$ rpki-client -vvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft File: 1nviGU24YmpD05q_p2CPvFrMtSM.mft (raw, json) Hash identifier: 4L+XdVqFUd/57H8laAzja7Bj21XX9AiRoMA7fFEDOOA= Subject key identifier: 2C:EE:3A:F3:31:11:79:B0:17:D5:AA:84:62:F4:41:25:77:43:1E:B3 Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 Certificate issuer: /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft Manifest number: 0435 Signing time: Tue 13 May 2025 00:06:23 +0000 Manifest this update: Tue 13 May 2025 00:06:22 +0000 Manifest next update: Tue 20 May 2025 00:06:22 +0000 Files and hashes: 1: 1nviGU24YmpD05q_p2CPvFrMtSM.crl (hash: lz/Rmqks0EqheUhLfB/YUwd6hwbv5E6hF9zsJs4BUi4=) 2: 5CE14CF22F1B11F0B8430030C4F9AE02.roa (hash: uW4b+jwiNxxtnvCg4IbqqcftfmJEGG9XBZg8g1h32Ko=) 3: 0B33A3D45C0411EC83F9BB50C4F9AE02.roa (hash: qicfoy/8cosxfApnnOippZ0PeEcv6bX+STnM2/SumVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913339B, serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Validity Not Before: May 13 00:06:22 2025 GMT Not After : May 20 00:06:22 2025 GMT Subject: CN=68228cff-7919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:68:e6:dd:e1:4f:19:9e:ec:b0:26:96:02: 99:59:ae:65:bb:01:43:d4:fa:b6:d8:23:b2:7c:9d: 82:0f:19:18:73:72:d5:df:dc:f7:f1:c6:05:6f:fa: 36:4d:98:79:41:c6:30:9b:ce:98:d2:93:d3:d1:36: bd:f0:d6:43:d6:ab:a3:5a:8e:05:82:0f:ff:89:e5: ca:66:8b:42:4e:c7:14:f5:3f:68:5d:13:dc:44:91: 37:df:ff:c3:71:46:b4:c7:97:39:77:e5:cb:df:ab: 4b:70:de:6b:d9:47:30:ae:c9:7e:bf:3c:cb:a3:37: 4b:66:55:24:a5:35:8d:a3:fb:2f:bd:cd:56:24:c3: 3c:f3:f7:55:6d:fe:f2:c4:85:14:77:f9:91:66:ac: 8b:45:3e:94:19:fc:50:77:29:93:2e:17:d4:81:3b: 80:6e:6b:ca:73:ea:51:3e:97:72:4c:c4:6d:63:11: 39:6d:0d:e0:09:bb:f1:92:f3:f4:47:09:18:1b:d5: 84:67:63:c0:54:0b:83:ab:d6:f3:9b:3a:8e:6a:48: 95:a7:a1:15:02:fb:c4:b0:53:d5:3d:a4:58:fc:70: ab:3f:9d:32:24:f7:7e:97:3c:7f:0c:dc:fa:fd:84: 21:c8:3b:12:09:63:4b:48:81:87:a0:1e:63:64:ef: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EE:3A:F3:31:11:79:B0:17:D5:AA:84:62:F4:41:25:77:43:1E:B3 X509v3 Authority Key Identifier: keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:31:8c:b8:53:54:9b:11:da:c7:07:21:31:03:46:f4:24:ca: 8a:6b:e1:0d:62:88:0f:f4:38:9b:c2:48:39:7c:36:79:ca:82: ff:a3:1b:37:eb:c8:f6:61:63:a2:f6:fe:cb:f0:6f:3e:06:5a: 46:cc:6d:31:ba:c6:88:96:dd:ac:b0:34:c8:35:d5:55:3f:95: d3:e6:1f:cf:be:a9:c4:03:2b:cd:4e:3d:41:65:64:ab:77:75: 04:4e:cd:c1:40:a7:2c:ab:ef:1e:71:3b:24:74:0e:c8:fa:b1: e5:ed:8a:dd:f0:08:9f:d0:0b:0d:75:28:f5:f4:8b:26:67:5e: cc:25:52:32:d7:df:31:34:ec:d4:a3:6d:42:25:64:85:e9:9d: 62:0d:ab:51:6d:bd:51:d9:7b:b4:19:de:5e:9c:aa:d2:20:d2: e5:a3:80:48:4f:fe:c8:9c:cf:3c:4a:a5:31:ae:66:8a:47:23: 48:f3:31:6a:74:d3:0f:b2:94:16:4b:6c:1f:cb:39:88:b3:c7: fa:ec:fd:27:b7:63:13:30:68:1c:33:d9:b7:74:88:a6:31:35: 7f:d1:cc:5c:84:a7:da:f8:68:1e:a1:85:1d:84:1f:fd:52:09: c8:01:4e:00:db:27:f1:3b:4d:0a:6e:05:fc:e0:9b:0e:15:44: 8d:d2:e5:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMzOUIxMTAvBgNVBAUTKEQ2N0JFMjE5NERCODYyNkE0M0QzOUFCRkE3NjA4RkJD NUFDQ0I1MjMwHhcNMjUwNTEzMDAwNjIyWhcNMjUwNTIwMDAwNjIyWjAYMRYwFAYD VQQDEw02ODIyOGNmZi03OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbRo5t3hTxme7LAmlgKZWa5luwFD1Pq22COyfJ2CDxkYc3LV39z38cYFb/o2 TZh5QcYwm86Y0pPT0Ta98NZD1qujWo4Fgg//ieXKZotCTscU9T9oXRPcRJE33//D cUa0x5c5d+XL36tLcN5r2Ucwrsl+vzzLozdLZlUkpTWNo/svvc1WJMM88/dVbf7y xIUUd/mRZqyLRT6UGfxQdymTLhfUgTuAbmvKc+pRPpdyTMRtYxE5bQ3gCbvxkvP0 RwkYG9WEZ2PAVAuDq9bzmzqOakiVp6EVAvvEsFPVPaRY/HCrP50yJPd+lzx/DNz6 /YQhyDsSCWNLSIGHoB5jZO/EIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzuOvMx EXmwF9WqhGL0QSV3Qx6zMB8GA1UdIwQYMBaAFNZ74hlNuGJqQ9Oav6dgj7xazLUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzM5Qi9ENEYzRjBCMDVD MDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFltcEQwNXFfcDJDUHZGck10 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFudmlHVTI0WW1wRDA1cV9wMkNQdkZyTXRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzM5Qi9ENEYzRjBCMDVDMDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFlt cEQwNXFfcDJDUHZGck10U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/MYy4U1SbEdrHByExA0b0JMqKa+ENYogP9Dibwkg5fDZ5yoL/oxs3 68j2YWOi9v7L8G8+BlpGzG0xusaIlt2ssDTINdVVP5XT5h/PvqnEAyvNTj1BZWSr d3UETs3BQKcsq+8ecTskdA7I+rHl7Yrd8Aif0AsNdSj19IsmZ17MJVIy198xNOzU o21CJWSF6Z1iDatRbb1R2Xu0Gd5enKrSINLlo4BIT/7InM88SqUxrmaKRyNI8zFq dNMPspQWS2wfyzmIs8f67P0nt2MTMGgcM9m3dIimMTV/0cxchKfa+GgeoYUdhB/9 UgnIAU4A2yfxO00KbgX84JsOFUSN0uVu -----END CERTIFICATE-----Generated at Tue May 13 11:42:59 2025 by rpki-client