$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: ixTc5Yvd/DjO7mzRtnIITjbCHYL5yBzyNJ2YUvvsQ5Q= Subject key identifier: 77:3D:9A:A2:87:91:73:56:B7:66:CB:15:8B:AE:13:EE:37:12:85:7B Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 01BD Signing time: Thu 03 Apr 2025 02:29:01 +0000 Manifest this update: Thu 03 Apr 2025 02:29:00 +0000 Manifest next update: Thu 10 Apr 2025 02:29:00 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: MmCeIpkZx+i+NJBbqrKTfLuclTgBhMOvgHKkgSGfT0A=) 2: 089F5864771611EE908B571BC4F9AE02.roa (hash: +ywFK7qPgtSz0tT8/ynJt1rLpjtVXaMcBVj/NUkbZE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF Validity Not Before: Apr 3 02:29:00 2025 GMT Not After : Apr 10 02:29:00 2025 GMT Subject: CN=67edf26c-950b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:67:75:d0:ff:32:9c:1c:6b:a0:40:76:89: a9:2b:61:e9:68:2f:a6:32:b9:90:51:0e:a1:3d:04: 35:16:2f:d9:f9:8a:79:ed:c0:cb:9f:d3:97:bc:4c: 89:90:3c:19:32:1c:ca:3d:a1:b0:79:50:8b:9c:85: 53:1b:3c:ba:59:3f:ff:81:f4:69:16:b2:c5:56:52: 61:2b:c4:9e:33:bb:50:fb:33:3f:41:c8:af:50:35: d4:d9:a0:b1:9e:be:22:c6:ed:be:ac:be:e3:4b:73: 97:60:26:6b:11:31:e1:1f:ad:bb:6e:5c:2d:5e:1c: 8e:34:d9:0f:04:6e:b5:c1:fa:04:95:8e:b0:cd:42: c5:d6:87:54:35:f5:98:66:02:4c:b3:02:5b:8e:ce: 06:c3:31:3b:12:50:32:27:43:2a:97:4b:29:a1:a1: 72:45:9b:be:35:21:4d:b2:35:ba:f5:bf:1f:3d:10: cc:7a:59:39:c4:96:ac:10:7b:9c:1b:2a:2d:a1:f3: 17:1e:7c:70:87:e7:99:9d:d9:d4:5b:ae:c3:7c:d4: db:03:c0:57:7e:33:79:81:f4:7e:6d:ae:bc:52:98: 48:09:15:f6:aa:5e:e2:c9:5e:56:b7:23:77:38:dd: 90:3a:91:eb:2e:16:b5:98:7c:cb:a6:ef:ad:29:f3: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3D:9A:A2:87:91:73:56:B7:66:CB:15:8B:AE:13:EE:37:12:85:7B X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5a:69:01:cc:35:3d:1d:6a:85:29:40:82:ab:15:1f:fa:fe: 1a:94:e0:70:53:2b:b1:02:18:8c:e3:83:c3:e1:3c:67:f1:1c: b3:13:53:e3:99:a9:d7:0c:c1:b7:62:bb:5b:63:02:44:ab:75: 38:13:ca:d4:75:39:0a:b4:f4:3b:b0:62:5d:02:75:f1:69:d6: ec:58:35:55:46:62:79:7b:74:77:c9:36:af:32:8d:13:4c:61: 14:e9:6e:cc:ba:3d:98:4f:02:a7:e3:a3:8b:3f:05:40:59:e6: 02:cc:c8:c5:ac:f7:5f:ca:79:d3:4f:35:24:06:4f:54:4a:78: 90:c7:3c:80:e6:09:9f:c8:65:04:19:14:0b:7b:b7:cd:1b:28: 47:fe:aa:f8:2f:78:07:8f:16:7c:d9:cb:1e:f4:ce:e4:2b:55: c6:08:64:9b:9d:c6:8f:62:ba:57:f2:b0:25:f3:75:6a:47:5c: 44:14:2c:55:a5:4e:99:da:b5:1d:8a:1d:7d:92:6c:d7:71:24: d1:ad:77:7d:2d:ae:5d:f5:3b:c8:f2:cc:1d:a2:e4:38:85:1a: 19:9b:b0:ad:66:7b:e2:ad:49:17:70:a0:d6:a6:6f:25:d3:04: 17:10:d3:4b:40:71:29:b6:a7:c8:44:fb:db:c1:aa:9b:22:1c: b3:b7:d9:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjUwNDAzMDIyOTAwWhcNMjUwNDEwMDIyOTAwWjAYMRYwFAYD VQQDEw02N2VkZjI2Yy05NTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv95nddD/Mpwca6BAdompK2HpaC+mMrmQUQ6hPQQ1Fi/Z+Yp57cDLn9OXvEyJ kDwZMhzKPaGweVCLnIVTGzy6WT//gfRpFrLFVlJhK8SeM7tQ+zM/QcivUDXU2aCx nr4ixu2+rL7jS3OXYCZrETHhH627blwtXhyONNkPBG61wfoElY6wzULF1odUNfWY ZgJMswJbjs4GwzE7ElAyJ0Mql0spoaFyRZu+NSFNsjW69b8fPRDMelk5xJasEHuc GyotofMXHnxwh+eZndnUW67DfNTbA8BXfjN5gfR+ba68UphICRX2ql7iyV5WtyN3 ON2QOpHrLha1mHzLpu+tKfNN3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHc9mqKH kXNWt2bLFYuuE+43EoV7MB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfWmkBzDU9HWqFKUCCqxUf+v4alOBwUyuxAhiM44PD4Txn8RyzE1Pj manXDMG3YrtbYwJEq3U4E8rUdTkKtPQ7sGJdAnXxadbsWDVVRmJ5e3R3yTavMo0T TGEU6W7Muj2YTwKn46OLPwVAWeYCzMjFrPdfynnTTzUkBk9USniQxzyA5gmfyGUE GRQLe7fNGyhH/qr4L3gHjxZ82cse9M7kK1XGCGSbncaPYrpX8rAl83VqR1xEFCxV pU6Z2rUdih19kmzXcSTRrXd9La5d9TvI8swdouQ4hRoZm7CtZnvirUkXcKDWpm8l 0wQXENNLQHEptqfIRPvbwaqbIhyzt9m4 -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:58 2025 by rpki-client