$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft File: iunN4Qvgt38JGw0468GWfIvAkZ4.mft (raw, json) Hash identifier: Bu5rua8lX+xut+7lqH6plcf/+tt7qUEj8aUewVfGQik= Subject key identifier: 71:69:85:40:47:3F:25:D7:A9:09:94:89:FA:1B:3A:1F:05:04:4F:97 Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E Certificate serial: 06F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft Manifest number: 06E4 Signing time: Fri 14 Feb 2025 23:11:00 +0000 Manifest this update: Fri 14 Feb 2025 23:10:59 +0000 Manifest next update: Fri 21 Feb 2025 23:10:59 +0000 Files and hashes: 1: iunN4Qvgt38JGw0468GWfIvAkZ4.crl (hash: g7NjAdYB3smaWc6zyNUeYgGJmHJ8TCCM1Kr6vFF2Rqs=) 2: 490CDADA42F211EBB34A1A60C4F9AE02.roa (hash: j5L+2E8hgdO5g2Py+e+3EamQHHUmrpaxumPJliNw/Wc=) 3: 2100BD70343611EF97A95F35C4F9AE02.roa (hash: HQq1GzHEuZXBL5FuTD7w79nd+cfPjMIfL9rjnRYfJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8 Validity Not Before: Feb 14 23:10:59 2025 GMT Not After : Feb 21 23:10:59 2025 GMT Subject: CN=67afcd84-25cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c2:cc:48:2f:2c:21:b8:b5:72:a7:e8:a9:ce: b2:fe:a2:f6:ae:02:b0:0e:d4:b1:ea:bc:4e:c5:da: cd:75:e9:b7:f5:c6:81:9e:b5:b6:70:f3:82:e6:3b: 82:ca:f8:26:53:14:0c:97:4d:ab:33:73:9f:9a:b3: d6:00:6d:72:71:f2:98:9a:1e:84:dc:04:b5:2d:3b: 1c:f9:ce:61:45:87:e3:39:d1:6f:67:22:0d:8e:cf: 76:35:d1:ab:0f:66:1b:ee:3a:53:2b:e6:a3:d7:90: 5a:88:b1:02:f8:8b:05:ec:4f:ba:71:bd:73:64:24: 9d:d2:26:77:1e:5f:1b:6c:48:3a:b2:33:5e:39:ba: a4:50:2c:4e:c8:05:f9:57:29:16:bb:f5:bb:5b:a4: e3:c0:89:11:04:ad:0c:1b:a1:87:b3:92:83:21:fe: 04:67:b2:c9:f1:2d:17:b4:2f:8f:7f:c0:34:3b:87: 97:d8:87:1a:1d:49:db:ba:d6:20:d1:2b:5a:21:56: ad:d7:9d:9f:3f:df:ca:57:1e:91:12:7e:be:80:34: 09:9b:21:6d:be:65:18:08:cf:ab:d4:7e:17:99:44: 0d:50:fc:13:c1:96:d2:86:06:1a:9f:5d:1c:d2:30: 87:bd:a5:7f:4b:9f:84:69:20:21:88:7b:ff:a2:43: 43:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:69:85:40:47:3F:25:D7:A9:09:94:89:FA:1B:3A:1F:05:04:4F:97 X509v3 Authority Key Identifier: keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:7a:87:70:05:f2:88:0f:17:a5:6f:f8:be:e8:ef:c9:1d:c9: fb:05:84:0f:15:5a:d9:2d:3c:dc:26:24:7e:33:da:60:cb:e3: 93:e4:e7:7d:7b:1c:db:34:ee:fe:ed:71:ab:67:15:24:ad:bd: 8a:57:64:0d:07:e8:5e:91:cc:51:22:38:3d:fa:6a:43:2e:f6: f0:5d:de:ca:31:20:ad:27:7a:d9:f4:cb:87:72:06:7c:25:03: 37:24:1a:be:71:26:63:d7:cb:96:ca:3a:ae:86:80:17:3d:00: 74:63:a0:f0:a1:44:f7:a5:e0:fe:60:90:a4:ca:8f:8e:85:b5: 5d:ea:7a:7d:31:78:d9:52:81:0f:d3:13:5f:2b:67:f0:e7:58: f4:34:e6:1a:1a:50:b6:e9:1d:c0:8e:73:6b:e6:fa:29:12:ac: 77:7d:25:99:13:4f:5b:2d:8f:98:aa:a1:3a:db:f3:61:c8:ec: 4b:4b:2b:60:e5:61:c9:0f:05:6d:a4:99:71:a5:7b:01:84:6b: 47:d8:b9:7f:a8:14:b3:fe:c1:98:0e:cd:71:b5:f7:46:de:7c: 64:3e:50:1c:75:f6:1d:e4:4d:d4:b5:71:31:1d:ff:d9:01:c1: 65:9a:19:d5:17:54:ca:ea:a8:a5:80:38:56:18:ed:64:5d:29: 56:49:9e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKDhBRTlDREUxMEJFMEI3N0YwOTFCMEQzOEVCQzE5NjdD OEJDMDkxOUUwHhcNMjUwMjE0MjMxMDU5WhcNMjUwMjIxMjMxMDU5WjAYMRYwFAYD VQQDEw02N2FmY2Q4NC0yNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cLMSC8sIbi1cqfoqc6y/qL2rgKwDtSx6rxOxdrNdem39caBnrW2cPOC5juC yvgmUxQMl02rM3OfmrPWAG1ycfKYmh6E3AS1LTsc+c5hRYfjOdFvZyINjs92NdGr D2Yb7jpTK+aj15BaiLEC+IsF7E+6cb1zZCSd0iZ3Hl8bbEg6sjNeObqkUCxOyAX5 VykWu/W7W6TjwIkRBK0MG6GHs5KDIf4EZ7LJ8S0XtC+Pf8A0O4eX2IcaHUnbutYg 0StaIVat152fP9/KVx6REn6+gDQJmyFtvmUYCM+r1H4XmUQNUPwTwZbShgYan10c 0jCHvaV/S5+EaSAhiHv/okNDuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFphUBH PyXXqQmUifobOh8FBE+XMB8GA1UdIwQYMBaAFIrpzeEL4Ld/CRsNOOvBlnyLwJGe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC8zOURDRjc1NDQy RjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3QzOEpHdzA0NjhHV2ZJdkFr WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l1bk40UXZndDM4Skd3MDQ2OEdXZkl2QWtaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC8zOURDRjc1NDQyRjAxMUVCOEEwOUM3NUFDNEY5QUUwMi9pdW5ONFF2Z3Qz OEpHdzA0NjhHV2ZJdkFrWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1eodwBfKIDxelb/i+6O/JHcn7BYQPFVrZLTzcJiR+M9pgy+OT5Od9 exzbNO7+7XGrZxUkrb2KV2QNB+hekcxRIjg9+mpDLvbwXd7KMSCtJ3rZ9MuHcgZ8 JQM3JBq+cSZj18uWyjquhoAXPQB0Y6DwoUT3peD+YJCkyo+OhbVd6np9MXjZUoEP 0xNfK2fw51j0NOYaGlC26R3AjnNr5vopEqx3fSWZE09bLY+YqqE62/NhyOxLSytg 5WHJDwVtpJlxpXsBhGtH2Ll/qBSz/sGYDs1xtfdG3nxkPlAcdfYd5E3UtXExHf/Z AcFlmhnVF1TK6qilgDhWGO1kXSlWSZ4d -----END CERTIFICATE-----Generated at Sun Feb 16 20:13:08 2025 by rpki-client