$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json) Hash identifier: j4J0g5Uw/t9AyGEwfvrO89t1bdzAxPCn86UFpMur3dI= Subject key identifier: 85:9C:74:D9:01:E8:DA:8E:B6:7E:29:68:26:BB:2E:EC:C8:90:91:39 Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft Manifest number: 01BE Signing time: Tue 13 May 2025 02:20:37 +0000 Manifest this update: Tue 13 May 2025 02:20:37 +0000 Manifest next update: Tue 20 May 2025 02:20:37 +0000 Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: VFBESaxVU8v9MM89hH9BOsi/2nd4hPAUxN9/ARIlicE=) 2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: hyVOWGrjCzsgaB5t6a964tLdF9KDC2L1JSe9IYMG8n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Validity Not Before: May 13 02:20:37 2025 GMT Not After : May 20 02:20:37 2025 GMT Subject: CN=6822ac75-4c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:a3:72:31:c1:21:92:08:6b:0c:90:0d:24: d8:9a:22:a6:33:08:22:4e:f8:09:e9:5a:3b:00:33: 03:68:ff:23:61:16:0b:98:10:44:4d:3b:39:79:83: fa:a9:3f:4a:1c:48:3a:32:cf:15:71:5c:54:6e:db: 18:52:41:fa:c2:c0:53:c6:6a:70:e6:5a:cd:2b:31: fa:04:c9:85:fa:26:2c:be:c8:23:0e:c7:ed:d7:45: 6c:f9:e9:3e:39:dd:53:53:c4:21:02:50:8c:e0:66: 54:a4:66:96:eb:fd:b1:a0:25:53:44:3d:0f:67:d7: 6c:12:99:f6:30:d6:68:b4:37:25:e0:34:af:1c:73: 2f:97:96:d0:2b:85:14:4f:d8:61:b3:e6:d2:f0:5f: e0:4d:3c:71:a5:50:65:a4:de:b3:0b:c2:ef:0b:7b: bf:3e:9d:00:f5:6f:c5:c6:ef:39:db:08:0e:04:f1: 66:6c:98:d3:45:60:7d:11:0e:df:fe:3b:d3:7f:fd: 52:2e:51:c9:ca:cd:e3:a2:d2:19:d3:f6:19:ef:48: 9e:bf:28:9f:13:7a:89:7a:c8:37:d3:0e:a5:81:20: 41:45:71:24:4b:2e:1c:4c:7c:c8:f0:bc:c3:a8:0c: 0e:46:f8:63:63:12:1d:f3:be:ef:c8:93:8c:f2:9a: a2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9C:74:D9:01:E8:DA:8E:B6:7E:29:68:26:BB:2E:EC:C8:90:91:39 X509v3 Authority Key Identifier: keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:09:85:14:c6:5b:5b:a6:48:e9:62:cf:6f:96:38:10:39:1a: d2:a3:3f:35:fa:4a:6e:b6:23:07:9d:8d:44:2d:2b:e4:df:5b: 2d:d9:1f:59:2b:da:18:09:d1:e8:32:7a:83:d0:4b:ac:f9:df: 14:ee:44:a4:b7:4a:34:17:2e:e9:7b:3f:ee:2d:4b:04:fa:76: 24:11:3a:c4:f0:65:79:77:9d:29:f9:cd:ff:aa:f4:37:7d:c8: 62:d7:51:8e:b8:e9:d3:d7:31:a7:3d:99:47:fc:54:87:e3:79: 88:1c:3c:ec:2e:83:58:85:57:6f:b8:3d:c9:ec:32:54:31:6a: 09:d4:8f:75:73:41:61:d5:eb:21:13:3a:da:0e:13:a6:43:ac: b2:02:f1:51:4c:1d:bf:53:65:a5:ef:ba:39:e0:bc:ff:3d:1d: 85:e0:31:aa:38:e4:b5:76:df:f3:a3:24:3b:9e:fd:54:73:bc: 8a:70:4f:d8:98:b6:70:6f:50:2d:43:61:a4:2f:a5:26:d9:39: f5:48:2c:f7:de:f4:24:2c:a0:f0:59:34:d4:64:aa:c9:fc:28: be:3a:5c:5f:fe:db:e3:7d:5f:1c:6d:4c:8f:18:fc:0b:15:95: da:83:de:f0:e8:14:6e:51:15:1c:53:03:92:1b:a6:73:3e:2f: dd:c1:21:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG QTdDREY5NDYwHhcNMjUwNTEzMDIyMDM3WhcNMjUwNTIwMDIyMDM3WjAYMRYwFAYD VQQDEw02ODIyYWM3NS00YzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtyjcjHBIZIIawyQDSTYmiKmMwgiTvgJ6Vo7ADMDaP8jYRYLmBBETTs5eYP6 qT9KHEg6Ms8VcVxUbtsYUkH6wsBTxmpw5lrNKzH6BMmF+iYsvsgjDsft10Vs+ek+ Od1TU8QhAlCM4GZUpGaW6/2xoCVTRD0PZ9dsEpn2MNZotDcl4DSvHHMvl5bQK4UU T9hhs+bS8F/gTTxxpVBlpN6zC8LvC3u/Pp0A9W/Fxu852wgOBPFmbJjTRWB9EQ7f /jvTf/1SLlHJys3jotIZ0/YZ70ievyifE3qJesg30w6lgSBBRXEkSy4cTHzI8LzD qAwORvhjYxId877vyJOM8pqinwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWcdNkB 6NqOtn4paCa7LuzIkJE5MB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACCYUUxltbpkjpYs9vljgQORrSoz81+kputiMHnY1ELSvk31st2R9Z K9oYCdHoMnqD0Eus+d8U7kSkt0o0Fy7pez/uLUsE+nYkETrE8GV5d50p+c3/qvQ3 fchi11GOuOnT1zGnPZlH/FSH43mIHDzsLoNYhVdvuD3J7DJUMWoJ1I91c0Fh1esh EzraDhOmQ6yyAvFRTB2/U2Wl77o54Lz/PR2F4DGqOOS1dt/zoyQ7nv1Uc7yKcE/Y mLZwb1AtQ2GkL6Um2Tn1SCz33vQkLKDwWTTUZKrJ/Ci+Olxf/tvjfV8cbUyPGPwL FZXag97w6BRuURUcUwOSG6ZzPi/dwSG2 -----END CERTIFICATE-----Generated at Tue May 13 18:53:05 2025 by rpki-client