$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json) Hash identifier: 8eDR4l3vwepj0L0zdGT3hJ5kuPaeIyWaOaeFFqOPm9Q= Subject key identifier: 28:6F:81:A0:73:CD:28:89:44:A7:DB:B9:F4:84:06:88:FD:D1:CC:67 Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft Manifest number: 01EA Signing time: Sat 31 May 2025 02:19:21 +0000 Manifest this update: Sat 31 May 2025 02:19:21 +0000 Manifest next update: Sat 07 Jun 2025 02:19:21 +0000 Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: Wq48z1V9aUnXYB5k0mrdl1bq/Fg5Z+PMeXDPpGyGmxk=) 2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: GwA8WNqmVW1s9tawzkiqtYC7xFjjdtlbsl+Ur+WNSNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: May 31 02:19:21 2025 GMT Not After : Jun 7 02:19:21 2025 GMT Subject: CN=683a6729-a1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:ce:e8:2b:fb:0c:48:58:84:22:06:1c:f7: 06:67:90:10:ec:2e:71:e9:cd:92:44:2f:ff:23:21: d8:89:d2:54:9b:3b:d2:73:73:ca:4b:6f:82:a8:89: 5d:dc:e8:12:b6:5c:ca:9b:76:70:3c:b7:1c:e7:20: 70:28:09:bb:e8:dd:75:8b:c2:8e:fc:dc:d5:c5:77: 98:a4:cb:7a:eb:c2:a8:b2:6d:42:3f:3a:b4:fd:b4: 5c:e6:93:b6:8f:4f:4e:55:68:81:66:de:7b:54:81: 64:ae:17:0f:c5:e4:67:e0:f1:3c:37:86:ea:5e:70: db:5f:af:65:63:41:99:5c:53:f2:70:ff:70:19:4a: 85:ad:0f:62:db:8a:c5:7a:9c:fd:79:cd:48:7c:31: 3a:0d:12:a0:cd:f9:b4:7d:51:b1:4a:28:da:21:60: 43:d0:de:76:e6:c4:44:f1:e6:d0:f3:b0:59:a5:1d: 9d:d3:5f:fd:4c:7d:52:ab:41:0b:f4:81:79:24:83: 5c:94:18:bd:5b:1b:14:ac:73:b1:70:b8:df:41:69: 6f:3b:4a:66:ed:3c:4b:f4:47:ca:e2:88:39:29:53: ee:b1:06:f4:95:6f:74:04:07:2b:6f:6f:9d:0e:8d: 97:f3:b2:73:4a:e9:cb:64:78:dc:a6:d1:30:98:57: 3c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6F:81:A0:73:CD:28:89:44:A7:DB:B9:F4:84:06:88:FD:D1:CC:67 X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a7:9d:bd:2b:59:2a:37:0f:50:b0:05:68:3f:c3:50:63:7e: 81:32:33:4e:c5:89:7d:db:01:17:6f:7c:6c:61:07:24:7a:e3: a5:36:7a:42:9b:e3:5e:67:88:a3:de:24:58:95:48:e7:d4:ff: 7d:7c:0d:89:3e:cc:e8:08:7e:67:0a:bf:39:2d:2b:4e:ec:5a: df:f8:95:00:b4:76:04:78:2d:4c:27:77:27:3f:d2:f5:48:0c: db:b3:66:30:30:39:e2:a6:9e:20:19:5d:d0:41:96:12:66:2d: c4:45:80:e0:ad:5e:7e:b2:09:6a:31:50:79:5f:88:1f:b3:66: 90:ad:b1:0b:75:80:f4:fc:5d:b4:d3:c7:f2:2c:3a:f2:62:f0: 20:7b:b0:f9:ac:58:9f:12:22:b9:be:6d:a9:a1:2c:a5:ca:b5: a8:ef:74:4d:ce:61:22:f6:d8:d8:ad:3a:bd:4e:b3:46:3b:14: db:34:1a:67:a8:a6:da:67:d6:b0:b4:79:d2:b4:3f:a0:b6:b6: 0c:12:2c:0d:94:ab:ae:2c:d0:d7:c2:27:43:3f:b2:1f:5b:df: 49:d0:d6:d4:74:af:2f:d7:08:50:7e:60:bc:a8:e7:dc:0e:31: 7c:6b:52:81:43:7d:c4:1d:24:50:4f:7e:34:b7:3b:40:ea:7f: 10:47:85:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjUwNTMxMDIxOTIxWhcNMjUwNjA3MDIxOTIxWjAYMRYwFAYD VQQDEw02ODNhNjcyOS1hMWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAov3O6Cv7DEhYhCIGHPcGZ5AQ7C5x6c2SRC//IyHYidJUmzvSc3PKS2+CqIld 3OgStlzKm3ZwPLcc5yBwKAm76N11i8KO/NzVxXeYpMt668Kosm1CPzq0/bRc5pO2 j09OVWiBZt57VIFkrhcPxeRn4PE8N4bqXnDbX69lY0GZXFPycP9wGUqFrQ9i24rF epz9ec1IfDE6DRKgzfm0fVGxSijaIWBD0N525sRE8ebQ87BZpR2d01/9TH1Sq0EL 9IF5JINclBi9WxsUrHOxcLjfQWlvO0pm7TxL9EfK4og5KVPusQb0lW90BAcrb2+d Do2X87JzSunLZHjcptEwmFc8zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChvgaBz zSiJRKfbufSEBoj90cxnMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQxOS9GQTZFMzZDQzRFRDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xr ZTVGTHNxYTJiSGZWT1hwQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRp529K1kqNw9QsAVoP8NQY36BMjNOxYl92wEXb3xsYQckeuOlNnpC m+NeZ4ij3iRYlUjn1P99fA2JPszoCH5nCr85LStO7Frf+JUAtHYEeC1MJ3cnP9L1 SAzbs2YwMDnipp4gGV3QQZYSZi3ERYDgrV5+sglqMVB5X4gfs2aQrbELdYD0/F20 08fyLDryYvAge7D5rFifEiK5vm2poSylyrWo73RNzmEi9tjYrTq9TrNGOxTbNBpn qKbaZ9awtHnStD+gtrYMEiwNlKuuLNDXwidDP7IfW99J0NbUdK8v1whQfmC8qOfc DjF8a1KBQ33EHSRQT340tztA6n8QR4Ul -----END CERTIFICATE-----Generated at Sat May 31 16:35:55 2025 by rpki-client