$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json) Hash identifier: m/KukDG4N9wl3rZcYh/nvAozDvajjPpLrtrQYRT4M2Y= Subject key identifier: B8:A4:8A:C3:F7:4B:21:14:27:FE:E4:09:9F:90:4B:14:E2:9D:11:5A Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft Manifest number: 01E0 Signing time: Fri 09 May 2025 01:54:55 +0000 Manifest this update: Fri 09 May 2025 01:54:54 +0000 Manifest next update: Fri 16 May 2025 01:54:54 +0000 Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: Q2/bXjWUcy9m0hVbKK2mTef9zF3arungnqLev55/7XM=) 2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: GwA8WNqmVW1s9tawzkiqtYC7xFjjdtlbsl+Ur+WNSNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 01:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: May 9 01:54:54 2025 GMT Not After : May 16 01:54:54 2025 GMT Subject: CN=681d606f-7529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:7b:bb:9f:c5:a7:09:60:1e:ae:3e:8e:62: b1:7f:b5:45:54:e0:21:56:81:6c:da:10:62:ab:b0: 71:3d:93:45:03:fd:1a:03:de:56:6c:86:4f:5a:e9: 27:f9:fd:f8:67:8b:3e:61:24:20:77:0a:f8:22:98: 4a:da:15:17:64:f8:3e:e0:4f:f9:34:1b:94:64:9b: 8c:39:42:9f:90:fa:ae:64:0c:4f:11:6a:e9:7c:cb: 2a:84:6b:27:6e:a3:11:ae:c8:8e:7a:cb:32:7f:72: a2:a0:93:87:7b:f2:67:6e:a8:92:e3:0c:22:b5:0d: b3:6e:5d:42:35:40:48:07:8f:5f:c6:82:37:6a:d5: 53:a3:05:45:e1:7f:e9:0a:5c:ca:39:31:16:e3:46: d4:23:88:6d:d3:2d:d0:97:b3:02:ee:e0:a9:12:80: 74:f0:e8:b7:25:fc:20:a3:7f:9e:28:e6:24:4b:12: 38:35:2b:a3:af:f6:e0:0e:8d:13:c6:23:cc:91:ee: 10:e0:8f:c4:34:96:55:d8:67:25:a1:98:a5:70:11: db:42:b4:55:19:59:4d:8b:46:25:10:a2:7d:8c:7c: 9a:c0:4d:a8:e7:23:c6:e9:ed:3c:af:b2:2c:1e:2f: a2:ff:63:33:d2:e8:61:e0:35:70:4e:01:cf:0c:a7: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A4:8A:C3:F7:4B:21:14:27:FE:E4:09:9F:90:4B:14:E2:9D:11:5A X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b1:d1:94:02:cd:9f:0d:99:1d:ad:7a:0d:56:d9:b8:d3:e1: 96:ca:f2:a0:36:3b:a3:16:28:d2:7c:e8:80:35:83:5b:a0:1f: b5:de:15:a6:36:7c:99:e2:99:0b:3e:be:06:8a:e3:4e:06:ff: 41:0d:d0:4b:34:a6:30:cc:58:b7:9a:32:5b:db:4e:1f:c7:8d: 33:0b:af:30:91:5e:4d:a2:cc:9f:50:cd:8e:ab:b4:ba:8d:e4: 52:61:74:18:5f:df:2e:3a:6d:41:22:84:59:35:cb:d0:87:d9: ee:13:8d:b9:e7:1e:86:82:0a:b5:08:b7:79:49:60:1f:d6:43: c3:b4:82:b4:42:fc:e8:76:12:18:24:c9:e5:ce:f2:87:a8:c7: 48:81:db:79:88:76:ff:e5:88:a5:79:e5:e6:59:27:26:69:89: 0a:c5:41:d2:37:e9:2a:90:54:82:69:5c:3c:b6:40:d5:c9:fb: fc:c0:ae:30:a4:67:fd:fb:70:aa:db:d2:dc:7a:2e:1a:ec:b6: 64:c7:ca:47:8f:23:0e:40:67:db:03:ce:f7:9d:70:f9:da:89: 41:11:a0:ae:80:80:d2:02:66:1d:1d:4a:e9:56:fa:25:6a:ce: a3:3b:18:2d:30:49:d6:ef:9e:96:f6:94:ea:fb:d0:2f:03:8a: 3b:09:5b:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjUwNTA5MDE1NDU0WhcNMjUwNTE2MDE1NDU0WjAYMRYwFAYD VQQDEw02ODFkNjA2Zi03NTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIp7u5/FpwlgHq4+jmKxf7VFVOAhVoFs2hBiq7BxPZNFA/0aA95WbIZPWukn +f34Z4s+YSQgdwr4IphK2hUXZPg+4E/5NBuUZJuMOUKfkPquZAxPEWrpfMsqhGsn bqMRrsiOessyf3KioJOHe/JnbqiS4wwitQ2zbl1CNUBIB49fxoI3atVTowVF4X/p ClzKOTEW40bUI4ht0y3Ql7MC7uCpEoB08Oi3Jfwgo3+eKOYkSxI4NSujr/bgDo0T xiPMke4Q4I/ENJZV2GcloZilcBHbQrRVGVlNi0YlEKJ9jHyawE2o5yPG6e08r7Is Hi+i/2Mz0uhh4DVwTgHPDKfmeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLikisP3 SyEUJ/7kCZ+QSxTinRFaMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQxOS9GQTZFMzZDQzRFRDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xr ZTVGTHNxYTJiSGZWT1hwQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCysdGUAs2fDZkdrXoNVtm40+GWyvKgNjujFijSfOiANYNboB+13hWm NnyZ4pkLPr4GiuNOBv9BDdBLNKYwzFi3mjJb204fx40zC68wkV5NosyfUM2Oq7S6 jeRSYXQYX98uOm1BIoRZNcvQh9nuE4255x6Gggq1CLd5SWAf1kPDtIK0QvzodhIY JMnlzvKHqMdIgdt5iHb/5YileeXmWScmaYkKxUHSN+kqkFSCaVw8tkDVyfv8wK4w pGf9+3Cq29Lcei4a7LZkx8pHjyMOQGfbA873nXD52olBEaCugIDSAmYdHUrpVvol as6jOxgtMEnW756W9pTq+9AvA4o7CVsH -----END CERTIFICATE-----Generated at Sun May 11 00:57:38 2025 by rpki-client