8d:09:d0:54:d8:fe:b7:e1:b4:1c:e0:f9:a2:8b:ab:04: b0:8c:06:90:65:71:32:05:10:e8:2e:6d:e2:bc:61:9d:32:ab: 86:64:11:27:87:1e:86:e9:03:9a:cd:29:10:b8:bb:72:54:48: aa:e4:d7:b6:5c:71:30:2b:5d:63:42:61:79:47:c1:03:61:da: 84:55:80:88:4c:e1:40:70:20:0f:f6:90:90:cd:6a:b2:47:f4: 75:31:ee:54:5b:c0:18:07:76:f3:89:99:a6:48:74:cc:86:f3: 0f:23:87:fa:38:bd:78:cc:a2:b8:6e:64:18:f1:b3:16:0a:b1: e5:0b:27:f0:fb:04:b5:01:ed:51:8f:c8:74:89:a1:f3:14:be: 9b:65:4f:84:b0:29:06:5c:0e:70:e0:cb:76:f7:1e:ce:d1:ae: ec:f9:e0:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMjYxMTAvBgNVBAUTKDhBQzc5RUIyRUI3RjZCNTdBRERFMUNCQTQwM0M2RTU4 MjM2RDM0NDUwHhcNMjUwNTMwMTY0NzM0WhcNMjUwNjA2MTY0NzM0WjAYMRYwFAYD VQQDEw02ODM5ZTEyNy1jMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ujgRD9OJv2Su1k8rkQM+6k05AAdLo91bmE1IqENCKXrYSURp96yn4JXuwS1 SpHSR9Wk6h7Q+h5QsAR+gPuex+/devdwJMtelJWQRPnGmNsEP9wk4GeHZXpwv2ZA 8IgDdb0DEIy9+ty2LDC9W95cHKCaRRzDQIkOmv0aFs0EjeOWp3hoWWFC/7pDZBAd xOdJeIXWbLOOXMImtsQA8bcnzpk1QxSzUhvh4amKAT7+LMJrc5hWnnn3D6k5F9HL z18vkLKvono0RuuAqNoFcSYqp2GmF/mG39WFD4WwUst7iPR7d432JoEHTxp3A9Ln rruxU9Guydr72MmIYYpjFEyuawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdfda31 4u1LikJOsHcDv9M/wFxoMB8GA1UdIwQYMBaAFIrHnrLrf2tXrd4cukA8blgjbTRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9pc2Vlc3V0X2ExZXQzaHk2UUR4dVdDTnRO RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lzZWVzdXRfYTFldDNoeTZRRHh1V0NOdE5FVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAyNi8wMzI4QTg1Q0RERTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9pc2Vlc3V0X2Ex ZXQzaHk2UUR4dVdDTnRORVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQojSRPIr+Nr5bTCb4dsBDkmCYAVG+5nwi325ZkPq64O3QjI6mAfRq HpjJIs5UghCnhAY/hZoDtTI5Dm71a6HL/ryQW3lzbCug6/p9nKkYQEzuFdNvREsI FNq9xo0J0FTY/rfhtBzg+aKLqwSwjAaQZXEyBRDoLm3ivGGdMquGZBEnhx6G6QOa zSkQuLtyVEiq5Ne2XHEwK11jQmF5R8EDYdqEVYCITOFAcCAP9pCQzWqyR/R1Me5U W8AYB3bziZmmSHTMhvMPI4f6OL14zKK4bmQY8bMWCrHlCyfw+wS1Ae1Rj8h0iaHz FL6bZU+EsCkGXA5w4Mt29x7O0a7s+eCj -----END CERTIFICATE-----Generated at Sat May 31 17:14:40 2025 by rpki-client