$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft File: 4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json) Hash identifier: zsmEGYa+Wxftv9dQHbjfymyHNoFp6qF9QPxDtv7YyxM= Subject key identifier: FE:06:E3:DF:72:96:B9:61:4C:5E:8F:D5:00:3C:7F:8E:94:E1:1B:86 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 12E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft Manifest number: 1262 Signing time: Sun 16 Feb 2025 17:28:25 +0000 Manifest this update: Sun 16 Feb 2025 17:28:24 +0000 Manifest next update: Sun 23 Feb 2025 17:28:24 +0000 Files and hashes: 1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: FsvVNGRGW2PWSYj+gIF0qPLl+EDmb93yeZG5K2vjRTQ=) 2: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: jk5NfHi6Ak10G3qvwwRLBuA+9+MuEQTJVNCIOpp4ijc=) 3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: o0TBqHxczgW2iXEBGTx5nw86Q8zs7jfB/2ZiH2tcXBM=) 4: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: J5LxjosxnnfdXaMAoaZ/PL1BfkizkN1e40crDyxzXgM=) 5: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GdNQEvmzlHfA6Ec8mmP8z6x+jIWG7iAnHlvJMuf8oD8=) 6: F6EBC724B24211EF99C46E64C4F9AE02.roa (hash: q2Nqb/hrcV90WNVexwR/NHfj/Q0Tv7rC0yL9DHC6X3M=) 7: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 08uSCXwlwYJnGMem9e+DAMnS4EN8A9/G3dvb9XlzVbk=) 8: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: 21MmIK/xKiS7JETWE4m4JFsmki6dx7l2EGE0grkpOo4=) 9: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: RAc63GKSag+ebIvPIiKjuswG8wAgmCrcqifdzue1EA8=) 10: FDB29514452511E98F23AE4FC4F9AE02.roa (hash: pyXuQQMaaHpRKrd64JzrpDvcZINK8BGOr87BtX8mKCw=) 11: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: duhPOulpnnqLJOw021zARLEkW5qMCDlozjaUuWOU1CE=) 12: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: RBZSewamTngEQkgjLa0OkH4nQrMAppxSjX91nS2Wpzo=) 13: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: PiSgVIn+A3YVcVJ8J1LY1Q9+m55+zt9vsCjTvJtZIKc=) 14: 0038D872072E11EB8914E540C4F9AE02.roa (hash: bM9HkA9Kov8pVlsp7/+B8Lhib1zUTj1baRTYw1iNq78=) 15: D8E0EC82927711E985E0423AC4F9AE02.roa (hash: +fJoTern1FEL3hWeQl1ij5UIzJGzXQGhkR014UlHjWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4832 (0x12e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE Validity Not Before: Feb 16 17:28:24 2025 GMT Not After : Feb 23 17:28:24 2025 GMT Subject: CN=67b22038-ad83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:59:c9:09:82:5f:73:44:b4:a1:da:12:63: db:93:1a:7d:75:91:68:f7:71:93:f3:e7:da:93:04: 84:f0:d5:63:d2:2f:60:d7:66:ed:ec:ff:c6:59:b2: 76:f4:d4:a7:96:90:e1:a1:5f:e1:c7:4d:72:8f:3e: 38:55:3a:2c:19:42:0c:71:8a:73:25:27:05:eb:52: b0:f6:5c:25:7a:8b:00:31:20:3c:2b:4f:f3:3c:83: 