$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft File: iNavzrjz-JAnRNYaYmhLlFnbwfY.mft (raw, json) Hash identifier: +pB2c3FKZg3FBK9xyrSNulrcN8lTGIf2Y7nobF/GyM4= Subject key identifier: B6:2D:44:FC:5C:04:90:E6:72:CC:26:2F:3F:DC:7E:66:89:B7:96:AC Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6 Certificate issuer: /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6 Certificate serial: 042B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft Manifest number: 0426 Signing time: Fri 25 Apr 2025 00:07:48 +0000 Manifest this update: Fri 25 Apr 2025 00:07:48 +0000 Manifest next update: Fri 02 May 2025 00:07:48 +0000 Files and hashes: 1: iNavzrjz-JAnRNYaYmhLlFnbwfY.crl (hash: flnRYuiVNPqGLECfvGp05eBcPe3zt4ib0kdoePeHQQI=) 2: 66D714485D6F11EC9A00E41DC4F9AE02.roa (hash: Zv2OqRWOOIraCVGgHs0pDMOMrHeeVent3h8K/ky95JI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1067 (0x42b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A550, serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6 Validity Not Before: Apr 25 00:07:48 2025 GMT Not After : May 2 00:07:48 2025 GMT Subject: CN=680ad254-43bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:9d:9a:43:b2:bf:e3:da:ff:70:f0:c9:e9: 85:8d:00:bf:75:60:5c:3c:10:5f:a9:c4:0c:e1:7e: e6:cc:89:f6:e3:74:4a:9d:bc:30:d4:ff:17:f6:fa: de:a3:63:c9:5b:fa:9a:f4:5c:b6:97:f1:88:7a:4f: 03:15:b2:45:89:b3:e5:7c:32:c1:e4:f0:10:11:5e: d6:76:5f:82:eb:2d:d7:2e:4b:28:c6:d3:7e:65:e0: a0:cd:f3:7d:42:f6:94:8c:d1:1b:4c:46:c0:af:a2: e3:71:a0:d1:a5:bb:d2:d6:b9:bb:7a:52:b9:29:37: 98:12:1f:be:77:a1:20:c8:1e:85:f1:54:56:21:27: 09:1d:ee:95:97:b2:1d:9e:c0:06:35:a1:99:46:c7: 31:85:b1:88:cc:fc:57:1b:d7:22:be:b0:eb:5c:d1: f1:76:87:04:58:ab:d6:8e:e6:af:5e:72:b7:7d:6a: 97:41:43:17:02:9f:95:0e:86:cd:fb:6b:e2:7b:77: 84:f4:9c:d2:e5:02:43:1a:c7:cb:b4:f0:db:e8:89: 2d:75:94:c1:61:12:2f:4c:94:6b:be:4b:84:fc:b3: 47:81:4d:2f:c0:22:93:98:12:c3:83:79:38:17:61: 39:17:16:78:6e:c4:a6:21:a7:78:ce:55:b5:f8:fd: 18:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2D:44:FC:5C:04:90:E6:72:CC:26:2F:3F:DC:7E:66:89:B7:96:AC X509v3 Authority Key Identifier: keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:cb:d7:d9:00:e9:49:b7:f9:57:6d:38:8c:36:eb:bc:d5:0f: 4a:6c:6c:cb:86:72:05:91:5f:ab:3b:b6:da:64:7c:2c:0a:b4: a2:01:98:c9:08:97:ed:ee:b9:54:50:22:15:46:84:d0:d8:2e: 9f:ea:96:75:8f:18:de:dc:f0:8b:95:ce:a3:71:7a:4d:a5:dd: 52:97:5d:3c:5b:6f:87:54:ba:d2:4e:0e:51:0b:ec:ae:d0:31: c7:55:79:1a:0e:b1:cd:51:e1:29:40:d5:ee:ce:be:ce:f4:3b: b0:5d:8f:bf:5a:a8:f8:88:9c:fc:75:83:19:d4:02:1e:00:fb: 55:7e:ea:34:62:29:36:43:17:d7:2d:e9:60:55:f2:89:41:53: 8e:02:07:f4:4a:a3:f8:9e:a3:05:54:46:3e:41:91:30:d9:ba: 47:33:6b:4c:a9:1f:f9:64:a3:5a:8e:9d:1b:9d:c7:06:26:02: d8:78:5f:42:96:d3:d4:f8:6b:2a:76:b4:b5:10:2c:d3:a8:1e: 56:dc:01:1c:a9:16:97:03:89:30:fd:a6:bc:e4:c7:b2:db:03: 75:56:44:0f:d5:d2:4a:50:42:c7:3f:f5:f8:10:d4:de:77:6c: da:1e:bf:ac:fe:70:49:54:2a:ca:87:27:fc:b0:b0:25:21:b9: a5:d6:5a:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTAxMTAvBgNVBAUTKDg4RDZBRkNFQjhGM0Y4OTAyNzQ0RDYxQTYyNjg0Qjk0 NTlEQkMxRjYwHhcNMjUwNDI1MDAwNzQ4WhcNMjUwNTAyMDAwNzQ4WjAYMRYwFAYD VQQDEw02ODBhZDI1NC00M2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9idmkOyv+Pa/3DwyemFjQC/dWBcPBBfqcQM4X7mzIn243RKnbww1P8X9vre o2PJW/qa9Fy2l/GIek8DFbJFibPlfDLB5PAQEV7Wdl+C6y3XLksoxtN+ZeCgzfN9 QvaUjNEbTEbAr6LjcaDRpbvS1rm7elK5KTeYEh++d6EgyB6F8VRWIScJHe6Vl7Id nsAGNaGZRscxhbGIzPxXG9civrDrXNHxdocEWKvWjuavXnK3fWqXQUMXAp+VDobN +2vie3eE9JzS5QJDGsfLtPDb6IktdZTBYRIvTJRrvkuE/LNHgU0vwCKTmBLDg3k4 F2E5FxZ4bsSmIad4zlW1+P0YTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYtRPxc BJDmcswmLz/cfmaJt5asMB8GA1UdIwQYMBaAFIjWr8648/iQJ0TWGmJoS5RZ28H2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1MC8xMTdDMjZFQTVE NkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1KQW5STllhWW1oTGxGbmJ3 ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOYXZ6cmp6LUpBblJOWWFZbWhMbEZuYndmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1MC8xMTdDMjZFQTVENkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1K QW5STllhWW1oTGxGbmJ3ZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwy9fZAOlJt/lXbTiMNuu81Q9KbGzLhnIFkV+rO7baZHwsCrSiAZjJ CJft7rlUUCIVRoTQ2C6f6pZ1jxje3PCLlc6jcXpNpd1Sl108W2+HVLrSTg5RC+yu 0DHHVXkaDrHNUeEpQNXuzr7O9DuwXY+/Wqj4iJz8dYMZ1AIeAPtVfuo0Yik2QxfX LelgVfKJQVOOAgf0SqP4nqMFVEY+QZEw2bpHM2tMqR/5ZKNajp0bnccGJgLYeF9C ltPU+GsqdrS1ECzTqB5W3AEcqRaXA4kw/aa85Mey2wN1VkQP1dJKUELHP/X4ENTe d2zaHr+s/nBJVCrKhyf8sLAlIbml1lp5 -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:59 2025 by rpki-client