$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json) Hash identifier: 5+jfiGm4dnfeYg+Z3a9dnF8YwwA9ilYtAzB4xTmolbc= Subject key identifier: C8:AD:89:B4:C9:7D:F1:CC:AD:76:49:02:6C:EC:04:E0:77:23:E0:D1 Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft Manifest number: 41 Signing time: Fri 25 Apr 2025 06:33:24 +0000 Manifest this update: Fri 25 Apr 2025 06:33:23 +0000 Manifest next update: Fri 02 May 2025 06:33:23 +0000 Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: aGUvI7ZLDn1xJd325gUrm7gzuuAGysG+zrqzgXosJmE=) 2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: wO5XBFfOCrDOLzTAwG2c8QWB5MqE2ajRI+6xibW2aso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Validity Not Before: Apr 25 06:33:23 2025 GMT Not After : May 2 06:33:23 2025 GMT Subject: CN=680b2cb4-c6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:c0:86:4f:f0:8a:0f:64:95:59:bd:bc:c6: 89:01:b3:6c:8a:83:03:cf:cf:c3:25:bc:12:4a:e1: 2b:10:8e:44:af:33:ff:6f:40:1c:e5:c5:b0:cf:cf: b5:dd:ae:97:5a:be:bf:02:6c:18:e4:f3:5f:7d:91: 1f:cf:7b:20:e5:4e:69:f7:2b:b8:35:5e:00:55:3a: 04:28:86:53:24:69:e7:88:f9:1b:14:e5:2a:ff:cd: a2:60:e3:e3:47:aa:58:b8:2c:32:7e:dd:bf:64:84: 2a:5f:b2:8a:4f:2d:bb:88:1b:32:a6:c5:6e:46:0f: 49:75:09:90:fb:9e:7c:73:4e:d0:73:eb:bf:f9:cc: b3:98:09:d9:e1:b3:de:d3:f7:08:13:98:71:a3:5c: 73:f2:87:f5:12:ca:30:86:24:db:31:27:45:2c:c5: ae:09:f0:42:1a:d3:f3:6b:e5:30:17:0b:af:71:45: ae:69:4f:e7:9e:ae:6c:39:32:0d:e9:60:1b:31:0c: ff:5b:45:62:7e:83:23:3a:14:a5:c1:53:b0:21:80: 9e:66:60:1f:f0:d8:1d:0a:cc:d2:27:1b:8d:9a:40: 65:a8:fd:7c:df:1d:f8:bf:d4:dc:ae:41:d5:16:18: 92:c8:40:91:1c:6b:64:4f:0e:5c:6a:93:47:59:66: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AD:89:B4:C9:7D:F1:CC:AD:76:49:02:6C:EC:04:E0:77:23:E0:D1 X509v3 Authority Key Identifier: keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:53:41:8b:1e:56:e3:ce:8d:98:ef:74:59:5c:d9:c0:41:dc: 18:e7:7b:b8:b0:41:35:05:8c:0b:b7:10:d3:f6:7b:71:50:1f: da:e6:8f:7c:31:43:53:36:bc:5b:29:8e:cb:e9:f7:a8:d4:42: e0:19:b8:05:99:3a:36:2e:03:24:4e:14:84:7b:fa:c6:7c:75: 27:ba:7f:f2:a2:5d:46:53:82:cb:2e:c5:39:9e:1d:f3:4b:62: 9d:19:a4:ed:0c:e4:94:eb:00:94:c8:19:fa:be:e0:7e:12:15: 47:21:13:bf:44:dd:5a:92:54:05:c3:42:55:fa:f0:a5:9b:ac: 30:f2:5a:77:86:bb:16:9e:6b:09:1c:ea:e3:18:b1:97:cb:cd: 7f:9c:9d:5d:ac:ab:50:c3:0f:6d:4b:61:5c:1d:75:37:8b:fa: 56:1f:49:40:02:e6:f4:6c:22:6d:a0:31:ba:4d:78:7e:a9:10: fd:8a:86:42:41:78:a6:c5:23:ad:9f:7b:eb:b9:9b:c2:5d:c6: f7:63:79:43:ca:54:40:94:cf:a6:16:51:53:5c:f1:2a:7c:4e: 98:28:1a:30:84:77:42:f4:cf:28:3e:76:95:fe:41:be:2d:7d: e5:e8:3f:1e:a5:91:14:a9:69:e2:4e:d5:44:f0:30:38:c5:dd: bf:da:65:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkI5QTExMC8GA1UEBRMoODM4RkJEMEIzOTVFQTkwNzA2QzZDMjg5QUMyNkIwRDcz OEEwNDI0MTAeFw0yNTA0MjUwNjMzMjNaFw0yNTA1MDIwNjMzMjNaMBgxFjAUBgNV BAMTDTY4MGIyY2I0LWM2ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiF8CGT/CKD2SVWb28xokBs2yKgwPPz8MlvBJK4SsQjkSvM/9vQBzlxbDPz7Xd rpdavr8CbBjk8199kR/PeyDlTmn3K7g1XgBVOgQohlMkaeeI+RsU5Sr/zaJg4+NH qli4LDJ+3b9khCpfsopPLbuIGzKmxW5GD0l1CZD7nnxzTtBz67/5zLOYCdnhs97T 9wgTmHGjXHPyh/USyjCGJNsxJ0Usxa4J8EIa0/Nr5TAXC69xRa5pT+eermw5Mg3p YBsxDP9bRWJ+gyM6FKXBU7AhgJ5mYB/w2B0KzNInG42aQGWo/XzfHfi/1NyuQdUW GJLIQJEca2RPDlxqk0dZZi+TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyK2JtMl9 8cytdkkCbOwE4Hcj4NEwHwYDVR0jBBgwFoAUg4+9CzleqQcGxsKJrCaw1zigQkEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCQjlBLzQxMzkwQkNBQ0ZG MzExRUY5MDYyRTUyMUM0RjlBRTAyL2c0LTlDemxlcVFjR3hzS0pyQ2F3MXppZ1Fr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZzQtOUN6bGVxUWNHeHNLSnJDYXcxemlnUWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC QjlBLzQxMzkwQkNBQ0ZGMzExRUY5MDYyRTUyMUM0RjlBRTAyL2c0LTlDemxlcVFj R3hzS0pyQ2F3MXppZ1FrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHFTQYseVuPOjZjvdFlc2cBB3Bjne7iwQTUFjAu3ENP2e3FQH9rmj3wx Q1M2vFspjsvp96jUQuAZuAWZOjYuAyROFIR7+sZ8dSe6f/KiXUZTgssuxTmeHfNL Yp0ZpO0M5JTrAJTIGfq+4H4SFUchE79E3VqSVAXDQlX68KWbrDDyWneGuxaeawkc 6uMYsZfLzX+cnV2sq1DDD21LYVwddTeL+lYfSUAC5vRsIm2gMbpNeH6pEP2KhkJB eKbFI62fe+u5m8JdxvdjeUPKVECUz6YWUVNc8Sp8TpgoGjCEd0L0zyg+dpX+Qb4t feXoPx6lkRSpaeJO1UTwMDjF3b/aZV8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:06 2025 by rpki-client