$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: RYv1Xokw5aWU6nXTj5IHYOpmrKV68DT1RHelyD70OSg= Subject key identifier: 5C:41:18:0F:EE:76:72:60:6D:FB:69:4C:D9:2D:E9:48:5E:1E:F7:DA Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 0492 Signing time: Sat 05 Apr 2025 00:07:08 +0000 Manifest this update: Sat 05 Apr 2025 00:07:08 +0000 Manifest next update: Sat 12 Apr 2025 00:07:08 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: EeLkiLZHjOocZaDMjYNkWb7I5RqhgImu/iZm9ujWUiQ=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3A9tL/jcYlpnzHxxWTOseLkNdsbJRJrgjlY1s6ebsbQ=) 3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: GWx3OJd1vwjGtC5zPk/EszjxixEUkMuQ8v31OyEYOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559 Validity Not Before: Apr 5 00:07:08 2025 GMT Not After : Apr 12 00:07:08 2025 GMT Subject: CN=67f0742c-d49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:58:b4:51:d6:78:42:35:ca:db:fc:a9:d6: b6:51:9c:d8:a0:10:e2:6e:b1:a3:30:0f:3a:dc:43: 00:08:43:64:ab:1e:40:e7:76:07:e1:8a:69:43:e0: 91:e8:65:b6:f8:ef:3f:a1:cb:a5:74:62:ce:38:07: 2b:85:0e:f9:c5:c7:32:95:8f:96:81:5f:35:48:75: fc:6d:47:e4:4c:73:98:27:82:1c:2c:ea:a8:31:1d: 7a:49:05:fa:ad:d1:00:7a:0c:25:c3:50:50:a0:64: 1f:70:28:5c:57:45:96:d4:21:26:c0:04:aa:cc:08: cd:6e:1b:1b:2d:7e:40:2e:84:38:59:14:18:e1:1d: f7:5f:b8:cf:bc:b8:6f:95:f5:62:46:65:54:ef:32: 6a:04:1c:31:82:23:ed:93:53:7e:90:c3:ba:ae:b7: e5:d6:08:68:40:53:a4:8e:b0:a3:5b:af:03:53:de: 19:01:ef:40:1c:13:0b:c9:d7:8e:85:69:05:9c:82: d0:5a:7d:8f:2d:d2:99:36:20:f5:24:78:62:a8:c6: e7:5e:91:71:2d:64:36:3a:b3:94:a8:09:92:0d:d2: 88:2d:6e:6c:0f:17:95:22:40:9e:72:19:e0:29:92: 8d:cf:e3:0d:e6:85:7b:b7:c7:fa:21:0f:cc:07:3a: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:41:18:0F:EE:76:72:60:6D:FB:69:4C:D9:2D:E9:48:5E:1E:F7:DA X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:94:49:a4:bc:87:cb:30:0b:ec:f6:c5:bb:2c:39:87:8a:e7: 30:40:bf:78:ae:83:22:b9:08:d6:99:8e:53:82:53:3a:fc:a7: 0e:ed:76:cf:b2:22:64:51:d3:ea:a5:fb:1b:f1:82:de:86:c4: c2:a4:22:d7:11:e2:8a:98:54:f5:11:95:94:bf:28:7e:57:48: 30:11:a8:66:82:63:6d:02:10:12:2b:1e:b8:b1:91:03:92:f1: 62:65:e9:b2:4d:2a:3d:c0:53:6b:2a:ed:86:81:bd:3b:02:07: 87:92:13:f1:60:39:a0:68:dd:98:14:e5:69:f0:aa:27:4a:dc: ad:7c:29:ae:98:e3:9f:51:78:39:a4:14:11:fd:6e:e4:ee:5f: 4e:94:19:77:0c:1c:40:42:42:7c:a6:5b:de:b5:9d:1c:b3:c4: 6f:25:fb:92:b6:c1:14:5f:92:f1:c5:99:b9:f3:4b:d7:c3:01: dc:76:b4:1d:54:c6:7a:f2:1b:96:5c:4a:e3:8d:11:c6:9d:97: a3:c4:91:15:a9:4f:1f:ac:12:11:6d:a2:4a:9c:46:41:69:85: 2e:ca:2a:c7:2c:e5:65:5c:7c:8a:cc:ec:bc:37:c2:d6:e6:b4: 68:8c:a4:72:29:85:5e:1c:97:79:62:f6:d0:09:b1:c4:98:47: 6c:cd:0b:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjUwNDA1MDAwNzA4WhcNMjUwNDEyMDAwNzA4WjAYMRYwFAYD VQQDEw02N2YwNzQyYy1kNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyBYtFHWeEI1ytv8qda2UZzYoBDibrGjMA863EMACENkqx5A53YH4YppQ+CR 6GW2+O8/oculdGLOOAcrhQ75xccylY+WgV81SHX8bUfkTHOYJ4IcLOqoMR16SQX6 rdEAegwlw1BQoGQfcChcV0WW1CEmwASqzAjNbhsbLX5ALoQ4WRQY4R33X7jPvLhv lfViRmVU7zJqBBwxgiPtk1N+kMO6rrfl1ghoQFOkjrCjW68DU94ZAe9AHBMLydeO hWkFnILQWn2PLdKZNiD1JHhiqMbnXpFxLWQ2OrOUqAmSDdKILW5sDxeVIkCechng KZKNz+MN5oV7t8f6IQ/MBzpQmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxBGA/u dnJgbftpTNkt6UheHvfaMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvlEmkvIfLMAvs9sW7LDmHiucwQL94roMiuQjWmY5TglM6/KcO7XbP siJkUdPqpfsb8YLehsTCpCLXEeKKmFT1EZWUvyh+V0gwEahmgmNtAhASKx64sZED kvFiZemyTSo9wFNrKu2Ggb07AgeHkhPxYDmgaN2YFOVp8KonStytfCmumOOfUXg5 pBQR/W7k7l9OlBl3DBxAQkJ8plvetZ0cs8RvJfuStsEUX5LxxZm580vXwwHcdrQd VMZ68huWXErjjRHGnZejxJEVqU8frBIRbaJKnEZBaYUuyirHLOVlXHyKzOy8N8LW 5rRojKRyKYVeHJd5YvbQCbHEmEdszQtD -----END CERTIFICATE-----Generated at Sun Apr 6 07:20:02 2025 by rpki-client