$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: 42/eWnGYqvTc0MqByBnWCNmM0HNQnFlnS3nJakbIuvk= Subject key identifier: 5E:9B:AC:C0:4E:A6:63:DB:E5:0A:46:9E:D1:C5:0A:8B:BB:60:81:C1 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 02A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 0279 Signing time: Fri 25 Apr 2025 01:35:48 +0000 Manifest this update: Fri 25 Apr 2025 01:35:47 +0000 Manifest next update: Fri 02 May 2025 01:35:47 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: KbaJ/U21caPymehmAfGqbhGh9jh5FY2PHzA0F/r/hgs=) 2: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: JjvbSqdanHSpYIcMXGp+ZgcFpNIRiyjhFnX93ubLPo8=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: voNhvFt+rl48+RXxjQWaNEIjDq7tMEczadZRVwJF374=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: J3Ksm9WsEr0TXjLLhaQloclJKmSPXVrqrAzTlf/eKtU=) 5: 3632957E441311EE8A03A472C4F9AE02.roa (hash: hc0GUtEKKEGW9gMZlTO39H3fWKoJ6wdGBAjVqIVrLxQ=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: SMaX3aa/UFh43gcKCcEgmT4cm/dWEuQesSH3aBzRpfE=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: 74i29heKayX8ulpi57w5YoL9mLrlBcexKja8YJG8ecM=) 8: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: I/sFHc7XYiJ8eT0AIMA2+7XdYKHUvmlkXtbK7T+Me2I=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: a76JQF1qiEmLZKSWyiAc52KnTZOIYMAyGXRjtxdQkfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Apr 25 01:35:47 2025 GMT Not After : May 2 01:35:47 2025 GMT Subject: CN=680ae6f3-26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:69:ee:c6:48:7f:30:2a:f5:01:50:87:50: 04:41:0d:16:c2:c7:a5:15:45:46:18:84:03:f1:2f: 24:e7:82:b1:80:e3:8c:9c:f6:29:b1:7f:60:6b:dd: 78:2e:0b:7a:ae:a9:66:9e:80:7b:f0:6d:fc:5c:e7: a0:d1:e6:c4:4d:85:c1:cd:81:ea:2a:c9:c9:f6:1c: 3e:06:98:0b:ac:25:5f:20:25:07:c1:4b:cb:c7:4c: e3:1e:d2:4b:cd:1a:c1:4a:48:c3:f0:2e:a3:33:1d: 99:0e:66:ce:c3:62:d1:bf:0e:1e:7d:05:3c:6f:3c: eb:45:5e:1b:f5:48:91:d2:91:0a:c8:21:ab:e8:7e: 9e:7c:45:d0:a5:40:d1:dd:3e:27:2b:a4:59:d8:4d: 06:6b:18:60:e8:7a:26:65:9b:82:df:58:c2:e9:a1: 8d:c3:fa:f8:e6:ae:75:be:18:6a:5b:12:59:a6:75: 6d:d2:69:39:34:70:02:4d:cd:62:fc:a9:67:0e:fd: a4:58:1e:4e:0b:e5:cc:a4:86:33:09:39:7e:33:6f: 7c:33:75:58:78:7b:ae:78:6c:c4:0c:ac:c0:bd:5c: 42:65:72:8f:22:a6:33:73:60:88:fd:40:cc:9f:a1: 35:1b:74:0a:2c:2b:dd:c1:6c:38:4a:ef:ad:18:86: 09:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9B:AC:C0:4E:A6:63:DB:E5:0A:46:9E:D1:C5:0A:8B:BB:60:81:C1 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e8:79:73:87:55:6e:8d:f6:67:6c:fd:34:48:a0:e4:e4:2f: 6e:04:89:8c:92:01:fc:5f:ae:a3:0c:f6:05:0b:2d:2b:45:ee: dd:6f:01:ef:e0:62:c8:d1:e7:6c:a7:29:6e:3c:b2:12:68:60: be:c4:b5:b1:4f:5b:df:fe:d0:21:3a:b3:b0:92:70:4a:07:53: 96:14:cc:45:51:c8:53:48:7f:c1:2b:2e:2e:33:64:9f:b0:eb: 7b:39:74:d1:5f:a4:ec:24:c0:7e:da:18:d7:4f:f3:59:2f:3d: 9e:94:6b:6b:bf:ee:e5:32:ab:e0:84:c4:ba:c8:d1:a4:6d:bb: 55:eb:5a:d0:01:7c:c2:2c:75:3b:6a:1d:93:88:86:9d:e6:c4: 48:f9:4b:01:51:b3:c1:e5:b8:80:66:41:11:13:f9:5d:c3:68: 17:68:d5:95:19:d1:75:89:75:85:55:2a:12:db:e5:03:76:e0: 18:a8:23:6c:81:04:61:50:2d:b5:55:56:50:c4:1a:3d:32:d8: 21:80:c0:43:4d:d7:fc:76:fb:f8:1f:60:e9:9d:71:43:8a:d1: 2c:b1:6a:01:62:e5:45:46:34:44:e8:98:d3:5e:d7:6c:9f:c4: 4e:49:ab:1f:da:17:59:15:5b:0e:7c:67:da:91:41:3e:62:8d: 14:e6:98:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUwNDI1MDEzNTQ3WhcNMjUwNTAyMDEzNTQ3WjAYMRYwFAYD VQQDEw02ODBhZTZmMy0yNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sFp7sZIfzAq9QFQh1AEQQ0WwselFUVGGIQD8S8k54KxgOOMnPYpsX9ga914 Lgt6rqlmnoB78G38XOeg0ebETYXBzYHqKsnJ9hw+BpgLrCVfICUHwUvLx0zjHtJL zRrBSkjD8C6jMx2ZDmbOw2LRvw4efQU8bzzrRV4b9UiR0pEKyCGr6H6efEXQpUDR 3T4nK6RZ2E0Gaxhg6HomZZuC31jC6aGNw/r45q51vhhqWxJZpnVt0mk5NHACTc1i /KlnDv2kWB5OC+XMpIYzCTl+M298M3VYeHuueGzEDKzAvVxCZXKPIqYzc2CI/UDM n6E1G3QKLCvdwWw4Su+tGIYJ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6brMBO pmPb5QpGntHFCou7YIHBMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN6Hlzh1VujfZnbP00SKDk5C9uBImMkgH8X66jDPYFCy0rRe7dbwHv 4GLI0edspyluPLISaGC+xLWxT1vf/tAhOrOwknBKB1OWFMxFUchTSH/BKy4uM2Sf sOt7OXTRX6TsJMB+2hjXT/NZLz2elGtrv+7lMqvghMS6yNGkbbtV61rQAXzCLHU7 ah2TiIad5sRI+UsBUbPB5biAZkERE/ldw2gXaNWVGdF1iXWFVSoS2+UDduAYqCNs gQRhUC21VVZQxBo9MtghgMBDTdf8dvv4H2DpnXFDitEssWoBYuVFRjRE6JjTXtds n8ROSasf2hdZFVsOfGfakUE+Yo0U5pjv -----END CERTIFICATE-----Generated at Sat Apr 26 03:55:39 2025 by rpki-client