$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft File: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft (raw, json) Hash identifier: Fx5JKnGa/X7oGRApQssWVBVNGlaIeE5gfPCqnOdzBoM= Subject key identifier: FC:88:DB:6F:C1:F9:50:1B:84:97:E2:81:93:94:DA:D3:A8:22:20:B4 Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16 Certificate issuer: /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft Manifest number: 013B Signing time: Tue 15 Apr 2025 03:23:34 +0000 Manifest this update: Tue 15 Apr 2025 03:23:33 +0000 Manifest next update: Tue 22 Apr 2025 03:23:33 +0000 Files and hashes: 1: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl (hash: M1D8oFNb41bKpE94s7cv8XDi4UN0Yy0ANFntlzWuzss=) 2: 9B2C760CD89B11EF8D75534EC4F9AE02.roa (hash: xl5aD0CkAXn3HLD4UrJj4+rSpG0xnpxW+n1qEQtppVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 03:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188CCC, serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16 Validity Not Before: Apr 15 03:23:33 2025 GMT Not After : Apr 22 03:23:33 2025 GMT Subject: CN=67fdd136-644e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:b5:8f:83:a7:80:a4:87:c6:b8:5b:6e:a6: e9:61:5d:27:02:e1:dc:40:00:a7:81:85:c5:11:9d: c1:e2:ba:13:f6:c9:8f:e9:31:27:ff:20:fd:82:0e: f1:92:13:24:ae:a5:8f:1e:dc:7f:a9:ff:d7:43:2a: 7d:e3:be:f6:16:a3:5a:c4:ee:05:0d:c2:39:ab:14: 06:4c:14:29:bc:0d:31:6b:ed:2c:b1:93:53:62:0d: 24:1b:39:6d:b9:f2:7f:31:1a:5a:10:9b:f8:f8:42: 72:61:42:0c:d8:7d:0d:94:1c:1c:c1:17:98:23:ef: 95:11:dc:94:33:fe:77:e3:1a:90:5e:84:80:fd:70: 5a:b1:0a:40:f4:a4:ff:6e:bf:46:db:21:8f:31:1f: 84:a7:31:f8:10:53:82:13:1b:41:fd:02:72:7f:e0: ec:f1:4a:fb:16:6c:39:28:5c:fb:64:75:30:16:ed: 0a:16:5a:e4:eb:10:e9:d6:69:e2:4e:13:32:87:74: a3:a9:be:ca:3c:aa:e0:9a:72:39:81:fe:8b:56:2a: a0:0a:4f:02:7b:13:1a:e6:ad:75:9f:a5:bb:06:40: 76:69:89:24:b2:0e:e3:c5:8d:c8:94:96:5e:d4:c5: ad:20:e8:6e:a0:ca:5c:a3:c3:1f:66:5e:cf:65:99: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:88:DB:6F:C1:F9:50:1B:84:97:E2:81:93:94:DA:D3:A8:22:20:B4 X509v3 Authority Key Identifier: keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:25:ee:e8:05:75:b7:e4:25:62:f8:f5:15:e2:76:bd:ed:17: 5b:ec:6c:55:34:19:3a:3b:00:dd:70:6d:47:ce:36:98:61:e8: 82:b7:b6:64:b1:f8:36:19:0a:ed:8c:62:75:00:b1:79:6a:a2: b7:c6:ff:33:39:8a:b3:9f:48:b7:5f:19:97:d2:0a:bf:e5:0b: 31:96:c1:8a:9e:e8:5d:5e:87:58:60:4e:b9:de:8d:32:0a:ae: 2c:51:b5:27:bc:dd:9d:1c:6b:f5:ba:6b:64:20:14:6c:f4:b0: df:ed:d6:87:ac:d6:d8:b7:db:27:ce:65:d1:c1:c2:3b:80:14: c4:04:9d:1c:8f:6b:30:29:94:fd:b7:1f:cb:4a:a3:84:43:a9: 6e:c6:73:dd:16:35:45:a1:9c:0c:9d:97:73:a5:36:68:25:94: c0:23:c0:f8:22:84:64:9f:0c:00:80:5f:7e:01:09:5c:a4:d6: 49:6b:5c:33:bc:5c:16:22:19:8c:e0:97:76:d0:9e:51:6c:fd: 0e:47:c6:af:22:97:0a:0a:26:39:bb:6f:63:17:3e:7b:95:62: d0:be:2d:67:42:21:80:23:2b:8b:5d:7e:2c:10:cb:35:cd:82: b7:b0:71:f9:41:c0:4e:0c:28:a6:d3:5d:28:66:bb:d9:c5:24: 89:74:1a:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhDQ0MxMTAvBgNVBAUTKEUyMzFEMzA5MjdFNDlBNkEyMkQ5RjZBQ0Q3MDYxMDNC RTNFNURDMTYwHhcNMjUwNDE1MDMyMzMzWhcNMjUwNDIyMDMyMzMzWjAYMRYwFAYD VQQDEw02N2ZkZDEzNi02NDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApka1j4OngKSHxrhbbqbpYV0nAuHcQACngYXFEZ3B4roT9smP6TEn/yD9gg7x khMkrqWPHtx/qf/XQyp94772FqNaxO4FDcI5qxQGTBQpvA0xa+0ssZNTYg0kGzlt ufJ/MRpaEJv4+EJyYUIM2H0NlBwcwReYI++VEdyUM/534xqQXoSA/XBasQpA9KT/ br9G2yGPMR+EpzH4EFOCExtB/QJyf+Ds8Ur7Fmw5KFz7ZHUwFu0KFlrk6xDp1mni ThMyh3Sjqb7KPKrgmnI5gf6LViqgCk8CexMa5q11n6W7BkB2aYkksg7jxY3IlJZe 1MWtIOhuoMpco8MfZl7PZZkK8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyI22/B +VAbhJfigZOU2tOoIiC0MB8GA1UdIwQYMBaAFOIx0wkn5JpqItn2rNcGEDvj5dwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OENDQy83RTZFMDAxNDQ1 NDcxMUVFQUNEMzVGNDFDNEY5QUUwMi80akhUQ1Nma21tb2kyZmFzMXdZUU8tUGwz QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqSFRDU2ZrbW1vaTJmYXMxd1lRTy1QbDNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OENDQy83RTZFMDAxNDQ1NDcxMUVFQUNEMzVGNDFDNEY5QUUwMi80akhUQ1Nma21t b2kyZmFzMXdZUU8tUGwzQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjJe7oBXW35CVi+PUV4na97Rdb7GxVNBk6OwDdcG1HzjaYYeiCt7Zk sfg2GQrtjGJ1ALF5aqK3xv8zOYqzn0i3XxmX0gq/5QsxlsGKnuhdXodYYE653o0y Cq4sUbUnvN2dHGv1umtkIBRs9LDf7daHrNbYt9snzmXRwcI7gBTEBJ0cj2swKZT9 tx/LSqOEQ6luxnPdFjVFoZwMnZdzpTZoJZTAI8D4IoRknwwAgF9+AQlcpNZJa1wz vFwWIhmM4Jd20J5RbP0OR8avIpcKCiY5u29jFz57lWLQvi1nQiGAIyuLXX4sEMs1 zYK3sHH5QcBODCim010oZrvZxSSJdBrJ -----END CERTIFICATE-----Generated at Wed Apr 16 17:15:26 2025 by rpki-client