$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json) Hash identifier: /DWZ63shM51F4w/bx4IFdq339MTa9N5BGph3NTu8L/M= Subject key identifier: D6:A2:C0:6B:2C:57:A6:9F:99:80:7E:85:75:C8:5E:16:1A:ED:5B:66 Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft Manifest number: 0157 Signing time: Thu 03 Apr 2025 03:35:32 +0000 Manifest this update: Thu 03 Apr 2025 03:35:31 +0000 Manifest next update: Thu 10 Apr 2025 03:35:31 +0000 Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: LkYUCqD2DWTcxKwIYN5inFrcIq9XXAsPmH2PRyySsh4=) 2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 0HkSWoIqELp3ylHO6VoceHK/AkbpkOqVqSCheHiI6Uo=) 3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: n8VX91JedlAvIqLFu7Bl3QhQfuPAxDc2ekOd4lvr+ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A996 Validity Not Before: Apr 3 03:35:31 2025 GMT Not After : Apr 10 03:35:31 2025 GMT Subject: CN=67ee0203-363d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:fb:7c:e4:2f:17:04:38:0f:9e:7a:6b:52: 94:6e:b0:4f:69:e4:ec:81:8f:70:55:0b:72:0b:5e: c9:95:64:df:0c:7c:8d:92:a3:01:fb:37:c5:27:1c: 77:dd:a6:99:f6:28:b9:c2:5d:f6:d8:2e:44:f0:8f: 1a:3e:a7:8c:c1:17:9a:dd:5d:d0:99:5f:c3:10:79: 48:9c:47:18:28:31:b2:53:88:bd:e6:89:a6:b4:29: ff:60:2b:2f:19:ab:01:a3:74:08:6b:7a:79:32:76: f6:c8:5f:d2:9c:4e:31:6a:01:a3:11:e4:c8:6f:ca: 58:1f:3a:60:62:cf:bb:d3:8e:e2:13:00:6f:9d:cf: 6e:6e:d4:24:c0:07:7c:1d:64:4e:c2:aa:98:b9:3f: fd:58:b7:9a:bf:ea:17:98:77:9c:7c:cf:76:38:37: 3b:36:67:bd:39:db:01:7a:83:28:6e:03:fb:f5:bf: aa:d2:73:08:78:7c:8b:3d:ce:a2:cd:4a:ff:49:29: 71:ed:14:04:fb:5f:6a:39:81:11:d8:32:b1:82:c8: f8:e2:bf:24:21:20:68:0f:d0:e6:5b:e3:b9:ef:47: 59:65:6a:23:c9:86:dc:b2:4c:86:ed:46:9d:60:11: 23:0a:0b:4a:c1:a6:82:7d:6a:72:d7:d1:fa:03:3c: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A2:C0:6B:2C:57:A6:9F:99:80:7E:85:75:C8:5E:16:1A:ED:5B:66 X509v3 Authority Key Identifier: keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:69:3c:29:5e:e3:74:a3:73:23:48:af:ca:fb:4e:38:0a:f3: f8:21:57:a2:3c:0a:60:65:31:45:69:32:8a:06:57:60:9b:f1: 30:a7:3e:72:62:bf:e6:0a:2f:bb:4a:f4:3f:e7:52:4d:e2:7e: 47:a5:09:f1:c6:68:0b:6c:b9:57:fd:d1:3b:73:c6:12:50:ee: 83:a7:4f:39:b3:c2:d0:5c:16:54:44:04:fc:a6:59:a1:2e:35: 84:d8:00:e0:be:5a:6f:4c:5f:d0:19:92:dc:c6:17:14:e7:21: 15:19:37:29:79:0c:ce:ef:73:62:a8:e7:da:b2:49:fd:e0:16: 9f:33:93:67:e6:95:a3:2f:24:1d:cc:7b:83:d1:d4:5d:75:64: 15:c4:df:eb:b1:d5:3a:fa:4b:5b:58:98:fc:a3:56:2c:de:6a: ec:fa:b7:df:88:92:b5:a6:99:da:16:d5:69:52:09:f7:bf:c2: 8c:9d:39:3f:43:b3:e3:16:c4:2a:ce:c2:56:e4:b2:72:03:55: 32:79:71:a2:38:c9:a6:a3:99:ad:cb:29:3e:45:59:0c:f5:75: 7d:bc:5c:b6:87:1d:73:3a:f2:db:c6:f4:f0:95:df:0b:10:f9: c6:10:78:19:f6:a8:1f:3f:2d:22:5e:e5:ea:68:cc:44:3d:f7: ea:5b:05:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG QTRENEYwODkwHhcNMjUwNDAzMDMzNTMxWhcNMjUwNDEwMDMzNTMxWjAYMRYwFAYD VQQDEw02N2VlMDIwMy0zNjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDD7fOQvFwQ4D556a1KUbrBPaeTsgY9wVQtyC17JlWTfDHyNkqMB+zfFJxx3 3aaZ9ii5wl322C5E8I8aPqeMwRea3V3QmV/DEHlInEcYKDGyU4i95ommtCn/YCsv GasBo3QIa3p5Mnb2yF/SnE4xagGjEeTIb8pYHzpgYs+7047iEwBvnc9ubtQkwAd8 HWROwqqYuT/9WLeav+oXmHecfM92ODc7Nme9OdsBeoMobgP79b+q0nMIeHyLPc6i zUr/SSlx7RQE+19qOYER2DKxgsj44r8kISBoD9DmW+O570dZZWojyYbcskyG7Uad YBEjCgtKwaaCfWpy19H6AzwJvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaiwGss V6afmYB+hXXIXhYa7VtmMB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3 OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIy MEJaUWg5d0VTZ2Y2VFU4SWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6aTwpXuN0o3MjSK/K+044CvP4IVeiPApgZTFFaTKKBldgm/Ewpz5y Yr/mCi+7SvQ/51JN4n5HpQnxxmgLbLlX/dE7c8YSUO6Dp085s8LQXBZURAT8plmh LjWE2ADgvlpvTF/QGZLcxhcU5yEVGTcpeQzO73NiqOfaskn94BafM5Nn5pWjLyQd zHuD0dRddWQVxN/rsdU6+ktbWJj8o1Ys3mrs+rffiJK1ppnaFtVpUgn3v8KMnTk/ Q7PjFsQqzsJW5LJyA1UyeXGiOMmmo5mtyyk+RVkM9XV9vFy2hx1zOvLbxvTwld8L EPnGEHgZ9qgfPy0iXuXqaMxEPffqWwUW -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:04 2025 by rpki-client