$ rpki-client -vvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft File: 1nviGU24YmpD05q_p2CPvFrMtSM.mft (raw, json) Hash identifier: Uu1Yhbo1pfxzTt25wxVTFy7yCxa3VFxWZ21keSta1Zs= Subject key identifier: B7:9D:47:40:DE:9B:72:84:A1:0C:90:7E:27:B5:10:F2:2B:A1:44:B8 Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 Certificate issuer: /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Certificate serial: 042F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft Manifest number: 042B Signing time: Fri 25 Apr 2025 00:06:37 +0000 Manifest this update: Fri 25 Apr 2025 00:06:36 +0000 Manifest next update: Fri 02 May 2025 00:06:36 +0000 Files and hashes: 1: 1nviGU24YmpD05q_p2CPvFrMtSM.crl (hash: t+3+ZLVgjRolGCdKNnnWdBk+f+cT9+Zc/CgAP5q0LA8=) 2: 0B33A3D45C0411EC83F9BB50C4F9AE02.roa (hash: qicfoy/8cosxfApnnOippZ0PeEcv6bX+STnM2/SumVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1071 (0x42f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913339B, serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Validity Not Before: Apr 25 00:06:36 2025 GMT Not After : May 2 00:06:36 2025 GMT Subject: CN=680ad20d-ee11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:76:3e:b3:cf:17:be:92:6d:ff:23:5f:9f: 68:13:a5:ae:73:80:39:d8:dd:24:7f:68:3d:5d:a1: c6:38:22:94:9d:21:3e:94:d8:b3:34:cf:9b:f8:60: 00:7e:ae:4a:d4:16:2f:e9:51:ca:f6:67:8f:2f:b1: a1:b1:26:f3:36:e8:5f:ef:e7:d6:1d:51:4a:55:e4: 6f:ed:7d:2b:b2:cf:78:36:7b:d7:24:18:38:13:77: aa:30:cb:45:d7:bc:e0:64:44:4f:1a:bd:51:e5:a9: 1e:b1:a0:6e:e5:73:44:1a:05:cb:43:65:70:7f:e1: 09:2a:36:99:58:ed:df:e9:6b:a9:2e:c3:1a:41:1f: f7:38:da:d9:81:1c:e3:b4:74:a3:e9:2d:d7:eb:e5: c1:1b:d9:f5:5d:72:88:9e:4c:eb:11:32:5c:30:7e: 58:a9:ea:a4:b4:c0:4f:20:5a:bd:3c:b1:03:7c:13: 97:38:14:04:8b:b4:80:2b:9f:91:45:85:40:45:d1: ce:b4:1d:c9:76:03:27:5f:b3:c6:40:29:55:81:1b: c5:ec:4f:13:47:0a:39:3d:df:fc:63:08:37:71:96: 7c:d1:2e:0e:2d:11:2a:1b:ef:87:fe:00:a9:80:1b: 0d:68:f7:f2:8e:dd:d1:f0:a1:7e:e3:80:60:7a:54: 26:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9D:47:40:DE:9B:72:84:A1:0C:90:7E:27:B5:10:F2:2B:A1:44:B8 X509v3 Authority Key Identifier: keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:8f:30:5b:ed:9b:6b:66:a7:68:4b:47:70:a2:61:cf:94:e9: 94:be:c8:9f:e0:a2:9d:c1:ed:21:5d:ae:ad:a9:60:72:08:6b: b0:cd:4d:7e:65:f7:56:7d:e1:a7:81:78:86:50:83:c4:06:80: d5:7b:f8:74:a4:e7:94:91:f3:80:61:8b:db:37:97:c7:e9:79: 56:64:d9:3c:ad:79:5a:25:88:28:0a:d3:9d:d3:bb:21:74:6e: 94:90:0a:96:82:a2:e6:d3:03:90:fb:6a:55:f7:1b:f2:53:5d: 15:ee:55:21:3e:93:a4:d7:39:4b:e5:0f:2e:89:80:df:61:b2: e4:f3:88:5d:f2:f3:99:3d:d6:93:3f:04:ef:9d:ee:76:f9:1a: 00:d2:0d:04:0d:b2:02:2f:14:b3:31:bd:5a:78:ec:20:a3:b5: 1f:8c:87:3f:d7:b3:34:86:d7:32:02:c5:4a:a3:ad:52:bf:d5: 7a:0b:13:cd:6b:5c:9c:66:9f:66:e5:cb:24:75:47:84:66:05: af:01:f6:66:b2:20:44:37:29:4d:92:08:1b:d3:00:b8:1f:55: 9a:c0:b2:67:b1:ce:fb:34:af:4e:6f:4a:8a:2c:60:94:0c:b6: 3e:c5:77:61:81:d9:f4:33:90:2d:64:6d:f3:76:0a:9c:e2:f1: a2:34:61:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMzOUIxMTAvBgNVBAUTKEQ2N0JFMjE5NERCODYyNkE0M0QzOUFCRkE3NjA4RkJD NUFDQ0I1MjMwHhcNMjUwNDI1MDAwNjM2WhcNMjUwNTAyMDAwNjM2WjAYMRYwFAYD VQQDEw02ODBhZDIwZC1lZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyB2PrPPF76Sbf8jX59oE6Wuc4A52N0kf2g9XaHGOCKUnSE+lNizNM+b+GAA fq5K1BYv6VHK9mePL7GhsSbzNuhf7+fWHVFKVeRv7X0rss94NnvXJBg4E3eqMMtF 17zgZERPGr1R5akesaBu5XNEGgXLQ2Vwf+EJKjaZWO3f6WupLsMaQR/3ONrZgRzj tHSj6S3X6+XBG9n1XXKInkzrETJcMH5YqeqktMBPIFq9PLEDfBOXOBQEi7SAK5+R RYVARdHOtB3JdgMnX7PGQClVgRvF7E8TRwo5Pd/8Ywg3cZZ80S4OLREqG++H/gCp gBsNaPfyjt3R8KF+44BgelQmNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLedR0De m3KEoQyQfie1EPIroUS4MB8GA1UdIwQYMBaAFNZ74hlNuGJqQ9Oav6dgj7xazLUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzM5Qi9ENEYzRjBCMDVD MDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFltcEQwNXFfcDJDUHZGck10 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFudmlHVTI0WW1wRDA1cV9wMkNQdkZyTXRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzM5Qi9ENEYzRjBCMDVDMDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFlt cEQwNXFfcDJDUHZGck10U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2jzBb7ZtrZqdoS0dwomHPlOmUvsif4KKdwe0hXa6tqWByCGuwzU1+ ZfdWfeGngXiGUIPEBoDVe/h0pOeUkfOAYYvbN5fH6XlWZNk8rXlaJYgoCtOd07sh dG6UkAqWgqLm0wOQ+2pV9xvyU10V7lUhPpOk1zlL5Q8uiYDfYbLk84hd8vOZPdaT PwTvne52+RoA0g0EDbICLxSzMb1aeOwgo7UfjIc/17M0htcyAsVKo61Sv9V6CxPN a1ycZp9m5cskdUeEZgWvAfZmsiBENylNkggb0wC4H1WawLJnsc77NK9Ob0qKLGCU DLY+xXdhgdn0M5AtZG3zdgqc4vGiNGFE -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:27 2025 by rpki-client