$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft File: iavBOYslsdbOj_e_sysS6fCWc_k.mft (raw, json) Hash identifier: pl19YH+Euq5iwPo1rJ1QMifb2uAW1kbTYjBkky1TN8A= Subject key identifier: 40:54:C5:85:9B:C2:CE:A8:03:0B:D4:DB:E8:E1:05:0E:3C:6B:80:E2 Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft Manifest number: 043C Signing time: Sat 05 Apr 2025 00:22:56 +0000 Manifest this update: Sat 05 Apr 2025 00:22:56 +0000 Manifest next update: Sat 12 Apr 2025 00:22:56 +0000 Files and hashes: 1: iavBOYslsdbOj_e_sysS6fCWc_k.crl (hash: Vi5Fl7XhbT83CvvBycWGLY/EhtWFEmKwWQdzOydrSxA=) 2: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (hash: RyLNM9Y2xKP2/pPGOLqXFeZG9/xveuZYuPTjdQJUT2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143035 Validity Not Before: Apr 5 00:22:56 2025 GMT Not After : Apr 12 00:22:56 2025 GMT Subject: CN=67f077e0-9db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:53:a5:f8:65:59:c5:3e:1c:2a:a0:4b:a0: ad:b2:8e:bb:4d:24:fb:e9:fe:05:0f:3f:20:4a:4a: 13:a2:aa:b8:cc:f1:e9:55:43:df:69:32:88:e4:df: 8a:10:b5:16:a9:de:81:bf:9f:af:06:07:d3:73:f0: 3d:b0:b5:d7:31:2b:99:8f:27:de:dd:80:a2:5a:10: 0b:e7:72:3c:d7:3b:57:ef:f6:56:2f:39:b3:c5:9e: bc:81:ed:23:2d:1a:43:3a:e1:ce:5b:1b:46:db:04: 6a:8c:c4:f3:12:34:c2:d5:f6:5f:d3:25:92:a0:51: 8d:bc:e3:5b:c3:c8:e1:59:75:af:ef:ee:81:44:45: 8e:45:f9:1a:3f:f4:56:df:f2:5e:7e:b8:81:1f:1a: 4f:95:be:27:53:49:66:2f:18:2d:cc:0b:1a:5f:f5: 26:3e:4a:3c:6c:dd:34:56:82:5b:90:ff:d6:d3:11: 9e:db:20:66:92:ea:ce:93:26:b0:65:fd:63:e9:63: 76:a9:e4:ab:36:0d:ff:bb:f7:4e:f4:c2:a2:95:4e: d2:85:33:03:40:55:e9:81:5c:12:91:78:55:0b:2b: 2b:d1:6f:49:08:0c:d4:06:2d:2e:75:3c:d0:79:e0: 5f:ac:15:65:59:75:9a:1d:02:cd:6a:c2:6f:90:bf: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:54:C5:85:9B:C2:CE:A8:03:0B:D4:DB:E8:E1:05:0E:3C:6B:80:E2 X509v3 Authority Key Identifier: keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ae:ae:ad:f5:d4:7d:83:5b:b5:d9:41:29:9a:12:41:42:58: e9:5b:a1:5d:e9:0a:24:a5:e8:c8:c0:3d:32:7f:f5:fd:dc:79: 63:6c:18:21:14:76:9f:9c:9f:ae:18:d0:a9:89:d5:3a:ac:1a: 1c:7c:78:7b:f8:0b:5e:b5:e4:28:dc:7f:73:7b:3f:18:5d:f5: 8c:3a:6d:78:58:a7:10:d8:c5:22:a0:d4:26:c3:63:30:e7:7b: 92:8e:93:e0:7c:fc:45:5e:1b:13:8b:3e:10:8e:b7:f0:bc:a4: 32:85:fe:3b:1d:43:e6:d8:7d:db:8f:33:69:e8:f8:dd:49:69: a0:13:86:e3:2f:9f:7e:3a:a8:84:e0:09:ad:1b:66:38:4c:b2: 42:3c:22:3f:83:97:ca:29:88:1d:d1:33:18:9e:37:35:fa:3a: ea:2b:2d:60:c9:95:24:1a:19:0a:35:9d:44:4e:39:24:81:c5: 49:14:2d:fd:69:9f:b5:33:e6:d0:be:62:d8:22:07:49:0c:ba: 30:2b:b9:ac:45:fd:53:93:cf:b9:0f:c1:4d:77:8a:e1:dc:8c: 33:47:73:3c:0c:d0:e6:58:96:1c:50:8e:73:14:7a:0b:94:91: 6a:b5:e9:82:43:6a:6c:78:08:39:50:48:90:44:cc:ef:76:0e: 92:66:11:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwMzUxMTAvBgNVBAUTKDg5QUJDMTM5OEIyNUIxRDZDRThGRjdCRkIzMkIxMkU5 RjA5NjczRjkwHhcNMjUwNDA1MDAyMjU2WhcNMjUwNDEyMDAyMjU2WjAYMRYwFAYD VQQDEw02N2YwNzdlMC05ZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArStTpfhlWcU+HCqgS6Ctso67TST76f4FDz8gSkoToqq4zPHpVUPfaTKI5N+K ELUWqd6Bv5+vBgfTc/A9sLXXMSuZjyfe3YCiWhAL53I81ztX7/ZWLzmzxZ68ge0j LRpDOuHOWxtG2wRqjMTzEjTC1fZf0yWSoFGNvONbw8jhWXWv7+6BREWORfkaP/RW 3/JefriBHxpPlb4nU0lmLxgtzAsaX/UmPko8bN00VoJbkP/W0xGe2yBmkurOkyaw Zf1j6WN2qeSrNg3/u/dO9MKilU7ShTMDQFXpgVwSkXhVCysr0W9JCAzUBi0udTzQ eeBfrBVlWXWaHQLNasJvkL9HJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBUxYWb ws6oAwvU2+jhBQ48a4DiMB8GA1UdIwQYMBaAFImrwTmLJbHWzo/3v7MrEunwlnP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzAzNS8xOEM2MjkxMjUy OUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNkYk9qX2Vfc3lzUzZmQ1dj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhdkJPWXNsc2RiT2pfZV9zeXNTNmZDV2Nfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzAzNS8xOEM2MjkxMjUyOUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNk Yk9qX2Vfc3lzUzZmQ1djX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBprq6t9dR9g1u12UEpmhJBQljpW6Fd6QokpejIwD0yf/X93HljbBgh FHafnJ+uGNCpidU6rBocfHh7+AteteQo3H9zez8YXfWMOm14WKcQ2MUioNQmw2Mw 53uSjpPgfPxFXhsTiz4QjrfwvKQyhf47HUPm2H3bjzNp6PjdSWmgE4bjL59+OqiE 4AmtG2Y4TLJCPCI/g5fKKYgd0TMYnjc1+jrqKy1gyZUkGhkKNZ1ETjkkgcVJFC39 aZ+1M+bQvmLYIgdJDLowK7msRf1Tk8+5D8FNd4rh3IwzR3M8DNDmWJYcUI5zFHoL lJFqtemCQ2pseAg5UEiQRMzvdg6SZhE0 -----END CERTIFICATE-----Generated at Sun Apr 6 06:37:24 2025 by rpki-client