$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft File: IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json) Hash identifier: 851CsRFP5j+1DGhnpgkJnJ5skp0wkU1rWbPWPZphmZY= Subject key identifier: B1:29:FD:DB:46:56:89:7C:C8:67:0E:50:06:BB:3A:17:C9:F9:B3:4C Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft Manifest number: 04A6 Signing time: Wed 14 May 2025 23:59:35 +0000 Manifest this update: Wed 14 May 2025 23:59:34 +0000 Manifest next update: Wed 21 May 2025 23:59:34 +0000 Files and hashes: 1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: qgguJzLcILswJs7cqE4PS8J6faluZL+qiwlRihPepWQ=) 2: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: 3A9tL/jcYlpnzHxxWTOseLkNdsbJRJrgjlY1s6ebsbQ=) 3: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: GWx3OJd1vwjGtC5zPk/EszjxixEUkMuQ8v31OyEYOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E Validity Not Before: May 14 23:59:34 2025 GMT Not After : May 21 23:59:34 2025 GMT Subject: CN=68252e66-d77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b6:75:4e:f2:b1:2b:83:67:e3:51:12:bc:9b: 08:dc:a7:67:3e:56:4b:15:0c:4d:35:1e:09:84:5a: 8d:61:ed:2f:ab:62:d2:97:99:3a:94:b3:ad:12:86: cc:a8:3c:7b:30:ff:79:b1:bb:71:70:7a:61:1d:bc: fb:9f:60:25:7f:81:65:2f:a0:c1:06:8a:50:bc:d4: 2f:3a:98:fb:ce:56:e7:d6:80:97:5d:66:4f:b0:75: e1:29:4a:54:ed:3f:62:3c:51:96:0e:f2:e0:2e:7f: 59:b3:56:23:7a:3f:d0:90:f8:c5:bc:ce:ce:38:db: 61:83:72:16:91:f5:24:2d:e7:08:99:81:26:08:48: 50:88:58:ab:ea:a0:bb:f3:5d:00:f2:36:dd:55:db: ff:d2:78:2b:09:bd:dc:57:41:6b:80:3f:70:83:a2: 6d:ec:61:fc:88:71:6b:d4:ae:5c:88:c8:b0:75:c9: 32:98:5a:93:f6:13:6f:c8:a4:b6:de:d7:9a:f1:a2: a1:37:63:6b:99:99:f6:04:1b:bc:92:56:13:37:22: 36:77:27:d5:5d:2b:94:22:a6:13:fa:11:66:ec:15: e4:1c:b2:12:ad:2d:d2:52:43:54:11:e8:60:d6:18: c1:9d:40:83:f4:b1:cc:70:42:07:93:f6:86:76:0f: 41:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:29:FD:DB:46:56:89:7C:C8:67:0E:50:06:BB:3A:17:C9:F9:B3:4C X509v3 Authority Key Identifier: keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f9:28:87:6e:92:72:7c:82:e0:ff:60:5e:56:0d:ce:95:0d: 6d:6b:4b:9c:d5:f8:10:f8:43:23:90:0d:b3:98:fe:eb:74:d4: d2:b5:44:f7:6c:4d:7f:27:26:a0:60:48:e8:35:1e:89:04:6d: 5a:59:85:97:2b:0c:45:d2:68:67:8c:4d:90:63:cd:83:73:0d: b1:dc:d6:f6:ab:9c:97:7f:a6:b1:94:be:a6:a4:18:07:83:99: f7:16:57:2f:ff:a5:04:de:db:cd:f1:07:8d:ab:21:49:70:82: e9:c1:99:8c:3c:be:79:b0:2d:bd:3e:94:cb:98:dd:f3:c9:21: b5:c3:8b:e4:80:43:b0:6b:eb:03:ce:c1:af:65:51:c1:01:31: f7:5c:85:13:2c:6f:bb:26:3f:41:89:e5:2f:29:35:fe:58:b4: e0:00:54:78:59:1c:fd:5b:d3:a1:fc:9a:ae:fc:90:b1:d9:55: 0e:ad:9f:82:2d:63:14:c3:b7:4d:1b:58:2e:e0:77:c0:87:dd: 99:bf:a1:26:38:b7:18:9d:a0:47:20:d1:fb:81:e0:cb:f2:a4: 8f:29:a9:10:a8:a1:fd:36:27:57:56:56:b1:db:2a:22:a0:86: d2:dc:1f:8d:21:ce:76:ea:7d:a9:fd:dc:ab:1a:29:9b:9b:d3: e1:a2:89:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1NTkxMTAvBgNVBAUTKDIxQTc2RjNCQjgxNkNGRkU3QzQ2NjU1NUMyQjBCRUJD OUM3QkM1NkUwHhcNMjUwNTE0MjM1OTM0WhcNMjUwNTIxMjM1OTM0WjAYMRYwFAYD VQQDEw02ODI1MmU2Ni1kNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LZ1TvKxK4Nn41ESvJsI3KdnPlZLFQxNNR4JhFqNYe0vq2LSl5k6lLOtEobM qDx7MP95sbtxcHphHbz7n2Alf4FlL6DBBopQvNQvOpj7zlbn1oCXXWZPsHXhKUpU 7T9iPFGWDvLgLn9Zs1Yjej/QkPjFvM7OONthg3IWkfUkLecImYEmCEhQiFir6qC7 810A8jbdVdv/0ngrCb3cV0FrgD9wg6Jt7GH8iHFr1K5ciMiwdckymFqT9hNvyKS2 3tea8aKhN2NrmZn2BBu8klYTNyI2dyfVXSuUIqYT+hFm7BXkHLISrS3SUkNUEehg 1hjBnUCD9LHMcEIHk/aGdg9BWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEp/dtG Vol8yGcOUAa7OhfJ+bNMMB8GA1UdIwQYMBaAFCGnbzu4Fs/+fEZlVcKwvryce8Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTU1OS9BQUMzNEY0NjMw QzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pfNThSbVZWd3JDLXZKeDd4 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhZHZPN2dXel81OFJtVlZ3ckMtdkp4N3hXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTU1OS9BQUMzNEY0NjMwQzQxMUVDOTlGMkY2NkNDNEY5QUUwMi9JYWR2TzdnV3pf NThSbVZWd3JDLXZKeDd4VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5+SiHbpJyfILg/2BeVg3OlQ1ta0uc1fgQ+EMjkA2zmP7rdNTStUT3 bE1/JyagYEjoNR6JBG1aWYWXKwxF0mhnjE2QY82Dcw2x3Nb2q5yXf6axlL6mpBgH g5n3Flcv/6UE3tvN8QeNqyFJcILpwZmMPL55sC29PpTLmN3zySG1w4vkgEOwa+sD zsGvZVHBATH3XIUTLG+7Jj9BieUvKTX+WLTgAFR4WRz9W9Oh/Jqu/JCx2VUOrZ+C LWMUw7dNG1gu4HfAh92Zv6EmOLcYnaBHINH7geDL8qSPKakQqKH9NidXVlax2yoi oIbS3B+NIc526n2p/dyrGimbm9PhoonU -----END CERTIFICATE-----Generated at Thu May 15 13:41:49 2025 by rpki-client