$ rpki-client -vvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft File: IEZaOpwIN-e2iDBzNx26CSIvv0o.mft (raw, json) Hash identifier: AJwOX/69nlYFBHW6otmOi37WOfDrGqDaR2vVXqx5S2M= Subject key identifier: BF:A7:96:DA:A5:F1:E6:90:F0:1A:B0:65:14:73:88:EC:A5:C3:B3:57 Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A Certificate issuer: /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A Certificate serial: 06C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft Manifest number: 06BD Signing time: Sat 10 May 2025 21:44:38 +0000 Manifest this update: Sat 10 May 2025 21:44:37 +0000 Manifest next update: Sat 17 May 2025 21:44:37 +0000 Files and hashes: 1: IEZaOpwIN-e2iDBzNx26CSIvv0o.crl (hash: /+eC9quT58+fFt9KEqgT1Lmx1Wp+DhIfH80LhPxxIVU=) 2: 9CC98174539711EEA9B2324DC4F9AE02.roa (hash: jIuIPn8j5ZccqDe120+/qUjhEXWCn1vWyx6axQilbV8=) 3: 45490AB25AD611EB946A2C37C4F9AE02.roa (hash: bm3yECqfcINDVceeUuebyksKLDGjoVN5Jq0eB4u8roc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D897, serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A Validity Not Before: May 10 21:44:37 2025 GMT Not After : May 17 21:44:37 2025 GMT Subject: CN=681fc8c5-0bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:13:80:10:71:6a:df:a8:e0:a5:a8:f9:9a: a4:75:ec:60:4f:7b:20:28:91:cf:d0:f2:19:04:4b: 2c:c2:a4:3e:39:6f:6d:da:60:ec:54:8f:08:54:f9: 3a:f5:1e:5f:a2:e8:f3:51:d9:8f:85:78:1c:9d:62: 1b:f2:2c:6e:30:29:b1:d4:cc:ab:4c:d5:01:15:65: c7:98:88:c9:18:a8:c2:1a:3d:dd:9f:c6:78:12:f5: 7f:0c:56:58:4b:ca:eb:d4:7f:3a:43:b0:bf:a2:19: f4:e0:ae:83:85:3b:dd:02:ba:c4:55:4a:16:9e:5b: 46:d6:a1:38:d4:fa:f1:b6:f1:89:3a:e6:c5:58:fc: ee:a1:64:84:1c:2f:53:bf:1c:2e:9d:c2:60:ce:ba: c8:42:d3:b6:5b:3d:22:85:84:6b:00:8e:8b:f8:c3: e2:f5:18:fa:3d:bc:a6:03:41:45:bb:e4:36:5c:79: f8:f3:44:24:d5:fd:f4:7b:8a:b1:02:18:29:a4:3a: 7e:3b:0c:a0:16:7e:b2:85:50:49:aa:cb:03:35:37: a2:0a:62:c3:ad:02:6d:43:e7:c6:a4:2c:8d:a2:f3: 5c:bc:b4:b5:79:03:31:1c:34:d2:d6:2d:0c:4c:63: b7:72:4c:2f:39:c7:01:ae:a1:4c:44:28:15:93:41: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A7:96:DA:A5:F1:E6:90:F0:1A:B0:65:14:73:88:EC:A5:C3:B3:57 X509v3 Authority Key Identifier: keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e5:e3:5c:bd:71:67:f8:50:5a:c1:03:9c:d1:c0:4e:8a:d2: 1e:83:09:4e:7c:a9:96:67:32:10:d0:d6:12:5f:b8:58:8a:6a: a1:7d:eb:dc:87:3f:a9:8c:eb:9b:ee:cd:54:37:84:db:fc:db: e4:fe:1f:e9:83:76:2c:d3:9a:e0:bb:40:af:d3:c9:49:f9:e4: 76:f4:bf:00:01:29:b8:da:40:72:22:0d:d7:9e:c3:c3:e2:ca: 12:e2:b4:55:4e:98:13:2b:d4:ee:13:ff:50:09:9f:bf:a3:a0: ff:d2:dd:b2:22:12:2d:73:50:c2:19:23:60:c9:e4:09:48:f2: e1:40:30:47:4d:2d:4d:71:d1:ea:7b:c0:7b:e3:ac:5b:44:de: 41:63:5a:2c:6d:3a:2f:c0:52:7d:e0:ee:33:cf:36:ff:6f:cc: ff:76:c5:34:cd:8c:70:31:c7:9f:c9:e3:5b:74:52:1a:66:ce: 3e:64:df:44:8c:5b:3b:fc:48:30:b7:22:c5:9e:96:3d:ef:0f: da:01:66:a8:d0:03:d0:98:a2:80:d4:84:6b:2e:6d:32:72:fb: c4:ac:cd:5f:16:e1:42:2f:3c:b4:0d:31:f9:2e:ec:63:15:50: f3:53:72:54:83:90:41:59:b2:43:f4:cf:2c:7c:03:5b:36:96: be:86:8c:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4OTcxMTAvBgNVBAUTKDIwNDY1QTNBOUMwODM3RTdCNjg4MzA3MzM3MURCQTA5 MjIyRkJGNEEwHhcNMjUwNTEwMjE0NDM3WhcNMjUwNTE3MjE0NDM3WjAYMRYwFAYD VQQDEw02ODFmYzhjNS0wYmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8wTgBBxat+o4KWo+ZqkdexgT3sgKJHP0PIZBEsswqQ+OW9t2mDsVI8IVPk6 9R5foujzUdmPhXgcnWIb8ixuMCmx1MyrTNUBFWXHmIjJGKjCGj3dn8Z4EvV/DFZY S8rr1H86Q7C/ohn04K6DhTvdArrEVUoWnltG1qE41PrxtvGJOubFWPzuoWSEHC9T vxwuncJgzrrIQtO2Wz0ihYRrAI6L+MPi9Rj6PbymA0FFu+Q2XHn480Qk1f30e4qx AhgppDp+OwygFn6yhVBJqssDNTeiCmLDrQJtQ+fGpCyNovNcvLS1eQMxHDTS1i0M TGO3ckwvOccBrqFMRCgVk0G6GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+nltql 8eaQ8BqwZRRziOylw7NXMB8GA1UdIwQYMBaAFCBGWjqcCDfntogwczcdugkiL79K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg5Ny8wOTc3MTE5MjVB RDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4tZTJpREJ6TngyNkNTSXZ2 MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFWmFPcHdJTi1lMmlEQnpOeDI2Q1NJdnYwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDg5Ny8wOTc3MTE5MjVBRDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4t ZTJpREJ6TngyNkNTSXZ2MG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF5eNcvXFn+FBawQOc0cBOitIegwlOfKmWZzIQ0NYSX7hYimqhfevc hz+pjOub7s1UN4Tb/Nvk/h/pg3Ys05rgu0Cv08lJ+eR29L8AASm42kByIg3XnsPD 4soS4rRVTpgTK9TuE/9QCZ+/o6D/0t2yIhItc1DCGSNgyeQJSPLhQDBHTS1NcdHq e8B746xbRN5BY1osbTovwFJ94O4zzzb/b8z/dsU0zYxwMcefyeNbdFIaZs4+ZN9E jFs7/EgwtyLFnpY97w/aAWao0APQmKKA1IRrLm0ycvvErM1fFuFCLzy0DTH5Luxj FVDzU3JUg5BBWbJD9M8sfANbNpa+hozE -----END CERTIFICATE-----Generated at Sun May 11 16:47:20 2025 by rpki-client