$ rpki-client -vvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft File: iavBOYslsdbOj_e_sysS6fCWc_k.mft (raw, json) Hash identifier: v7a+C+W9fJDkKqvkRw2EQ6xpRuiMQtn9CsbNtPeSEB0= Subject key identifier: A4:00:80:8A:D8:7F:76:6F:56:71:69:F2:EE:C0:A2:B6:6C:A4:15:9D Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 Certificate issuer: /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft Manifest number: 044F Signing time: Tue 13 May 2025 00:01:09 +0000 Manifest this update: Tue 13 May 2025 00:01:09 +0000 Manifest next update: Tue 20 May 2025 00:01:09 +0000 Files and hashes: 1: iavBOYslsdbOj_e_sysS6fCWc_k.crl (hash: Mietia1dD3VIf+midKw+qXZeVeaOodnly7tV2IxgVpM=) 2: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (hash: RyLNM9Y2xKP2/pPGOLqXFeZG9/xveuZYuPTjdQJUT2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143035, serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9 Validity Not Before: May 13 00:01:09 2025 GMT Not After : May 20 00:01:09 2025 GMT Subject: CN=68228bc5-5d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:e5:fc:4a:60:cb:bd:42:65:a4:e1:5e:86: 56:35:8c:76:06:43:52:d6:1c:de:87:58:db:53:6e: 04:dc:58:47:6e:d9:34:73:d6:b9:cf:f7:1c:1e:4e: b5:6f:93:20:bb:2a:f5:57:31:bd:44:53:b8:da:8f: ab:9f:b8:50:49:a7:03:52:ac:a3:9f:82:b2:a4:31: 06:a6:13:80:ea:19:39:6b:84:47:eb:07:3c:e8:13: db:ee:cc:47:10:09:ff:c7:41:3e:9f:7c:7a:5b:a9: c6:64:94:fb:6f:7e:47:b5:7e:55:65:3d:91:ea:06: 37:3c:e3:3f:59:68:6c:ee:d8:cc:33:45:1c:ad:0d: 72:bd:27:f6:dd:b2:e9:e5:9a:f7:8d:52:bc:54:e7: 6c:c3:aa:e4:93:40:a1:b0:69:88:79:08:15:b1:26: 21:f3:78:82:bc:43:aa:a0:52:b8:e5:23:5c:b0:25: 0d:06:8a:b9:f0:3f:b1:3d:62:57:45:de:48:dd:96: dd:27:de:47:b7:a0:fc:93:89:90:04:7c:c9:59:31: ef:c5:18:ee:bb:2a:99:cc:09:8c:24:50:c6:67:8b: 38:c9:dd:a6:df:aa:21:62:9a:4c:67:80:ec:52:4f: de:a0:d0:6c:e3:9f:b5:94:13:08:8b:04:90:4b:de: 79:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:00:80:8A:D8:7F:76:6F:56:71:69:F2:EE:C0:A2:B6:6C:A4:15:9D X509v3 Authority Key Identifier: keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:75:6d:5e:43:c7:bf:8e:b7:b5:a1:c0:ac:83:d9:e2:62:b2: 5d:73:ef:e7:da:ac:ae:84:59:46:99:35:3f:81:44:af:4c:06: 76:a9:1c:ed:3b:60:6c:46:84:ad:82:b1:bf:0d:69:c4:e8:39: 4d:6b:30:70:4f:9d:f6:70:2f:75:04:12:a6:04:07:50:04:11: a0:b3:60:3f:be:34:2c:d5:00:f1:df:22:48:25:53:83:01:67: 6f:68:5a:d2:d8:8f:fd:65:a0:44:3e:74:a3:1e:e7:3e:0f:1f: 13:e3:72:04:f1:f5:8f:0a:e1:51:e9:89:da:9d:7f:6f:28:66: fa:4d:d9:36:73:7f:90:59:ae:93:3c:ad:bd:94:ec:1c:37:96: e3:1b:44:15:38:fd:18:d4:ef:04:db:92:a8:a6:7c:f3:c3:80: d1:c8:d3:6e:0a:e5:c7:ee:81:eb:dd:da:4a:c3:1b:6c:e0:21: ac:08:53:a6:30:ca:63:e6:83:8c:9d:94:2a:e9:9c:86:be:bd: 15:4b:f3:2d:7d:66:4b:1d:5c:34:02:c3:32:c3:45:e7:8a:89: f9:05:a5:ed:ad:c6:c3:23:0d:8b:4a:45:e1:4b:53:04:cd:8f: 5e:21:a4:6a:0c:25:53:b9:1d:42:52:92:96:4f:c0:cb:41:2e: 46:fd:df:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwMzUxMTAvBgNVBAUTKDg5QUJDMTM5OEIyNUIxRDZDRThGRjdCRkIzMkIxMkU5 RjA5NjczRjkwHhcNMjUwNTEzMDAwMTA5WhcNMjUwNTIwMDAwMTA5WjAYMRYwFAYD VQQDEw02ODIyOGJjNS01ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqurl/Epgy71CZaThXoZWNYx2BkNS1hzeh1jbU24E3FhHbtk0c9a5z/ccHk61 b5Mguyr1VzG9RFO42o+rn7hQSacDUqyjn4KypDEGphOA6hk5a4RH6wc86BPb7sxH EAn/x0E+n3x6W6nGZJT7b35HtX5VZT2R6gY3POM/WWhs7tjMM0UcrQ1yvSf23bLp 5Zr3jVK8VOdsw6rkk0ChsGmIeQgVsSYh83iCvEOqoFK45SNcsCUNBoq58D+xPWJX Rd5I3ZbdJ95Ht6D8k4mQBHzJWTHvxRjuuyqZzAmMJFDGZ4s4yd2m36ohYppMZ4Ds Uk/eoNBs45+1lBMIiwSQS955+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQAgIrY f3ZvVnFp8u7AorZspBWdMB8GA1UdIwQYMBaAFImrwTmLJbHWzo/3v7MrEunwlnP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzAzNS8xOEM2MjkxMjUy OUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNkYk9qX2Vfc3lzUzZmQ1dj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhdkJPWXNsc2RiT2pfZV9zeXNTNmZDV2Nfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzAzNS8xOEM2MjkxMjUyOUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNk Yk9qX2Vfc3lzUzZmQ1djX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAdW1eQ8e/jre1ocCsg9niYrJdc+/n2qyuhFlGmTU/gUSvTAZ2qRzt O2BsRoStgrG/DWnE6DlNazBwT532cC91BBKmBAdQBBGgs2A/vjQs1QDx3yJIJVOD AWdvaFrS2I/9ZaBEPnSjHuc+Dx8T43IE8fWPCuFR6YnanX9vKGb6Tdk2c3+QWa6T PK29lOwcN5bjG0QVOP0Y1O8E25Kopnzzw4DRyNNuCuXH7oHr3dpKwxts4CGsCFOm MMpj5oOMnZQq6ZyGvr0VS/MtfWZLHVw0AsMyw0Xnion5BaXtrcbDIw2LSkXhS1ME zY9eIaRqDCVTuR1CUpKWT8DLQS5G/d9W -----END CERTIFICATE-----Generated at Tue May 13 11:12:36 2025 by rpki-client