$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json) Hash identifier: 5GmUd/JKt34gLkMEpjZIq5q+6sVuCfFZfMUlP/SJneY= Subject key identifier: A9:42:8A:1E:15:AD:18:AE:1E:14:15:82:8A:CC:B3:DE:F1:11:7D:D1 Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft Manifest number: 0184 Signing time: Thu 03 Jul 2025 03:55:15 +0000 Manifest this update: Thu 03 Jul 2025 03:55:14 +0000 Manifest next update: Thu 10 Jul 2025 03:55:14 +0000 Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: EVgCC7k12go00mPDyjhPv/7deCgZH64HcbcYI52mmXE=) 2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 0HkSWoIqELp3ylHO6VoceHK/AkbpkOqVqSCheHiI6Uo=) 3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: n8VX91JedlAvIqLFu7Bl3QhQfuPAxDc2ekOd4lvr+ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Validity Not Before: Jul 3 03:55:14 2025 GMT Not After : Jul 10 03:55:14 2025 GMT Subject: CN=6865ff23-e7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:27:47:31:f3:40:76:0c:f1:d5:6a:cb:ac:c5: 07:61:f6:16:57:97:44:bd:35:6a:0c:6c:ba:d5:12: 7a:e6:eb:50:d4:a2:b0:53:1f:65:87:46:45:fe:53: f6:3c:77:5d:93:33:81:a4:66:bf:23:e0:ac:31:50: 9b:4e:c7:58:da:d9:00:ac:36:92:36:8f:1f:70:bb: e2:6a:94:82:4c:dd:be:bd:8b:0a:db:fd:ea:27:93: 85:52:3c:f3:62:37:24:17:f3:64:45:a2:16:b0:35: 9c:07:fc:ee:d7:51:cc:59:31:00:79:b5:19:f7:0a: 1e:94:78:63:d6:a7:5f:42:7a:c2:4f:06:67:64:07: 32:2e:8d:12:dd:00:b4:3b:dd:89:eb:b5:8c:84:19: cf:c9:7c:1a:e6:3c:1c:9e:94:25:87:10:f2:a2:65: 53:30:80:6c:02:74:28:68:38:e6:0b:d2:4e:f6:ea: d5:02:6d:63:e7:fd:10:6b:be:59:13:01:0a:f7:27: 77:88:dc:47:6d:fd:68:b3:a9:cd:67:7d:f2:d7:3b: 1f:9a:76:22:b5:62:b2:5a:38:0f:0e:d2:07:1c:4e: 21:37:bf:9c:2b:52:fa:de:4d:f0:bb:28:8e:d7:63: f7:56:f3:18:3f:d1:72:0c:96:8b:d3:64:a5:e0:c6: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:42:8A:1E:15:AD:18:AE:1E:14:15:82:8A:CC:B3:DE:F1:11:7D:D1 X509v3 Authority Key Identifier: keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:cd:04:dc:86:eb:dc:21:b6:59:2f:3a:1b:64:a7:44:63:4d: a3:b0:38:4a:57:27:80:c8:59:40:44:c6:ff:25:f7:d7:06:25: 20:ad:f7:2e:be:cd:df:c2:88:18:50:36:36:5e:75:bf:36:07: 22:ba:28:99:98:4c:59:71:db:81:96:ff:9d:9e:f5:bc:43:66: fe:bb:a3:5b:0d:1e:d2:a1:02:cf:97:d7:23:df:e8:ea:78:67: 8b:a4:f5:32:69:fd:f7:0e:f0:e0:76:bf:8c:a8:c5:36:2f:c3: f6:2c:84:b1:e6:02:d2:15:78:f8:07:f7:34:cd:25:f1:82:d6: e6:c9:94:f1:40:45:6c:70:30:42:94:4c:f4:dd:c8:05:15:6a: ba:58:6b:80:67:4b:ad:c3:51:ab:29:06:48:fc:3d:ca:68:09: 9e:1d:77:f0:87:03:84:43:67:41:2f:28:c9:6e:f1:a5:71:f8: b4:cf:cb:2d:63:48:3c:0f:53:77:0f:58:04:c2:6f:10:7c:d9: d2:fb:2d:7a:02:a7:88:10:43:c7:73:83:62:a2:09:e4:0d:7f: f1:ab:66:03:a3:ef:79:62:aa:74:9c:fb:93:6c:9e:9a:1a:07: f4:6d:53:a5:c5:bd:f4:2e:13:98:72:a1:b6:df:79:65:d9:05: b5:79:b5:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG QTRENEYwODkwHhcNMjUwNzAzMDM1NTE0WhcNMjUwNzEwMDM1NTE0WjAYMRYwFAYD VQQDEw02ODY1ZmYyMy1lN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ydHMfNAdgzx1WrLrMUHYfYWV5dEvTVqDGy61RJ65utQ1KKwUx9lh0ZF/lP2 PHddkzOBpGa/I+CsMVCbTsdY2tkArDaSNo8fcLviapSCTN2+vYsK2/3qJ5OFUjzz YjckF/NkRaIWsDWcB/zu11HMWTEAebUZ9woelHhj1qdfQnrCTwZnZAcyLo0S3QC0 O92J67WMhBnPyXwa5jwcnpQlhxDyomVTMIBsAnQoaDjmC9JO9urVAm1j5/0Qa75Z EwEK9yd3iNxHbf1os6nNZ33y1zsfmnYitWKyWjgPDtIHHE4hN7+cK1L63k3wuyiO 12P3VvMYP9FyDJaL02Sl4MZ6RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlCih4V rRiuHhQVgorMs97xEX3RMB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3 OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIy MEJaUWg5d0VTZ2Y2VFU4SWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgzQTchuvcIbZZLzobZKdEY02jsDhKVyeAyFlARMb/JffXBiUgrfcu vs3fwogYUDY2XnW/NgciuiiZmExZcduBlv+dnvW8Q2b+u6NbDR7SoQLPl9cj3+jq eGeLpPUyaf33DvDgdr+MqMU2L8P2LISx5gLSFXj4B/c0zSXxgtbmyZTxQEVscDBC lEz03cgFFWq6WGuAZ0utw1GrKQZI/D3KaAmeHXfwhwOEQ2dBLyjJbvGlcfi0z8st Y0g8D1N3D1gEwm8QfNnS+y16AqeIEEPHc4NiognkDX/xq2YDo+95Yqp0nPuTbJ6a Ggf0bVOlxb30LhOYcqG233ll2QW1ebVK -----END CERTIFICATE-----Generated at Thu Jul 3 09:32:18 2025 by rpki-client