$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft File: iavBOYslsdbOj_e_sysS6fCWc_k.mft (raw, json) Hash identifier: v27Y/0clo+4QJfOsLF7SAowlbkwn1jWvN2wu6O+IJk0= Subject key identifier: 15:B0:53:A7:50:5B:DD:AC:EC:7B:7A:83:32:19:78:A5:83:00:EA:D8 Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Certificate serial: 046C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft Manifest number: 0467 Signing time: Tue 01 Jul 2025 00:40:16 +0000 Manifest this update: Tue 01 Jul 2025 00:40:15 +0000 Manifest next update: Tue 08 Jul 2025 00:40:15 +0000 Files and hashes: 1: iavBOYslsdbOj_e_sysS6fCWc_k.crl (hash: qTjrRfCsiT5iYFaarVwSTUX1HbG2jkTQiu8Sh47aD/Q=) 2: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (hash: RyLNM9Y2xKP2/pPGOLqXFeZG9/xveuZYuPTjdQJUT2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143035, serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Validity Not Before: Jul 1 00:40:15 2025 GMT Not After : Jul 8 00:40:15 2025 GMT Subject: CN=68632e70-3ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:d6:e2:38:88:0e:e4:cc:85:1d:56:2f:80: 6a:a4:f7:8b:6d:b5:01:e1:f3:8b:60:21:ab:fd:9c: fa:ee:10:58:ee:41:28:72:bd:1b:da:32:96:10:b9: 96:3d:35:f8:88:98:dd:78:b3:c9:4d:33:ae:36:e3: 1d:ce:dd:21:7f:dd:f4:2e:06:28:ae:63:10:d3:7e: cc:4c:9f:b8:c5:83:26:35:66:c3:1a:3a:18:e3:af: dd:94:70:29:a1:84:d5:9b:08:d2:33:97:4d:ac:34: 7e:28:81:7b:fd:66:b5:43:11:b9:ea:52:71:ff:57: 10:94:bb:80:bb:64:83:91:44:4c:db:78:1c:01:aa: e4:4e:d5:6b:41:ff:92:06:21:82:29:8f:04:3b:2b: 3f:40:6e:14:11:a2:2c:6a:11:6f:a7:73:76:43:0a: a4:f3:ee:45:a6:4c:90:8b:90:6d:3f:85:9e:40:28: 67:cf:f5:2a:7a:08:f2:22:e0:4a:2d:24:f9:d2:47: 2c:e2:70:9c:13:52:15:8e:71:f1:49:68:55:2e:6a: 28:07:0f:fd:6c:76:5b:d6:8c:77:44:9f:e1:33:a3: 1e:95:f3:be:df:57:78:1d:45:02:43:3b:93:34:39: 49:a0:a9:e3:94:a4:9c:bc:f1:a0:1a:cc:e4:02:1b: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B0:53:A7:50:5B:DD:AC:EC:7B:7A:83:32:19:78:A5:83:00:EA:D8 X509v3 Authority Key Identifier: keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:01:5c:cb:73:b2:13:34:2e:7e:40:18:c8:76:27:68:e2:27: 5c:f4:ac:fb:e5:34:f2:c1:79:4f:ee:94:62:4b:a5:ad:8b:c9: 70:9a:55:c2:f0:52:2c:07:75:c8:ae:cd:50:1a:ad:77:7c:d9: e6:fb:ec:4c:73:e7:55:1c:99:48:31:a4:51:fd:ae:42:50:1b: ee:66:39:79:3e:70:14:69:fd:76:4f:2b:97:80:56:d4:db:7f: e4:5a:0a:75:04:95:7b:f4:ee:3a:e7:99:de:13:5d:2c:f9:74: 0d:e0:cd:39:f7:fb:29:67:47:45:04:f3:79:de:b1:6e:b9:39: e6:f6:b7:dc:7a:39:44:c6:04:34:73:85:c9:f0:a9:bb:39:dc: 02:2b:9f:9e:84:42:29:60:5e:3e:5c:32:5a:a3:48:98:fd:a2: 05:c9:cd:6b:d1:23:4b:b1:b0:fc:9b:21:10:56:53:c0:43:b8: 8e:63:12:e9:09:d6:d9:4b:de:fe:1d:ae:27:18:25:32:61:76: 30:68:d1:88:9e:e2:4b:3e:ec:29:f7:4b:64:95:f6:77:17:bc: 79:ad:72:18:5b:62:8b:c7:4e:e4:d6:f1:5f:f7:1d:f6:a2:19: 7a:23:89:86:a9:5c:82:fb:34:d9:d2:e0:44:6a:65:15:59:78: 7b:67:3a:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwMzUxMTAvBgNVBAUTKDg5QUJDMTM5OEIyNUIxRDZDRThGRjdCRkIzMkIxMkU5 RjA5NjczRjkwHhcNMjUwNzAxMDA0MDE1WhcNMjUwNzA4MDA0MDE1WjAYMRYwFAYD VQQDEw02ODYzMmU3MC0zYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsa/W4jiIDuTMhR1WL4BqpPeLbbUB4fOLYCGr/Zz67hBY7kEocr0b2jKWELmW PTX4iJjdeLPJTTOuNuMdzt0hf930LgYormMQ037MTJ+4xYMmNWbDGjoY46/dlHAp oYTVmwjSM5dNrDR+KIF7/Wa1QxG56lJx/1cQlLuAu2SDkURM23gcAarkTtVrQf+S BiGCKY8EOys/QG4UEaIsahFvp3N2Qwqk8+5FpkyQi5BtP4WeQChnz/UqegjyIuBK LST50kcs4nCcE1IVjnHxSWhVLmooBw/9bHZb1ox3RJ/hM6MelfO+31d4HUUCQzuT NDlJoKnjlKScvPGgGszkAhuAIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWwU6dQ W92s7Ht6gzIZeKWDAOrYMB8GA1UdIwQYMBaAFImrwTmLJbHWzo/3v7MrEunwlnP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzAzNS8xOEM2MjkxMjUy OUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNkYk9qX2Vfc3lzUzZmQ1dj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhdkJPWXNsc2RiT2pfZV9zeXNTNmZDV2Nfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzAzNS8xOEM2MjkxMjUyOUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNk Yk9qX2Vfc3lzUzZmQ1djX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuAVzLc7ITNC5+QBjIdido4idc9Kz75TTywXlP7pRiS6Wti8lwmlXC 8FIsB3XIrs1QGq13fNnm++xMc+dVHJlIMaRR/a5CUBvuZjl5PnAUaf12TyuXgFbU 23/kWgp1BJV79O4655neE10s+XQN4M059/spZ0dFBPN53rFuuTnm9rfcejlExgQ0 c4XJ8Km7OdwCK5+ehEIpYF4+XDJao0iY/aIFyc1r0SNLsbD8myEQVlPAQ7iOYxLp CdbZS97+Ha4nGCUyYXYwaNGInuJLPuwp90tklfZ3F7x5rXIYW2KLx07k1vFf9x32 ohl6I4mGqVyC+zTZ0uBEamUVWXh7ZzoD -----END CERTIFICATE-----Generated at Wed Jul 2 01:49:31 2025 by rpki-client