$ rpki-client -vvf rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft File: 4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft (raw, json) Hash identifier: xUIwo1uwIGLakAYKOOFoX34RW5OTSo8bIS5Lm7KD5VM= Subject key identifier: 82:A3:23:06:37:DB:FE:C5:6F:EE:62:09:78:15:72:A1:C6:10:5B:8C Authority key identifier: E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17 Certificate issuer: /CN=A915C948/serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft Manifest number: 012F Signing time: Fri 25 Apr 2025 03:39:34 +0000 Manifest this update: Fri 25 Apr 2025 03:39:33 +0000 Manifest next update: Fri 02 May 2025 03:39:33 +0000 Files and hashes: 1: 4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl (hash: umGsJf/QtXy7WEZwYgoPIEpJPZU8TSEXOZufnNCixuY=) 2: BED765785B0411EE94E4143EC4F9AE02.roa (hash: nzuv2qiqFy7RBa+xOMRhwb33N3s9hvdrnFdUnSAlhPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C948, serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17 Validity Not Before: Apr 25 03:39:33 2025 GMT Not After : May 2 03:39:33 2025 GMT Subject: CN=680b03f6-a3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:18:1c:ea:cc:76:6b:9c:c6:77:af:0f:5b:b0: bc:0a:50:58:14:5e:72:ea:d2:11:8a:43:ba:d3:3d: e2:4f:d8:c8:7c:16:d2:5c:c0:ae:31:24:e9:0a:d4: f0:08:3d:63:b6:35:6f:9a:c5:a8:8a:15:28:d5:9b: 59:3e:ce:94:2a:74:b8:8a:d6:6b:e1:35:13:a2:72: 81:5d:dd:b6:43:29:64:6c:7c:0a:90:d3:12:8f:52: 5e:b6:da:c2:d3:62:9a:77:e8:07:bd:d3:4c:7a:f2: 77:75:9d:9f:41:18:9b:6b:81:0f:4b:b7:07:65:cc: a4:fb:83:83:fe:0c:34:dc:96:5e:6b:30:04:9f:40: d6:fa:28:d9:7d:bf:24:a9:24:4e:8f:91:24:49:d6: c9:ab:60:00:1f:ed:ee:87:6f:9b:42:58:20:08:63: 74:06:b2:9e:a5:54:aa:cc:0b:21:a2:24:0d:a4:2d: 13:b8:a0:9c:9b:29:15:3f:2a:0c:73:17:47:7f:da: c3:84:c1:23:b5:9a:60:b4:07:74:66:2a:33:b3:6c: 87:1c:59:64:12:e0:05:c7:3b:fa:22:4a:12:aa:6e: 59:59:a8:b6:f5:8c:90:4a:4e:41:85:ef:3a:f3:20: 0f:c2:a3:59:f6:b2:0d:26:a7:bf:49:62:72:25:bb: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A3:23:06:37:DB:FE:C5:6F:EE:62:09:78:15:72:A1:C6:10:5B:8C X509v3 Authority Key Identifier: keyid:E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:2e:c6:06:2e:38:fb:d7:1b:4d:cc:ef:30:62:b1:64:ac:77: 10:26:97:87:8d:c9:34:bd:38:c3:71:06:04:e8:a5:b5:cd:a7: 6c:42:68:5b:e5:16:4b:e1:c3:fd:ab:ba:f6:1b:7f:e4:13:3e: 83:ac:27:8a:40:19:c9:7f:98:5c:fe:87:b4:5b:7f:34:a5:1c: e2:86:11:dd:e2:3c:34:6d:40:45:ef:9e:dd:18:86:99:78:29: f0:95:16:12:5d:00:97:a0:4e:a6:cd:96:1c:b7:17:e5:b4:d0: 29:50:db:28:df:c2:a9:8f:12:bd:9c:70:c9:d2:f1:60:47:89: e3:81:54:53:02:9a:44:a2:19:15:0a:86:3b:ad:7a:c0:9f:db: b3:6d:ca:03:ec:5c:f8:50:cc:a8:8f:ce:5a:0e:4f:32:14:4d: d3:51:13:82:d5:92:f4:a9:8a:02:3e:70:32:b4:fe:b0:28:08: 4e:1f:fb:e5:f9:cc:66:f2:39:78:4c:19:aa:72:10:a4:94:24: d7:7f:df:41:6d:08:3e:05:2e:5b:58:75:7d:8e:2d:d1:fb:37: 2d:db:99:65:3d:cf:3f:0d:60:45:12:2a:c6:39:1a:93:63:3c: ff:d1:7a:3f:56:0d:a1:33:0c:50:8c:f5:0f:4a:be:1c:aa:e6: fd:df:71:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5NDgxMTAvBgNVBAUTKEUyQjdBMkZDQzJEN0NDQjk5M0Q1MzJDRkFCQjI3RkFE QjI0OEREMTcwHhcNMjUwNDI1MDMzOTMzWhcNMjUwNTAyMDMzOTMzWjAYMRYwFAYD VQQDEw02ODBiMDNmNi1hM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hgc6sx2a5zGd68PW7C8ClBYFF5y6tIRikO60z3iT9jIfBbSXMCuMSTpCtTw CD1jtjVvmsWoihUo1ZtZPs6UKnS4itZr4TUTonKBXd22QylkbHwKkNMSj1JettrC 02Kad+gHvdNMevJ3dZ2fQRiba4EPS7cHZcyk+4OD/gw03JZeazAEn0DW+ijZfb8k qSROj5EkSdbJq2AAH+3uh2+bQlggCGN0BrKepVSqzAshoiQNpC0TuKCcmykVPyoM cxdHf9rDhMEjtZpgtAd0Ziozs2yHHFlkEuAFxzv6IkoSqm5ZWai29YyQSk5Bhe86 8yAPwqNZ9rINJqe/SWJyJbs9gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKjIwY3 2/7Fb+5iCXgVcqHGEFuMMB8GA1UdIwQYMBaAFOK3ovzC18y5k9Uyz6uyf62ySN0X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qzk0OC9CQjk3NjgzMjU1 MkMxMUVFQUIwNDlGNjlDNEY5QUUwMi80cmVpX01MWHpMbVQxVExQcTdKX3JiSkkz UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRyZWlfTUxYekxtVDFUTFBxN0pfcmJKSTNSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qzk0OC9CQjk3NjgzMjU1MkMxMUVFQUIwNDlGNjlDNEY5QUUwMi80cmVpX01MWHpM bVQxVExQcTdKX3JiSkkzUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjLsYGLjj71xtNzO8wYrFkrHcQJpeHjck0vTjDcQYE6KW1zadsQmhb 5RZL4cP9q7r2G3/kEz6DrCeKQBnJf5hc/oe0W380pRzihhHd4jw0bUBF757dGIaZ eCnwlRYSXQCXoE6mzZYctxfltNApUNso38KpjxK9nHDJ0vFgR4njgVRTAppEohkV CoY7rXrAn9uzbcoD7Fz4UMyoj85aDk8yFE3TUROC1ZL0qYoCPnAytP6wKAhOH/vl +cxm8jl4TBmqchCklCTXf99BbQg+BS5bWHV9ji3R+zct25llPc8/DWBFEirGORqT Yzz/0Xo/Vg2hMwxQjPUPSr4cqub933ET -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:10 2025 by rpki-client