$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft File: 4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json) Hash identifier: WiD02uDG6nkjGiqCpWI+D7lzapd/WXLIsQ67rRUPNvg= Subject key identifier: 32:3E:A6:12:92:88:CC:C4:2F:B2:66:26:F2:78:D2:68:4B:16:39:54 Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft Manifest number: 062F Signing time: Thu 24 Apr 2025 22:48:15 +0000 Manifest this update: Thu 24 Apr 2025 22:48:15 +0000 Manifest next update: Thu 01 May 2025 22:48:15 +0000 Files and hashes: 1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: GA1CvbTlKCKI296JVvB2i1Du5BDVcpsj57o0ONOvUkE=) 2: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: Wj9VGGJ6joH5JctKZSMF6/1uGPocxQOWRALuCrLB1RI=) 3: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: 9u1pwHKpVreKyVfB8nkyg0RNfC4miwkyLL7dTpwha4U=) 4: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: BRqUa6lx1hCo3MEvTs8NlHFfgRjiFksL6MonNo6Ic5M=) 5: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: yYeYBpFrN5yAKPhvdNbBpvXOyw5PkXSnUg/nn3TG4vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Validity Not Before: Apr 24 22:48:15 2025 GMT Not After : May 1 22:48:15 2025 GMT Subject: CN=680abfaf-b61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4d:73:61:4d:d0:bc:91:d4:d8:34:fb:ff:8a: 35:5f:bb:b9:2f:58:42:87:34:9e:27:71:5a:70:68: b4:39:dd:77:8c:b9:e8:aa:86:43:f8:95:54:b4:fa: 74:a6:97:83:c9:58:8c:e9:6e:54:9c:10:0d:4c:e7: 95:92:d4:6e:2b:36:12:67:d7:3c:0b:77:66:b1:6b: 6e:f2:39:01:ad:a5:03:b2:65:ff:c2:0a:a0:e8:06: 3a:a4:75:0e:e8:99:36:ba:b1:46:a8:75:c3:be:9e: ba:d1:06:3c:19:e8:d7:44:b2:9b:21:95:3c:9d:e5: 1a:24:83:8d:7d:ba:e4:b6:81:1f:4f:ba:73:76:67: 92:3b:3a:b9:03:b6:11:43:47:45:5f:59:b8:4f:46: 69:15:79:ee:e7:e5:41:b4:41:8c:d5:fd:bc:46:24: c4:d4:ff:1c:62:db:b8:fe:0b:3b:f2:c3:97:ac:f2: ac:42:8e:09:a4:91:36:a2:39:ad:53:a1:e6:ad:cf: 3c:1b:ea:8f:3a:3e:c9:a2:4c:f8:36:88:b9:70:f9: 1a:77:ce:a6:e8:71:f3:7f:72:59:f7:51:a9:5d:56: 55:e5:11:64:9f:07:5d:19:86:88:39:e5:83:68:92: ef:28:68:d1:64:8c:d5:51:f9:64:c7:b6:96:a5:b8: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3E:A6:12:92:88:CC:C4:2F:B2:66:26:F2:78:D2:68:4B:16:39:54 X509v3 Authority Key Identifier: keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7b:9f:2c:11:c0:84:c8:87:dd:f3:70:f5:13:26:b4:16:0a: 4f:4c:f4:89:de:c6:21:80:d9:38:15:20:55:cc:83:25:4c:ef: cc:88:92:88:bc:c4:80:0a:c1:11:5c:92:60:23:3e:f1:c3:fe: db:23:3c:a9:bb:0b:4d:1a:61:ec:34:33:32:57:a5:b3:3f:af: c1:93:02:f8:ed:f9:34:4c:c7:17:a5:2b:e1:14:52:5e:c5:be: 34:4a:73:1e:64:1f:e5:09:3d:e4:65:61:97:6f:01:5e:7a:11: 9c:00:95:9f:a6:78:bc:2a:93:2b:6a:1c:6e:ce:23:e1:94:4a: bf:09:8a:65:16:4b:c2:84:f8:6d:e5:21:a3:dc:79:65:91:63: 95:0f:9d:ac:24:22:7d:61:8f:f8:63:91:05:ec:ca:62:0f:92: 2e:9b:40:26:f2:9b:c0:5d:54:74:5f:08:2b:a1:72:68:16:96: af:ba:13:35:ef:f8:77:1b:23:a6:7a:30:c6:9c:93:e7:ad:82: 7a:d4:c1:51:7c:29:77:46:1a:e5:57:33:b6:0c:5d:d3:b4:0c: f8:1d:ec:ff:d8:7b:1a:e8:e4:eb:35:d8:8c:77:66:dc:5c:8d: b5:15:0d:b1:7b:c3:89:8a:ff:a9:1a:c5:ca:a5:d6:3d:6a:f6: d8:e9:08:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2 OThDOTM5NzcwHhcNMjUwNDI0MjI0ODE1WhcNMjUwNTAxMjI0ODE1WjAYMRYwFAYD VQQDEw02ODBhYmZhZi1iNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4U1zYU3QvJHU2DT7/4o1X7u5L1hChzSeJ3FacGi0Od13jLnoqoZD+JVUtPp0 ppeDyViM6W5UnBANTOeVktRuKzYSZ9c8C3dmsWtu8jkBraUDsmX/wgqg6AY6pHUO 6Jk2urFGqHXDvp660QY8GejXRLKbIZU8neUaJIONfbrktoEfT7pzdmeSOzq5A7YR Q0dFX1m4T0ZpFXnu5+VBtEGM1f28RiTE1P8cYtu4/gs78sOXrPKsQo4JpJE2ojmt U6Hmrc88G+qPOj7Jokz4Noi5cPkad86m6HHzf3JZ91GpXVZV5RFknwddGYaIOeWD aJLvKGjRZIzVUflkx7aWpbhofwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDI+phKS iMzEL7JmJvJ40mhLFjlUMB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0 NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEQ2MC85RTBERTM5MkI0NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2 Qm4wdjg3LUFhSlZwakpPWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+e58sEcCEyIfd83D1Eya0FgpPTPSJ3sYhgNk4FSBVzIMlTO/MiJKI vMSACsERXJJgIz7xw/7bIzypuwtNGmHsNDMyV6WzP6/BkwL47fk0TMcXpSvhFFJe xb40SnMeZB/lCT3kZWGXbwFeehGcAJWfpni8KpMrahxuziPhlEq/CYplFkvChPht 5SGj3HllkWOVD52sJCJ9YY/4Y5EF7MpiD5Ium0Am8pvAXVR0XwgroXJoFpavuhM1 7/h3GyOmejDGnJPnrYJ61MFRfCl3RhrlVzO2DF3TtAz4Hez/2Hsa6OTrNdiMd2bc XI21FQ2xe8OJiv+pGsXKpdY9avbY6Qia -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:04 2025 by rpki-client