$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: TjNN3u6pwfv9zDs1ZWHNmBOSfA0xZTIlz4z8485Z1t8= Subject key identifier: 13:CE:E5:17:AD:88:02:1F:20:04:8A:C8:BD:42:DE:61:62:BF:72:28 Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 0262 Signing time: Fri 25 Apr 2025 01:32:52 +0000 Manifest this update: Fri 25 Apr 2025 01:32:52 +0000 Manifest next update: Fri 02 May 2025 01:32:52 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: 8SoW1aN2qNZ9oBZTjyXio9ORzOOLa4H3p2h+jJPYsHo=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: GG/AMsbpEzm/NFjGRgk+JWg1MGNbtO4+De0JwZLDbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Apr 25 01:32:52 2025 GMT Not After : May 2 01:32:52 2025 GMT Subject: CN=680ae644-0dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:45:d6:72:7e:51:8d:7c:c3:f3:b6:00:95:b9: 3e:23:a1:7c:f9:59:66:a1:5a:bf:3f:eb:01:55:25: 62:87:08:c7:92:16:24:9e:b3:a0:e2:f9:1b:85:c0: 4f:73:19:9c:92:b9:7d:23:00:4a:c4:ba:ec:2f:6d: 06:22:d8:f7:f3:40:c3:ec:94:26:48:98:bc:8c:2e: a1:68:12:1f:30:9d:78:23:92:b1:10:77:c6:bf:e4: b3:7c:68:cc:88:2d:d3:5a:0a:07:c8:c1:43:bf:fb: b0:74:a3:d7:fe:41:b2:aa:cf:7d:0d:48:4e:a5:01: 7e:65:66:75:29:be:c7:f0:b3:2c:fa:dc:a4:12:55: ec:ff:f1:b4:ea:33:44:d7:61:19:ce:24:7e:55:5c: 92:5c:14:d7:95:c4:ce:d7:7f:40:49:bb:33:9f:8b: c8:2e:79:e3:83:21:52:ba:80:1e:1e:41:33:a1:a5: 1b:c9:53:75:c2:1c:54:0b:a3:08:29:77:0e:f7:40: 3c:e9:0e:f4:e8:25:f2:df:81:52:8f:47:00:ce:2c: 8d:cb:ef:44:39:35:e2:c1:40:19:77:f6:9a:a8:ca: 51:21:97:c7:4e:5f:71:0b:74:7c:87:a4:8b:67:3d: 12:e5:b0:ff:cc:c5:0a:83:c7:ab:9b:2d:2b:71:66: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CE:E5:17:AD:88:02:1F:20:04:8A:C8:BD:42:DE:61:62:BF:72:28 X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:17:e5:a8:ba:af:07:27:49:ac:e5:0c:03:11:97:c2:e0:6a: 7c:81:eb:b0:2b:3f:89:a0:d0:9b:37:a9:94:59:d7:58:6b:b8: 82:5c:01:26:ea:b4:6f:b9:1c:3b:cf:76:cf:99:2d:17:f4:21: d4:68:4b:1d:a6:75:ce:a7:01:0d:94:a8:6a:94:f0:fc:6d:a5: 94:69:8f:f4:28:8c:b7:ea:9a:54:e2:05:1b:81:4d:9a:15:ab: e2:c1:74:1e:c2:14:57:b7:0e:64:a1:60:b3:6e:1e:ca:39:17: 84:70:3b:b5:1f:4e:87:0c:ff:74:e2:74:db:e8:3c:d8:fa:20: 02:3f:ee:16:6a:d4:1c:08:59:9c:97:e6:5c:d5:56:9c:67:eb: b9:b8:d5:7a:cc:86:53:26:13:88:89:08:2d:20:5a:54:a3:1b: ba:c6:26:da:02:41:36:bb:7a:c5:19:3d:e3:2a:a7:e5:47:01: a8:d1:9e:f7:16:0a:9d:21:24:19:31:a7:c4:d5:93:6d:6d:50: a3:64:35:5e:c0:10:bc:34:46:5d:b9:30:84:f9:d9:95:3c:5c: f8:05:9a:57:de:dd:0a:25:cb:38:14:9b:45:80:1e:c2:ee:90: 09:29:a8:0a:47:2b:0f:26:8f:2f:40:84:5e:40:ea:de:6e:7a: dc:a0:af:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjUwNDI1MDEzMjUyWhcNMjUwNTAyMDEzMjUyWjAYMRYwFAYD VQQDEw02ODBhZTY0NC0wZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80XWcn5RjXzD87YAlbk+I6F8+VlmoVq/P+sBVSVihwjHkhYknrOg4vkbhcBP cxmckrl9IwBKxLrsL20GItj380DD7JQmSJi8jC6haBIfMJ14I5KxEHfGv+SzfGjM iC3TWgoHyMFDv/uwdKPX/kGyqs99DUhOpQF+ZWZ1Kb7H8LMs+tykElXs//G06jNE 12EZziR+VVySXBTXlcTO139ASbszn4vILnnjgyFSuoAeHkEzoaUbyVN1whxUC6MI KXcO90A86Q706CXy34FSj0cAziyNy+9EOTXiwUAZd/aaqMpRIZfHTl9xC3R8h6SL Zz0S5bD/zMUKg8ermy0rcWYL9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPO5Ret iAIfIASKyL1C3mFiv3IoMB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVF+Wouq8HJ0ms5QwDEZfC4Gp8geuwKz+JoNCbN6mUWddYa7iCXAEm 6rRvuRw7z3bPmS0X9CHUaEsdpnXOpwENlKhqlPD8baWUaY/0KIy36ppU4gUbgU2a FaviwXQewhRXtw5koWCzbh7KOReEcDu1H06HDP904nTb6DzY+iACP+4WatQcCFmc l+Zc1VacZ+u5uNV6zIZTJhOIiQgtIFpUoxu6xibaAkE2u3rFGT3jKqflRwGo0Z73 FgqdISQZMafE1ZNtbVCjZDVewBC8NEZduTCE+dmVPFz4BZpX3t0KJcs4FJtFgB7C 7pAJKagKRysPJo8vQIReQOrebnrcoK80 -----END CERTIFICATE-----Generated at Sat Apr 26 19:51:19 2025 by rpki-client