$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft File: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json) Hash identifier: eaW0AK984hskCY7Vn3f76+7XDh59kpAIziM+neTcyxA= Subject key identifier: E9:95:D7:37:29:E0:12:F7:0A:7F:49:A8:1B:A1:A5:CC:15:22:CA:C7 Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E Certificate issuer: /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft Manifest number: 01A4 Signing time: Fri 09 May 2025 02:27:32 +0000 Manifest this update: Fri 09 May 2025 02:27:32 +0000 Manifest next update: Fri 16 May 2025 02:27:32 +0000 Files and hashes: 1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: BNnqUfh0w1J7cB29iNpnHm02pYIAvkgIDwW7mfEeEYM=) 2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: n8o3xnaflWVbOqkp6JntoRCYSrJ8NdzSSuqGUsQkMzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142091, serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Validity Not Before: May 9 02:27:32 2025 GMT Not After : May 16 02:27:32 2025 GMT Subject: CN=681d6814-7ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:8b:96:fb:05:83:4d:59:4e:1c:ce:1b:e6: 37:af:22:49:a0:9c:e1:3e:03:7f:27:64:d5:d9:b4: 55:b1:ca:2e:6d:fa:f5:b2:fc:1c:4c:37:81:f5:e0: 0d:14:b5:94:7a:ad:ac:d6:5d:3c:79:67:96:7b:32: cf:32:e9:19:a8:c7:ff:cb:84:68:a2:83:e7:4a:e4: 53:7f:da:79:4e:9b:40:61:5d:af:9a:1d:b1:a2:62: 5a:80:95:d8:86:e8:42:af:cb:d1:b9:79:e0:a9:50: 8d:2a:e2:b3:a0:b4:65:ae:0c:c2:c8:48:08:be:9e: a8:58:11:8a:c0:00:37:e7:d7:ac:83:1a:a9:e5:ba: 0e:11:fb:3d:6c:c0:66:40:7d:bf:a6:05:a2:b2:2a: b0:47:6c:db:44:69:cf:e4:61:65:93:17:50:98:2f: 0e:cc:64:28:1b:34:53:f9:1a:10:5f:4d:4f:c7:e5: f6:ba:53:1b:82:1c:4d:db:6a:77:12:11:84:eb:1c: 2d:22:8e:6f:6a:0d:c1:66:2d:62:0d:f3:b6:b3:fb: bb:75:7b:0d:70:29:8d:18:0a:e1:fb:b6:5b:e5:c2: 03:9a:39:02:11:a1:f8:40:d6:84:e5:46:a8:e7:ce: e4:b4:0c:b7:9a:0b:f1:96:22:24:f8:37:bb:e0:24: b9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:95:D7:37:29:E0:12:F7:0A:7F:49:A8:1B:A1:A5:CC:15:22:CA:C7 X509v3 Authority Key Identifier: keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:1a:db:0f:c4:3f:ce:81:0e:0e:25:7d:51:f6:84:e7:80:a2: 72:0a:39:62:e0:50:82:4c:04:88:de:4e:21:6b:12:ad:02:6d: d9:9e:b8:3e:bb:d1:56:09:0d:d4:3d:cb:7c:37:cf:93:e3:c7: 8f:06:ec:49:91:59:eb:7d:74:cd:66:b7:df:bf:6f:c3:9f:f8: 11:77:a2:92:7c:c9:8b:d3:b6:a6:47:e0:14:6f:da:f7:5c:19: 89:9c:f8:05:a6:52:2c:9f:e1:83:c6:3f:04:5d:70:d8:8e:d5: be:ea:91:9c:94:d1:26:0c:2b:2e:2c:16:cb:f4:da:25:70:cf: ed:5b:a4:87:ae:5c:7b:41:86:49:f4:31:9e:23:05:ab:92:fb: 59:c1:d8:50:ce:d9:8c:ec:06:79:73:a0:f7:ff:4e:bb:14:0e: 07:4d:9b:5c:a5:a1:5d:7e:9e:db:fe:ec:3d:75:f0:d2:f9:f7: e6:79:76:cb:1f:58:a1:b9:ee:eb:c5:54:29:88:83:5f:bc:08: 01:eb:c3:f9:b3:9f:db:0d:9a:1b:07:7a:d0:f5:8f:04:78:43: 86:8c:a0:dd:cb:4f:a0:35:af:d2:8f:2d:01:6c:87:6f:23:9f: 31:95:b4:5b:d2:67:24:c1:3c:ae:fe:94:02:70:f0:b8:ee:18: 45:05:b3:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwOTExMTAvBgNVBAUTKEUwODgxM0JEMTg4Q0RDMkFCRjUwMThERTZGRTM3RjQ0 Mzc0NzIwOEUwHhcNMjUwNTA5MDIyNzMyWhcNMjUwNTE2MDIyNzMyWjAYMRYwFAYD VQQDEw02ODFkNjgxNC03Y2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzP+LlvsFg01ZThzOG+Y3ryJJoJzhPgN/J2TV2bRVscoubfr1svwcTDeB9eAN FLWUeq2s1l08eWeWezLPMukZqMf/y4RoooPnSuRTf9p5TptAYV2vmh2xomJagJXY huhCr8vRuXngqVCNKuKzoLRlrgzCyEgIvp6oWBGKwAA359esgxqp5boOEfs9bMBm QH2/pgWisiqwR2zbRGnP5GFlkxdQmC8OzGQoGzRT+RoQX01Px+X2ulMbghxN22p3 EhGE6xwtIo5vag3BZi1iDfO2s/u7dXsNcCmNGArh+7Zb5cIDmjkCEaH4QNaE5Uao 587ktAy3mgvxliIk+De74CS5aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmV1zcp 4BL3Cn9JqBuhpcwVIsrHMB8GA1UdIwQYMBaAFOCIE70YjNwqv1AY3m/jf0Q3RyCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjA5MS9BQkM0RDQ0NEFC NTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTNDcV9VQmplYi1OX1JEZEhJ STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJZ1R2UmlNM0NxX1VCamViLU5fUkRkSElJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjA5MS9BQkM0RDQ0NEFCNTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTND cV9VQmplYi1OX1JEZEhJSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyGtsPxD/OgQ4OJX1R9oTngKJyCjli4FCCTASI3k4haxKtAm3Znrg+ u9FWCQ3UPct8N8+T48ePBuxJkVnrfXTNZrffv2/Dn/gRd6KSfMmL07amR+AUb9r3 XBmJnPgFplIsn+GDxj8EXXDYjtW+6pGclNEmDCsuLBbL9NolcM/tW6SHrlx7QYZJ 9DGeIwWrkvtZwdhQztmM7AZ5c6D3/067FA4HTZtcpaFdfp7b/uw9dfDS+ffmeXbL H1ihue7rxVQpiINfvAgB68P5s5/bDZobB3rQ9Y8EeEOGjKDdy0+gNa/Sjy0BbIdv I58xlbRb0mckwTyu/pQCcPC47hhFBbMP -----END CERTIFICATE-----Generated at Sun May 11 02:00:20 2025 by rpki-client