$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: 147xgRRwCPxeb1JT6rPZ/1H2kcH7XYWOtvInU31QmkQ= Subject key identifier: 92:C8:78:13:CB:A0:A7:CF:3E:A0:36:78:75:BF:92:3C:B2:2F:0C:4E Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: 0142 Signing time: Tue 13 May 2025 03:35:25 +0000 Manifest this update: Tue 13 May 2025 03:35:24 +0000 Manifest next update: Tue 20 May 2025 03:35:24 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: D5PvSG/pOpqtn+SsMwBRlMB99436YIBXh3HoujEYTEE=) 2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: LhhhRZ9rRf4tKP+wa+0RqCOvGKNOYKeYqEjxUmyjiLQ=) 3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: QFhCans14JnqpL9Jwv4rbJ2pg2u9bZu64HPsOXqSkiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: May 13 03:35:24 2025 GMT Not After : May 20 03:35:24 2025 GMT Subject: CN=6822bdfd-36b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:be:f3:7d:64:33:23:e9:15:de:5c:cb:4c: 4b:4e:63:14:40:eb:a5:22:cd:98:da:93:ac:83:1c: e6:30:30:3b:b7:ad:e7:11:21:05:8c:6c:b8:77:b2: e6:f1:bf:ba:af:f7:6a:00:ea:56:48:16:84:1f:47: 1e:38:13:e1:f9:a3:3f:f4:7a:3f:c6:73:47:18:62: 01:c2:5c:54:0e:b8:dd:c9:e5:98:2d:9f:40:60:ef: ed:bf:37:4e:98:e9:39:70:71:a4:76:42:6a:a9:0e: 22:4c:ce:e5:be:90:22:aa:7c:43:a6:c3:29:81:e3: 3e:94:18:59:15:16:9f:a3:07:ac:49:10:07:32:b8: 2c:ae:85:3c:80:13:c2:4d:4d:aa:18:79:07:5c:d0: 0b:cb:87:8f:69:00:2d:13:48:38:b6:d0:6a:3a:68: 27:fb:09:18:f2:fd:a2:56:0c:41:0a:0a:78:32:cf: cf:74:5b:24:4c:d5:5a:f8:35:b9:36:64:9d:11:2b: e9:39:da:e6:f6:70:3c:45:33:6d:7b:b8:66:1e:c4: 65:2e:bb:4a:ce:5c:9d:b3:80:7c:44:01:36:1e:3d: 42:08:9b:86:9d:6e:fe:d6:db:d9:6e:8b:6d:c8:dd: 56:f8:94:67:fb:57:0c:ae:b7:56:a7:60:6e:dc:7c: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C8:78:13:CB:A0:A7:CF:3E:A0:36:78:75:BF:92:3C:B2:2F:0C:4E X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f8:a7:8c:81:e4:7d:14:72:8f:cb:fc:cb:1c:55:08:ea:38: 23:4f:26:54:d7:eb:d9:1b:03:1d:e6:42:7f:7e:d8:a0:08:6c: 42:fd:3a:0c:d4:5e:6c:15:52:6e:76:bd:89:cd:70:be:a2:4c: 44:15:77:5e:81:96:fb:78:0e:cd:85:c5:5f:bb:f6:96:a7:91: 91:1f:a3:5b:0a:f3:e8:f9:c9:f7:d5:73:aa:ac:ce:36:c1:aa: e1:91:e0:3c:f2:ba:50:b6:21:4a:73:61:0e:97:ab:42:23:ec: 70:6a:f5:24:92:37:e2:e4:40:69:95:22:28:72:5b:72:f3:ce: 5d:44:f1:90:a0:ce:99:7f:f2:24:cd:b4:8c:cb:87:3c:19:c4: 0b:83:df:5b:3b:ee:1a:6e:64:ba:f4:2c:e3:15:8b:ea:70:b9: b3:d7:4c:76:2d:d1:ae:61:04:a8:9d:b2:66:31:50:e3:8d:58: c0:7b:0c:58:34:7f:23:39:9e:22:a8:c1:db:4b:68:6c:21:8b: a6:63:14:35:05:29:0b:f7:a1:36:bb:f1:80:d5:19:29:38:31: bc:fd:28:18:d2:a4:a1:a1:54:b8:18:1f:21:63:af:a5:77:af: eb:ec:7c:cc:22:da:6c:4c:92:1a:fd:f6:cd:53:f2:1c:ad:fb: f9:fe:04:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjUwNTEzMDMzNTI0WhcNMjUwNTIwMDMzNTI0WjAYMRYwFAYD VQQDEw02ODIyYmRmZC0zNmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7K+831kMyPpFd5cy0xLTmMUQOulIs2Y2pOsgxzmMDA7t63nESEFjGy4d7Lm 8b+6r/dqAOpWSBaEH0ceOBPh+aM/9Ho/xnNHGGIBwlxUDrjdyeWYLZ9AYO/tvzdO mOk5cHGkdkJqqQ4iTM7lvpAiqnxDpsMpgeM+lBhZFRafowesSRAHMrgsroU8gBPC TU2qGHkHXNALy4ePaQAtE0g4ttBqOmgn+wkY8v2iVgxBCgp4Ms/PdFskTNVa+DW5 NmSdESvpOdrm9nA8RTNte7hmHsRlLrtKzlyds4B8RAE2Hj1CCJuGnW7+1tvZbott yN1W+JRn+1cMrrdWp2Bu3Hyy9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLIeBPL oKfPPqA2eHW/kjyyLwxOMB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz+KeMgeR9FHKPy/zLHFUI6jgjTyZU1+vZGwMd5kJ/ftigCGxC/ToM 1F5sFVJudr2JzXC+okxEFXdegZb7eA7NhcVfu/aWp5GRH6NbCvPo+cn31XOqrM42 warhkeA88rpQtiFKc2EOl6tCI+xwavUkkjfi5EBplSIoclty885dRPGQoM6Zf/Ik zbSMy4c8GcQLg99bO+4abmS69CzjFYvqcLmz10x2LdGuYQSonbJmMVDjjVjAewxY NH8jOZ4iqMHbS2hsIYumYxQ1BSkL96E2u/GA1RkpODG8/SgY0qShoVS4GB8hY6+l d6/r7HzMItpsTJIa/fbNU/Icrfv5/gSr -----END CERTIFICATE-----Generated at Wed May 14 19:37:52 2025 by rpki-client