$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: zbq7XucMhNVbRuFSQM86w2YpZAlc2MrKUk7G+C6ahAs= Subject key identifier: B2:08:A9:4E:5A:CE:90:0D:3B:93:93:96:79:A2:43:1A:05:2B:E8:44 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 0282 Signing time: Tue 13 May 2025 01:35:35 +0000 Manifest this update: Tue 13 May 2025 01:35:34 +0000 Manifest next update: Tue 20 May 2025 01:35:34 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: hQfom9cGSGouZgvZ1TT+Y9ueByNaaTvc6X0l24rJp2s=) 2: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: JjvbSqdanHSpYIcMXGp+ZgcFpNIRiyjhFnX93ubLPo8=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: voNhvFt+rl48+RXxjQWaNEIjDq7tMEczadZRVwJF374=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: J3Ksm9WsEr0TXjLLhaQloclJKmSPXVrqrAzTlf/eKtU=) 5: 3632957E441311EE8A03A472C4F9AE02.roa (hash: hc0GUtEKKEGW9gMZlTO39H3fWKoJ6wdGBAjVqIVrLxQ=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: SMaX3aa/UFh43gcKCcEgmT4cm/dWEuQesSH3aBzRpfE=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: 74i29heKayX8ulpi57w5YoL9mLrlBcexKja8YJG8ecM=) 8: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: I/sFHc7XYiJ8eT0AIMA2+7XdYKHUvmlkXtbK7T+Me2I=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: a76JQF1qiEmLZKSWyiAc52KnTZOIYMAyGXRjtxdQkfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: May 13 01:35:34 2025 GMT Not After : May 20 01:35:34 2025 GMT Subject: CN=6822a1e7-5560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:62:e0:60:1d:67:17:99:a8:1b:bb:3f:bb: 10:56:7e:3c:bb:9e:4e:c0:ae:4c:98:87:d4:07:3c: 94:53:0c:d0:12:6e:cf:b6:30:75:12:49:6e:99:f5: 58:92:ca:f6:9e:77:57:f6:67:d9:0f:fe:86:a3:83: 85:d3:86:8e:0a:a8:a8:fd:ca:5d:93:14:1f:15:1a: d7:e5:71:d2:b6:9f:f1:82:67:95:78:97:a3:74:c9: 94:d0:ce:49:e7:87:33:a1:a6:39:46:1e:13:76:01: d1:dc:63:26:d4:dc:6a:b6:79:55:ad:00:be:af:00: 5b:02:b5:0a:42:d7:8b:a8:2f:ea:be:2d:64:2c:c5: c4:06:99:25:e6:c5:db:ac:ef:16:e7:5d:7f:fa:00: ed:a8:f9:40:cd:e0:67:fd:90:c5:de:0e:ac:9f:88: f2:0c:95:4d:1f:f5:1f:62:d7:d0:ed:af:30:ce:5d: 2a:ff:d3:14:4b:69:80:0a:09:1b:dd:d1:94:71:d1: 20:f6:7a:b4:2f:00:1c:23:14:ba:90:e9:ba:54:d7: 82:f4:63:b8:98:dc:1d:06:f4:f4:ea:53:83:d5:ff: dd:6d:c2:28:ed:a6:a9:23:1a:ea:bd:55:5e:40:53: de:a5:7d:f8:41:24:e0:df:de:78:33:72:94:ff:ab: 5e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:08:A9:4E:5A:CE:90:0D:3B:93:93:96:79:A2:43:1A:05:2B:E8:44 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9c:16:1c:57:c0:63:b3:51:82:42:f5:15:89:f1:72:d1:cf: 5a:ba:00:b6:e0:96:4b:0e:7f:79:c9:35:bb:5b:13:74:c2:8c: e2:ca:80:58:17:71:2f:27:4e:00:0b:fc:26:29:29:24:87:a8: 70:48:d5:2c:eb:98:ca:5d:2a:cb:c8:16:5e:dc:6e:37:16:9f: b5:b8:59:bb:93:0f:00:43:de:c6:fd:61:38:14:85:e1:f2:71: ea:53:e3:66:97:23:54:bc:6c:b3:b7:7d:52:24:e4:f8:66:e1: 42:e8:61:b5:a6:0b:81:e9:36:85:82:cc:b0:49:75:69:28:bc: 59:b7:bf:d6:34:c7:e6:34:d2:59:d3:30:d3:e0:62:48:fb:15: 2f:00:2a:63:02:fa:b3:cd:0b:6e:72:63:82:f3:db:16:9c:18: 97:96:3c:de:df:c5:b2:1e:11:05:c5:16:4d:22:42:b1:c2:64: ef:9a:6f:23:77:e5:37:64:4e:9a:02:57:27:40:9b:06:01:1a: 64:27:93:17:ad:c4:15:38:4e:bd:ec:fe:a6:e2:41:a6:73:ec: 70:f8:b6:dd:b0:01:65:b2:7b:13:e5:d1:c5:45:48:6b:25:e5: 78:16:67:0c:b9:8b:f7:ec:2d:4b:d2:6c:1a:81:4e:85:a6:a6: 42:69:be:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjUwNTEzMDEzNTM0WhcNMjUwNTIwMDEzNTM0WjAYMRYwFAYD VQQDEw02ODIyYTFlNy01NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyBi4GAdZxeZqBu7P7sQVn48u55OwK5MmIfUBzyUUwzQEm7PtjB1EklumfVY ksr2nndX9mfZD/6Go4OF04aOCqio/cpdkxQfFRrX5XHStp/xgmeVeJejdMmU0M5J 54czoaY5Rh4TdgHR3GMm1NxqtnlVrQC+rwBbArUKQteLqC/qvi1kLMXEBpkl5sXb rO8W511/+gDtqPlAzeBn/ZDF3g6sn4jyDJVNH/UfYtfQ7a8wzl0q/9MUS2mACgkb 3dGUcdEg9nq0LwAcIxS6kOm6VNeC9GO4mNwdBvT06lOD1f/dbcIo7aapIxrqvVVe QFPepX34QSTg3954M3KU/6teuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIIqU5a zpANO5OTlnmiQxoFK+hEMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMnBYcV8Bjs1GCQvUVifFy0c9augC24JZLDn95yTW7WxN0woziyoBY F3EvJ04AC/wmKSkkh6hwSNUs65jKXSrLyBZe3G43Fp+1uFm7kw8AQ97G/WE4FIXh 8nHqU+NmlyNUvGyzt31SJOT4ZuFC6GG1pguB6TaFgsywSXVpKLxZt7/WNMfmNNJZ 0zDT4GJI+xUvACpjAvqzzQtucmOC89sWnBiXljze38WyHhEFxRZNIkKxwmTvmm8j d+U3ZE6aAlcnQJsGARpkJ5MXrcQVOE697P6m4kGmc+xw+LbdsAFlsnsT5dHFRUhr JeV4FmcMuYv37C1L0mwagU6FpqZCab5r -----END CERTIFICATE-----Generated at Tue May 13 09:12:11 2025 by rpki-client