$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json) Hash identifier: JyqoD/VYYbtNQvLizjfQIcy9O6mKo0NNOm1ihYPJHRs= Subject key identifier: D2:7F:E2:F7:8C:9E:29:4D:48:04:A0:84:B8:11:46:5D:E1:E9:D2:BA Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft Manifest number: 48 Signing time: Sat 19 Apr 2025 06:26:09 +0000 Manifest this update: Sat 19 Apr 2025 06:26:08 +0000 Manifest next update: Sat 26 Apr 2025 06:26:08 +0000 Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: xZrfYy2zPI5tizh+6zGatTnxozzFPzoADWqdnq/wcoU=) 2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: 6bS2IOUFxNL/dxgXXkv7hlgTjA3VB1/wSeyQ+zl4/9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Validity Not Before: Apr 19 06:26:08 2025 GMT Not After : Apr 26 06:26:08 2025 GMT Subject: CN=68034201-6c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1a:d7:77:42:7d:34:86:5e:f9:ff:db:52:a1: ed:93:85:bf:6a:eb:9c:03:f2:d9:0e:5a:4f:9a:df: 81:c2:49:b9:80:c7:70:81:53:eb:60:f1:58:cf:03: 67:61:24:33:64:76:e6:18:95:8d:b5:4d:12:c4:40: 8b:99:da:ca:c0:74:76:13:50:51:87:ba:da:ac:11: 8c:60:32:71:5f:8c:e4:66:be:21:38:52:9b:10:d4: 12:0e:a7:33:56:bd:93:b4:6e:9f:24:62:4e:db:21: c3:59:47:4a:64:cf:4a:aa:23:87:bd:83:67:96:5a: 01:d7:3b:b4:e6:3b:9d:ac:59:97:48:32:1a:ed:40: 4e:0d:94:d3:f9:cc:ee:21:1f:c0:f9:ca:3e:15:49: 93:f4:48:0c:56:67:ac:cc:30:e2:15:b7:e2:53:18: 20:d6:09:37:de:60:7d:aa:26:cb:ca:47:36:94:2a: d5:26:64:05:cb:20:ce:33:0f:da:d6:98:57:15:b6: e1:76:b1:29:a6:5e:2d:af:50:91:04:a7:38:71:9f: 3a:be:58:c2:18:67:51:14:1a:0d:e3:4f:c7:5e:78: ba:19:b8:29:8e:af:e2:42:ef:e7:60:e1:01:f5:f2: ad:93:34:f9:41:b5:26:76:0f:73:94:b6:6f:23:fd: e9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7F:E2:F7:8C:9E:29:4D:48:04:A0:84:B8:11:46:5D:E1:E9:D2:BA X509v3 Authority Key Identifier: keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:b0:f3:6e:08:6d:f6:27:54:9e:a7:a4:d1:86:6a:88:75:9b: c2:1c:b1:a8:a3:26:ca:48:73:90:5a:26:20:34:88:b4:17:83: 97:3d:c9:7a:60:ce:34:7a:bd:5e:1d:8e:3e:55:f8:32:c2:3e: 96:7c:30:c4:5c:1e:45:21:7f:13:7a:9a:fe:9e:b7:29:b3:bd: bf:de:c8:0f:be:97:94:d2:91:fb:a2:f4:3b:b5:f1:25:13:aa: da:a0:27:36:ac:82:f9:d9:a9:05:b6:75:b0:8f:44:ca:4d:99: 32:3d:a6:43:85:14:f4:da:82:fa:de:f9:a9:03:2e:db:f7:65: 11:0b:f6:d6:2a:a7:54:35:ef:2a:eb:d9:73:8d:2c:1e:69:0c: 76:c7:da:75:63:e8:e9:e6:cd:e5:1e:3b:c9:b2:53:d6:95:60: f7:0d:60:55:f4:34:f1:9a:d9:ab:ce:e3:a4:3c:7d:29:99:f9: 3f:a4:2d:e7:6e:5e:0e:c5:75:39:4f:b0:fc:eb:96:3c:58:a1: 04:58:8e:f0:cb:45:1a:c0:00:1b:db:04:b1:a5:8d:6a:2a:be: b7:94:92:48:f9:9f:15:3f:71:2a:d7:06:b8:50:3f:e9:8f:a0: 69:d2:39:c3:1c:b1:e3:24:aa:d9:73:81:99:4f:94:b2:53:69: 25:4a:9a:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUIxMzExMC8GA1UEBRMoRTNGMTZGOUQ3M0NDRUUyNjkzOTE1QTI0NEY0NEI1NTNB NERCM0RDQzAeFw0yNTA0MTkwNjI2MDhaFw0yNTA0MjYwNjI2MDhaMBgxFjAUBgNV BAMTDTY4MDM0MjAxLTZjNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzGtd3Qn00hl75/9tSoe2Thb9q65wD8tkOWk+a34HCSbmAx3CBU+tg8VjPA2dh JDNkduYYlY21TRLEQIuZ2srAdHYTUFGHutqsEYxgMnFfjORmviE4UpsQ1BIOpzNW vZO0bp8kYk7bIcNZR0pkz0qqI4e9g2eWWgHXO7TmO52sWZdIMhrtQE4NlNP5zO4h H8D5yj4VSZP0SAxWZ6zMMOIVt+JTGCDWCTfeYH2qJsvKRzaUKtUmZAXLIM4zD9rW mFcVtuF2sSmmXi2vUJEEpzhxnzq+WMIYZ1EUGg3jT8deeLoZuCmOr+JC7+dg4QH1 8q2TNPlBtSZ2D3OUtm8j/el/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0n/i94ye KU1IBKCEuBFGXeHp0rowHwYDVR0jBBgwFoAU4/FvnXPM7iaTkVokT0S1U6TbPcww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjEzLzQ2MzdGQkYyQjEy ODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBNN2lhVGtWb2tUMFMxVTZUYlBj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNF9Gdm5YUE03aWFUa1Zva1QwUzFVNlRiUGN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 QjEzLzQ2MzdGQkYyQjEyODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBNN2lh VGtWb2tUMFMxVTZUYlBjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM+w824IbfYnVJ6npNGGaoh1m8IcsaijJspIc5BaJiA0iLQXg5c9yXpg zjR6vV4djj5V+DLCPpZ8MMRcHkUhfxN6mv6etymzvb/eyA++l5TSkfui9Du18SUT qtqgJzasgvnZqQW2dbCPRMpNmTI9pkOFFPTagvre+akDLtv3ZREL9tYqp1Q17yrr 2XONLB5pDHbH2nVj6OnmzeUeO8myU9aVYPcNYFX0NPGa2avO46Q8fSmZ+T+kLedu Xg7FdTlPsPzrljxYoQRYjvDLRRrAABvbBLGljWoqvreUkkj5nxU/cSrXBrhQP+mP oGnSOcMcseMkqtlzgZlPlLJTaSVKmvY= -----END CERTIFICATE-----Generated at Sat Apr 19 10:56:12 2025 by rpki-client