4d:8c:dd:9e:41:86:ce:3e:0f:ae:23:bb:8f:a6:2a: 53:34:78:79:66:a6:03:09:1d:8d:d8:96:b5:33:ea: b4:52:29:40:f9:77:3b:88:cc:83:17:41:c0:2a:73: 2a:48:3a:fa:67:56:5f:10:3c:4a:61:e1:53:0a:a3: 98:3e:84:c2:c8:ef:e2:68:36:33:df:63:dd:d6:f4: 1f:af:91:d5:c9:fe:e7:50:88:9d:fe:17:e2:72:c0: 5f:41:ce:3c:ed:31:dd:3e:d6:fe:f0:d2:52:17:55: 01:1f:83:31:4c:54:c4:dc:97:20:99:8b:ef:3c:e5: c2:38:84:26:14:27:89:62:cb:64:79:98:c9:78:bf: f6:84:31:2b:56:73:57:4e:6c:55:8f:03:3b:99:1b: 03:dc:3b:a9:be:65:6a:3f:e6:3f:f5:e1:72:40:4f: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:06:E3:DF:72:96:B9:61:4C:5E:8F:D5:00:3C:7F:8E:94:E1:1B:86 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b2:20:ef:a7:fa:1c:63:9c:69:a9:c4:82:4a:27:5f:27:ec: e7:fd:6f:6f:e7:e6:53:40:26:c2:f3:8f:33:c7:ea:38:e5:04: 24:60:eb:4e:d2:82:02:42:82:a0:e4:21:7a:70:f2:68:78:ba: 8f:92:5c:d0:f8:bc:bf:c9:a4:99:e8:3c:ae:41:2a:f0:40:0b: 1b:e3:59:ef:5c:dc:68:4e:1b:49:ca:9f:dd:88:35:f7:17:56: af:a8:17:44:87:44:fd:0c:08:d4:cd:9c:36:03:14:5b:ca:92: 0a:87:36:32:48:46:35:35:b1:c8:67:17:0e:b9:06:de:59:1e: 69:8b:db:d3:ed:4f:2b:13:fc:ac:e5:30:3f:25:06:a2:30:d9: 5c:76:8d:a5:8b:ce:58:c8:37:76:68:31:1b:29:c3:54:6d:1f: a1:c1:72:9b:bf:e7:03:63:69:c8:2d:51:78:cb:6b:eb:0a:a3: 32:f8:68:44:f9:82:27:df:9f:82:a4:b4:47:c8:27:8a:42:c2: a7:26:63:11:03:a0:45:d8:32:5f:7b:97:28:a9:ce:e1:28:b4: f3:c9:ef:ea:f1:40:ce:65:cc:28:a3:9b:ee:e9:c8:a5:9b:90: 50:74:e9:f5:60:8d:94:5c:89:ab:d2:40:93:4c:c5:a4:cf:a1: 36:b8:63:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjUwMjE2MTcyODI0WhcNMjUwMjIzMTcyODI0WjAYMRYwFAYD VQQDEw02N2IyMjAzOC1hZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX9ZyQmCX3NEtKHaEmPbkxp9dZFo93GT8+fakwSE8NVj0i9g12bt7P/GWbJ2 9NSnlpDhoV/hx01yjz44VTosGUIMcYpzJScF61Kw9lwleosAMSA8K0/zPINNjN2e QYbOPg+uI7uPpipTNHh5ZqYDCR2N2Ja1M+q0UilA+Xc7iMyDF0HAKnMqSDr6Z1Zf EDxKYeFTCqOYPoTCyO/iaDYz32Pd1vQfr5HVyf7nUIid/hficsBfQc487THdPtb+ 8NJSF1UBH4MxTFTE3JcgmYvvPOXCOIQmFCeJYstkeZjJeL/2hDErVnNXTmxVjwM7 mRsD3DupvmVqP+Y/9eFyQE8hJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4G499y lrlhTF6P1QA8f46U4RuGMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS82MTY2NkMwRUQ2ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZm dXg0eFlHalIwQmNTWUxzY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUsiDvp/ocY5xpqcSCSidfJ+zn/W9v5+ZTQCbC848zx+o45QQkYOtO 0oICQoKg5CF6cPJoeLqPklzQ+Ly/yaSZ6DyuQSrwQAsb41nvXNxoThtJyp/diDX3 F1avqBdEh0T9DAjUzZw2AxRbypIKhzYySEY1NbHIZxcOuQbeWR5pi9vT7U8rE/ys 5TA/JQaiMNlcdo2li85YyDd2aDEbKcNUbR+hwXKbv+cDY2nILVF4y2vrCqMy+GhE +YIn35+CpLRHyCeKQsKnJmMRA6BF2DJfe5coqc7hKLTzye/q8UDOZcwoo5vu6cil m5BQdOn1YI2UXImr0kCTTMWkz6E2uGPJ -----END CERTIFICATE-----Generated at Sun Feb 16 20:23:07 2025 by rpki-client