$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft File: 4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json) Hash identifier: 0TIGs2CnKyVo7fVyJByZg4iV40Q+5aGAjFqrbX9SCd0= Subject key identifier: 7C:30:4C:91:C5:65:84:BF:13:A8:24:24:1B:07:04:27:D9:98:EE:7E Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft Manifest number: 0621 Signing time: Fri 28 Mar 2025 23:19:32 +0000 Manifest this update: Fri 28 Mar 2025 23:19:31 +0000 Manifest next update: Fri 04 Apr 2025 23:19:31 +0000 Files and hashes: 1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: CWTUzcdAZW1pLHdooaE5XSlIpPCCEpHwu5/3sCiU7JU=) 2: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: Wj9VGGJ6joH5JctKZSMF6/1uGPocxQOWRALuCrLB1RI=) 3: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: 9u1pwHKpVreKyVfB8nkyg0RNfC4miwkyLL7dTpwha4U=) 4: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: BRqUa6lx1hCo3MEvTs8NlHFfgRjiFksL6MonNo6Ic5M=) 5: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: yYeYBpFrN5yAKPhvdNbBpvXOyw5PkXSnUg/nn3TG4vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164D60 Validity Not Before: Mar 28 23:19:31 2025 GMT Not After : Apr 4 23:19:31 2025 GMT Subject: CN=67e72e83-d0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:52:55:b1:6c:24:55:de:5c:d3:af:83:13:e3: e1:21:83:7b:9b:24:e2:69:b1:c3:34:ba:93:94:41: 5e:95:4d:1e:c4:d4:e7:ca:50:43:77:99:96:55:40: 32:73:f3:7f:73:d4:1c:9b:5c:63:d1:03:5b:5d:e1: dd:5e:da:ba:99:58:8b:db:9d:7b:6c:d9:ba:04:26: 03:d3:ce:c7:19:e4:7e:10:6d:a1:66:9e:ac:93:17: 49:08:cd:6b:59:ed:c0:d6:ae:5d:56:ac:c3:d4:be: 34:13:22:35:21:03:89:63:b7:0a:82:27:cf:de:2c: 93:dd:fe:fe:8f:f9:2d:0d:97:44:fb:2b:a4:57:c9: 78:38:38:09:72:72:d8:15:10:c2:78:09:df:ca:10: da:5d:cb:97:43:27:93:df:2d:f0:b4:e9:88:a5:c3: 75:f0:87:ca:12:a3:bb:d0:61:1b:5a:29:79:e0:2f: 88:47:27:13:32:5e:93:8c:c2:ea:b5:3c:bc:c6:72: 71:de:64:ae:d1:ea:bf:56:60:80:29:81:7f:67:d5: b4:d9:90:95:21:eb:24:be:f0:4d:9a:6c:07:c4:53: 8b:9d:e1:92:77:e0:27:ee:86:79:2d:9d:72:4a:28: 26:dd:e3:51:e3:8f:a8:c9:18:79:d8:19:2a:41:eb: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:30:4C:91:C5:65:84:BF:13:A8:24:24:1B:07:04:27:D9:98:EE:7E X509v3 Authority Key Identifier: keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:40:f8:d3:18:a2:bc:c2:c5:21:e6:c3:85:e7:d6:0e:a8:76: da:42:17:74:0e:e5:69:c1:a2:b4:49:60:c1:a3:1a:b9:64:a4: b0:2b:4c:59:bf:50:b3:96:6d:0d:78:4d:34:5c:de:7d:9c:c7: 74:19:95:d9:5b:b2:f2:f1:e4:a7:13:8c:8e:e6:40:78:b1:4c: 04:6f:56:b3:a1:8c:02:f6:1a:b7:ac:04:0e:ae:8d:e1:3c:4f: 50:17:84:f4:9e:24:8d:bb:05:3d:67:76:1b:11:dc:d9:c5:de: 57:8a:a7:84:87:06:bf:12:e2:a6:16:36:0a:62:c4:e7:1c:27: d1:83:10:11:73:02:f6:57:82:a2:18:26:56:6e:a1:e1:e9:38: ae:d1:46:c4:b8:1e:dd:f6:43:16:61:96:0e:a5:16:56:c0:a6: 11:57:6c:68:af:fa:98:b0:9b:44:9d:7c:d4:87:80:9f:57:cc: 05:65:12:b9:9a:05:aa:69:f0:4e:8d:c4:c1:63:84:0f:8e:8e: 1a:96:59:bb:89:cf:2b:a6:71:14:4a:0d:e5:4d:62:f2:2b:de: 33:fd:56:ff:be:4f:7a:60:8e:83:5b:e6:0d:2a:e3:0c:bc:ca: fa:02:41:7e:5e:90:7a:dd:d2:4b:9d:ee:de:b4:3d:80:35:bf: 5c:4b:a5:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2 OThDOTM5NzcwHhcNMjUwMzI4MjMxOTMxWhcNMjUwNDA0MjMxOTMxWjAYMRYwFAYD VQQDEw02N2U3MmU4My1kMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lJVsWwkVd5c06+DE+PhIYN7myTiabHDNLqTlEFelU0exNTnylBDd5mWVUAy c/N/c9Qcm1xj0QNbXeHdXtq6mViL2517bNm6BCYD087HGeR+EG2hZp6skxdJCM1r We3A1q5dVqzD1L40EyI1IQOJY7cKgifP3iyT3f7+j/ktDZdE+yukV8l4ODgJcnLY FRDCeAnfyhDaXcuXQyeT3y3wtOmIpcN18IfKEqO70GEbWil54C+IRycTMl6TjMLq tTy8xnJx3mSu0eq/VmCAKYF/Z9W02ZCVIeskvvBNmmwHxFOLneGSd+An7oZ5LZ1y Sigm3eNR44+oyRh52BkqQevLAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwwTJHF ZYS/E6gkJBsHBCfZmO5+MB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0 NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEQ2MC85RTBERTM5MkI0NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2 Qm4wdjg3LUFhSlZwakpPWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvQPjTGKK8wsUh5sOF59YOqHbaQhd0DuVpwaK0SWDBoxq5ZKSwK0xZ v1Czlm0NeE00XN59nMd0GZXZW7Ly8eSnE4yO5kB4sUwEb1azoYwC9hq3rAQOro3h PE9QF4T0niSNuwU9Z3YbEdzZxd5XiqeEhwa/EuKmFjYKYsTnHCfRgxARcwL2V4Ki GCZWbqHh6Tiu0UbEuB7d9kMWYZYOpRZWwKYRV2xor/qYsJtEnXzUh4CfV8wFZRK5 mgWqafBOjcTBY4QPjo4allm7ic8rpnEUSg3lTWLyK94z/Vb/vk96YI6DW+YNKuMM vMr6AkF+XpB63dJLne7etD2ANb9cS6Xl -----END CERTIFICATE-----Generated at Fri Apr 4 22:42:16 2025 by rpki-client