$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: g1iz0USZJMTBLKFuOWTf6gOw/RphyM5muLvTVDBjvqE= Subject key identifier: 46:B6:AA:8E:16:C1:70:33:12:41:52:38:D9:6F:86:D7:09:3A:E3:7D Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 07A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 0796 Signing time: Thu 24 Apr 2025 21:07:27 +0000 Manifest this update: Thu 24 Apr 2025 21:07:26 +0000 Manifest next update: Thu 01 May 2025 21:07:26 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: TCuQEAewZ/troAe2ii/cacjqGM3mMtf3f16WSbC6x8I=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: nebZkphHnCGcHsK4OPuyoN2DWSVg+M+V/082vsrCEns=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: tXMl2RtLfZvDGfhyJ5diezkCwv50p552Np4xQThv520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Apr 24 21:07:26 2025 GMT Not After : May 1 21:07:26 2025 GMT Subject: CN=680aa80e-e19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:8c:fd:97:aa:e1:83:fc:95:cf:67:fe:30: 98:2e:ee:60:9e:60:18:9e:02:04:50:00:33:54:9e: e5:f5:28:30:cb:8d:67:a4:7e:04:9c:9f:e5:4f:bc: dc:ee:95:d8:28:e0:86:ce:cb:55:74:70:00:b9:e6: f8:03:44:de:03:25:12:06:1d:ea:c9:35:c7:f5:fc: 43:95:16:79:cb:76:a8:40:d4:d6:b6:d4:32:2d:9f: f1:79:07:65:fd:42:ef:16:5b:cf:ab:04:64:42:78: f2:ae:82:04:a5:55:db:a8:3c:e1:fb:20:c7:3a:98: 4a:62:ff:62:1c:75:99:10:ed:c3:75:42:36:85:70: 1e:d1:f0:9f:69:10:3b:e2:00:74:f1:6e:9a:56:fc: 31:f7:4b:ed:f0:7c:47:2b:d1:6d:be:44:0f:13:c2: 2d:bd:2c:d1:d5:a2:b4:2e:dd:57:26:cb:87:65:8e: 91:4b:4f:5d:dc:5c:57:a8:23:1b:70:a8:7b:2f:2f: 7f:23:53:aa:12:08:6e:cf:4d:6b:48:43:f3:b5:5c: bd:48:8a:f2:10:3d:a2:c7:e8:5d:da:d0:87:4c:f2: c7:e7:0c:26:d6:a3:c6:56:1f:c0:09:f5:ec:08:a0: 17:67:ed:4a:0b:6b:e3:fb:6b:67:be:e0:69:26:83: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B6:AA:8E:16:C1:70:33:12:41:52:38:D9:6F:86:D7:09:3A:E3:7D X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:30:bf:e0:72:4a:11:78:eb:ec:20:60:2b:c3:58:33:59:c1: 0d:1e:91:6c:cf:47:33:2c:bb:3a:5c:fc:b7:f8:c9:01:da:e9: 70:06:d3:90:ff:6c:36:36:bc:e9:10:03:a7:46:86:1e:42:94: 13:74:cc:60:8d:7c:00:89:7a:ab:ed:2d:42:67:f7:24:ca:27: c8:2f:e4:95:96:a1:f3:01:07:34:7b:94:f0:b3:1d:c2:8f:55: 74:32:39:4b:37:fd:40:86:cf:67:b0:2c:33:5a:e7:ae:86:3d: 77:44:23:a9:8c:c8:0f:0b:e3:2a:fc:cd:31:e6:72:78:3b:fc: 5f:ea:8f:8d:d0:77:59:bd:27:bd:da:0c:8f:bc:54:a8:35:47: 17:05:44:7b:f2:bd:a7:e5:8d:f7:a3:3f:fd:e0:d1:8a:98:79: 12:17:d8:77:d2:a2:99:70:b8:b4:84:d6:6b:46:f5:4a:d9:53: ef:d2:59:86:1e:49:26:57:47:d5:68:3b:e5:1f:e9:3d:5a:f0: 70:51:59:16:48:b4:ab:d0:28:78:a5:42:3e:db:6b:58:8a:9f: 2b:f0:92:d7:b4:f5:43:0e:9b:c7:c9:e0:9d:46:13:ac:ca:06: 40:58:86:34:0b:70:d0:38:1a:05:8b:83:d6:c6:07:27:1f:1d: 49:22:98:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjUwNDI0MjEwNzI2WhcNMjUwNTAxMjEwNzI2WjAYMRYwFAYD VQQDEw02ODBhYTgwZS1lMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycOM/Zeq4YP8lc9n/jCYLu5gnmAYngIEUAAzVJ7l9Sgwy41npH4EnJ/lT7zc 7pXYKOCGzstVdHAAueb4A0TeAyUSBh3qyTXH9fxDlRZ5y3aoQNTWttQyLZ/xeQdl /ULvFlvPqwRkQnjyroIEpVXbqDzh+yDHOphKYv9iHHWZEO3DdUI2hXAe0fCfaRA7 4gB08W6aVvwx90vt8HxHK9FtvkQPE8ItvSzR1aK0Lt1XJsuHZY6RS09d3FxXqCMb cKh7Ly9/I1OqEghuz01rSEPztVy9SIryED2ix+hd2tCHTPLH5wwm1qPGVh/ACfXs CKAXZ+1KC2vj+2tnvuBpJoO7YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEa2qo4W wXAzEkFSONlvhtcJOuN9MB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEML/gckoReOvsIGArw1gzWcENHpFsz0czLLs6XPy3+MkB2ulwBtOQ /2w2NrzpEAOnRoYeQpQTdMxgjXwAiXqr7S1CZ/ckyifIL+SVlqHzAQc0e5Twsx3C j1V0MjlLN/1Ahs9nsCwzWueuhj13RCOpjMgPC+Mq/M0x5nJ4O/xf6o+N0HdZvSe9 2gyPvFSoNUcXBUR78r2n5Y33oz/94NGKmHkSF9h30qKZcLi0hNZrRvVK2VPv0lmG HkkmV0fVaDvlH+k9WvBwUVkWSLSr0Ch4pUI+22tYip8r8JLXtPVDDpvHyeCdRhOs ygZAWIY0C3DQOBoFi4PWxgcnHx1JIpgo -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:56 2025 by rpki-client