$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: nSYvFKUWC2y3ZkGRNpudrFgFOs6bdTNLbJmNbeOI8jM= Subject key identifier: 7B:96:FA:6D:28:53:55:49:2F:4B:84:D2:72:C6:BA:B4:02:B7:03:4D Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 0914 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 0914 Signing time: Thu 24 Apr 2025 20:10:44 +0000 Manifest this update: Thu 24 Apr 2025 20:10:44 +0000 Manifest next update: Thu 01 May 2025 20:10:44 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: qAzIxL581WiCXSjAnS5H4I38L68oNSVPur1KWo0NDRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2324 (0x914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Apr 24 20:10:44 2025 GMT Not After : May 1 20:10:44 2025 GMT Subject: CN=680a9ac4-3df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:49:3a:aa:d3:2b:d3:34:73:c4:e9:26:23: c4:cf:3c:da:f4:44:37:84:f0:49:93:d9:ef:dd:8f: f6:90:b5:e7:04:d7:39:92:ac:d2:50:8e:8f:6b:5b: a7:03:78:d2:64:fc:42:08:63:f4:bf:29:b4:6e:cc: 08:58:c3:7f:d7:a6:a5:f9:b5:9e:b0:f1:23:3c:66: 1d:a9:b1:fa:fd:fa:b0:97:02:a7:d8:e2:00:e8:c0: 13:26:88:de:d1:0f:27:32:13:72:99:ca:6a:a0:71: 74:27:e6:dc:55:45:8d:2c:17:73:bf:2f:0b:50:4d: 37:fa:22:69:50:51:37:e2:76:f0:a8:84:27:77:0d: 87:25:ea:58:dc:ca:7b:78:79:c5:d3:50:77:e1:16: 4c:2a:8d:f5:0c:de:63:b5:0a:44:45:54:5d:6a:88: c7:d2:e5:ab:5d:4d:a8:43:d0:4b:6e:e3:f6:4c:7a: 49:45:ef:8b:c2:aa:7f:39:f5:96:d9:b5:b3:af:6d: 93:cd:37:b8:aa:00:59:71:31:de:f2:1e:63:00:f4: e8:23:21:fe:33:13:de:37:6c:35:60:c2:f3:2b:55: c5:fe:44:9e:c3:d3:c6:2f:73:4b:94:73:7a:4e:48: ae:11:03:b4:b9:58:a8:ff:9a:36:50:b3:07:8b:14: 1c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:96:FA:6D:28:53:55:49:2F:4B:84:D2:72:C6:BA:B4:02:B7:03:4D X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:23:f5:5c:f1:1a:aa:a5:ac:9e:7b:80:dd:37:cf:4a:8a:66: 61:0a:d5:3b:7a:8b:83:07:7f:2c:8f:ac:54:e4:0c:9c:0d:80: 0c:46:6a:cf:79:06:6d:63:4a:e2:0b:ff:c5:40:e5:93:ea:06: 90:d4:2a:c7:a8:26:72:09:fb:c0:84:bd:cc:5e:a8:66:01:b9: 14:7c:11:23:37:06:e9:38:f9:a7:cb:10:07:7c:cd:ae:53:aa: 0c:ee:94:a6:dd:c4:3c:94:4d:08:47:03:14:ce:6c:f7:1f:0c: d9:d3:88:99:dc:07:f9:1c:1b:86:5a:b3:58:2b:1b:15:3d:c3: fe:36:19:18:cf:db:53:eb:37:6b:f1:bc:98:6f:aa:65:f3:13: 9c:90:b3:53:1d:1e:64:28:15:02:16:9f:e1:2f:23:81:b7:fc: 3d:b7:0e:04:d2:13:dc:14:ab:47:10:b4:f8:74:17:38:93:50: 25:ad:b9:69:c7:85:ba:ee:85:f1:72:af:f2:76:99:af:83:4a: 30:de:4d:7d:73:d4:4f:a0:49:75:3e:52:f8:83:fb:5d:ef:d3: 3d:1b:81:b1:6a:f1:27:6a:64:0f:51:16:66:c6:ea:8a:47:40: 18:7d:da:eb:c8:69:05:df:d6:31:60:7a:ae:b6:65:60:40:39: ac:e0:bc:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjUwNDI0MjAxMDQ0WhcNMjUwNTAxMjAxMDQ0WjAYMRYwFAYD VQQDEw02ODBhOWFjNC0zZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqFJOqrTK9M0c8TpJiPEzzza9EQ3hPBJk9nv3Y/2kLXnBNc5kqzSUI6Pa1un A3jSZPxCCGP0vym0bswIWMN/16al+bWesPEjPGYdqbH6/fqwlwKn2OIA6MATJoje 0Q8nMhNymcpqoHF0J+bcVUWNLBdzvy8LUE03+iJpUFE34nbwqIQndw2HJepY3Mp7 eHnF01B34RZMKo31DN5jtQpERVRdaojH0uWrXU2oQ9BLbuP2THpJRe+Lwqp/OfWW 2bWzr22TzTe4qgBZcTHe8h5jAPToIyH+MxPeN2w1YMLzK1XF/kSew9PGL3NLlHN6 TkiuEQO0uVio/5o2ULMHixQc1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuW+m0o U1VJL0uE0nLGurQCtwNNMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPI/Vc8Rqqpayee4DdN89KimZhCtU7eouDB38sj6xU5AycDYAMRmrP eQZtY0riC//FQOWT6gaQ1CrHqCZyCfvAhL3MXqhmAbkUfBEjNwbpOPmnyxAHfM2u U6oM7pSm3cQ8lE0IRwMUzmz3HwzZ04iZ3Af5HBuGWrNYKxsVPcP+NhkYz9tT6zdr 8byYb6pl8xOckLNTHR5kKBUCFp/hLyOBt/w9tw4E0hPcFKtHELT4dBc4k1Alrblp x4W67oXxcq/ydpmvg0ow3k19c9RPoEl1PlL4g/td79M9G4GxavEnamQPURZmxuqK R0AYfdrryGkF39YxYHqutmVgQDms4Lzz -----END CERTIFICATE-----Generated at Sat Apr 26 17:16:15 2025 by rpki-client