$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft File: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json) Hash identifier: J4KH07UVjDU6bf3C036lrhCrycUAGfdfRJShJSePgrk= Subject key identifier: B0:FB:35:98:18:A1:9B:28:CF:2A:C5:4A:2A:6A:D6:61:40:40:53:CB Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Certificate serial: 191D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft Manifest number: 190E Signing time: Fri 18 Apr 2025 16:32:43 +0000 Manifest this update: Fri 18 Apr 2025 16:32:43 +0000 Manifest next update: Fri 25 Apr 2025 16:32:43 +0000 Files and hashes: 1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: GROgi+cc24kbLlnjmgjCakaLFS7ryXqmDhMa4hvsBLA=) 2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: P4Ek16t0ZEw/MnJDtAJSlLMC0jHATAWAbBg4OWQTq78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 16:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6429 (0x191d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118799, serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Validity Not Before: Apr 18 16:32:43 2025 GMT Not After : Apr 25 16:32:43 2025 GMT Subject: CN=68027eab-da55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ba:16:2d:ca:29:b3:86:9a:cb:47:48:fb:81: 19:25:03:65:a3:65:47:7d:78:62:fc:00:f9:65:63: 16:10:06:83:bc:4b:be:a3:ff:61:c1:ba:9c:67:80: b3:2f:e7:86:f6:09:b9:0e:1b:5a:48:58:27:b3:c8: a9:9b:c7:82:ff:a0:91:e4:d2:d8:8b:6f:3c:b4:65: 09:d0:84:b1:5a:5b:1b:86:15:15:5e:33:4b:b9:a2: e4:86:b1:13:57:d8:9e:de:52:71:9e:f9:13:1f:93: 2d:e0:26:c2:c9:10:df:a8:43:5f:98:2b:c1:21:d2: a1:62:09:af:77:f7:f3:97:24:29:24:0c:2f:5a:32: ad:bf:43:f0:ab:01:b9:7b:79:34:d8:95:85:f0:c4: f0:53:f7:65:3a:bc:fd:d2:ec:3e:b9:a6:cc:23:d3: ec:52:23:6a:17:9c:d1:c2:ce:7a:f8:f1:ca:5d:b4: 62:73:1c:db:18:4d:d1:e9:c4:04:da:8c:1d:d8:e0: 09:2b:dd:d9:ab:32:5f:cc:d9:d6:09:e8:d2:2f:30: 86:f4:0f:2b:d6:28:d4:71:c2:aa:e7:db:60:ed:c8: 11:2b:61:cb:b5:55:b4:ef:8f:5d:05:b9:63:7c:54: be:8f:36:75:40:b7:1f:98:85:e5:e0:f6:70:7f:02: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FB:35:98:18:A1:9B:28:CF:2A:C5:4A:2A:6A:D6:61:40:40:53:CB X509v3 Authority Key Identifier: keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e3:98:e3:fa:77:72:c9:ee:f6:33:9f:ba:e0:36:63:07:3f: 7f:d4:7f:bb:10:22:c1:65:6f:e8:56:0b:83:c2:30:ba:f2:23: 63:9b:5c:46:c9:4d:4a:69:89:5f:99:1d:66:fb:9b:65:f6:d5: 70:12:c3:07:c3:c4:b6:5e:18:eb:b9:4d:f1:a2:48:fd:16:d4: d8:b2:ba:b5:28:9f:f0:73:0d:ad:45:fc:9e:da:cf:b0:5f:46: de:89:f5:43:fe:79:09:53:3e:fb:38:06:45:2b:0a:83:13:a5: eb:eb:d7:ce:c0:eb:46:72:fd:61:2f:d0:8a:3c:b2:e4:48:b0: 05:94:54:33:7c:a8:2b:78:68:fd:1f:7c:6b:60:58:85:bb:5a: 6c:1c:f4:55:02:c8:ce:27:5c:5a:8b:49:0b:bf:ee:e6:7b:2b: 35:27:55:3e:1c:ce:fd:5c:28:47:be:07:69:d8:a8:cb:14:10: 5c:5f:8a:8e:6f:f6:14:e7:d3:0a:d4:5c:72:cb:7e:ed:ae:86: 0e:f8:a8:7e:d7:1d:ad:79:19:f2:31:cb:34:be:f4:41:4e:70: 69:fd:c5:97:eb:8c:4b:04:87:57:0e:b6:3c:ff:9c:93:46:af: 8c:f1:4e:a6:1d:6b:bc:b3:bd:8d:73:3d:3b:7d:aa:dd:a5:5f: 2d:18:c0:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3OTkxMTAvBgNVBAUTKEUwQ0FBRDE3QzA2OEQ4NjAyQkNDRUI0NjdCNDU1NTEw QkM1MjM5MEUwHhcNMjUwNDE4MTYzMjQzWhcNMjUwNDI1MTYzMjQzWjAYMRYwFAYD VQQDEw02ODAyN2VhYi1kYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57oWLcops4aay0dI+4EZJQNlo2VHfXhi/AD5ZWMWEAaDvEu+o/9hwbqcZ4Cz L+eG9gm5DhtaSFgns8ipm8eC/6CR5NLYi288tGUJ0ISxWlsbhhUVXjNLuaLkhrET V9ie3lJxnvkTH5Mt4CbCyRDfqENfmCvBIdKhYgmvd/fzlyQpJAwvWjKtv0PwqwG5 e3k02JWF8MTwU/dlOrz90uw+uabMI9PsUiNqF5zRws56+PHKXbRicxzbGE3R6cQE 2owd2OAJK93ZqzJfzNnWCejSLzCG9A8r1ijUccKq59tg7cgRK2HLtVW0749dBblj fFS+jzZ1QLcfmIXl4PZwfwJ4KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLD7NZgY oZsozyrFSipq1mFAQFPLMB8GA1UdIwQYMBaAFODKrRfAaNhgK8zrRntFVRC8UjkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc5OS8zMjg3QkZBMjdF QzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJHQXJ6T3RHZTBWVkVMeFNP UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNcXRGOEJvMkdBcnpPdEdlMFZWRUx4U09RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODc5OS8zMjg3QkZBMjdFQzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJH QXJ6T3RHZTBWVkVMeFNPUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb45jj+ndyye72M5+64DZjBz9/1H+7ECLBZW/oVguDwjC68iNjm1xG yU1KaYlfmR1m+5tl9tVwEsMHw8S2XhjruU3xokj9FtTYsrq1KJ/wcw2tRfye2s+w X0beifVD/nkJUz77OAZFKwqDE6Xr69fOwOtGcv1hL9CKPLLkSLAFlFQzfKgreGj9 H3xrYFiFu1psHPRVAsjOJ1xai0kLv+7meys1J1U+HM79XChHvgdp2KjLFBBcX4qO b/YU59MK1Fxyy37troYO+Kh+1x2teRnyMcs0vvRBTnBp/cWX64xLBIdXDrY8/5yT Rq+M8U6mHWu8s72Ncz07fardpV8tGMC2 -----END CERTIFICATE-----Generated at Sat Apr 19 02:12:11 2025 by rpki-client