$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json) Hash identifier: uI7HWHTuIM8ajhK7fKo2sSn0MkF9P3loKF2wLVnK5Fg= Subject key identifier: C7:07:47:3B:46:4A:4E:D5:F2:34:4F:C9:FD:C4:07:38:29:45:ED:20 Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft Manifest number: 22 Signing time: Sat 05 Apr 2025 07:26:00 +0000 Manifest this update: Sat 05 Apr 2025 07:26:00 +0000 Manifest next update: Sat 12 Apr 2025 07:26:00 +0000 Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: gVp/xVyRuVOw7bLY2bduYwMnuTHRPeASNO/nr+cMpq0=) 2: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: bk09MGKmA1KtNu/8fLfir0D9n+KVGE5j0LJioJGLi+A=) 3: 9C2A80FA099011F08EA9F20BC4F9AE02.roa (hash: 8UeD7xVuiaZEguXUzwGee22sKXGwroUdcoZk4gM91pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98 Validity Not Before: Apr 5 07:26:00 2025 GMT Not After : Apr 12 07:26:00 2025 GMT Subject: CN=67f0db08-91e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:73:5b:20:24:43:b4:22:55:73:18:17:09: a4:b9:bc:b1:25:69:9f:95:87:d0:27:af:5f:2d:c4: 74:a8:81:4b:d2:19:22:09:bf:d4:4c:7f:24:0a:36: 7c:e1:9f:81:98:78:b1:ef:d3:11:e6:bb:3e:49:ea: 96:17:f5:88:6a:93:08:39:ab:d2:90:ea:3f:c1:78: d9:8e:34:29:18:43:7b:63:6b:1a:a8:ee:5a:38:01: 30:87:53:96:d8:43:d5:09:61:b2:df:81:9a:d2:70: 67:a6:d3:94:55:9d:cc:ec:a1:a1:65:f4:93:b6:da: 90:6a:e1:9b:36:c8:e3:6e:d1:ae:4b:e9:f4:cf:5e: 2d:2e:6e:15:c2:86:f3:ca:2d:c5:f7:cd:02:8a:27: a1:23:46:4e:c2:6c:31:1d:ad:26:14:d3:d2:a9:56: 62:e1:93:d1:ad:73:f5:5a:7c:46:50:57:44:66:9e: 72:bd:b8:4c:44:77:03:66:73:d2:da:b0:10:a4:35: 54:7a:b5:ea:d6:81:e9:bb:e2:15:5f:93:3d:b7:7e: 8b:25:d4:20:ac:05:a0:d6:31:25:f5:4e:38:ac:56: 37:8d:3d:1a:e9:13:23:60:c4:dc:87:e3:87:46:41: 7b:b8:8b:72:d5:6d:3b:de:1a:ff:03:dc:67:2e:73: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:07:47:3B:46:4A:4E:D5:F2:34:4F:C9:FD:C4:07:38:29:45:ED:20 X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:4a:7c:6f:3f:e9:0c:a4:9a:b2:36:49:da:d5:ae:58:d3:78: 8c:a9:78:f1:87:7c:ca:04:43:d1:51:92:d9:67:88:d0:84:8d: 95:d8:42:b4:e0:6e:4c:b6:a8:68:35:f2:d1:e0:7a:a7:b1:e6: 77:4b:0a:24:cb:85:f8:aa:12:92:a4:d6:de:89:0a:65:2d:c9: ee:cd:80:38:b7:0d:9e:92:d1:f7:da:38:d8:63:fb:30:02:f0: c6:3d:09:d9:c5:e8:30:9d:ec:d7:71:6d:0e:f1:6e:83:b3:b1: 9e:0f:35:c9:18:ac:e9:e4:91:4c:4d:09:49:43:41:91:6a:ec: 67:c9:d3:1e:e0:31:1c:dd:50:11:a7:e9:c6:a2:7e:ba:38:a2: 87:b4:9f:b7:a9:1c:ed:1b:5a:b4:a9:b4:d4:7f:43:70:41:65: 4a:99:9f:46:d1:b2:e7:cf:43:cb:5d:ac:93:58:ff:42:74:16: c8:0f:81:c8:b3:d7:77:69:83:b8:5e:a8:f6:7b:bf:79:aa:7b: 3c:36:18:9b:29:3a:a2:59:70:b8:57:be:9c:ca:1e:1b:51:35: b4:9c:4a:02:2d:27:4f:0b:32:b2:8e:de:57:b4:d2:63:3f:35: cb:a8:06:52:de:02:83:56:fb:29:54:df:29:56:35:90:10:3c: 6e:34:ab:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM5ODExMC8GA1UEBRMoRkY4Q0NCRTYxODc1NUExRjUxOTlCRDBDODI3NjBFOEVE QjhGODVCQTAeFw0yNTA0MDUwNzI2MDBaFw0yNTA0MTIwNzI2MDBaMBgxFjAUBgNV BAMTDTY3ZjBkYjA4LTkxZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrCXNbICRDtCJVcxgXCaS5vLElaZ+Vh9Anr18txHSogUvSGSIJv9RMfyQKNnzh n4GYeLHv0xHmuz5J6pYX9Yhqkwg5q9KQ6j/BeNmONCkYQ3tjaxqo7lo4ATCHU5bY Q9UJYbLfgZrScGem05RVnczsoaFl9JO22pBq4Zs2yONu0a5L6fTPXi0ubhXChvPK LcX3zQKKJ6EjRk7CbDEdrSYU09KpVmLhk9Gtc/VafEZQV0RmnnK9uExEdwNmc9La sBCkNVR6terWgem74hVfkz23fosl1CCsBaDWMSX1TjisVjeNPRrpEyNgxNyH44dG QXu4i3LVbTveGv8D3Gcuc905AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxwdHO0ZK TtXyNE/J/cQHOClF7SAwHwYDVR0jBBgwFoAU/4zL5hh1Wh9Rmb0MgnYOjtuPhbow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzk4L0FCQUZGNUVBMDYx MjExRjA4RTlBRTUyOUM0RjlBRTAyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhi by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzR6TDVoaDFXaDlSbWIwTWduWU9qdHVQaGJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC Qzk4L0FCQUZGNUVBMDYxMjExRjA4RTlBRTUyOUM0RjlBRTAyL180ekw1aGgxV2g5 Um1iME1nbllPanR1UGhiby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIFKfG8/6QykmrI2SdrVrljTeIypePGHfMoEQ9FRktlniNCEjZXYQrTg bky2qGg18tHgeqex5ndLCiTLhfiqEpKk1t6JCmUtye7NgDi3DZ6S0ffaONhj+zAC 8MY9CdnF6DCd7NdxbQ7xboOzsZ4PNckYrOnkkUxNCUlDQZFq7GfJ0x7gMRzdUBGn 6caifro4ooe0n7epHO0bWrSptNR/Q3BBZUqZn0bRsufPQ8tdrJNY/0J0FsgPgciz 13dpg7heqPZ7v3mqezw2GJspOqJZcLhXvpzKHhtRNbScSgItJ08LMrKO3le00mM/ NcuoBlLeAoNW+ylU3ylWNZAQPG40qxk= -----END CERTIFICATE-----Generated at Sun Apr 6 13:41:10 2025 by rpki-client