$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: Xlfdm2D4C3h8pSXjhl57xp6iXWUgthjE8lyMNNm7TcU= Subject key identifier: A7:68:9F:23:DC:D2:05:5F:61:37:D0:75:E1:31:C3:8D:52:12:73:86 Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 0460 Signing time: Mon 02 Jun 2025 21:02:26 +0000 Manifest this update: Mon 02 Jun 2025 21:02:25 +0000 Manifest next update: Mon 09 Jun 2025 21:02:25 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: n/2GJbI/gSrai++c8E892qgeBJkDmt9Ike7u/mYDWoo=) 2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: lWr4ljnX2/yEjyiQoz0OgG+PVsyj+yPc7sx1n1rIGWY=) 3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: vGjVKyfhGouNwPbyNw8ueo4siItyyWgs22PxyDfp4xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Jun 2 21:02:25 2025 GMT Not After : Jun 9 21:02:25 2025 GMT Subject: CN=683e1161-0281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:1e:92:c7:bc:33:af:0b:4e:8f:1f:aa:a8: 43:81:11:91:3b:a2:b2:37:38:4d:ca:76:5a:a3:47: 02:82:e3:5f:7d:69:eb:ea:18:7c:d8:b1:34:77:f5: 38:b8:29:78:e7:dc:20:e8:1a:0e:27:23:83:b5:25: 57:81:90:ec:d4:e1:43:38:82:f7:46:f7:2b:66:46: af:22:bb:d5:d5:dc:99:3d:4f:8f:ea:f9:09:62:99: e3:0e:dd:b1:9b:6e:90:cd:06:c7:3a:4a:4e:5f:7a: 50:c6:bb:bc:98:52:89:f1:a7:12:28:52:34:05:45: cb:43:34:b5:5d:bb:33:89:70:ea:10:95:e1:2a:1b: fb:69:00:b0:29:64:89:85:4e:70:76:89:6b:92:9b: cc:59:62:45:6e:1d:1f:47:17:0d:97:7e:63:b0:e5: 05:77:d5:4d:ac:5f:39:03:4a:cd:d0:e5:7f:ce:2f: 7a:c3:e9:86:81:ac:2a:27:8d:5c:d7:ff:04:7c:48: 8c:04:17:f5:b9:ef:d6:5b:50:00:26:55:58:62:20: e4:28:b0:e5:5c:17:67:af:4d:33:73:a3:72:a1:8b: 6e:f6:fb:a7:b9:bd:b5:53:61:e2:65:aa:e9:fb:14: 97:0e:e0:31:9d:00:4d:2b:e2:ec:6e:f2:9b:71:73: 37:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:68:9F:23:DC:D2:05:5F:61:37:D0:75:E1:31:C3:8D:52:12:73:86 X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:31:c1:15:5f:39:53:c5:7f:2a:ca:d3:f1:df:67:ec:09:72: fa:43:fc:1c:34:69:24:f6:ed:27:ee:33:7e:fa:41:ec:c4:27: 69:35:24:ce:2f:e6:94:f9:14:d3:93:64:b7:66:8e:13:1c:03: 10:a5:b9:9b:de:97:fa:a2:d2:bb:c2:55:c7:18:b4:e6:59:8f: 07:d4:8b:c0:ac:e4:51:a9:dc:2a:82:6a:b4:2d:be:42:ed:75: e8:0d:4f:1a:b3:ac:75:c0:10:36:10:03:c2:a4:ee:16:5a:74: 55:ae:4a:b2:a1:9e:8f:0a:9b:9e:dc:c3:97:7a:b4:fc:16:34: 8a:df:1f:44:29:1f:59:0d:85:42:68:0e:0a:c8:43:d6:a7:33: b9:9a:d8:6f:bf:68:f2:c8:e0:86:e7:11:7b:28:9f:a6:75:96: 4e:0f:b5:9c:0b:83:3a:58:f4:bc:af:3b:8d:a9:cb:20:91:f8: f8:fb:1a:e6:33:7a:f2:78:cc:f9:f6:7c:5a:a1:a8:88:e9:bc: a2:01:f7:36:b6:4a:65:6d:d9:0d:95:02:67:aa:46:80:15:6a: bc:bd:25:02:19:4d:41:b1:32:79:d7:5d:c8:ad:76:a8:6c:07: 7a:86:0c:24:8f:37:a6:08:64:e2:2e:02:38:85:f8:55:60:00: a8:61:d3:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUwNjAyMjEwMjI1WhcNMjUwNjA5MjEwMjI1WjAYMRYwFAYD VQQDEw02ODNlMTE2MS0wMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyEekse8M68LTo8fqqhDgRGRO6KyNzhNynZao0cCguNffWnr6hh82LE0d/U4 uCl459wg6BoOJyODtSVXgZDs1OFDOIL3RvcrZkavIrvV1dyZPU+P6vkJYpnjDt2x m26QzQbHOkpOX3pQxru8mFKJ8acSKFI0BUXLQzS1XbsziXDqEJXhKhv7aQCwKWSJ hU5wdolrkpvMWWJFbh0fRxcNl35jsOUFd9VNrF85A0rN0OV/zi96w+mGgawqJ41c 1/8EfEiMBBf1ue/WW1AAJlVYYiDkKLDlXBdnr00zc6NyoYtu9vunub21U2HiZarp +xSXDuAxnQBNK+LsbvKbcXM31wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdonyPc 0gVfYTfQdeExw41SEnOGMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVMcEVXzlTxX8qytPx32fsCXL6Q/wcNGkk9u0n7jN++kHsxCdpNSTO L+aU+RTTk2S3Zo4THAMQpbmb3pf6otK7wlXHGLTmWY8H1IvArORRqdwqgmq0Lb5C 7XXoDU8as6x1wBA2EAPCpO4WWnRVrkqyoZ6PCpue3MOXerT8FjSK3x9EKR9ZDYVC aA4KyEPWpzO5mthvv2jyyOCG5xF7KJ+mdZZOD7WcC4M6WPS8rzuNqcsgkfj4+xrm M3ryeMz59nxaoaiI6byiAfc2tkplbdkNlQJnqkaAFWq8vSUCGU1BsTJ5113IrXao bAd6hgwkjzemCGTiLgI4hfhVYACoYdPO -----END CERTIFICATE-----Generated at Tue Jun 3 23:47:37 2025 by rpki-client