$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: qXjOegr4HvYkPqsT3rKyhPDbvTAnXupd30CY7WcJWQA= Subject key identifier: 04:6A:B9:C7:ED:7F:AC:CD:DC:58:4F:4A:A2:56:B4:31:E6:A1:9F:AC Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 090A Signing time: Fri 04 Apr 2025 20:29:26 +0000 Manifest this update: Fri 04 Apr 2025 20:29:25 +0000 Manifest next update: Fri 11 Apr 2025 20:29:25 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: EOyWvIOSE+7qJQozK/DkcjmmMS6M7O4W5jk4flm3PP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4 Validity Not Before: Apr 4 20:29:25 2025 GMT Not After : Apr 11 20:29:25 2025 GMT Subject: CN=67f04125-059e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:8c:71:22:85:21:3b:b5:a0:c7:dd:2b:d8: 8c:51:18:c9:5b:ca:72:ba:ca:f9:0e:18:fd:aa:17: 5a:6e:78:5f:8c:35:a0:37:70:fa:2b:d1:b2:fb:18: 03:f6:a7:52:27:94:4f:6c:1c:62:e0:c5:09:32:f3: 25:7a:3e:0f:64:ef:e5:a6:f4:b2:1c:a6:20:ae:35: eb:c2:e8:a7:4b:bb:8b:73:73:f2:1a:36:32:00:67: d9:4b:a1:fa:c6:70:4b:98:69:ce:bc:80:aa:ee:55: 98:0a:eb:b4:09:40:30:06:46:5f:61:ab:d9:11:b6: c4:21:fd:3c:da:8c:49:92:7e:bc:bb:eb:2f:5c:2f: f5:a9:ba:af:9b:5f:11:2f:69:6a:d1:9b:35:7f:5a: 40:21:fc:e0:a1:96:a7:48:8c:e0:bd:2f:9e:9d:1c: a6:5a:52:49:f6:58:9f:43:4b:c1:86:28:6e:1e:0c: 41:50:9e:1d:0c:ce:74:d5:b9:7f:05:54:b3:cd:93: ab:15:0d:46:2c:6d:f8:ac:db:0e:99:46:b0:4a:e0: 44:8d:f5:28:89:be:15:aa:7c:d4:dd:16:2d:5a:2f: d3:c8:c0:34:73:fe:91:5e:76:30:29:1a:76:28:3c: c0:cb:25:62:f1:1d:68:89:93:43:c4:16:49:f4:de: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6A:B9:C7:ED:7F:AC:CD:DC:58:4F:4A:A2:56:B4:31:E6:A1:9F:AC X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:10:18:ca:6e:83:d8:c8:6e:19:27:ce:a6:93:ff:13:a7:d1: 7d:0d:2c:47:25:fb:0c:8b:00:cc:40:f5:ba:7f:4d:a1:e3:0b: f1:f4:d6:11:0b:2e:cb:6f:ac:6e:21:95:84:f1:30:3a:66:67: fc:77:0a:f4:c1:77:31:73:a7:a9:ea:ed:32:a1:28:05:16:84: c6:52:92:3f:73:f8:0a:de:ea:d7:f7:0c:c3:2d:c7:c5:44:35: ce:f4:d8:b0:5f:ac:ff:78:7e:63:a3:5c:ab:41:2b:ed:e2:81: de:98:a2:e4:b9:1a:3a:5a:55:98:de:d4:6e:11:a2:93:25:0e: 47:3c:34:ef:b0:a5:f2:50:46:ad:46:39:1c:76:79:78:df:65: 4b:b6:5e:de:8c:0a:23:68:dc:04:4c:5c:19:0b:44:9a:ce:06: c5:f7:7c:e3:15:89:4e:a3:81:88:24:90:27:7c:1e:c9:41:d7: fb:de:58:32:81:ca:92:6e:22:e1:29:a0:52:31:cd:e5:d1:f3: 17:fc:e5:21:d4:63:80:86:60:9f:f6:aa:ec:0e:b6:f0:62:e9: f5:15:c8:16:fa:68:af:c3:4b:9d:42:c1:4e:f7:1b:b0:51:c4: 31:23:6a:75:ca:7e:cc:8e:b2:e9:e3:cb:29:8b:74:1e:7a:00: f9:ea:a9:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjUwNDA0MjAyOTI1WhcNMjUwNDExMjAyOTI1WjAYMRYwFAYD VQQDEw02N2YwNDEyNS0wNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PqMcSKFITu1oMfdK9iMURjJW8pyusr5Dhj9qhdabnhfjDWgN3D6K9Gy+xgD 9qdSJ5RPbBxi4MUJMvMlej4PZO/lpvSyHKYgrjXrwuinS7uLc3PyGjYyAGfZS6H6 xnBLmGnOvICq7lWYCuu0CUAwBkZfYavZEbbEIf082oxJkn68u+svXC/1qbqvm18R L2lq0Zs1f1pAIfzgoZanSIzgvS+enRymWlJJ9lifQ0vBhihuHgxBUJ4dDM501bl/ BVSzzZOrFQ1GLG34rNsOmUawSuBEjfUoib4VqnzU3RYtWi/TyMA0c/6RXnYwKRp2 KDzAyyVi8R1oiZNDxBZJ9N6MVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARqucft f6zN3FhPSqJWtDHmoZ+sMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4EBjKboPYyG4ZJ86mk/8Tp9F9DSxHJfsMiwDMQPW6f02h4wvx9NYR Cy7Lb6xuIZWE8TA6Zmf8dwr0wXcxc6ep6u0yoSgFFoTGUpI/c/gK3urX9wzDLcfF RDXO9NiwX6z/eH5jo1yrQSvt4oHemKLkuRo6WlWY3tRuEaKTJQ5HPDTvsKXyUEat Rjkcdnl432VLtl7ejAojaNwETFwZC0SazgbF93zjFYlOo4GIJJAnfB7JQdf73lgy gcqSbiLhKaBSMc3l0fMX/OUh1GOAhmCf9qrsDrbwYun1FcgW+mivw0udQsFO9xuw UcQxI2p1yn7MjrLp48spi3QeegD56qms -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:03 2025 by rpki-client