$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: qFNQLZwiZquXjPYe3M9y5kc/2AXKpVTT3ItZUJiQVKo= Subject key identifier: D5:79:13:8D:8D:09:D9:65:8C:65:F6:3E:E1:BA:A5:F2:03:F0:5A:00 Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 0437 Signing time: Wed 12 Mar 2025 20:38:20 +0000 Manifest this update: Wed 12 Mar 2025 20:38:20 +0000 Manifest next update: Wed 19 Mar 2025 20:38:20 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: jDRG+8QxoKS4ns8H7eo8xWhcVvp5my83woTOwFGMcxI=) 2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: lWr4ljnX2/yEjyiQoz0OgG+PVsyj+yPc7sx1n1rIGWY=) 3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: vGjVKyfhGouNwPbyNw8ueo4siItyyWgs22PxyDfp4xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 20:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0 Validity Not Before: Mar 12 20:38:20 2025 GMT Not After : Mar 19 20:38:20 2025 GMT Subject: CN=67d1f0bc-1b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:79:62:57:00:f9:87:99:57:0e:3b:08:60:af: 9f:cc:0e:05:1a:35:20:21:47:e5:19:ac:b9:00:ab: c7:cf:36:72:a9:02:2a:c0:a2:ec:9f:bd:d8:f7:97: ec:76:2e:11:ec:b9:31:6d:11:9b:5a:9f:07:e3:a6: 4e:86:33:dc:b2:be:d0:44:40:50:ed:76:5f:12:9e: 98:e5:9f:9a:c3:db:10:d0:fe:c5:90:d1:6b:42:40: a2:a2:dc:2e:7d:1b:f5:01:0d:9c:7d:e8:b6:5e:0e: 5f:07:ec:ad:02:d2:25:9a:c9:d5:46:40:40:01:2d: a0:c1:0b:f3:26:b3:a9:52:dd:fd:98:43:2f:64:1b: 62:9b:cc:12:2a:3e:8b:3d:fa:68:ef:14:10:c8:57: 30:28:e3:12:27:5f:37:d8:69:21:1e:6a:e5:5d:75: 9e:94:a8:5c:0c:7c:f6:40:c1:52:fe:66:0f:62:1a: d2:2f:67:6e:41:a3:cb:85:14:ed:c6:ee:81:70:93: e6:79:39:67:5a:8c:09:30:de:49:da:ca:e9:bc:ca: 46:73:b2:32:85:a7:ba:be:2d:61:ac:42:62:01:2f: 14:ed:3e:cc:04:9c:c2:5b:7e:59:2f:73:60:85:ce: 42:1c:f5:3c:79:39:a8:43:46:05:49:6a:30:7f:4f: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:79:13:8D:8D:09:D9:65:8C:65:F6:3E:E1:BA:A5:F2:03:F0:5A:00 X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4b:66:3e:bd:ab:15:e4:5c:b0:15:d7:63:d4:cd:6d:24:de: c6:c6:0c:7a:fa:8b:7f:ff:04:b2:05:67:57:9c:0a:4a:69:f9: 26:df:d0:c3:7a:e8:9d:76:20:87:a0:64:23:20:f7:25:6b:6c: ab:89:ea:73:b8:c7:d3:0e:5c:76:56:c5:70:66:2c:b6:17:ee: 92:b8:66:c6:ae:bc:b4:39:4e:fc:bf:42:c0:34:7d:3b:09:8f: cb:f3:7e:11:7a:89:ea:74:f8:19:c0:37:fc:1d:49:7a:93:5f: 1a:8d:2c:6b:8e:39:70:bb:b0:98:55:d7:73:25:0c:5b:ad:f5: 2f:c0:4e:96:19:e2:9a:14:4d:2f:68:77:91:51:2b:c0:dd:35: 6a:7f:7f:3c:5c:d9:44:ed:ba:9d:7e:aa:11:ea:44:5f:38:8e: 0f:ac:35:fd:30:e6:04:39:6f:f6:e8:0a:e8:be:79:fe:85:87: 1e:57:87:0b:9d:5b:29:05:f7:86:10:ea:4c:9e:86:e2:a8:03: 36:f9:16:12:8e:b8:0e:0c:30:65:0b:77:17:d8:fe:84:c6:de: aa:d3:54:44:0b:94:d5:ae:ff:66:ad:2d:e3:ea:c9:d1:e1:53: 1a:80:34:39:d3:de:eb:9b:38:d3:6d:c2:cd:01:9f:73:94:9d: 4a:ff:b9:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUwMzEyMjAzODIwWhcNMjUwMzE5MjAzODIwWjAYMRYwFAYD VQQDEw02N2QxZjBiYy0xYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HliVwD5h5lXDjsIYK+fzA4FGjUgIUflGay5AKvHzzZyqQIqwKLsn73Y95fs di4R7LkxbRGbWp8H46ZOhjPcsr7QREBQ7XZfEp6Y5Z+aw9sQ0P7FkNFrQkCiotwu fRv1AQ2cfei2Xg5fB+ytAtIlmsnVRkBAAS2gwQvzJrOpUt39mEMvZBtim8wSKj6L Pfpo7xQQyFcwKOMSJ1832GkhHmrlXXWelKhcDHz2QMFS/mYPYhrSL2duQaPLhRTt xu6BcJPmeTlnWowJMN5J2srpvMpGc7Iyhae6vi1hrEJiAS8U7T7MBJzCW35ZL3Ng hc5CHPU8eTmoQ0YFSWowf089pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNV5E42N CdlljGX2PuG6pfID8FoAMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvS2Y+vasV5FywFddj1M1tJN7Gxgx6+ot//wSyBWdXnApKafkm39DD euiddiCHoGQjIPcla2yriepzuMfTDlx2VsVwZiy2F+6SuGbGrry0OU78v0LANH07 CY/L834ReonqdPgZwDf8HUl6k18ajSxrjjlwu7CYVddzJQxbrfUvwE6WGeKaFE0v aHeRUSvA3TVqf388XNlE7bqdfqoR6kRfOI4PrDX9MOYEOW/26Arovnn+hYceV4cL nVspBfeGEOpMnobiqAM2+RYSjrgODDBlC3cX2P6Ext6q01REC5TVrv9mrS3j6snR 4VMagDQ5097rmzjTbcLNAZ9zlJ1K/7lg -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:57 2025 by rpki-client