$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft File: iNavzrjz-JAnRNYaYmhLlFnbwfY.mft (raw, json) Hash identifier: 1MuaLZu+g83BagTDb8l7N/btZz3A77/OUIEJ8Rpy3o0= Subject key identifier: 04:DB:0E:19:2E:D4:3F:B5:A2:DA:22:A2:CB:D7:D7:44:F5:37:81:64 Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6 Certificate issuer: /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6 Certificate serial: 0434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft Manifest number: 042F Signing time: Tue 13 May 2025 00:07:38 +0000 Manifest this update: Tue 13 May 2025 00:07:38 +0000 Manifest next update: Tue 20 May 2025 00:07:38 +0000 Files and hashes: 1: iNavzrjz-JAnRNYaYmhLlFnbwfY.crl (hash: gKX+AuiRvT+PrWievEbZNjFHIZF59DSNJG8f80hU8I0=) 2: 66D714485D6F11EC9A00E41DC4F9AE02.roa (hash: Zv2OqRWOOIraCVGgHs0pDMOMrHeeVent3h8K/ky95JI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1076 (0x434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A550, serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6 Validity Not Before: May 13 00:07:38 2025 GMT Not After : May 20 00:07:38 2025 GMT Subject: CN=68228d4a-faee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:3f:83:ef:4f:0f:c2:69:53:56:9c:2e:fc:6d: 95:3d:db:39:dd:3c:3e:0c:ff:00:10:9d:e9:c3:f1: b0:c4:64:0d:c0:21:5a:51:84:34:50:5e:26:9a:62: a7:4b:ae:6f:82:ad:3a:b8:bd:28:ce:24:b8:52:f5: 72:5c:4b:34:d2:2e:1e:02:fa:71:84:8f:69:a7:24: c8:62:5a:a8:7c:1f:f2:f6:58:70:14:95:5c:e2:e7: 36:4d:3b:32:c9:8e:1a:0d:0e:10:ab:57:b6:a7:d4: 0d:62:d3:68:0d:16:5e:62:eb:27:16:e0:ea:b1:cb: 94:42:71:f6:bd:14:de:47:6b:6b:83:72:51:10:d5: b0:7c:d2:7b:46:9f:f8:53:9f:dc:db:ab:c8:e2:4d: 7a:2f:97:0a:9f:89:bd:d1:47:da:c7:74:84:74:f7: e4:b0:85:36:d5:ab:51:cb:af:49:92:04:55:2c:a1: 57:2a:3a:e5:49:ff:eb:6b:72:a2:7a:b0:bf:0c:a8: 2c:8c:04:2c:8e:dd:24:a5:ab:6d:95:bc:dc:3c:ad: 73:9d:20:00:57:d9:99:ab:6e:97:5a:33:22:fb:25: 63:78:e8:16:ac:ec:ae:28:d5:81:2f:66:c9:a5:7c: 2d:32:d7:52:b5:0f:4c:f5:17:b1:e1:fe:41:c1:ef: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DB:0E:19:2E:D4:3F:B5:A2:DA:22:A2:CB:D7:D7:44:F5:37:81:64 X509v3 Authority Key Identifier: keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:88:3a:4f:03:c4:9c:6e:3e:36:6d:0c:d6:5f:0e:48:5f:8e: 25:24:82:29:58:85:db:e4:cd:f2:21:e1:a8:a4:d4:6b:ff:8d: 6e:d5:b0:db:80:d9:2d:77:09:8e:72:c1:ab:8d:a5:02:3e:3b: 0b:7d:9a:14:00:d1:23:98:ed:47:49:be:d4:96:00:9b:99:a6: a5:03:5c:87:39:0c:8a:10:56:f7:4d:1c:3d:d1:ec:e1:d3:f9: 0e:8e:e5:8a:81:51:9d:a4:09:18:dd:27:c7:ff:1c:5b:8f:ff: 44:57:a4:8d:77:1d:a8:80:fe:16:ed:61:63:b6:f7:af:d9:d5: cb:cc:ee:fd:92:0e:5c:12:2d:e1:41:0a:b1:ab:72:25:c0:9c: 74:01:4c:15:f4:46:ef:65:e6:c5:cb:d8:bb:91:99:90:54:ef: 05:e6:77:4f:03:ba:09:da:c9:d8:92:bc:41:bb:25:59:15:df: e5:28:9c:22:d4:23:09:9c:e6:0c:11:6a:19:3b:55:d3:aa:12: d2:3a:56:79:73:28:bf:f3:8a:2e:49:5c:37:86:af:b7:3c:51: fb:89:a8:fd:60:b1:e5:fb:91:11:34:ad:54:ed:42:a8:87:e8: b4:1b:b2:45:a1:22:35:25:21:37:1d:77:38:af:4e:01:d3:30: 1a:b3:ae:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTAxMTAvBgNVBAUTKDg4RDZBRkNFQjhGM0Y4OTAyNzQ0RDYxQTYyNjg0Qjk0 NTlEQkMxRjYwHhcNMjUwNTEzMDAwNzM4WhcNMjUwNTIwMDAwNzM4WjAYMRYwFAYD VQQDEw02ODIyOGQ0YS1mYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/T+D708PwmlTVpwu/G2VPds53Tw+DP8AEJ3pw/GwxGQNwCFaUYQ0UF4mmmKn S65vgq06uL0oziS4UvVyXEs00i4eAvpxhI9ppyTIYlqofB/y9lhwFJVc4uc2TTsy yY4aDQ4Qq1e2p9QNYtNoDRZeYusnFuDqscuUQnH2vRTeR2trg3JRENWwfNJ7Rp/4 U5/c26vI4k16L5cKn4m90Ufax3SEdPfksIU21atRy69JkgRVLKFXKjrlSf/ra3Ki erC/DKgsjAQsjt0kpattlbzcPK1znSAAV9mZq26XWjMi+yVjeOgWrOyuKNWBL2bJ pXwtMtdStQ9M9Rex4f5Bwe+4jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATbDhku 1D+1otoiosvX10T1N4FkMB8GA1UdIwQYMBaAFIjWr8648/iQJ0TWGmJoS5RZ28H2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1MC8xMTdDMjZFQTVE NkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1KQW5STllhWW1oTGxGbmJ3 ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lOYXZ6cmp6LUpBblJOWWFZbWhMbEZuYndmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1MC8xMTdDMjZFQTVENkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1K QW5STllhWW1oTGxGbmJ3ZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2iDpPA8Scbj42bQzWXw5IX44lJIIpWIXb5M3yIeGopNRr/41u1bDb gNktdwmOcsGrjaUCPjsLfZoUANEjmO1HSb7UlgCbmaalA1yHOQyKEFb3TRw90ezh 0/kOjuWKgVGdpAkY3SfH/xxbj/9EV6SNdx2ogP4W7WFjtvev2dXLzO79kg5cEi3h QQqxq3IlwJx0AUwV9EbvZebFy9i7kZmQVO8F5ndPA7oJ2snYkrxBuyVZFd/lKJwi 1CMJnOYMEWoZO1XTqhLSOlZ5cyi/84ouSVw3hq+3PFH7iaj9YLHl+5ERNK1U7UKo h+i0G7JFoSI1JSE3HXc4r04B0zAas669 -----END CERTIFICATE-----Generated at Tue May 13 19:35:45 2025 by rpki-client