$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: ehLFnIafxkpWrGHZAVIIYgKTcsHUYRDYx/2ig92EPqo= Subject key identifier: 40:EE:4E:25:45:7E:FA:FC:B0:11:3D:90:74:8F:8E:04:28:01:3D:7E Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 01C8 Signing time: Fri 25 Apr 2025 02:12:45 +0000 Manifest this update: Fri 25 Apr 2025 02:12:45 +0000 Manifest next update: Fri 02 May 2025 02:12:45 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: R9Ng5Kn2+SXRPWdwEDFTqIjL8ljsskqMWql+eXggFs4=) 2: 089F5864771611EE908B571BC4F9AE02.roa (hash: +ywFK7qPgtSz0tT8/ynJt1rLpjtVXaMcBVj/NUkbZE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: Apr 25 02:12:45 2025 GMT Not After : May 2 02:12:45 2025 GMT Subject: CN=680aef9d-5218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:13:f3:dd:d7:b3:38:cb:4b:89:6a:e6:1a: d8:9f:2b:4f:69:c4:2a:f3:57:0b:5d:f1:15:c1:ef: 04:45:a4:6c:c0:2f:50:58:56:d2:e6:11:78:52:49: 37:5b:8f:34:1f:7f:79:83:12:fa:81:99:8a:90:5d: ec:b7:4f:97:f0:85:7b:28:28:32:de:28:6d:4f:c7: 53:2c:93:1b:e4:28:a1:18:6f:0a:32:8d:c4:9b:c9: 77:12:5f:f4:54:96:7e:79:e8:f0:b8:a4:8c:e1:84: b9:0c:51:ef:91:c6:b8:d7:27:73:df:5a:3f:38:e8: dc:f1:b2:c2:f2:30:f2:68:5a:d3:6b:0b:b9:e7:a8: f6:ff:d3:b0:97:01:44:01:50:39:68:b0:3f:ee:7d: 68:5a:20:ae:d9:3f:7c:ad:71:f0:26:17:44:26:a0: 43:35:6b:d7:fe:d9:21:12:ae:4b:18:7b:e3:38:d6: 60:bf:f2:45:4e:55:31:3d:28:6c:e4:99:a7:1f:5b: 04:f8:ea:0d:01:99:43:af:5f:32:c8:00:65:4a:67: ee:48:e5:b2:22:3d:c1:a8:49:79:64:a2:05:4c:bb: 1c:34:22:04:92:30:dd:ea:89:20:ce:e1:fe:4a:1e: 20:f3:37:c6:0b:6f:01:2d:ce:79:ad:d7:25:d3:30: b0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EE:4E:25:45:7E:FA:FC:B0:11:3D:90:74:8F:8E:04:28:01:3D:7E X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:32:ea:4e:ea:62:e0:67:37:b6:90:ca:a2:92:56:40:ec:36: 4d:7d:86:17:e3:c7:06:25:25:aa:15:23:2a:91:9e:d5:6a:55: 1d:61:db:bd:bf:a7:27:73:7b:ce:04:1a:5d:79:47:e9:c7:af: 34:f4:f5:22:db:c2:05:d9:f4:e2:b5:f0:9e:02:1a:f2:16:63: 60:a7:93:7b:83:c5:56:e3:f8:2c:16:82:ff:d3:e0:fb:3e:92: 78:9b:d7:7c:6f:43:e7:7b:37:e0:7c:78:ce:a6:8c:38:5f:65: 60:63:82:84:a4:8c:bf:d1:dd:1b:8c:6c:33:26:84:fd:eb:bb: 32:06:93:12:da:8e:93:91:87:7a:ba:26:9d:eb:11:89:a6:3b: 3c:47:ed:b4:b4:af:e4:94:cb:f8:63:20:32:2d:11:80:fa:3a: 3f:5f:a3:31:13:28:85:bd:ab:bc:a7:0f:c1:be:21:5c:87:18: 59:c8:e3:e4:3c:90:53:79:64:66:fe:ba:3f:39:31:44:8a:94: 8f:3c:bf:9a:d9:a1:0f:14:1e:54:7c:17:17:e9:b1:2c:78:80: 13:69:a5:8f:a1:11:12:b3:2c:3e:53:3e:c4:01:48:1f:fa:55: 42:9d:e7:5a:55:93:17:16:8a:db:69:22:40:21:cf:71:f4:07: 78:1c:58:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjUwNDI1MDIxMjQ1WhcNMjUwNTAyMDIxMjQ1WjAYMRYwFAYD VQQDEw02ODBhZWY5ZC01MjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApowT893XszjLS4lq5hrYnytPacQq81cLXfEVwe8ERaRswC9QWFbS5hF4Ukk3 W480H395gxL6gZmKkF3st0+X8IV7KCgy3ihtT8dTLJMb5CihGG8KMo3Em8l3El/0 VJZ+eejwuKSM4YS5DFHvkca41ydz31o/OOjc8bLC8jDyaFrTawu556j2/9OwlwFE AVA5aLA/7n1oWiCu2T98rXHwJhdEJqBDNWvX/tkhEq5LGHvjONZgv/JFTlUxPShs 5JmnH1sE+OoNAZlDr18yyABlSmfuSOWyIj3BqEl5ZKIFTLscNCIEkjDd6okgzuH+ Sh4g8zfGC28BLc55rdcl0zCw8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDuTiVF fvr8sBE9kHSPjgQoAT1+MB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrMupO6mLgZze2kMqiklZA7DZNfYYX48cGJSWqFSMqkZ7ValUdYdu9 v6cnc3vOBBpdeUfpx6809PUi28IF2fTitfCeAhryFmNgp5N7g8VW4/gsFoL/0+D7 PpJ4m9d8b0PnezfgfHjOpow4X2VgY4KEpIy/0d0bjGwzJoT967syBpMS2o6TkYd6 uiad6xGJpjs8R+20tK/klMv4YyAyLRGA+jo/X6MxEyiFvau8pw/BviFchxhZyOPk PJBTeWRm/ro/OTFEipSPPL+a2aEPFB5UfBcX6bEseIATaaWPoRESsyw+Uz7EAUgf +lVCnedaVZMXForbaSJAIc9x9Ad4HFiy -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:59 2025 by rpki-client