$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: 5AEXYoJBybbky2zZlQTMuPZZzuP5FF11+Tz7jl7okJ0= Subject key identifier: BB:6C:1C:05:7D:E3:A6:90:1D:62:F4:20:1D:01:07:BF:2E:CB:6C:5F Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1CD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1CC6 Signing time: Fri 30 May 2025 16:21:11 +0000 Manifest this update: Fri 30 May 2025 16:21:10 +0000 Manifest next update: Fri 06 Jun 2025 16:21:10 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: Zp/Q0vx16WwfNv9OqbihUWtxvGHAbj0FT6Ph7LzuBkI=) 2: EB7012446FDE11E9AF945067C4F9AE02.roa (hash: 7u9f+gWjW4ewcVZaqyMD9ZqpjL5Hz8NvrMbvw9f5dXY=) 3: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: RrfRQiaJQ/K/F0pEWCxhmnA6Eh04yX02RfUKJUyZudE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7385 (0x1cd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: May 30 16:21:10 2025 GMT Not After : Jun 6 16:21:10 2025 GMT Subject: CN=6839daf6-02ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:11:33:c7:ea:1a:27:9b:c4:b8:d4:63:80: 6d:f9:67:9b:a1:8a:8e:b2:1e:dc:70:d7:f2:2f:cb: 48:19:63:82:a8:15:cc:44:3e:6b:7b:92:54:2a:ce: ee:88:99:64:84:0e:60:fb:83:66:33:b8:83:c9:d4: 84:79:01:63:5f:ba:61:ff:2f:e6:aa:93:3a:48:da: 4e:92:96:4c:ba:10:23:1d:bb:61:96:b7:a7:d4:01: 7f:f1:7a:29:6f:f8:34:d4:87:c7:47:77:5f:28:0c: ee:2a:0c:0f:ef:14:6d:db:35:d2:3e:a8:2c:04:cf: c0:ef:ca:19:db:7d:7f:0d:9f:f1:95:3b:72:9d:90: e1:14:e0:de:54:77:a5:77:b0:f5:ff:ff:e1:c0:90: cf:6e:d0:2b:6d:1c:67:aa:8d:39:45:67:82:cb:12: 02:fe:f8:cc:65:14:f9:98:0a:a7:07:78:7b:17:8b: 5d:a6:13:c1:c6:9b:20:cb:48:de:49:cd:2a:27:64: e3:a2:d4:98:20:4c:26:2b:04:69:df:d4:2e:e4:f1: 84:b1:90:b3:41:89:94:61:f0:35:96:aa:65:aa:30: d3:be:b2:05:a2:f1:07:70:c3:03:d0:9d:56:7f:cf: 85:91:ea:aa:94:2a:21:f7:3f:46:fc:d5:5e:b8:08: 31:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6C:1C:05:7D:E3:A6:90:1D:62:F4:20:1D:01:07:BF:2E:CB:6C:5F X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:26:13:49:ef:fd:5c:fd:15:aa:0b:4e:36:fc:04:bb:93:ef: e8:6d:f5:f9:0c:c5:3d:84:cc:31:a7:60:38:34:ee:bf:69:c5: 5b:76:45:f5:92:60:75:c4:a6:bb:89:f0:e5:1b:39:44:72:8f: 51:1f:6c:bd:c2:7e:ef:ae:cc:e3:ab:bd:19:10:f8:01:c2:2e: a1:a0:9e:f9:20:c2:18:2a:65:6a:00:4b:1c:2c:fc:d5:f3:22: e9:dc:b7:3b:83:e5:a3:39:6c:92:52:5e:17:e7:92:fb:f8:9d: b1:44:7b:58:31:37:75:ea:14:67:b3:74:25:8d:c6:cf:06:02: cb:ed:a1:18:75:ac:67:98:b7:24:f6:e7:ca:a9:0f:e1:a2:d4: 55:33:53:11:1f:b2:57:b7:5e:66:57:c3:80:80:2b:68:29:11: a2:df:06:34:da:2e:75:af:70:06:e4:68:5b:ab:64:e2:51:aa: 1f:8d:b4:11:22:3a:9b:00:ec:99:e1:94:5c:d0:31:02:fa:90: de:71:c2:1d:a9:25:1c:e4:fa:e9:f8:fe:d6:3b:e8:3e:aa:1b: 95:62:73:50:30:6f:30:64:e2:51:59:b8:55:15:cc:74:77:ba: 82:e3:ba:e1:42:f3:29:6b:7e:f7:c4:ff:f1:55:ba:96:5c:fa: bd:92:56:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjUwNTMwMTYyMTEwWhcNMjUwNjA2MTYyMTEwWjAYMRYwFAYD VQQDEw02ODM5ZGFmNi0wMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupwRM8fqGiebxLjUY4Bt+WeboYqOsh7ccNfyL8tIGWOCqBXMRD5re5JUKs7u iJlkhA5g+4NmM7iDydSEeQFjX7ph/y/mqpM6SNpOkpZMuhAjHbthlren1AF/8Xop b/g01IfHR3dfKAzuKgwP7xRt2zXSPqgsBM/A78oZ231/DZ/xlTtynZDhFODeVHel d7D1///hwJDPbtArbRxnqo05RWeCyxIC/vjMZRT5mAqnB3h7F4tdphPBxpsgy0je Sc0qJ2TjotSYIEwmKwRp39Qu5PGEsZCzQYmUYfA1lqplqjDTvrIFovEHcMMD0J1W f8+FkeqqlCoh9z9G/NVeuAgx1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtsHAV9 46aQHWL0IB0BB78uy2xfMB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiJhNJ7/1c/RWqC042/AS7k+/obfX5DMU9hMwxp2A4NO6/acVbdkX1 kmB1xKa7ifDlGzlEco9RH2y9wn7vrszjq70ZEPgBwi6hoJ75IMIYKmVqAEscLPzV 8yLp3Lc7g+WjOWySUl4X55L7+J2xRHtYMTd16hRns3QljcbPBgLL7aEYdaxnmLck 9ufKqQ/hotRVM1MRH7JXt15mV8OAgCtoKRGi3wY02i51r3AG5Ghbq2TiUaofjbQR IjqbAOyZ4ZRc0DEC+pDeccIdqSUc5Prp+P7WO+g+qhuVYnNQMG8wZOJRWbhVFcx0 d7qC47rhQvMpa373xP/xVbqWXPq9klbM -----END CERTIFICATE-----Generated at Sat May 31 17:20:40 2025 by rpki-client