$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: FdrhpOGxKVGoizebEquIEKOO2LAMDEqoZ4QChpf8nKI= Subject key identifier: F6:B5:1C:6B:64:57:88:27:A7:3F:5E:DD:E3:1B:59:FF:E7:FE:03:D5 Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 049C Signing time: Thu 24 Apr 2025 23:45:48 +0000 Manifest this update: Thu 24 Apr 2025 23:45:48 +0000 Manifest next update: Thu 01 May 2025 23:45:48 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: qq2wa6cmaAkidha09mkHF4RJ9BYSekj1F9yFfZxvG5E=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3A9tL/jcYlpnzHxxWTOseLkNdsbJRJrgjlY1s6ebsbQ=) 3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: GWx3OJd1vwjGtC5zPk/EszjxixEUkMuQ8v31OyEYOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: Apr 24 23:45:48 2025 GMT Not After : May 1 23:45:48 2025 GMT Subject: CN=680acd2c-e56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:87:55:c1:64:0b:84:36:51:9d:e1:70:55:3c: c6:7f:75:2e:ce:f2:6e:d6:c7:e8:de:1d:d1:a0:a5: c9:6c:9f:ce:15:be:30:dd:3e:3a:00:13:7b:de:69: 00:b1:60:5f:31:6c:8b:02:56:b7:4f:af:a7:6a:18: 2e:4b:3a:b4:da:29:c0:5b:15:20:2e:fd:9a:63:13: 45:84:04:60:0b:86:ff:7d:d7:ab:a9:56:83:8b:63: d3:d1:b8:d2:52:44:5e:7a:51:03:20:cc:a0:a1:90: 83:e7:53:6b:7e:14:2a:f5:be:fe:90:60:0f:fd:b4: 81:08:be:43:d5:15:e4:01:27:9c:e6:f2:6b:ce:99: b2:f8:9e:83:c7:32:81:01:8d:59:ed:9a:e8:ea:b9: c2:d7:15:b2:e4:00:dc:43:d0:ac:8c:32:6d:d4:96: 0a:96:5b:22:4a:d1:02:2b:42:ac:06:07:00:5f:59: e8:b0:21:f4:c4:ff:ee:23:6e:f3:14:46:f7:7c:5e: e0:ce:d6:bd:22:9c:6a:0f:92:ff:ac:7c:b6:7e:cc: 01:64:d5:8e:59:68:f6:05:ee:e9:25:0b:5f:9b:81: b6:e8:1d:5b:d6:ec:97:00:bc:db:d9:84:63:73:d9: 1c:e4:c6:6c:c8:23:64:37:ff:55:ef:07:a2:6f:bf: 84:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B5:1C:6B:64:57:88:27:A7:3F:5E:DD:E3:1B:59:FF:E7:FE:03:D5 X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:53:90:ac:9d:8c:36:c3:28:2f:15:e4:23:74:52:85:9e:50: ec:72:59:d3:50:e1:9a:af:cf:af:05:d7:a3:a3:2f:dc:55:5a: f7:bf:1d:6a:d6:92:8d:1e:2a:05:27:67:1d:20:02:7b:d3:49: 1a:7c:02:1e:ed:96:d2:b8:0b:61:8e:ec:a8:57:91:3f:28:99: 6d:dc:a8:e2:d2:10:f2:cf:d8:70:03:cf:80:0e:d5:a1:f7:af: f7:1a:78:38:f6:8e:24:50:47:21:03:ea:a8:aa:f2:ff:d6:26: c9:cf:b1:b0:cb:02:d2:11:88:92:e5:dd:cb:d1:3e:e9:52:75: 59:08:0d:84:f4:13:cd:02:81:75:39:b8:03:d8:a0:d4:43:18: 3d:64:b7:1b:3d:23:bc:df:cc:e9:2e:9a:a0:35:85:11:04:a4: c4:38:16:0c:2e:44:7a:4d:12:a6:e3:54:32:ac:4c:4a:a3:1c: 26:d4:b3:61:42:c5:64:e8:15:4a:c5:68:63:99:aa:7e:dd:a5: 6e:4c:5a:52:4f:69:38:8d:ad:7a:58:57:fd:98:79:45:4f:ee: 22:14:45:96:d8:5a:dc:37:ca:94:cf:a5:d3:f1:32:6b:17:e7: 65:9b:9e:ee:5e:7e:70:3f:96:0b:8d:50:f7:d9:db:a4:a3:0f: 76:4e:11:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjUwNDI0MjM0NTQ4WhcNMjUwNTAxMjM0NTQ4WjAYMRYwFAYD VQQDEw02ODBhY2QyYy1lNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIdVwWQLhDZRneFwVTzGf3UuzvJu1sfo3h3RoKXJbJ/OFb4w3T46ABN73mkA sWBfMWyLAla3T6+nahguSzq02inAWxUgLv2aYxNFhARgC4b/fderqVaDi2PT0bjS UkReelEDIMygoZCD51NrfhQq9b7+kGAP/bSBCL5D1RXkASec5vJrzpmy+J6DxzKB AY1Z7Zro6rnC1xWy5ADcQ9CsjDJt1JYKllsiStECK0KsBgcAX1nosCH0xP/uI27z FEb3fF7gzta9IpxqD5L/rHy2fswBZNWOWWj2Be7pJQtfm4G26B1b1uyXALzb2YRj c9kc5MZsyCNkN/9V7weib7+EzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPa1HGtk V4gnpz9e3eMbWf/n/gPVMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0U5CsnYw2wygvFeQjdFKFnlDsclnTUOGar8+vBdejoy/cVVr3vx1q 1pKNHioFJ2cdIAJ700kafAIe7ZbSuAthjuyoV5E/KJlt3Kji0hDyz9hwA8+ADtWh 96/3Gng49o4kUEchA+qoqvL/1ibJz7GwywLSEYiS5d3L0T7pUnVZCA2E9BPNAoF1 ObgD2KDUQxg9ZLcbPSO838zpLpqgNYURBKTEOBYMLkR6TRKm41QyrExKoxwm1LNh QsVk6BVKxWhjmap+3aVuTFpST2k4ja16WFf9mHlFT+4iFEWW2FrcN8qUz6XT8TJr F+dlm57uXn5wP5YLjVD32dukow92ThFE -----END CERTIFICATE-----Generated at Sat Apr 26 12:18:57 2025 by rpki-client