$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft File: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json) Hash identifier: QKW+kElxZE4TwiBuxAeFni5GCWnMq519LFLKqgtKw0g= Subject key identifier: 52:D4:7A:1B:A1:5F:BF:54:69:02:29:06:4E:BC:4A:12:30:00:51:1A Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E Certificate issuer: /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft Manifest number: 01AE Signing time: Sat 31 May 2025 02:52:52 +0000 Manifest this update: Sat 31 May 2025 02:52:52 +0000 Manifest next update: Sat 07 Jun 2025 02:52:52 +0000 Files and hashes: 1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: jtZ7KZbmFnbPWDAujmLR04z1vZvrjW2V8HvdL7p8Jus=) 2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: n8o3xnaflWVbOqkp6JntoRCYSrJ8NdzSSuqGUsQkMzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142091, serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Validity Not Before: May 31 02:52:52 2025 GMT Not After : Jun 7 02:52:52 2025 GMT Subject: CN=683a6f04-10f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:b8:2e:3b:8c:b7:29:cd:b3:a7:2c:ad:67: 0f:62:68:5e:46:18:d0:f5:53:b5:9a:d8:b6:a4:aa: 7c:17:07:bd:3f:c8:fa:92:89:69:39:88:ad:0e:0f: 3e:5f:bf:cf:4d:fe:7b:37:71:a8:73:24:84:b3:94: 9b:2e:ed:91:e0:52:e8:79:25:c8:94:47:d7:8c:9e: 3b:2f:bb:1c:cb:c8:4e:5f:34:6b:c8:2b:8c:b3:a7: 4d:d4:0d:2d:87:2f:da:87:12:cd:8b:c1:ce:6c:f7: c8:7c:a3:94:0f:ee:dc:af:b1:19:b3:05:43:ce:1e: 14:98:c3:63:52:52:fb:b4:a7:dd:ea:e8:52:f3:ad: 5d:d2:10:61:77:f2:02:0f:5e:d6:43:11:4e:76:aa: 74:e4:97:c1:4a:b9:91:d7:b5:ad:1b:00:e8:aa:e8: f5:42:f0:cf:70:43:84:91:0e:ab:e3:28:8c:a4:d6: 3c:55:03:1f:72:9f:6c:7e:c5:9d:72:a6:4f:05:4c: c1:b0:f0:1b:69:80:c6:45:ac:ef:73:54:4e:ef:20: 93:4f:79:90:7c:6f:dd:42:82:85:d0:38:7f:99:c9: fa:17:1d:26:1b:7e:93:5f:53:73:43:a9:51:56:26: 13:c8:10:9f:a7:c4:51:db:ad:ec:c5:05:75:e8:6c: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D4:7A:1B:A1:5F:BF:54:69:02:29:06:4E:BC:4A:12:30:00:51:1A X509v3 Authority Key Identifier: keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ce:63:79:ec:6c:59:db:e8:94:9d:05:e2:5a:0a:2d:cf:35: 51:d1:c3:7f:29:7b:10:88:2b:88:30:88:1e:f0:20:d6:47:bd: eb:0b:c0:89:1b:33:3b:38:60:54:8e:c9:a4:af:4d:ca:4a:b6: 8b:fb:96:c5:32:55:05:7b:22:c5:2d:42:76:f2:5b:26:15:59: 3b:f6:09:76:33:0f:3d:34:45:74:9f:c9:58:9f:38:58:13:60: 22:65:85:9f:3d:a5:c6:16:7f:f9:7d:68:ec:d4:7b:76:d3:c8: f5:3a:ec:db:03:b2:22:c2:b5:11:1c:38:be:6b:f6:7e:90:80: 74:59:f2:fb:99:38:c6:58:d2:c0:60:04:29:84:58:2e:8c:91: 18:14:e7:2a:bf:6f:8c:ad:2d:3e:78:df:56:f5:ff:7c:bc:dc: 7a:e1:52:01:b3:d2:46:c6:ba:67:87:d2:92:8b:6a:be:e8:87: 8c:f4:1b:f5:d4:47:de:23:72:ff:0c:9d:01:7f:20:04:78:35: b9:80:6a:dd:8f:4d:4c:ac:1d:e6:13:43:20:15:a5:91:1b:00: 3a:40:b0:a1:70:8b:85:aa:cc:15:f6:11:b3:4d:f1:69:e5:11: f6:2f:dd:2f:42:51:0c:ec:11:91:16:c3:d2:32:d6:f2:90:8b: 66:72:a9:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwOTExMTAvBgNVBAUTKEUwODgxM0JEMTg4Q0RDMkFCRjUwMThERTZGRTM3RjQ0 Mzc0NzIwOEUwHhcNMjUwNTMxMDI1MjUyWhcNMjUwNjA3MDI1MjUyWjAYMRYwFAYD VQQDEw02ODNhNmYwNC0xMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg+4LjuMtynNs6csrWcPYmheRhjQ9VO1mti2pKp8Fwe9P8j6kolpOYitDg8+ X7/PTf57N3GocySEs5SbLu2R4FLoeSXIlEfXjJ47L7scy8hOXzRryCuMs6dN1A0t hy/ahxLNi8HObPfIfKOUD+7cr7EZswVDzh4UmMNjUlL7tKfd6uhS861d0hBhd/IC D17WQxFOdqp05JfBSrmR17WtGwDoquj1QvDPcEOEkQ6r4yiMpNY8VQMfcp9sfsWd cqZPBUzBsPAbaYDGRazvc1RO7yCTT3mQfG/dQoKF0Dh/mcn6Fx0mG36TX1NzQ6lR ViYTyBCfp8RR263sxQV16GxSlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLUehuh X79UaQIpBk68ShIwAFEaMB8GA1UdIwQYMBaAFOCIE70YjNwqv1AY3m/jf0Q3RyCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjA5MS9BQkM0RDQ0NEFC NTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTNDcV9VQmplYi1OX1JEZEhJ STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJZ1R2UmlNM0NxX1VCamViLU5fUkRkSElJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjA5MS9BQkM0RDQ0NEFCNTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTND cV9VQmplYi1OX1JEZEhJSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMzmN57GxZ2+iUnQXiWgotzzVR0cN/KXsQiCuIMIge8CDWR73rC8CJ GzM7OGBUjsmkr03KSraL+5bFMlUFeyLFLUJ28lsmFVk79gl2Mw89NEV0n8lYnzhY E2AiZYWfPaXGFn/5fWjs1Ht208j1OuzbA7IiwrURHDi+a/Z+kIB0WfL7mTjGWNLA YAQphFgujJEYFOcqv2+MrS0+eN9W9f98vNx64VIBs9JGxrpnh9KSi2q+6IeM9Bv1 1EfeI3L/DJ0BfyAEeDW5gGrdj01MrB3mE0MgFaWRGwA6QLChcIuFqswV9hGzTfFp 5RH2L90vQlEM7BGRFsPSMtbykItmcqk3 -----END CERTIFICATE-----Generated at Sat May 31 15:06:09 2025 by rpki-client