$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: Qqf027zciYria8jjVL5P17d1myTFekcURDG5FfLS3FU= Subject key identifier: D7:8C:FE:90:C7:26:1F:7D:B3:4C:19:50:A9:5E:8E:7F:5A:6F:17:6C Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 014A Signing time: Fri 25 Apr 2025 03:20:06 +0000 Manifest this update: Fri 25 Apr 2025 03:20:06 +0000 Manifest next update: Fri 02 May 2025 03:20:06 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: cAKawl/9KRaEzSn1Yp959Mb6dfxM0vVV8lhKDa4emZs=) 2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: yzdUtvoOpzor1zChNyVQLX9zMFFRymcsnAxEoBSEx/I=) 3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: elBvqhAcW8Rp8ZvDkT2Cm7/DYxXxieb+iqtVjsWGJcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Apr 25 03:20:06 2025 GMT Not After : May 2 03:20:06 2025 GMT Subject: CN=680aff66-9289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:3d:62:e1:32:e8:dc:96:fa:17:63:27:a4: 94:ea:6b:91:50:eb:03:4a:97:98:06:0a:b5:62:60: f3:99:03:0c:67:94:8f:e7:2b:36:f5:df:fb:fb:b8: f1:d0:81:bf:33:4e:f7:f1:4b:f6:c1:84:7f:90:a2: 3e:87:67:59:81:03:23:7a:b4:1e:6c:60:0c:56:f9: 69:71:e9:1f:0a:fc:77:09:98:74:5f:80:c2:86:1f: 85:1d:f4:0e:e8:d8:1d:5f:04:72:91:d8:25:ab:d6: 7a:26:88:a0:d6:41:e4:90:d6:4d:c3:ab:74:4b:b0: cd:d7:12:55:cb:4d:ec:72:30:f6:df:41:72:2f:4c: f3:86:42:36:0c:dd:3b:06:5c:75:c1:41:7c:51:de: c8:8a:26:7e:cd:54:12:06:a7:10:74:a5:08:26:0c: 50:2f:9f:6f:2e:ed:97:02:75:82:28:0e:d5:9d:cd: f3:86:f9:cb:bf:f9:66:a7:15:f5:d9:a1:aa:69:ba: 84:2b:28:83:0a:5e:88:9c:a0:86:cb:10:20:09:31: 84:77:4a:39:09:d8:fd:ff:a0:2b:63:eb:98:e3:99: 45:83:be:03:cc:08:d0:62:a4:d1:6c:f1:fa:7b:ec: 71:0a:66:f9:ad:a6:5d:bf:b3:b2:ac:e5:3c:2f:ce: a0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8C:FE:90:C7:26:1F:7D:B3:4C:19:50:A9:5E:8E:7F:5A:6F:17:6C X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:09:81:6e:d1:f0:80:a8:f2:49:fe:d7:fc:83:9a:ca:34:fd: cb:81:17:5f:e2:ae:20:e6:10:b6:61:e5:e0:ec:b4:97:1c:5b: db:33:2e:46:17:94:aa:e7:72:eb:39:52:ce:88:21:30:c5:a7: 59:9f:ba:52:62:1a:66:25:40:72:d4:a2:98:45:91:f4:31:0b: 9c:6f:ec:04:e3:91:cc:5d:1b:9f:80:b2:bd:04:74:b8:ad:ec: 1c:53:4d:8f:55:2a:f3:94:92:f6:03:a4:65:de:34:74:98:59: e0:b3:4c:6f:83:1f:26:f1:8f:27:25:68:b8:f2:25:1b:27:3d: bd:ff:83:92:04:01:71:fa:b1:d9:7c:52:1d:9c:f7:70:3c:86: e2:58:70:cd:54:2c:89:e0:d9:f2:8b:a9:ab:87:77:94:91:00: 38:2e:33:7d:82:2a:26:46:20:06:ff:ff:31:ce:23:d7:82:ca: b7:52:cd:ce:9f:f0:f1:45:bf:69:2d:71:e6:8f:57:af:95:f3: d1:06:34:f2:2c:0b:00:20:43:c8:3a:e7:d0:78:19:35:df:84: 8a:e4:a2:e9:e3:c6:cb:41:5e:71:d2:03:0f:72:ad:c0:7b:79: 0d:92:cc:a2:ec:f3:3f:6b:ff:c9:b2:53:17:70:81:b4:c4:9d: a4:61:36:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjUwNDI1MDMyMDA2WhcNMjUwNTAyMDMyMDA2WjAYMRYwFAYD VQQDEw02ODBhZmY2Ni05Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtI9YuEy6NyW+hdjJ6SU6muRUOsDSpeYBgq1YmDzmQMMZ5SP5ys29d/7+7jx 0IG/M0738Uv2wYR/kKI+h2dZgQMjerQebGAMVvlpcekfCvx3CZh0X4DChh+FHfQO 6NgdXwRykdglq9Z6Joig1kHkkNZNw6t0S7DN1xJVy03scjD230FyL0zzhkI2DN07 Blx1wUF8Ud7IiiZ+zVQSBqcQdKUIJgxQL59vLu2XAnWCKA7Vnc3zhvnLv/lmpxX1 2aGqabqEKyiDCl6InKCGyxAgCTGEd0o5Cdj9/6ArY+uY45lFg74DzAjQYqTRbPH6 e+xxCmb5raZdv7OyrOU8L86g6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeM/pDH Jh99s0wZUKlejn9abxdsMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9CYFu0fCAqPJJ/tf8g5rKNP3LgRdf4q4g5hC2YeXg7LSXHFvbMy5G F5Sq53LrOVLOiCEwxadZn7pSYhpmJUBy1KKYRZH0MQucb+wE45HMXRufgLK9BHS4 rewcU02PVSrzlJL2A6Rl3jR0mFngs0xvgx8m8Y8nJWi48iUbJz29/4OSBAFx+rHZ fFIdnPdwPIbiWHDNVCyJ4Nnyi6mrh3eUkQA4LjN9giomRiAG//8xziPXgsq3Us3O n/DxRb9pLXHmj1evlfPRBjTyLAsAIEPIOufQeBk134SK5KLp48bLQV5x0gMPcq3A e3kNksyi7PM/a//JslMXcIG0xJ2kYTYg -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:40 2025 by rpki-client