$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json) Hash identifier: uVN9fuXLxBTF1OFtJbxjIwCy4ZZGBnaXSmG6fMNjRF4= Subject key identifier: 52:2E:8F:D1:B8:44:4D:2A:7E:28:D8:A6:B2:0F:7E:EE:44:73:F6:92 Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft Manifest number: 018D Signing time: Mon 21 Jul 2025 03:47:38 +0000 Manifest this update: Mon 21 Jul 2025 03:47:38 +0000 Manifest next update: Mon 28 Jul 2025 03:47:38 +0000 Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: xtPr9Wbnjvqb3AfIzMibnIkTc4SK6jJrq3J7a0EC0ys=) 2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 0HkSWoIqELp3ylHO6VoceHK/AkbpkOqVqSCheHiI6Uo=) 3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: n8VX91JedlAvIqLFu7Bl3QhQfuPAxDc2ekOd4lvr+ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Validity Not Before: Jul 21 03:47:38 2025 GMT Not After : Jul 28 03:47:38 2025 GMT Subject: CN=687db85a-1474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:67:1c:c3:c0:9b:b0:0f:48:1d:8a:56:24: 57:d4:8c:b4:8e:d2:c9:3a:c8:64:39:c0:90:e4:1f: 97:c0:a2:cb:d0:33:1c:59:52:2c:ab:7f:52:b9:e3: 53:60:87:90:07:82:2e:69:2f:01:a1:d9:a4:5e:a8: ac:0f:18:5d:3f:b0:23:60:ea:9f:16:09:c8:d9:25: af:61:1e:bc:a6:b3:b5:da:1a:5b:b1:72:24:dc:6d: 5b:ad:cc:6c:a1:fa:43:41:59:2b:bd:2c:63:e3:22: c8:37:39:7f:03:67:93:cf:de:25:3a:8e:55:fb:e0: 20:46:c6:37:6a:b0:16:80:e6:aa:f9:b8:0b:a8:e6: 91:01:de:46:a6:20:26:a1:e0:bd:de:aa:42:bb:00: 3a:93:a8:24:cf:b8:3f:6a:b5:79:28:2d:9f:64:f6: b3:34:fb:5b:17:a9:12:de:8a:de:ac:f8:9b:53:4e: b6:0c:c4:e2:7c:86:96:fd:cc:f0:dd:26:55:98:62: d3:ce:d3:be:b8:9a:8c:60:52:96:1f:7d:33:ba:50: 28:67:b0:71:11:1f:4f:6b:dd:02:bf:0f:9d:a3:07: d9:ea:2c:f1:6f:9e:48:b8:bf:4d:41:db:fb:2e:54: be:92:3d:11:e2:1d:43:f9:d0:c4:aa:85:79:b5:df: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2E:8F:D1:B8:44:4D:2A:7E:28:D8:A6:B2:0F:7E:EE:44:73:F6:92 X509v3 Authority Key Identifier: keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:54:01:7d:72:3a:6c:5f:6a:9b:f9:31:86:2d:f7:49:13:e3: 25:d4:9a:94:88:0e:cf:0d:53:9c:c6:8b:3d:5a:5b:3f:95:26: 17:92:9a:b3:29:4d:3a:a4:86:b3:96:72:d0:cf:7c:56:1d:38: 57:ca:98:ae:af:59:a3:7a:e5:10:03:f7:c6:ca:b0:5a:37:d4: 15:19:db:6b:6f:2a:d6:b5:35:7b:73:56:a7:bf:6f:e1:f6:43: c8:48:82:f3:06:50:5f:0f:30:6e:c3:f1:1c:71:e6:4b:cd:4d: ee:1a:f3:01:f1:a3:02:96:e6:2d:02:53:fb:21:b0:db:24:d2: 1a:10:9b:b9:0b:8a:20:9c:78:ac:38:5e:75:ea:ab:6c:01:2c: 6f:ef:e4:56:af:e1:d9:37:37:17:36:5c:18:f2:53:b8:46:95: 61:05:2e:1c:19:3d:90:4c:95:7c:db:6d:04:8f:c6:4c:ff:1f: b6:80:82:a4:40:76:91:c1:91:2b:a5:fb:34:30:73:47:48:d6: 34:e7:96:63:b4:6b:a2:7f:95:e0:8d:6a:70:9f:eb:b5:b5:c7: d1:f8:62:9c:8b:5c:a9:8b:92:39:ef:99:79:0a:a2:7a:aa:01: a1:e2:77:77:2c:ec:98:ac:8d:fa:a9:c3:e7:93:4e:4f:60:e6: 23:18:2d:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG QTRENEYwODkwHhcNMjUwNzIxMDM0NzM4WhcNMjUwNzI4MDM0NzM4WjAYMRYwFAYD VQQDEw02ODdkYjg1YS0xNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6NnHMPAm7APSB2KViRX1Iy0jtLJOshkOcCQ5B+XwKLL0DMcWVIsq39SueNT YIeQB4IuaS8BodmkXqisDxhdP7AjYOqfFgnI2SWvYR68prO12hpbsXIk3G1brcxs ofpDQVkrvSxj4yLINzl/A2eTz94lOo5V++AgRsY3arAWgOaq+bgLqOaRAd5GpiAm oeC93qpCuwA6k6gkz7g/arV5KC2fZPazNPtbF6kS3orerPibU062DMTifIaW/czw 3SZVmGLTztO+uJqMYFKWH30zulAoZ7BxER9Pa90Cvw+dowfZ6izxb55IuL9NQdv7 LlS+kj0R4h1D+dDEqoV5td9ANwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIuj9G4 RE0qfijYprIPfu5Ec/aSMB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3 OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIy MEJaUWg5d0VTZ2Y2VFU4SWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVVAF9cjpsX2qb+TGGLfdJE+Ml1JqUiA7PDVOcxos9Wls/lSYXkpqz KU06pIazlnLQz3xWHThXypiur1mjeuUQA/fGyrBaN9QVGdtrbyrWtTV7c1anv2/h 9kPISILzBlBfDzBuw/EcceZLzU3uGvMB8aMCluYtAlP7IbDbJNIaEJu5C4ognHis OF516qtsASxv7+RWr+HZNzcXNlwY8lO4RpVhBS4cGT2QTJV8220Ej8ZM/x+2gIKk QHaRwZErpfs0MHNHSNY055ZjtGuif5XgjWpwn+u1tcfR+GKci1ypi5I575l5CqJ6 qgGh4nd3LOyYrI36qcPnk05PYOYjGC3X -----END CERTIFICATE-----Generated at Mon Jul 21 07:17:09 2025 by rpki-client