$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft File: 8q-Rix8UisrksDlFAoTeSQ15Dlk.mft (raw, json) Hash identifier: R1Hs/O3sAsPLfx2HW9ThRoHoP14IHe9JNK3HZ86MsH8= Subject key identifier: 6B:F2:DE:21:99:85:23:A4:F8:32:70:D7:1C:6F:C3:64:87:92:CA:3B Authority key identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 Certificate issuer: /CN=A9114EF6/serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft Manifest number: 0F Signing time: Wed 05 Feb 2025 06:29:28 +0000 Manifest this update: Wed 05 Feb 2025 06:29:27 +0000 Manifest next update: Wed 12 Feb 2025 06:29:27 +0000 Files and hashes: 1: 8q-Rix8UisrksDlFAoTeSQ15Dlk.crl (hash: ny1aJBaeiM5KYc9YsCG53UBP+MNCL5dCp/M/cKxsPuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6 Validity Not Before: Feb 5 06:29:27 2025 GMT Not After : Feb 12 06:29:27 2025 GMT Subject: CN=67a30547-47d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:46:ec:d8:04:32:41:fa:ef:3a:64:28:c2:f8: c1:b8:e9:a3:c4:25:26:bd:7b:d7:d4:ed:50:12:92: a9:5c:e5:bc:95:a0:aa:b9:21:0e:0d:e3:2a:12:0e: 76:53:1e:7f:30:17:2a:b3:e3:a0:f5:83:5d:d8:79: 05:02:a2:22:63:af:07:0d:a1:eb:06:e0:61:7f:59: 10:ef:a7:60:d4:78:67:6e:3c:4f:b1:fd:f2:75:71: c9:19:29:62:2a:c3:b0:46:cc:4c:1a:53:0f:ae:5f: 75:8c:28:6c:21:07:e9:f4:a5:cd:08:2b:3f:97:4c: bc:35:60:f0:e0:f7:1a:d3:18:5f:c6:bc:39:70:98: 22:41:ac:10:35:21:53:82:4e:7a:47:08:f0:c5:fa: d5:f2:5a:be:6f:44:03:40:53:7a:42:5a:27:ed:9c: be:84:8d:02:58:b0:81:83:06:ff:c7:16:b2:81:02: 12:c3:c7:04:01:84:5f:55:5a:d2:85:88:00:b1:04: 2f:28:3f:f9:84:da:a0:c1:1c:8d:07:46:95:66:08: 5d:fe:67:57:bb:52:17:da:9d:1c:85:b6:84:7b:7e: 4f:4f:50:58:bc:93:80:e4:26:6f:df:e6:ce:9d:e2: bb:8f:fe:5c:bd:cd:e3:98:ee:03:6f:fb:99:35:7c: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F2:DE:21:99:85:23:A4:F8:32:70:D7:1C:6F:C3:64:87:92:CA:3B X509v3 Authority Key Identifier: keyid:F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:24:e8:6e:f8:2b:93:6b:e0:ee:6c:94:0e:af:1d:ba:a0:ef: fa:57:63:f0:84:e7:b7:22:9d:7b:44:01:fe:a8:36:6a:85:6d: 0f:e6:6b:fa:82:f2:46:ee:2a:26:33:4e:e9:f9:7a:ff:b0:37: 1d:ac:c9:1a:c2:6e:1f:39:0f:6d:24:50:28:27:4b:c8:16:1e: 73:5d:70:ab:18:f2:43:bb:05:be:6a:c4:da:32:c5:c0:bd:4f: ca:86:4a:64:ba:77:21:42:15:e7:1e:f1:74:51:7d:fc:75:52: 49:00:88:9d:de:53:a1:0f:01:82:a3:b7:c8:54:a2:8b:91:07: 2c:e6:89:e9:9d:76:f8:0e:9b:71:9a:af:f6:09:6e:71:be:b3: ac:d7:77:50:fb:0d:8b:24:e4:89:c8:f3:a3:1d:bf:b5:87:fc: 53:d6:0e:88:00:08:f5:82:b7:5a:d7:61:81:49:8a:b8:b5:53: f1:2e:0b:1e:58:51:bb:a8:a4:59:55:40:41:9c:26:33:4d:86: 50:cb:04:70:08:7d:1b:8e:24:9b:21:d0:fc:31:1f:16:54:ea: 47:35:f5:bc:d0:d8:9e:e3:c4:d0:35:4f:f1:51:da:70:b2:23: 42:e1:8d:53:d2:a5:8b:f9:0f:aa:0a:ad:c3:a2:38:be:49:17: 17:44:82:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoRjJBRjkxOEIxRjE0OEFDQUU0QjAzOTQ1MDI4NERFNDkw RDc5MEU1OTAeFw0yNTAyMDUwNjI5MjdaFw0yNTAyMTIwNjI5MjdaMBgxFjAUBgNV BAMTDTY3YTMwNTQ3LTQ3ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRRuzYBDJB+u86ZCjC+MG46aPEJSa9e9fU7VASkqlc5byVoKq5IQ4N4yoSDnZT Hn8wFyqz46D1g13YeQUCoiJjrwcNoesG4GF/WRDvp2DUeGduPE+x/fJ1cckZKWIq w7BGzEwaUw+uX3WMKGwhB+n0pc0IKz+XTLw1YPDg9xrTGF/GvDlwmCJBrBA1IVOC TnpHCPDF+tXyWr5vRANAU3pCWiftnL6EjQJYsIGDBv/HFrKBAhLDxwQBhF9VWtKF iACxBC8oP/mE2qDBHI0HRpVmCF3+Z1e7UhfanRyFtoR7fk9PUFi8k4DkJm/f5s6d 4ruP/ly9zeOY7gNv+5k1fKmnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa/LeIZmF I6T4MnDXHG/DZIeSyjswHwYDVR0jBBgwFoAU8q+Rix8UisrksDlFAoTeSQ15Dlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2Lzk2NDYzNDU4RDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNya3NEbEZBb1RlU1ExNURs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHEtUml4OFVpc3Jrc0RsRkFvVGVTUTE1RGxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2Lzk2NDYzNDU4RDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNy a3NEbEZBb1RlU1ExNURsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALQk6G74K5Nr4O5slA6vHbqg7/pXY/CE57cinXtEAf6oNmqFbQ/ma/qC 8kbuKiYzTun5ev+wNx2syRrCbh85D20kUCgnS8gWHnNdcKsY8kO7Bb5qxNoyxcC9 T8qGSmS6dyFCFece8XRRffx1UkkAiJ3eU6EPAYKjt8hUoouRByzmiemddvgOm3Ga r/YJbnG+s6zXd1D7DYsk5InI86Mdv7WH/FPWDogACPWCt1rXYYFJiri1U/EuCx5Y UbuopFlVQEGcJjNNhlDLBHAIfRuOJJsh0PwxHxZU6kc19bzQ2J7jxNA1T/FR2nCy I0LhjVPSpYv5D6oKrcOiOL5JFxdEgg0= -----END CERTIFICATE-----Generated at Thu Feb 6 04:43:29 2025 by rpki-client