$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json) Hash identifier: xPNQCIncuVALAaw5yGEbQX6aDN9K2D+WI1sBvEuZps8= Subject key identifier: BF:FB:66:B1:5C:E9:77:3C:21:5F:9F:F1:25:BF:74:2B:83:58:D7:9F Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft Manifest number: 019F Signing time: Fri 25 Apr 2025 02:28:59 +0000 Manifest this update: Fri 25 Apr 2025 02:28:59 +0000 Manifest next update: Fri 02 May 2025 02:28:59 +0000 Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: NS66KZZFFk+c/FKKM3MSBFpEy10jMdpwEbTiXyU+6f0=) 2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: V89TVKMG86FWKeqAC80eNKWm9QeM+Xm489cfb+DFW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Validity Not Before: Apr 25 02:28:59 2025 GMT Not After : May 2 02:28:59 2025 GMT Subject: CN=680af36b-5723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:a4:39:67:c6:32:82:3c:42:e4:12:a5:eb: 55:f5:26:05:c0:d5:d1:c2:cd:a1:ba:02:60:5e:01: 6b:5e:46:50:06:01:14:3f:11:d1:78:04:79:f7:b6: 0f:72:2b:8b:62:d8:ff:1b:6a:4e:72:b4:d2:90:50: fa:c6:3e:1c:5d:9a:76:06:59:ac:ac:f5:ae:e5:38: 4e:80:ef:c0:ee:17:b5:f9:9e:48:82:ee:96:ba:b5: 08:b3:df:4f:d9:1b:4b:22:3a:1d:56:27:d2:fd:89: 6a:9f:17:50:9e:67:50:dc:11:b9:db:89:0e:f8:99: ee:14:c0:e7:5e:cf:73:85:b8:06:6e:ee:6a:0f:59: 84:fd:05:f9:9c:79:ab:07:be:d6:68:48:2b:66:0a: ec:2e:1d:0d:86:33:84:17:97:02:64:a6:c9:0a:5f: 73:c2:99:ac:9a:98:f7:93:df:2e:05:7a:e2:20:53: b0:e2:56:e1:91:f7:88:54:8c:6b:86:28:0a:a4:e5: 33:bf:0b:2a:03:cc:04:bc:e5:5d:66:a1:89:74:50: 42:00:a1:48:85:a0:96:de:a1:96:9b:a5:f9:8f:9e: 62:e7:c5:8e:75:c1:76:0a:13:92:ad:a9:e1:d2:1e: fa:83:79:53:23:1e:28:bf:8a:43:bc:0f:53:09:c3: 99:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FB:66:B1:5C:E9:77:3C:21:5F:9F:F1:25:BF:74:2B:83:58:D7:9F X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:29:d8:7f:8f:8e:19:39:2e:f0:79:dd:7a:dd:6c:94:cc:a8: 22:77:8d:e9:1c:9b:49:94:9e:f2:f2:2a:79:4a:2e:e6:d4:f2: 53:63:f6:6d:ff:aa:03:c0:0f:27:82:f5:56:a5:91:8f:7a:60: fa:eb:97:64:a3:0a:4c:8b:bb:af:0b:2e:63:7a:69:dd:81:d2: 2b:0d:ad:55:73:d5:46:81:52:23:82:26:98:4e:6c:11:19:6d: 89:fb:3d:6d:3f:66:6c:05:f6:95:9b:bf:97:54:30:6c:cc:39: 9a:70:ad:cb:ed:65:b5:db:07:fc:56:c7:51:1c:36:36:7f:d5: c7:6e:c3:0a:72:30:11:1d:d1:77:02:79:2d:d8:0e:ab:c0:c3: 3c:d6:64:31:46:8a:d8:61:a2:76:44:44:88:47:1c:0c:ef:59: 63:b1:49:bd:0b:c1:9f:2f:29:ed:2f:64:01:2b:09:3f:15:ab: de:b2:7f:8e:a9:93:f7:55:48:ab:e6:fe:17:7c:ed:56:a5:53: 81:cf:2c:37:f9:01:fe:ca:e5:de:39:cd:0f:b9:16:2a:75:a8: 93:cb:3d:cd:9b:6b:7a:c3:c1:63:a6:21:77:f9:b2:ee:af:ed: 4a:2c:3b:99:85:56:22:54:f0:3c:1c:74:9f:77:b1:88:b4:41: 40:15:41:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjUwNDI1MDIyODU5WhcNMjUwNTAyMDIyODU5WjAYMRYwFAYD VQQDEw02ODBhZjM2Yi01NzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiCkOWfGMoI8QuQSpetV9SYFwNXRws2hugJgXgFrXkZQBgEUPxHReAR597YP ciuLYtj/G2pOcrTSkFD6xj4cXZp2BlmsrPWu5ThOgO/A7he1+Z5Igu6WurUIs99P 2RtLIjodVifS/YlqnxdQnmdQ3BG524kO+JnuFMDnXs9zhbgGbu5qD1mE/QX5nHmr B77WaEgrZgrsLh0NhjOEF5cCZKbJCl9zwpmsmpj3k98uBXriIFOw4lbhkfeIVIxr higKpOUzvwsqA8wEvOVdZqGJdFBCAKFIhaCW3qGWm6X5j55i58WOdcF2ChOSranh 0h76g3lTIx4ov4pDvA9TCcOZ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/7ZrFc 6Xc8IV+f8SW/dCuDWNefMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBKdh/j44ZOS7wed163WyUzKgid43pHJtJlJ7y8ip5Si7m1PJTY/Zt /6oDwA8ngvVWpZGPemD665dkowpMi7uvCy5jemndgdIrDa1Vc9VGgVIjgiaYTmwR GW2J+z1tP2ZsBfaVm7+XVDBszDmacK3L7WW12wf8VsdRHDY2f9XHbsMKcjARHdF3 Ankt2A6rwMM81mQxRorYYaJ2RESIRxwM71ljsUm9C8GfLyntL2QBKwk/Favesn+O qZP3VUir5v4XfO1WpVOBzyw3+QH+yuXeOc0PuRYqdaiTyz3Nm2t6w8FjpiF3+bLu r+1KLDuZhVYiVPA8HHSfd7GItEFAFUET -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:42 2025 by rpki-client