$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json) Hash identifier: +pYg33O5/YJTTsCAt+2/j5vQgXNbF0qAJKZGTb68u2s= Subject key identifier: EE:2C:ED:02:94:AB:FA:FC:AC:2C:7F:39:53:93:86:B4:B5:56:E9:0E Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft Manifest number: 0191 Signing time: Sat 29 Mar 2025 02:59:40 +0000 Manifest this update: Sat 29 Mar 2025 02:59:40 +0000 Manifest next update: Sat 05 Apr 2025 02:59:39 +0000 Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: tfy4mWg2eywumTd+6RkSc4XDViccK4kJJNCD4FFEjeA=) 2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: V89TVKMG86FWKeqAC80eNKWm9QeM+Xm489cfb+DFW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469 Validity Not Before: Mar 29 02:59:40 2025 GMT Not After : Apr 5 02:59:39 2025 GMT Subject: CN=67e7621c-4fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f5:83:d6:6d:a4:bc:11:c9:d0:7a:85:9e:21: b3:40:80:16:f3:1b:75:e4:97:cf:51:db:38:34:e9: cd:8c:70:cb:8a:63:b8:70:a0:0a:ba:e1:d6:8c:ec: 58:1f:18:d9:f6:27:72:06:66:8e:c3:22:11:dc:9d: 20:43:f6:ea:eb:b9:ac:dc:e7:37:81:97:e9:2e:11: c2:cd:ec:fd:92:e4:a5:5a:8a:bc:bf:3f:72:a1:41: dd:6c:56:a8:e6:80:b3:f1:44:53:38:7c:ae:58:04: 69:92:0d:bc:ec:d0:24:3f:61:03:76:c4:a7:98:4e: fa:22:9d:15:b6:c5:a9:e2:7a:0b:eb:3a:a6:20:7f: 23:fa:6c:7e:da:c6:f1:8f:94:d8:22:95:eb:55:ea: 14:37:d1:80:8d:ce:bf:ea:8b:24:f7:69:ae:3d:dd: 63:7e:fe:6f:2c:1b:3e:cc:6a:32:a5:f2:c7:f9:00: 55:bc:fb:35:ba:3d:7d:cf:4a:2b:5a:30:42:36:90: 86:e6:23:ed:20:0e:53:14:b3:72:b8:b8:66:b5:37: 84:46:f2:fc:13:2a:4c:7e:7d:27:0d:1d:8b:d0:6a: 86:6e:6c:82:11:c2:d8:bd:1c:c3:0c:93:5f:02:2d: 9f:ac:16:03:ba:73:18:38:cf:95:e0:90:22:5b:f7: 6f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2C:ED:02:94:AB:FA:FC:AC:2C:7F:39:53:93:86:B4:B5:56:E9:0E X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e0:80:eb:83:52:f4:f4:86:ab:d5:a7:81:7b:53:9f:de:8d: e1:d6:65:d4:4f:ec:90:7e:95:43:60:eb:5d:e0:98:4c:8d:22: 21:77:bd:f1:4e:0c:ef:2c:1d:6c:76:55:a0:97:ec:17:bc:f0: a0:ee:b8:39:50:4d:c0:29:f0:6b:4c:c4:71:22:f4:26:65:b9: 41:8d:87:4f:43:63:5a:76:e1:32:56:df:fc:b0:3f:ed:12:18: 1c:c3:89:cb:ca:b0:d8:d1:6c:c9:82:7f:8c:60:55:9e:c0:74: 3e:92:db:f1:7f:e8:4d:72:d4:e7:42:cd:b9:4a:74:70:36:dd: 1b:d0:65:a6:1a:36:31:5f:46:98:06:b7:44:7d:52:04:df:16: 19:11:92:50:c8:32:13:9a:d8:b2:b9:ff:a4:90:1a:7f:89:2f: 76:95:cd:f4:d4:b6:16:f0:08:e1:2d:6c:e9:9c:aa:f7:03:cd: b0:aa:7b:cd:e4:82:ff:e5:d2:bc:cc:b9:3b:10:f7:88:f8:84: a8:e0:7d:64:fd:91:c9:32:bb:4b:a5:6b:99:f1:ae:09:4c:32: c7:dd:74:78:7c:e0:82:e8:0e:be:ac:8f:e1:f1:e4:1b:90:04: 27:e1:58:ef:8e:fe:e9:9b:5e:f5:60:44:4d:8e:bb:d7:dd:51: 87:75:c9:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjUwMzI5MDI1OTQwWhcNMjUwNDA1MDI1OTM5WjAYMRYwFAYD VQQDEw02N2U3NjIxYy00ZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PWD1m2kvBHJ0HqFniGzQIAW8xt15JfPUds4NOnNjHDLimO4cKAKuuHWjOxY HxjZ9idyBmaOwyIR3J0gQ/bq67ms3Oc3gZfpLhHCzez9kuSlWoq8vz9yoUHdbFao 5oCz8URTOHyuWARpkg287NAkP2EDdsSnmE76Ip0VtsWp4noL6zqmIH8j+mx+2sbx j5TYIpXrVeoUN9GAjc6/6osk92muPd1jfv5vLBs+zGoypfLH+QBVvPs1uj19z0or WjBCNpCG5iPtIA5TFLNyuLhmtTeERvL8EypMfn0nDR2L0GqGbmyCEcLYvRzDDJNf Ai2frBYDunMYOM+V4JAiW/dvqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4s7QKU q/r8rCx/OVOThrS1VukOMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT4IDrg1L09Iar1aeBe1Of3o3h1mXUT+yQfpVDYOtd4JhMjSIhd73x TgzvLB1sdlWgl+wXvPCg7rg5UE3AKfBrTMRxIvQmZblBjYdPQ2NaduEyVt/8sD/t Ehgcw4nLyrDY0WzJgn+MYFWewHQ+ktvxf+hNctTnQs25SnRwNt0b0GWmGjYxX0aY BrdEfVIE3xYZEZJQyDITmtiyuf+kkBp/iS92lc301LYW8AjhLWzpnKr3A82wqnvN 5IL/5dK8zLk7EPeI+ISo4H1k/ZHJMrtLpWuZ8a4JTDLH3XR4fOCC6A6+rI/h8eQb kAQn4Vjvjv7pm171YERNjrvX3VGHdcm4 -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:48 2025 by rpki-client