$ rpki-client -vvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft File: 1nviGU24YmpD05q_p2CPvFrMtSM.mft (raw, json) Hash identifier: nPEcWJsFMHMY70iYLn5eNIHYQCxHS4d9au3KOEP6jI4= Subject key identifier: 01:85:0C:BB:6A:91:B4:33:13:DC:24:AA:22:63:5D:AB:C9:C8:2E:8E Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 Certificate issuer: /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Certificate serial: 045E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft Manifest number: 0459 Signing time: Fri 25 Jul 2025 00:33:57 +0000 Manifest this update: Fri 25 Jul 2025 00:33:56 +0000 Manifest next update: Fri 01 Aug 2025 00:33:56 +0000 Files and hashes: 1: 1nviGU24YmpD05q_p2CPvFrMtSM.crl (hash: vvZPED9/tHvzEXguNF3lCAofExmdGohw2pelZ5Q/1FE=) 2: 5CE14CF22F1B11F0B8430030C4F9AE02.roa (hash: uW4b+jwiNxxtnvCg4IbqqcftfmJEGG9XBZg8g1h32Ko=) 3: 0B33A3D45C0411EC83F9BB50C4F9AE02.roa (hash: qicfoy/8cosxfApnnOippZ0PeEcv6bX+STnM2/SumVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913339B, serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Validity Not Before: Jul 25 00:33:56 2025 GMT Not After : Aug 1 00:33:56 2025 GMT Subject: CN=6882d0f5-77c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:af:1b:eb:5b:a2:b7:68:a8:b2:76:a9:7a: 3a:e7:0b:ee:93:08:db:b6:43:e3:22:91:5d:72:8c: d2:ad:7b:93:dc:94:a5:71:42:9e:75:aa:02:7f:9d: ca:93:0b:35:a9:2e:0a:4b:cc:83:c2:f7:d5:af:46: c2:68:a6:ec:96:3d:70:b0:82:55:a0:84:16:5f:10: 18:11:e9:9f:34:64:48:e0:a4:c2:dd:ba:bd:9f:ab: d9:c5:87:d5:0c:82:4e:8d:e4:26:68:71:2c:86:3a: 4c:51:37:04:21:2b:ba:70:a8:73:0c:5f:10:7a:f5: 38:91:b2:90:1c:7b:8e:85:4e:50:9b:ef:24:dc:2d: 9e:eb:c6:59:60:3d:6b:da:94:b1:e8:29:92:8f:da: 27:70:79:fd:91:86:a1:ad:8a:e9:bb:4c:c4:76:0d: 2f:3b:54:75:f1:ac:e7:91:f0:a0:a9:dd:b0:93:34: 77:52:87:16:b4:b3:bd:e1:1b:76:d7:96:12:c4:fa: 53:52:6c:88:f6:14:d7:aa:5e:4a:fd:d3:6f:4b:eb: 67:9b:73:34:12:f4:11:c9:c6:21:4f:a2:09:8a:a4: c6:4b:fa:8d:a8:b1:6e:52:66:71:5c:b1:4a:46:51: 82:8c:ba:db:b0:30:e4:32:28:11:38:d5:28:00:ef: 51:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:85:0C:BB:6A:91:B4:33:13:DC:24:AA:22:63:5D:AB:C9:C8:2E:8E X509v3 Authority Key Identifier: keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:0d:d9:73:6f:a7:9a:85:cf:ee:a1:6a:b9:a7:25:c4:89:1c: 77:c1:73:b7:35:7e:b1:63:6f:cf:86:2b:ab:f8:b1:df:48:d1: 24:3b:48:5a:35:64:ad:77:aa:de:da:3b:a9:64:20:9f:ff:5a: ee:ad:d1:1d:f2:09:99:fe:87:ac:a0:18:38:52:b6:de:1a:db: b8:c1:e4:ca:60:53:12:af:41:b0:ea:b0:47:12:1d:da:fb:78: 4f:07:bb:dc:57:af:01:54:58:5a:d4:80:b1:7d:4e:ff:eb:ef: 17:a3:8a:65:9a:25:e5:99:8a:4d:95:84:58:5e:6b:66:b8:bb: 2b:0c:67:e5:0a:b0:99:b4:1b:46:7d:f7:d8:95:d3:cd:7b:95: 51:26:b0:b2:0b:b4:b9:1d:96:e9:da:66:e0:c2:91:0a:01:1f: fb:a5:8a:15:e7:b5:10:75:47:8e:ef:2d:91:87:2e:f3:20:b8: 0e:b7:ec:fc:ad:c1:0b:bb:2f:ec:55:89:b8:0c:99:be:3d:52: 46:c6:71:32:b9:ff:de:88:43:c5:6b:6c:69:28:32:e8:ad:67: fe:cd:c4:e1:74:ff:ef:b9:d1:cb:cd:7c:dd:2d:6d:e6:d9:33: 4a:bf:29:f6:e8:81:90:21:5e:22:83:af:92:c9:c9:bc:22:d1: 9d:3d:ba:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMzOUIxMTAvBgNVBAUTKEQ2N0JFMjE5NERCODYyNkE0M0QzOUFCRkE3NjA4RkJD NUFDQ0I1MjMwHhcNMjUwNzI1MDAzMzU2WhcNMjUwODAxMDAzMzU2WjAYMRYwFAYD VQQDEw02ODgyZDBmNS03N2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkWvG+tbordoqLJ2qXo65wvukwjbtkPjIpFdcozSrXuT3JSlcUKedaoCf53K kws1qS4KS8yDwvfVr0bCaKbslj1wsIJVoIQWXxAYEemfNGRI4KTC3bq9n6vZxYfV DIJOjeQmaHEshjpMUTcEISu6cKhzDF8QevU4kbKQHHuOhU5Qm+8k3C2e68ZZYD1r 2pSx6CmSj9oncHn9kYahrYrpu0zEdg0vO1R18aznkfCgqd2wkzR3UocWtLO94Rt2 15YSxPpTUmyI9hTXql5K/dNvS+tnm3M0EvQRycYhT6IJiqTGS/qNqLFuUmZxXLFK RlGCjLrbsDDkMigRONUoAO9RVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGFDLtq kbQzE9wkqiJjXavJyC6OMB8GA1UdIwQYMBaAFNZ74hlNuGJqQ9Oav6dgj7xazLUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzM5Qi9ENEYzRjBCMDVD MDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFltcEQwNXFfcDJDUHZGck10 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFudmlHVTI0WW1wRDA1cV9wMkNQdkZyTXRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzM5Qi9ENEYzRjBCMDVDMDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFlt cEQwNXFfcDJDUHZGck10U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZDdlzb6eahc/uoWq5pyXEiRx3wXO3NX6xY2/Phiur+LHfSNEkO0ha NWStd6re2jupZCCf/1rurdEd8gmZ/oesoBg4UrbeGtu4weTKYFMSr0Gw6rBHEh3a +3hPB7vcV68BVFha1ICxfU7/6+8Xo4plmiXlmYpNlYRYXmtmuLsrDGflCrCZtBtG fffYldPNe5VRJrCyC7S5HZbp2mbgwpEKAR/7pYoV57UQdUeO7y2Rhy7zILgOt+z8 rcELuy/sVYm4DJm+PVJGxnEyuf/eiEPFa2xpKDLorWf+zcThdP/vudHLzXzdLW3m 2TNKvyn26IGQIV4ig6+Sycm8ItGdPbro -----END CERTIFICATE-----Generated at Fri Jul 25 07:04:15 2025 by rpki-client