$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json) Hash identifier: wduS2fiEUTixlREvJ3iK6UrZqbR0DXXIKHTA5A0ov5I= Subject key identifier: A4:B3:47:64:1C:BF:76:62:5F:24:F3:18:93:F4:AF:FA:8A:98:FC:E5 Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Certificate serial: 0740 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft Manifest number: 0737 Signing time: Thu 24 Apr 2025 21:31:59 +0000 Manifest this update: Thu 24 Apr 2025 21:31:58 +0000 Manifest next update: Thu 01 May 2025 21:31:58 +0000 Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: LjPmCOjwYniMA6qFgLjPEMwH7FLIKW5LWiO2t6jlKOs=) 2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: By6Dq5HHVlEkvf0nTtSM0kJMMOYfz+8LI2/AK8Ixb68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Validity Not Before: Apr 24 21:31:58 2025 GMT Not After : May 1 21:31:58 2025 GMT Subject: CN=680aadcf-7679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:89:9a:5a:34:fc:1a:79:ca:a8:27:e3:14: 01:95:1d:6f:2b:6f:fd:e5:88:6c:09:3b:ce:dd:52: 5e:e2:af:8a:cb:01:69:5d:9e:aa:93:da:44:f1:ba: 1e:a2:96:8c:ab:29:a4:af:dd:77:d2:90:79:30:a3: 5f:ea:1d:f9:f1:32:c7:7d:1c:59:0f:5f:06:e5:bd: d2:51:ba:29:a0:07:a4:40:47:82:b4:0a:2a:8a:2f: f9:f8:0d:2b:39:e4:47:41:b3:28:d0:3c:c2:cf:79: 75:39:bb:d0:2e:d2:a2:a8:de:78:11:c9:98:ce:9a: d4:06:48:b2:8e:42:88:21:cf:2c:56:64:f1:7a:f0: b9:88:c8:65:c7:ee:05:99:d0:a1:87:07:00:e8:f2: e8:6c:13:d1:fd:1d:4e:25:7a:9f:85:ff:72:9d:53: c3:1a:25:3d:73:cc:17:e6:af:c3:aa:a4:e0:24:85: 44:a4:69:00:10:d1:9b:14:88:58:7d:2e:f1:32:3a: 13:d2:df:da:2d:68:72:bf:e2:a9:b8:49:9c:84:25: 82:3d:f9:d2:6f:95:7b:91:c1:5a:54:11:76:02:7d: b6:0e:61:93:90:00:3e:54:77:2d:e3:0a:64:83:b3: 7f:ff:f9:e4:44:09:f0:d5:7a:3e:0d:af:ff:61:75: 17:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B3:47:64:1C:BF:76:62:5F:24:F3:18:93:F4:AF:FA:8A:98:FC:E5 X509v3 Authority Key Identifier: keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:47:1b:88:72:33:8e:23:88:61:43:01:fd:76:42:42:a7:dc: ff:a6:88:08:07:0a:10:03:cb:17:82:32:99:69:25:1a:fe:f6: f7:89:30:8a:a4:d9:00:04:50:9b:75:7f:70:ca:7a:1e:46:8c: 90:93:32:c4:a7:b6:a7:10:94:ac:cc:00:1a:ce:51:3c:be:54: 1c:04:05:7c:2d:07:e6:ec:8d:41:8e:db:dd:de:d9:d5:b6:22: 64:6e:74:12:52:1e:98:38:3e:70:f4:00:fb:95:96:b1:54:f3: af:72:58:95:4d:4e:e8:e7:19:e9:1d:18:79:1b:42:28:7c:50: 65:21:3c:db:08:ae:62:e7:08:a4:0a:40:93:94:21:81:46:98: dd:60:65:0d:62:c2:88:22:46:48:dd:97:14:1f:09:05:e1:9b: 93:84:ca:6f:c8:9d:6a:67:2a:94:63:7e:5b:4c:67:ba:b5:63: dc:19:c1:68:03:1e:83:03:16:85:db:d4:ec:4a:7f:b7:5f:bb: da:36:63:95:f2:99:0e:d5:b5:59:ab:b3:af:f4:30:53:88:62: 0c:7c:e2:32:81:53:72:cb:d2:24:3c:f1:94:77:04:17:42:32: 31:cd:61:9e:d0:d0:a7:c6:72:1c:44:5d:60:a7:29:b0:66:22: b7:ce:3b:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC RTU2OEY4QzEwHhcNMjUwNDI0MjEzMTU4WhcNMjUwNTAxMjEzMTU4WjAYMRYwFAYD VQQDEw02ODBhYWRjZi03Njc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iuJmlo0/Bp5yqgn4xQBlR1vK2/95YhsCTvO3VJe4q+KywFpXZ6qk9pE8boe opaMqymkr9130pB5MKNf6h358TLHfRxZD18G5b3SUbopoAekQEeCtAoqii/5+A0r OeRHQbMo0DzCz3l1ObvQLtKiqN54EcmYzprUBkiyjkKIIc8sVmTxevC5iMhlx+4F mdChhwcA6PLobBPR/R1OJXqfhf9ynVPDGiU9c8wX5q/DqqTgJIVEpGkAENGbFIhY fS7xMjoT0t/aLWhyv+KpuEmchCWCPfnSb5V7kcFaVBF2An22DmGTkAA+VHct4wpk g7N///nkRAnw1Xo+Da//YXUXywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSzR2Qc v3ZiXyTzGJP0r/qKmPzlMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4 QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR cnY3LWNZbS1XdkstVm8tTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWRxuIcjOOI4hhQwH9dkJCp9z/pogIBwoQA8sXgjKZaSUa/vb3iTCK pNkABFCbdX9wynoeRoyQkzLEp7anEJSszAAazlE8vlQcBAV8LQfm7I1Bjtvd3tnV tiJkbnQSUh6YOD5w9AD7lZaxVPOvcliVTU7o5xnpHRh5G0IofFBlITzbCK5i5wik CkCTlCGBRpjdYGUNYsKIIkZI3ZcUHwkF4ZuThMpvyJ1qZyqUY35bTGe6tWPcGcFo Ax6DAxaF29TsSn+3X7vaNmOV8pkO1bVZq7Ov9DBTiGIMfOIygVNyy9IkPPGUdwQX QjIxzWGe0NCnxnIcRF1gpymwZiK3zjvD -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:24 2025 by rpki-client