$ rpki-client -vvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft File: 1nviGU24YmpD05q_p2CPvFrMtSM.mft (raw, json) Hash identifier: dFa/XgJiysZ7GoUIyL+3iia24WnQESC4QVP+YCmHRqQ= Subject key identifier: AB:BD:D4:FD:C6:EF:D5:F9:DD:0D:DF:20:14:D5:F8:6B:48:0B:14:72 Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 Certificate issuer: /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft Manifest number: 0444 Signing time: Thu 12 Jun 2025 23:50:09 +0000 Manifest this update: Thu 12 Jun 2025 23:50:08 +0000 Manifest next update: Thu 19 Jun 2025 23:50:08 +0000 Files and hashes: 1: 1nviGU24YmpD05q_p2CPvFrMtSM.crl (hash: aXyrDg1AI+rIlELMU4uIWpBYPSKsZsaczWpHzGazqa4=) 2: 5CE14CF22F1B11F0B8430030C4F9AE02.roa (hash: uW4b+jwiNxxtnvCg4IbqqcftfmJEGG9XBZg8g1h32Ko=) 3: 0B33A3D45C0411EC83F9BB50C4F9AE02.roa (hash: qicfoy/8cosxfApnnOippZ0PeEcv6bX+STnM2/SumVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913339B, serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Validity Not Before: Jun 12 23:50:08 2025 GMT Not After : Jun 19 23:50:08 2025 GMT Subject: CN=684b67b0-2124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f6:b1:3a:15:61:d9:24:0b:03:65:35:a0:ba: ef:c2:87:9b:b0:4b:24:a2:36:e9:42:bb:86:0b:22: db:72:64:bb:02:4c:28:b3:9f:91:6e:b1:ee:16:6d: 91:b7:d1:a7:07:38:b8:b8:f6:63:44:02:8d:44:34: e6:df:88:87:3f:d0:c6:5e:37:5b:42:47:0a:73:04: e2:e2:58:08:56:c5:c2:fd:43:40:4a:46:50:62:7a: 96:d5:ed:33:a9:a4:22:60:56:c8:7a:78:89:16:c9: cc:81:3c:57:d6:97:36:39:fb:fa:63:ba:b4:aa:0b: 07:e9:eb:3b:9b:12:0e:00:3d:b7:50:b2:e3:01:83: 94:5c:b4:79:1c:d5:3f:75:1c:5b:cf:c2:fe:e9:c0: eb:a7:24:74:f3:2d:42:8d:0d:5c:75:4a:b0:6c:51: 98:fe:04:51:73:e4:2e:d2:10:32:f0:e0:b3:7c:1c: f5:be:21:74:78:42:35:a6:60:32:cf:74:df:ce:78: 76:cc:57:a9:b4:46:f7:09:40:32:18:46:17:44:26: b6:3b:cf:18:7b:36:b2:3b:74:1a:b8:53:55:71:1a: 45:3c:4c:0c:82:3c:b1:73:19:d6:96:99:95:eb:35: e9:82:34:47:82:3c:e8:b6:1e:d3:7a:2f:42:8d:92: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BD:D4:FD:C6:EF:D5:F9:DD:0D:DF:20:14:D5:F8:6B:48:0B:14:72 X509v3 Authority Key Identifier: keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:ab:23:71:68:bc:ba:20:c0:4a:78:ee:01:52:17:a3:9c:db: a5:eb:95:25:59:43:ce:92:6d:8a:d0:ae:a7:2a:18:02:57:d1: 8d:ae:63:8e:ba:c5:00:01:ca:31:a4:db:6d:61:41:9c:1e:d2: f0:ca:ca:f5:43:1b:3f:0a:d0:f9:8d:99:53:cd:2d:ee:b1:33: 59:7e:dd:50:b9:71:4a:07:11:5a:5f:06:0f:8d:2d:d0:dc:23: 5f:37:02:4c:cb:c0:39:d4:fc:56:5c:74:74:10:ad:8c:2f:84: 7f:8a:33:c1:df:4b:e3:ba:99:e8:5e:a1:f5:4e:ee:e3:41:bc: f6:7e:6b:74:68:cd:02:01:de:6b:0b:8a:3d:44:11:fe:f2:bf: 42:27:15:75:17:d3:93:59:a1:0a:27:31:89:d7:c6:a0:12:a5: 03:ee:00:d0:7c:aa:8c:b0:e7:1f:11:ed:e6:49:1e:68:2b:76: c3:43:38:81:78:8a:0f:13:b6:a4:58:92:99:23:32:7b:24:c2: cf:f7:a3:f2:a6:95:00:cf:93:9e:3e:49:67:8e:8e:ab:e6:b3: 71:35:69:98:35:2b:91:40:49:28:a6:e7:dd:67:c9:13:56:fe: e2:80:b5:ce:3d:58:79:6c:0e:bb:82:65:43:39:7e:e1:a2:d5: ef:d7:b8:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMzOUIxMTAvBgNVBAUTKEQ2N0JFMjE5NERCODYyNkE0M0QzOUFCRkE3NjA4RkJD NUFDQ0I1MjMwHhcNMjUwNjEyMjM1MDA4WhcNMjUwNjE5MjM1MDA4WjAYMRYwFAYD VQQDEw02ODRiNjdiMC0yMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvaxOhVh2SQLA2U1oLrvwoebsEskojbpQruGCyLbcmS7Akwos5+RbrHuFm2R t9GnBzi4uPZjRAKNRDTm34iHP9DGXjdbQkcKcwTi4lgIVsXC/UNASkZQYnqW1e0z qaQiYFbIeniJFsnMgTxX1pc2Ofv6Y7q0qgsH6es7mxIOAD23ULLjAYOUXLR5HNU/ dRxbz8L+6cDrpyR08y1CjQ1cdUqwbFGY/gRRc+Qu0hAy8OCzfBz1viF0eEI1pmAy z3Tfznh2zFeptEb3CUAyGEYXRCa2O88YezayO3QauFNVcRpFPEwMgjyxcxnWlpmV 6zXpgjRHgjzoth7Tei9CjZLrEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKu91P3G 79X53Q3fIBTV+GtICxRyMB8GA1UdIwQYMBaAFNZ74hlNuGJqQ9Oav6dgj7xazLUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzM5Qi9ENEYzRjBCMDVD MDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFltcEQwNXFfcDJDUHZGck10 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFudmlHVTI0WW1wRDA1cV9wMkNQdkZyTXRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzM5Qi9ENEYzRjBCMDVDMDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFlt cEQwNXFfcDJDUHZGck10U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmqyNxaLy6IMBKeO4BUhejnNul65UlWUPOkm2K0K6nKhgCV9GNrmOO usUAAcoxpNttYUGcHtLwysr1Qxs/CtD5jZlTzS3usTNZft1QuXFKBxFaXwYPjS3Q 3CNfNwJMy8A51PxWXHR0EK2ML4R/ijPB30vjupnoXqH1Tu7jQbz2fmt0aM0CAd5r C4o9RBH+8r9CJxV1F9OTWaEKJzGJ18agEqUD7gDQfKqMsOcfEe3mSR5oK3bDQziB eIoPE7akWJKZIzJ7JMLP96PyppUAz5OePklnjo6r5rNxNWmYNSuRQEkopufdZ8kT Vv7igLXOPVh5bA67gmVDOX7hotXv17jk -----END CERTIFICATE-----Generated at Sat Jun 14 19:10:50 2025 by rpki-client