$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft File: iavBOYslsdbOj_e_sysS6fCWc_k.mft (raw, json) Hash identifier: tvmjXoTdhGTvc7KcxCtbNRFRvJd9AdfeJK/FJNpqfXg= Subject key identifier: 39:A9:39:40:90:84:5C:31:28:CD:4D:34:2D:9C:16:5B:D8:00:0F:E7 Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Certificate serial: 046D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft Manifest number: 0468 Signing time: Thu 03 Jul 2025 00:28:56 +0000 Manifest this update: Thu 03 Jul 2025 00:28:56 +0000 Manifest next update: Thu 10 Jul 2025 00:28:56 +0000 Files and hashes: 1: iavBOYslsdbOj_e_sysS6fCWc_k.crl (hash: RwLnghFV+rRd5iK3ZLse/aN19jQpYicV5NT3rBwAro8=) 2: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (hash: RyLNM9Y2xKP2/pPGOLqXFeZG9/xveuZYuPTjdQJUT2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1133 (0x46d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143035, serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Validity Not Before: Jul 3 00:28:56 2025 GMT Not After : Jul 10 00:28:56 2025 GMT Subject: CN=6865cec8-1912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:5f:4a:c2:ec:62:2a:e6:0e:25:e7:71:0b: 85:51:86:db:11:ce:0b:cf:ef:d7:33:6a:27:fb:43: 55:7d:95:e9:6c:7d:98:fc:9c:e6:f8:2b:86:df:72: cd:68:10:f1:82:8b:54:4e:7c:f4:4a:8b:92:37:0a: 40:26:28:ff:ff:06:ed:f2:c5:51:94:0c:bd:c8:28: 9e:8c:56:d1:87:13:df:1d:45:0c:0a:84:aa:36:01: f5:c4:09:86:4a:7f:37:f0:b0:fd:85:28:29:e4:fc: ca:7c:c1:17:e5:33:b9:00:34:b3:57:6d:50:0d:37: 24:30:53:19:02:cd:4c:cc:d8:e7:e4:4b:6d:a5:63: 19:7d:e2:63:1f:ca:f4:8a:46:7c:7f:65:b2:5e:f8: 1b:c8:7c:1e:e6:84:db:21:34:eb:db:66:5f:51:70: eb:1a:7b:c1:42:3e:8b:51:f4:58:f5:0b:77:ae:92: 78:1a:93:ea:aa:df:4c:e3:cb:19:8c:aa:49:ad:23: 0b:95:db:bc:e7:ed:b7:44:d8:da:d0:f7:e2:cc:6f: ec:bf:4a:1b:0d:3a:3d:93:31:ce:28:21:05:10:f3: ca:6b:42:8d:6b:47:25:e5:ee:6a:ae:41:14:59:5a: 18:49:9f:75:8d:3e:82:13:24:27:92:da:11:30:07: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A9:39:40:90:84:5C:31:28:CD:4D:34:2D:9C:16:5B:D8:00:0F:E7 X509v3 Authority Key Identifier: keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:35:85:a4:06:64:42:5b:0b:37:6a:9f:80:59:28:a3:91:3f: 89:e1:15:ae:b5:81:eb:a4:8a:ba:2a:12:be:69:87:bf:fe:b9: f3:2c:14:7f:47:88:c6:3b:ab:5c:f7:0d:3c:07:96:7a:b0:43: 54:d0:c0:5e:4b:c0:a2:6e:ce:94:ab:d7:72:bb:c0:d2:79:c3: be:a9:88:51:c5:f5:4b:e6:61:9c:84:1b:8d:a7:2b:3d:59:09: 22:70:ab:9f:ba:c2:1a:97:20:c0:97:95:95:ea:65:4b:e2:70: 4e:91:a8:81:63:14:8f:34:cc:cf:c6:a9:f0:f4:9e:74:20:95: eb:34:f3:c6:4e:ec:11:ef:98:0b:6b:c6:11:7b:e0:63:5d:a6: 10:9c:ab:32:02:69:aa:40:7a:67:a4:11:9b:c9:19:f4:ba:94: 02:40:83:06:01:a5:a9:0a:63:6f:56:1d:b1:b9:92:b5:b6:24: ec:7a:b7:eb:91:dd:c7:b7:52:12:e6:77:4b:ad:27:bc:68:1e: 3a:7f:17:33:10:f0:43:26:79:1e:75:b1:34:31:e2:7b:85:50: 37:d9:2f:91:a2:e1:f3:5e:81:13:16:0a:e8:4b:13:68:98:fc: 65:97:14:63:ac:7f:48:74:68:9c:4b:4d:70:26:e7:19:66:27: 7d:09:eb:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwMzUxMTAvBgNVBAUTKDg5QUJDMTM5OEIyNUIxRDZDRThGRjdCRkIzMkIxMkU5 RjA5NjczRjkwHhcNMjUwNzAzMDAyODU2WhcNMjUwNzEwMDAyODU2WjAYMRYwFAYD VQQDEw02ODY1Y2VjOC0xOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKtfSsLsYirmDiXncQuFUYbbEc4Lz+/XM2on+0NVfZXpbH2Y/Jzm+CuG33LN aBDxgotUTnz0SouSNwpAJij//wbt8sVRlAy9yCiejFbRhxPfHUUMCoSqNgH1xAmG Sn838LD9hSgp5PzKfMEX5TO5ADSzV21QDTckMFMZAs1MzNjn5EttpWMZfeJjH8r0 ikZ8f2WyXvgbyHwe5oTbITTr22ZfUXDrGnvBQj6LUfRY9Qt3rpJ4GpPqqt9M48sZ jKpJrSMLldu85+23RNja0PfizG/sv0obDTo9kzHOKCEFEPPKa0KNa0cl5e5qrkEU WVoYSZ91jT6CEyQnktoRMAfp7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmpOUCQ hFwxKM1NNC2cFlvYAA/nMB8GA1UdIwQYMBaAFImrwTmLJbHWzo/3v7MrEunwlnP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzAzNS8xOEM2MjkxMjUy OUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNkYk9qX2Vfc3lzUzZmQ1dj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhdkJPWXNsc2RiT2pfZV9zeXNTNmZDV2Nfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzAzNS8xOEM2MjkxMjUyOUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNk Yk9qX2Vfc3lzUzZmQ1djX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9NYWkBmRCWws3ap+AWSijkT+J4RWutYHrpIq6KhK+aYe//rnzLBR/ R4jGO6tc9w08B5Z6sENU0MBeS8Cibs6Uq9dyu8DSecO+qYhRxfVL5mGchBuNpys9 WQkicKufusIalyDAl5WV6mVL4nBOkaiBYxSPNMzPxqnw9J50IJXrNPPGTuwR75gL a8YRe+BjXaYQnKsyAmmqQHpnpBGbyRn0upQCQIMGAaWpCmNvVh2xuZK1tiTserfr kd3Ht1IS5ndLrSe8aB46fxczEPBDJnkedbE0MeJ7hVA32S+RouHzXoETFgroSxNo mPxllxRjrH9IdGicS01wJucZZid9CesF -----END CERTIFICATE-----Generated at Thu Jul 3 07:14:44 2025 by rpki-client