$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json) Hash identifier: wnYtfuNdSnohHA7EN9QRcvMxU+DIpNdHAa37SWtdt9A= Subject key identifier: B4:89:4E:0F:02:64:7D:C5:2B:6A:CB:50:F1:E3:5C:E4:7E:C6:90:E4 Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft Manifest number: 07A3 Signing time: Thu 24 Apr 2025 21:17:41 +0000 Manifest this update: Thu 24 Apr 2025 21:17:41 +0000 Manifest next update: Thu 01 May 2025 21:17:41 +0000 Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: DcLBSgp2RXWaFY3XhxtE9umFpLjgufc14JaX4a2ruJ4=) 2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=) 3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI=) 4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: KYrgpq+j2JdiosQSHACv2bRMY5BVzOvfLnyNf5narws=) 5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=) 6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: ZN83zETo/fGZjHplsgi4LIPj/1+Cv9tK+RMfhDQAvcM=) 7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: MIyFaAMcoVX+JijHyNBp9lzEprzyQwwRu4V9wwVXios=) 8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: CoOgUqT0FD59n+BELVSjes/s0qoXYfrPfM4+T31Fkoo=) 9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: Ej4Olhx/k6YWemdl2TV8Frzo1JOOuwGbcCqfJq8lBxg=) 10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: UjevdaGjYYh/fLHbv94Vi82GRHni+SflrmcRbP8Ltsg=) 11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: BJy4+HNv8kQ6Lc2CH7nff6rHz79DtOyFMzKFxBbxH6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: Apr 24 21:17:41 2025 GMT Not After : May 1 21:17:41 2025 GMT Subject: CN=680aaa75-fc6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:7c:f2:f9:74:f0:85:47:7e:8b:00:90:3e: 48:de:d7:2e:4c:24:a8:e0:a7:38:d9:d8:3c:4d:3b: 60:6c:03:86:fe:a9:37:aa:b0:b9:68:e5:9d:99:5e: 3a:d8:55:5d:9c:d6:10:fc:0b:4b:d2:e9:92:2e:17: 15:a7:89:af:16:b5:d6:64:cb:ac:96:39:b6:bd:6e: e8:15:93:6a:5f:dc:85:8f:3c:cb:52:f3:0d:1d:82: 86:f4:cd:ac:d5:a6:f7:77:41:78:a8:39:03:d0:4d: 5a:ec:aa:1b:43:57:33:23:5f:44:01:ee:92:95:9d: e3:f7:4b:35:59:48:ad:03:45:8a:16:48:9e:d9:a9: 6e:fb:c1:8e:77:52:19:96:14:f1:c5:63:16:43:5d: f9:19:5c:37:cf:1b:e5:02:7b:a8:2b:5f:5a:c9:eb: fb:1e:f1:bd:b5:ae:b0:5d:de:df:14:5d:2d:6e:7c: 2b:b5:df:3e:96:d1:0e:52:76:30:c8:36:17:7c:83: 41:c2:ca:65:b0:17:3d:1a:c4:76:31:94:a4:8e:00: 8f:8e:76:3d:f2:51:3e:57:10:0f:d5:8c:ed:39:b5: 33:10:38:db:32:f1:62:5a:70:aa:14:d7:5f:8b:3d: 75:7a:52:8d:45:55:f6:42:94:60:39:d1:71:ff:35: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:89:4E:0F:02:64:7D:C5:2B:6A:CB:50:F1:E3:5C:E4:7E:C6:90:E4 X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:fd:28:25:99:89:9c:93:68:e8:9b:81:15:2c:b3:47:eb:9d: 33:79:3a:39:76:6d:6e:5f:d3:7a:93:1b:af:83:6f:e2:4c:da: 8b:55:b5:af:4e:53:47:e3:1a:52:72:48:f9:62:79:b3:c8:50: 73:89:0a:57:02:01:9d:d6:f2:80:48:00:d9:9d:38:7d:42:40: 32:42:4c:55:9e:86:61:e1:1a:69:96:71:4a:42:c4:89:8c:fc: 24:a4:b2:df:2b:cb:7d:b1:79:62:07:30:a0:ec:9d:13:35:e9: 4d:d9:38:c1:9b:77:91:ee:51:76:13:11:7f:6f:12:86:1c:e6: ac:bb:9e:e3:76:8c:90:13:e4:99:0b:d8:a2:c6:f2:db:5f:6e: 3b:94:c9:94:98:0b:cb:c4:3a:40:3d:49:fa:f5:fd:18:1e:3e: c5:24:40:66:49:7b:0d:64:46:c3:83:a2:e8:30:c1:87:f5:a6: ff:be:da:30:67:7e:55:db:43:e9:63:7c:7a:27:12:77:4c:d7: dd:d7:64:06:d0:1c:41:a3:58:0f:1e:20:b4:89:2b:9d:c5:53: a3:db:b0:d3:fa:84:1b:d7:93:5e:5c:8f:a2:28:aa:47:9b:70: ac:44:49:a4:d4:f0:59:b7:b3:35:1a:4a:66:78:e8:5b:11:9b: f0:f4:2d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjUwNDI0MjExNzQxWhcNMjUwNTAxMjExNzQxWjAYMRYwFAYD VQQDEw02ODBhYWE3NS1mYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0Z88vl08IVHfosAkD5I3tcuTCSo4Kc42dg8TTtgbAOG/qk3qrC5aOWdmV46 2FVdnNYQ/AtL0umSLhcVp4mvFrXWZMusljm2vW7oFZNqX9yFjzzLUvMNHYKG9M2s 1ab3d0F4qDkD0E1a7KobQ1czI19EAe6SlZ3j90s1WUitA0WKFkie2alu+8GOd1IZ lhTxxWMWQ135GVw3zxvlAnuoK19ayev7HvG9ta6wXd7fFF0tbnwrtd8+ltEOUnYw yDYXfINBwsplsBc9GsR2MZSkjgCPjnY98lE+VxAP1YztObUzEDjbMvFiWnCqFNdf iz11elKNRVX2QpRgOdFx/zXDaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSJTg8C ZH3FK2rLUPHjXOR+xpDkMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ/SglmYmck2jom4EVLLNH650zeTo5dm1uX9N6kxuvg2/iTNqLVbWv TlNH4xpSckj5YnmzyFBziQpXAgGd1vKASADZnTh9QkAyQkxVnoZh4RpplnFKQsSJ jPwkpLLfK8t9sXliBzCg7J0TNelN2TjBm3eR7lF2ExF/bxKGHOasu57jdoyQE+SZ C9iixvLbX247lMmUmAvLxDpAPUn69f0YHj7FJEBmSXsNZEbDg6LoMMGH9ab/vtow Z35V20PpY3x6JxJ3TNfd12QG0BxBo1gPHiC0iSudxVOj27DT+oQb15NeXI+iKKpH m3CsREmk1PBZt7M1GkpmeOhbEZvw9C0C -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:00 2025 by rpki-client