$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: 6Ws8frnFA1v2QPZ5icuWWLrlgqABfKVUljSWjUobOAo= Subject key identifier: 80:01:9D:53:A9:12:7B:44:F6:D3:A6:60:56:6F:8A:15:63:93:67:08 Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: 014A Signing time: Sat 31 May 2025 03:56:15 +0000 Manifest this update: Sat 31 May 2025 03:56:14 +0000 Manifest next update: Sat 07 Jun 2025 03:56:14 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: is1duwoYGAwfITrSgnk52BgrB/viKjt8FSPT0FsKBiw=) 2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: LhhhRZ9rRf4tKP+wa+0RqCOvGKNOYKeYqEjxUmyjiLQ=) 3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: QFhCans14JnqpL9Jwv4rbJ2pg2u9bZu64HPsOXqSkiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: May 31 03:56:14 2025 GMT Not After : Jun 7 03:56:14 2025 GMT Subject: CN=683a7ddf-9f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:db:49:be:e5:65:c0:f8:5b:11:27:76:9d: 72:b4:b7:04:70:f0:88:9f:f0:01:0f:29:c7:3a:04: a8:cd:1b:48:47:0e:b6:35:d8:a7:88:0b:68:2a:f8: fd:52:1c:d6:54:09:fa:52:55:5f:d7:47:af:22:58: dc:a6:16:8f:bf:20:db:1b:80:32:6a:d8:4b:09:aa: c1:4f:d9:3e:99:35:58:95:aa:30:35:e4:52:97:76: ae:be:a6:0b:c7:0b:53:b1:96:8a:1d:de:8e:29:be: fd:26:f5:ba:af:e4:df:25:3d:50:56:f0:c1:d1:be: c9:7f:2f:a6:6e:00:bc:20:d4:1d:0d:e2:d6:1a:99: b4:8c:fb:cb:58:c2:dc:67:b2:9b:c5:e9:f8:14:98: db:e3:13:c6:b1:6c:11:cc:dc:8b:0a:7b:d4:b6:54: 3e:50:32:e5:58:50:81:f2:82:3b:cb:32:69:60:2d: 54:e3:d0:c1:f7:94:ff:1d:e1:1e:61:85:81:0d:f1: b0:8f:09:9e:01:05:c7:a3:e5:70:f9:35:9b:63:2e: bf:bd:d0:3d:13:78:04:d9:bd:9d:a3:f2:3f:da:f1: 56:e6:6a:1e:47:76:aa:8f:3e:94:9d:a1:6f:ce:9d: 65:94:a7:40:da:90:3d:aa:a8:3d:19:b2:73:71:d0: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:01:9D:53:A9:12:7B:44:F6:D3:A6:60:56:6F:8A:15:63:93:67:08 X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:66:de:b1:5d:0a:cd:a5:ad:c5:93:de:94:00:ff:dd:ec:c8: cd:44:08:a8:22:68:9a:6c:7c:dc:ac:c7:f9:0d:90:81:89:28: f3:cc:b7:a2:b5:93:f8:61:34:7f:94:73:8e:e2:09:5e:b2:8f: 6f:dd:4e:b9:51:8c:26:36:40:e8:35:79:98:ab:a4:4d:87:f7: 97:25:31:44:86:45:73:fa:15:50:06:51:e2:24:01:2c:71:16: 95:aa:78:c4:7c:7a:21:91:44:45:5c:22:d9:29:d5:6f:84:02: 8e:6d:af:b0:88:c1:23:e8:df:5b:44:67:ef:14:23:ab:8b:b6: 4a:5e:10:63:f4:df:73:5c:37:da:16:b9:4a:ae:e6:bd:34:ef: 9c:03:81:f7:d6:60:f8:83:2f:0d:a9:45:75:47:b2:c5:1e:1c: 14:79:b6:cc:a7:9b:85:8b:80:98:5b:fa:26:1e:da:9e:85:1c: 7b:2c:4b:5c:10:9c:0e:a9:0b:64:38:b5:50:c9:db:f2:83:51: a7:b8:1c:4b:88:88:fd:0c:64:97:4c:4d:50:a4:c5:d3:c9:b8: 37:32:e6:e5:d6:f2:e4:03:cd:3f:a3:82:76:5f:ad:e9:34:bb: 55:d2:dd:ee:93:6d:98:3c:b4:93:18:5f:59:62:52:aa:1e:74: 3a:40:f5:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjUwNTMxMDM1NjE0WhcNMjUwNjA3MDM1NjE0WjAYMRYwFAYD VQQDEw02ODNhN2RkZi05ZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2jbSb7lZcD4WxEndp1ytLcEcPCIn/ABDynHOgSozRtIRw62NdiniAtoKvj9 UhzWVAn6UlVf10evIljcphaPvyDbG4AyathLCarBT9k+mTVYlaowNeRSl3auvqYL xwtTsZaKHd6OKb79JvW6r+TfJT1QVvDB0b7Jfy+mbgC8INQdDeLWGpm0jPvLWMLc Z7Kbxen4FJjb4xPGsWwRzNyLCnvUtlQ+UDLlWFCB8oI7yzJpYC1U49DB95T/HeEe YYWBDfGwjwmeAQXHo+Vw+TWbYy6/vdA9E3gE2b2do/I/2vFW5moeR3aqjz6UnaFv zp1llKdA2pA9qqg9GbJzcdBnOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIABnVOp EntE9tOmYFZvihVjk2cIMB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzZt6xXQrNpa3Fk96UAP/d7MjNRAioImiabHzcrMf5DZCBiSjzzLei tZP4YTR/lHOO4gleso9v3U65UYwmNkDoNXmYq6RNh/eXJTFEhkVz+hVQBlHiJAEs cRaVqnjEfHohkURFXCLZKdVvhAKOba+wiMEj6N9bRGfvFCOri7ZKXhBj9N9zXDfa FrlKrua9NO+cA4H31mD4gy8NqUV1R7LFHhwUebbMp5uFi4CYW/omHtqehRx7LEtc EJwOqQtkOLVQydvyg1GnuBxLiIj9DGSXTE1QpMXTybg3Mubl1vLkA80/o4J2X63p NLtV0t3uk22YPLSTGF9ZYlKqHnQ6QPXK -----END CERTIFICATE-----Generated at Sat May 31 17:20:39 2025 by rpki-client