$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: 5Xs+x+qnDBaNz1QESojBRxmWHH2y8hARboTM/fknjWw= Subject key identifier: D9:23:78:0A:D2:ED:E2:05:CC:87:87:4F:17:B5:C2:AF:BB:D0:68:B2 Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 04AD Signing time: Sat 31 May 2025 00:08:13 +0000 Manifest this update: Sat 31 May 2025 00:08:13 +0000 Manifest next update: Sat 07 Jun 2025 00:08:13 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: xIXqQ40d9hCv/jNUyYM6tR8f7Zm6suOvWePgfqFAs7U=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3A9tL/jcYlpnzHxxWTOseLkNdsbJRJrgjlY1s6ebsbQ=) 3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: GWx3OJd1vwjGtC5zPk/EszjxixEUkMuQ8v31OyEYOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: May 31 00:08:13 2025 GMT Not After : Jun 7 00:08:13 2025 GMT Subject: CN=683a486d-c010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:e4:40:f3:ce:00:06:b2:e8:2d:26:57:a7: bf:fa:89:53:51:e4:63:a2:f5:e1:52:f8:a4:96:d7: 55:f0:dd:e1:c4:19:85:cc:9f:53:99:4c:6d:db:81: 0d:f2:8d:8b:fa:3c:47:40:0f:06:45:38:e8:e0:72: 47:e9:93:fe:9c:d7:61:8c:f6:e6:ff:1e:54:ef:50: 99:b5:76:7b:a1:6a:64:eb:51:f8:57:94:99:b3:7f: bf:54:82:19:d3:12:c4:75:63:da:b4:b9:39:c0:08: c2:c3:61:f3:02:ad:da:a5:a6:9a:d6:ec:53:8a:40: b7:db:a3:3d:5d:2f:d7:78:4c:32:64:52:e1:bb:4a: ea:91:53:2b:37:a6:63:e5:19:8e:75:c4:c1:75:ed: 17:c9:84:cc:74:fb:2d:06:ed:3a:98:6f:c0:70:40: 4e:14:db:79:53:9e:72:49:c5:29:b7:ab:80:1c:e6: 0e:ef:bd:5e:b7:34:ed:4b:ae:e6:fd:e8:e1:36:3d: f0:a1:b8:a1:35:3c:2e:40:c2:9e:e4:26:c5:2b:81: db:bb:a1:b6:e2:96:75:0d:7f:43:3c:86:d9:4a:34: 8e:a5:21:e1:81:13:38:ca:ac:7d:88:50:64:10:a0: 56:e7:9b:fb:6b:d2:b7:13:a0:43:bd:58:0c:19:40: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:23:78:0A:D2:ED:E2:05:CC:87:87:4F:17:B5:C2:AF:BB:D0:68:B2 X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b9:dc:89:89:e9:a9:dd:a4:e3:1d:24:1c:e7:d1:ac:64:75: dd:12:0f:9e:82:17:fc:76:2c:2b:fb:f3:f0:0e:d8:22:8f:f9: ef:d7:cb:26:1e:ab:ee:b7:a1:5e:65:36:f1:40:a7:e8:75:b7: fc:17:9f:4c:3d:8a:a4:32:c6:3e:e8:bc:d4:3f:64:d3:f9:40: a3:78:2b:55:be:dc:16:fc:30:3b:ea:65:44:34:d4:11:71:4e: 92:94:ea:ba:49:ec:d7:22:f5:30:0b:74:45:d9:35:a9:f4:82: b2:7a:99:58:42:e7:46:e7:60:8c:16:27:46:da:a3:0f:da:e8: fd:1e:96:38:88:2c:d5:ed:ba:91:6f:8d:0f:c6:8d:27:7e:fa: 28:26:e3:c8:8f:21:d6:2c:71:2c:8b:50:19:0f:1d:17:2a:25: a2:b5:8f:c6:9e:8c:a8:e7:f5:b1:25:bd:2d:49:7d:e9:8a:73: 7b:d5:97:09:a2:08:f3:ba:5c:b5:9e:14:c2:87:a3:03:df:d3: 3c:78:9c:a6:a6:78:51:da:4b:d1:2e:43:4b:44:7b:6f:06:23: 0c:c1:b2:8f:e3:73:d9:43:dc:a2:96:20:f8:13:3c:ca:71:22: c4:7f:39:a9:a8:a6:6b:71:e5:55:71:93:62:f6:f5:ed:6a:7e: 6c:a5:aa:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjUwNTMxMDAwODEzWhcNMjUwNjA3MDAwODEzWjAYMRYwFAYD VQQDEw02ODNhNDg2ZC1jMDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZvkQPPOAAay6C0mV6e/+olTUeRjovXhUvikltdV8N3hxBmFzJ9TmUxt24EN 8o2L+jxHQA8GRTjo4HJH6ZP+nNdhjPbm/x5U71CZtXZ7oWpk61H4V5SZs3+/VIIZ 0xLEdWPatLk5wAjCw2HzAq3apaaa1uxTikC326M9XS/XeEwyZFLhu0rqkVMrN6Zj 5RmOdcTBde0XyYTMdPstBu06mG/AcEBOFNt5U55yScUpt6uAHOYO771etzTtS67m /ejhNj3wobihNTwuQMKe5CbFK4Hbu6G24pZ1DX9DPIbZSjSOpSHhgRM4yqx9iFBk EKBW55v7a9K3E6BDvVgMGUARwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkjeArS 7eIFzIeHTxe1wq+70GiyMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMudyJiemp3aTjHSQc59GsZHXdEg+eghf8diwr+/PwDtgij/nv18sm Hqvut6FeZTbxQKfodbf8F59MPYqkMsY+6LzUP2TT+UCjeCtVvtwW/DA76mVENNQR cU6SlOq6SezXIvUwC3RF2TWp9IKyeplYQudG52CMFidG2qMP2uj9HpY4iCzV7bqR b40Pxo0nfvooJuPIjyHWLHEsi1AZDx0XKiWitY/Gnoyo5/WxJb0tSX3pinN71ZcJ ogjzuly1nhTCh6MD39M8eJympnhR2kvRLkNLRHtvBiMMwbKP43PZQ9yiliD4EzzK cSLEfzmpqKZrceVVcZNi9vXtan5spaob -----END CERTIFICATE-----Generated at Sat May 31 16:27:53 2025 by rpki-client