$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft File: 8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json) Hash identifier: r1Vl3+EJOfPKBRHW/WaSrayuW4hV9SRdOUGx2E5+RHg= Subject key identifier: 7E:A1:B0:BC:26:8E:FB:09:64:C6:C9:F6:A9:EA:B8:B9:40:E2:39:65 Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D Certificate issuer: /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft Manifest number: A2 Signing time: Tue 13 May 2025 05:24:35 +0000 Manifest this update: Tue 13 May 2025 05:24:34 +0000 Manifest next update: Tue 20 May 2025 05:24:34 +0000 Files and hashes: 1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: G0t4Sjxfi6w1w7+xd/3RbWVMAFceSM8dHananpd7o8A=) 2: E36214403D0011EFAD623342C4F9AE02.roa (hash: 420VAJueRLeEIyuOExcHcsg4aUQyw3PTMA6zp5xTQ8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D Validity Not Before: May 13 05:24:34 2025 GMT Not After : May 20 05:24:34 2025 GMT Subject: CN=6822d793-f8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:8b:1f:bb:30:30:0c:c1:d4:03:1b:1f:cd: 01:59:aa:23:75:9a:93:c3:a0:97:eb:f7:bf:57:0e: 7d:f4:14:38:57:7d:25:53:a4:18:2a:2a:1a:f6:83: 3e:52:d0:ef:1a:16:8f:09:80:7d:ae:d7:e9:7a:b3: 39:a0:0b:4d:c2:80:7b:d8:a1:87:f1:f4:8c:07:e8: b4:1e:33:e2:df:e2:c1:28:8f:a0:6b:fa:30:1f:00: f6:68:a9:37:ca:7f:ad:5d:ce:cf:7e:bb:9f:81:44: 23:de:29:90:d5:fc:ec:8b:c1:0e:96:de:e8:2e:84: 74:eb:62:0f:65:73:81:b4:6b:43:aa:98:23:01:76: 34:36:8a:0d:27:7c:a3:d7:b6:4f:08:0c:1a:8f:d7: e2:e8:27:2a:c3:9f:75:4e:b0:3b:7c:cf:5d:71:dc: ad:56:c4:64:cb:a4:cb:a8:39:85:c1:71:68:b9:98: 6e:59:fe:74:86:15:72:4e:ed:c0:fb:44:09:9d:76: 74:d8:1a:e5:6e:56:f1:b7:fe:9b:69:61:a7:a7:02: 70:da:f8:ed:7e:bc:fd:b3:e0:b3:fa:d2:b5:76:17: 3d:2e:ab:49:5a:c1:31:3c:7d:69:e3:e5:7f:aa:c1: da:ac:cc:fe:37:5d:97:00:07:e4:85:1d:b3:82:b5: 4e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A1:B0:BC:26:8E:FB:09:64:C6:C9:F6:A9:EA:B8:B9:40:E2:39:65 X509v3 Authority Key Identifier: keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:69:e7:b1:81:c1:ac:27:2e:0e:b1:49:57:42:d7:25:34:68: 35:61:ac:d5:ec:8a:0b:09:70:a1:a0:f3:ea:c3:5e:da:6f:f8: ca:48:8e:25:12:2f:07:ac:27:65:15:75:60:47:71:81:76:6d: 19:28:fb:34:47:a9:03:24:e4:01:d2:bf:aa:3b:eb:5c:65:95: d4:a7:d7:56:e6:1f:a2:8c:ca:de:eb:e9:37:b5:54:22:44:33: 15:87:da:74:dc:e2:17:d2:90:9c:bc:3f:a4:21:e8:f8:eb:f3: 49:91:07:ea:ff:3e:87:8c:57:19:72:fe:83:5e:67:3d:39:24: a9:36:b5:57:ce:75:7c:c9:02:cb:82:3c:51:ad:21:8e:48:21: 66:b3:08:07:a9:f5:2c:8d:5b:62:1a:58:cc:3f:31:3d:6c:a4: 1a:d6:c8:5d:1f:cc:eb:77:26:8d:02:e5:32:0c:0e:6a:1b:64: eb:43:c4:f9:84:eb:28:4b:7c:d8:be:72:4b:ce:6d:b5:ef:be: 58:89:aa:d6:d1:00:21:59:ef:4d:5b:f8:2c:8a:36:f1:14:63: 83:6a:69:33:3e:d3:9b:a3:e7:f6:5b:57:53:90:b5:6f:21:83: 5b:78:d6:8e:3e:67:c1:b4:2a:38:cf:3a:9e:75:c0:98:39:88: f3:2c:cb:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEYyMkNGOEVGNzZBREZERjJDRjlFRkVEQkVDMTIxMzQ4 ODYzNTZGNEQwHhcNMjUwNTEzMDUyNDM0WhcNMjUwNTIwMDUyNDM0WjAYMRYwFAYD VQQDEw02ODIyZDc5My1mOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3yLH7swMAzB1AMbH80BWaojdZqTw6CX6/e/Vw599BQ4V30lU6QYKioa9oM+ UtDvGhaPCYB9rtfperM5oAtNwoB72KGH8fSMB+i0HjPi3+LBKI+ga/owHwD2aKk3 yn+tXc7PfrufgUQj3imQ1fzsi8EOlt7oLoR062IPZXOBtGtDqpgjAXY0NooNJ3yj 17ZPCAwaj9fi6Ccqw591TrA7fM9dcdytVsRky6TLqDmFwXFouZhuWf50hhVyTu3A +0QJnXZ02Brlblbxt/6baWGnpwJw2vjtfrz9s+Cz+tK1dhc9LqtJWsExPH1p4+V/ qsHarMz+N12XAAfkhR2zgrVOuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6hsLwm jvsJZMbJ9qnquLlA4jllMB8GA1UdIwQYMBaAFPIs+O92rf3yz57+2+wSE0iGNW9N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8wOUExMTIzNDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9mTFBudjdiN0JJVFNJWTFi MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhpejQ3M2F0X2ZMUG52N2I3QklUU0lZMWIwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8wOUExMTIzNDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi84aXo0NzNhdF9m TFBudjdiN0JJVFNJWTFiMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0aeexgcGsJy4OsUlXQtclNGg1YazV7IoLCXChoPPqw17ab/jKSI4l Ei8HrCdlFXVgR3GBdm0ZKPs0R6kDJOQB0r+qO+tcZZXUp9dW5h+ijMre6+k3tVQi RDMVh9p03OIX0pCcvD+kIej46/NJkQfq/z6HjFcZcv6DXmc9OSSpNrVXznV8yQLL gjxRrSGOSCFmswgHqfUsjVtiGljMPzE9bKQa1shdH8zrdyaNAuUyDA5qG2TrQ8T5 hOsoS3zYvnJLzm21775YiarW0QAhWe9NW/gsijbxFGODamkzPtObo+f2W1dTkLVv IYNbeNaOPmfBtCo4zzqedcCYOYjzLMsd -----END CERTIFICATE-----Generated at Wed May 14 15:18:37 2025 by rpki-client