$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json) Hash identifier: qM1HCB97uI5MQTo3v+s/RQPxuGmH0E6MukZO5Kpu0z4= Subject key identifier: 32:3A:B7:A0:DD:9B:DC:88:4D:DB:F6:0C:51:A9:D9:A3:0E:F7:8E:38 Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Certificate serial: 0BF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft Manifest number: 0BE6 Signing time: Mon 12 May 2025 18:39:18 +0000 Manifest this update: Mon 12 May 2025 18:39:17 +0000 Manifest next update: Mon 19 May 2025 18:39:17 +0000 Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: s58RSt9ZKDLqsKzqAy7yQa1lLAdZbH41gs9D1UfO/FQ=) 2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: ZFOmsL5bJSLH6PZ2YkIqaVTwufEfPYg2DbDADn/8Z+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3057 (0xbf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Validity Not Before: May 12 18:39:17 2025 GMT Not After : May 19 18:39:17 2025 GMT Subject: CN=68224055-6fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:36:13:0c:09:16:c5:63:90:78:af:84:9f: 26:7f:60:8d:4d:ee:c3:c7:07:c2:6d:16:b1:95:e5: 5f:d5:02:81:ac:1f:8d:6f:fa:c6:6b:12:f8:85:c7: 81:f3:ad:a6:42:17:20:69:97:04:d5:c7:7f:7e:db: e7:cb:ec:a5:f0:68:cc:e4:bc:e9:43:46:b7:09:72: ed:33:2b:d8:25:eb:39:e9:b3:f8:cc:49:90:cf:0f: 56:93:df:51:23:ac:e6:5f:f2:76:a2:c3:b1:a2:bc: a6:db:20:6d:2b:20:a2:38:df:d9:d0:96:89:fb:35: ba:5d:9a:4c:88:cf:10:b2:31:1e:24:5d:58:c0:8b: 5a:d2:9e:b9:57:25:b5:09:ae:51:c9:57:72:07:93: 40:0a:49:36:e2:6c:63:94:e4:95:5e:3f:3a:33:20: 25:3e:b3:f6:e7:7f:fd:12:ed:d0:d7:9d:06:e9:8c: e2:e4:fa:91:f5:ad:57:53:c0:78:02:34:56:40:75: 99:33:46:60:19:2d:b2:99:91:6f:cc:cc:12:23:88: 82:87:ba:52:65:18:a4:b9:af:e9:aa:c6:45:46:17: 2a:21:d6:58:7d:0c:ee:90:d7:33:b0:23:34:14:eb: 44:d9:f9:f8:12:e0:3f:75:79:53:6f:4d:36:77:2c: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3A:B7:A0:DD:9B:DC:88:4D:DB:F6:0C:51:A9:D9:A3:0E:F7:8E:38 X509v3 Authority Key Identifier: keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:6d:25:34:d7:49:8b:ed:1e:0e:d9:f2:91:26:5d:2f:e5:79: 0d:cc:e6:fa:85:eb:5c:d5:6c:ee:92:5e:95:2c:18:a2:4c:68: 2e:e0:6a:d6:26:93:12:2b:3c:09:ae:5a:c9:48:cb:2d:3f:c5: 6a:11:a5:bd:ea:4d:a9:94:5a:d4:2d:95:19:5b:4c:49:6c:dc: 6f:ab:8d:9b:aa:ae:2d:7a:d6:de:35:7e:03:33:5a:8d:c2:06: 11:d3:1c:77:7d:5d:18:bb:13:4e:ec:1b:10:d8:8d:6e:90:ea: c8:7b:36:b8:c9:51:e4:54:f7:e8:cb:69:35:54:18:bf:35:e3: 55:0b:9b:75:fe:a1:8f:89:6a:38:ed:9b:dd:73:21:bc:28:8f: 26:4e:a7:fe:66:64:c0:01:fd:de:2f:20:f2:18:5c:66:e2:03: 66:90:98:64:89:f1:5a:85:1d:79:d1:71:24:89:09:aa:d7:b4: 26:17:01:f8:5e:f1:8e:88:0e:a0:e5:3e:8a:80:64:ff:a0:f1: 1f:d2:33:bd:ca:85:87:fe:59:f7:d7:c9:fe:8c:f3:78:ac:cc: ab:19:d1:f6:a8:60:54:a9:66:66:c0:6b:20:84:f3:72:d9:ef: e7:f6:a5:83:4a:4e:45:29:0a:7a:b3:43:c7:1e:d4:eb:ee:dc: f1:d5:fa:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF NDNDNThBODgwHhcNMjUwNTEyMTgzOTE3WhcNMjUwNTE5MTgzOTE3WjAYMRYwFAYD VQQDEw02ODIyNDA1NS02ZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRE2EwwJFsVjkHivhJ8mf2CNTe7DxwfCbRaxleVf1QKBrB+Nb/rGaxL4hceB 862mQhcgaZcE1cd/ftvny+yl8GjM5LzpQ0a3CXLtMyvYJes56bP4zEmQzw9Wk99R I6zmX/J2osOxorym2yBtKyCiON/Z0JaJ+zW6XZpMiM8QsjEeJF1YwIta0p65VyW1 Ca5RyVdyB5NACkk24mxjlOSVXj86MyAlPrP253/9Eu3Q150G6Yzi5PqR9a1XU8B4 AjRWQHWZM0ZgGS2ymZFvzMwSI4iCh7pSZRikua/pqsZFRhcqIdZYfQzukNczsCM0 FOtE2fn4EuA/dXlTb002dyzsawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDI6t6Dd m9yITdv2DFGp2aMO9444MB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1 RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk4NC8yODc0NUU0QzE1RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hT eWU4MFBscjBFUUhrUEZpb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXbSU010mL7R4O2fKRJl0v5XkNzOb6hetc1Wzukl6VLBiiTGgu4GrW JpMSKzwJrlrJSMstP8VqEaW96k2plFrULZUZW0xJbNxvq42bqq4tetbeNX4DM1qN wgYR0xx3fV0YuxNO7BsQ2I1ukOrIeza4yVHkVPfoy2k1VBi/NeNVC5t1/qGPiWo4 7ZvdcyG8KI8mTqf+ZmTAAf3eLyDyGFxm4gNmkJhkifFahR150XEkiQmq17QmFwH4 XvGOiA6g5T6KgGT/oPEf0jO9yoWH/ln318n+jPN4rMyrGdH2qGBUqWZmwGsghPNy 2e/n9qWDSk5FKQp6s0PHHtTr7tzx1fqN -----END CERTIFICATE-----Generated at Tue May 13 02:43:57 2025 by rpki-client