$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft File: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json) Hash identifier: 7LL8i88buVce38avW1tZpK60A1uOHy7fDu4JWFSGioY= Subject key identifier: B3:43:D8:33:E5:16:AA:42:BC:6E:8A:F1:52:C8:B2:DB:01:0D:5E:31 Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E Certificate issuer: /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft Manifest number: 019D Signing time: Fri 25 Apr 2025 02:30:38 +0000 Manifest this update: Fri 25 Apr 2025 02:30:38 +0000 Manifest next update: Fri 02 May 2025 02:30:38 +0000 Files and hashes: 1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: 4utkXRnVpchZ4Yds0F8rCQU/+HAnslq3IlTgm5TOvLU=) 2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: n8o3xnaflWVbOqkp6JntoRCYSrJ8NdzSSuqGUsQkMzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142091, serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Validity Not Before: Apr 25 02:30:38 2025 GMT Not After : May 2 02:30:38 2025 GMT Subject: CN=680af3ce-cce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1d:db:04:1e:03:04:fc:a1:40:5a:5b:86:1b: 18:d6:66:e3:b2:e4:67:63:53:71:64:c7:b3:eb:8f: fa:fa:0d:03:d9:64:d0:8e:c4:db:69:38:f5:51:4b: 66:d0:35:41:1c:a4:49:01:26:57:7f:ec:db:1a:24: b3:1d:5a:51:70:a5:7b:40:e3:f8:2b:91:83:a8:af: 6c:c0:2d:26:28:f9:80:6d:47:3e:95:1d:ea:c0:c1: 46:d0:c6:27:3d:fc:7a:8b:15:56:97:1f:24:b2:25: e8:ae:49:3b:e7:6e:38:ad:6c:cc:92:f3:5a:6a:97: ac:49:a6:21:b4:a1:bc:15:d2:ca:2e:2b:ad:4f:3e: a2:63:3d:cf:b3:f9:1d:ab:c5:1b:8e:fe:96:77:01: e5:fa:5e:6c:99:f1:a3:2f:5b:f1:60:11:84:19:c7: 3e:bf:5e:5f:35:8c:6c:f4:f5:43:2f:5d:0d:bc:7b: 65:df:96:bd:ac:28:c1:20:f2:4a:ab:dd:80:8e:ed: 7f:65:9a:da:65:4b:04:76:26:13:f2:bf:fd:39:2b: da:3a:c7:35:f2:1c:0b:15:eb:6d:92:09:20:26:df: 05:ad:80:5f:a6:15:72:7a:04:f0:5c:ab:56:c2:0a: c2:70:6e:51:55:53:f0:67:cb:37:eb:d4:92:23:44: 0d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:43:D8:33:E5:16:AA:42:BC:6E:8A:F1:52:C8:B2:DB:01:0D:5E:31 X509v3 Authority Key Identifier: keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c6:a9:ba:e3:f2:e4:45:53:21:cc:1d:81:ab:8f:4e:09:3b: 4d:84:b9:df:25:ad:39:9d:62:67:b4:b1:4b:d9:b3:58:7a:34: ef:ce:d7:9c:ce:f7:f7:bf:a7:41:f7:20:0c:32:8f:03:d2:c0: 57:7e:73:5c:a7:2f:b8:7c:76:72:2a:c4:22:1e:66:3b:dc:22: c1:8a:9e:84:22:48:90:c3:50:d3:45:4d:8d:e4:8d:93:1b:e6: 8d:34:e7:fc:91:4b:49:9a:dd:ba:25:ed:54:64:1d:a0:57:ea: 9b:92:a1:c2:2c:c3:72:2f:60:71:2d:ba:55:84:e3:c4:c7:6f: b3:a8:69:a9:29:d1:68:c1:79:ab:b6:04:02:f0:be:e2:33:70: 4f:bd:34:8c:18:8f:4b:a7:2b:c2:ce:9e:fc:a7:9f:c5:f8:94: a1:25:5f:c3:05:21:89:4e:14:f3:a6:35:bb:33:af:d6:c5:d3: 27:76:40:db:59:f8:32:db:bd:0d:d0:68:cb:60:29:da:68:1e: c9:6a:a0:3e:e0:60:db:aa:7a:7d:3a:b5:0d:45:9d:63:3d:99: a8:af:14:c7:c0:34:4d:e0:0e:ea:f2:a4:ce:91:0a:16:2a:f2: a9:92:26:ab:b0:3a:d2:99:13:9b:9b:d7:91:31:4e:11:48:19: 4d:37:8f:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwOTExMTAvBgNVBAUTKEUwODgxM0JEMTg4Q0RDMkFCRjUwMThERTZGRTM3RjQ0 Mzc0NzIwOEUwHhcNMjUwNDI1MDIzMDM4WhcNMjUwNTAyMDIzMDM4WjAYMRYwFAYD VQQDEw02ODBhZjNjZS1jY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmx3bBB4DBPyhQFpbhhsY1mbjsuRnY1NxZMez64/6+g0D2WTQjsTbaTj1UUtm 0DVBHKRJASZXf+zbGiSzHVpRcKV7QOP4K5GDqK9swC0mKPmAbUc+lR3qwMFG0MYn Pfx6ixVWlx8ksiXorkk75244rWzMkvNaapesSaYhtKG8FdLKLiutTz6iYz3Ps/kd q8Ubjv6WdwHl+l5smfGjL1vxYBGEGcc+v15fNYxs9PVDL10NvHtl35a9rCjBIPJK q92Aju1/ZZraZUsEdiYT8r/9OSvaOsc18hwLFettkgkgJt8FrYBfphVyegTwXKtW wgrCcG5RVVPwZ8s369SSI0QNIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLND2DPl FqpCvG6K8VLIstsBDV4xMB8GA1UdIwQYMBaAFOCIE70YjNwqv1AY3m/jf0Q3RyCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjA5MS9BQkM0RDQ0NEFC NTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTNDcV9VQmplYi1OX1JEZEhJ STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJZ1R2UmlNM0NxX1VCamViLU5fUkRkSElJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjA5MS9BQkM0RDQ0NEFCNTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTND cV9VQmplYi1OX1JEZEhJSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfxqm64/LkRVMhzB2Bq49OCTtNhLnfJa05nWJntLFL2bNYejTvztec zvf3v6dB9yAMMo8D0sBXfnNcpy+4fHZyKsQiHmY73CLBip6EIkiQw1DTRU2N5I2T G+aNNOf8kUtJmt26Je1UZB2gV+qbkqHCLMNyL2BxLbpVhOPEx2+zqGmpKdFowXmr tgQC8L7iM3BPvTSMGI9LpyvCzp78p5/F+JShJV/DBSGJThTzpjW7M6/WxdMndkDb Wfgy270N0GjLYCnaaB7JaqA+4GDbqnp9OrUNRZ1jPZmorxTHwDRN4A7q8qTOkQoW KvKpkiarsDrSmRObm9eRMU4RSBlNN4/k -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:50 2025 by rpki-client