$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft File: b2dYEDhTTU2848gbXy2IYcU2tnw.mft (raw, json) Hash identifier: nlVRd4W/JMi+sflPUHc0rDklNM4B05lLsxlTJVbo6Is= Subject key identifier: 14:7A:6E:B8:02:C5:F7:7D:74:87:67:74:42:AB:52:29:5A:C4:60:40 Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft Manifest number: 011F Signing time: Sat 15 Feb 2025 05:50:17 +0000 Manifest this update: Sat 15 Feb 2025 05:50:16 +0000 Manifest next update: Sat 22 Feb 2025 05:50:16 +0000 Files and hashes: 1: b2dYEDhTTU2848gbXy2IYcU2tnw.crl (hash: ahPPYv/myP679KcLg8f8oEMOGlKwU53yoZp/Yxv4V0U=) 2: 9B1DE7226D8F11EE9BD22B40C4F9AE02.roa (hash: H5pK79+DkVT9bgtQkuk9t/grxvSc0nRDSs3JR8icAh8=) 3: EAA5793C367411EF98F49F1CC4F9AE02.roa (hash: /RysZ9FFrvGFWhnZrMrChDiZQuIFgZEdesdb5vE5fVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117836 Validity Not Before: Feb 15 05:50:16 2025 GMT Not After : Feb 22 05:50:16 2025 GMT Subject: CN=67b02b18-091b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8d:16:ef:44:df:c9:00:7d:1b:6a:9c:2c:41: 83:44:83:f9:31:07:d4:7b:02:76:cb:1d:da:b5:b4: 20:99:d8:b8:28:d9:ea:18:01:51:4d:2f:7b:df:ea: 3a:dd:32:4a:af:20:72:87:9f:f9:50:20:7b:31:87: ef:b2:3b:30:16:f7:b4:e3:9b:f4:62:61:e3:8f:ce: b2:1a:1e:79:f4:1b:0d:f2:c3:86:c8:df:12:8f:6f: 74:7d:43:f0:d2:b7:48:86:7f:df:73:26:b7:a6:5e: c1:0f:34:c3:ee:29:d7:9b:45:f4:10:88:68:82:0b: 04:e7:d2:a9:b6:65:e3:9c:22:59:84:e5:86:3f:ba: 93:48:eb:c7:fb:f2:b0:83:cd:45:c3:fd:95:a7:b7: f2:77:68:87:f5:71:6c:a5:ad:70:32:02:14:d0:6f: 98:5d:61:21:0c:8c:01:52:dc:37:ca:45:fa:dc:25: 18:19:94:6a:0a:0b:54:dd:27:58:b6:cc:52:42:30: 7e:ba:80:8e:bd:71:56:b4:46:cc:60:a0:f5:24:c5: db:c0:9f:bf:5f:0a:a1:f9:e2:a2:24:c0:49:28:7a: 60:a1:84:26:8c:e5:ea:d0:c6:fe:49:8c:a2:e7:e1: 9f:ab:73:d3:4f:4c:f2:54:3e:b3:0c:de:8a:73:b0: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:6E:B8:02:C5:F7:7D:74:87:67:74:42:AB:52:29:5A:C4:60:40 X509v3 Authority Key Identifier: keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:48:d8:00:e7:33:cf:39:95:83:a0:4b:ec:c4:3c:70:1c:05: af:ba:e5:21:e1:b1:32:07:e2:6d:42:c7:62:4e:83:25:b9:f9: ac:b8:52:f8:b3:2b:30:8b:ba:a2:c3:b4:ec:bc:34:f7:99:39: 07:44:86:f4:bb:a7:0e:bc:f7:d3:6f:61:48:82:16:c7:ce:3c: 90:7e:30:e5:8c:52:ed:54:48:c8:9d:3e:56:54:de:f8:ed:98: 8e:71:16:07:13:3b:d1:26:23:9e:30:7e:2c:b7:5c:85:d6:7a: e9:09:e8:a7:4e:3a:dc:43:85:09:3a:20:02:b8:43:61:29:13: 1c:42:42:8f:73:29:56:8a:f4:4a:8d:61:61:a8:b3:7d:01:7e: b8:e9:84:9d:b2:66:7b:e7:fe:db:37:55:a1:2c:b4:c4:17:52: 58:81:2b:a2:aa:4a:83:33:00:97:06:60:62:65:97:f7:e8:39: 22:13:3d:b3:6f:31:4d:e8:b8:21:32:b6:58:82:2a:b2:4d:ae: 14:17:df:13:04:e2:de:a0:75:3d:8e:2f:07:4c:46:cc:7f:14: d4:bb:c7:c9:01:cb:85:ab:ec:22:fc:0e:0f:91:de:35:ad:d2: d2:18:09:91:ef:24:7e:4b:8f:98:2d:32:db:c3:56:7f:c6:81: b6:bf:98:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4MzYxMTAvBgNVBAUTKDZGNjc1ODEwMzg1MzRENERCQ0UzQzgxQjVGMkQ4ODYx QzUzNkI2N0MwHhcNMjUwMjE1MDU1MDE2WhcNMjUwMjIyMDU1MDE2WjAYMRYwFAYD VQQDEw02N2IwMmIxOC0wOTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsI0W70TfyQB9G2qcLEGDRIP5MQfUewJ2yx3atbQgmdi4KNnqGAFRTS973+o6 3TJKryByh5/5UCB7MYfvsjswFve045v0YmHjj86yGh559BsN8sOGyN8Sj290fUPw 0rdIhn/fcya3pl7BDzTD7inXm0X0EIhoggsE59KptmXjnCJZhOWGP7qTSOvH+/Kw g81Fw/2Vp7fyd2iH9XFspa1wMgIU0G+YXWEhDIwBUtw3ykX63CUYGZRqCgtU3SdY tsxSQjB+uoCOvXFWtEbMYKD1JMXbwJ+/Xwqh+eKiJMBJKHpgoYQmjOXq0Mb+SYyi 5+Gfq3PTT0zyVD6zDN6Kc7AlkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR6brgC xfd9dIdndEKrUilaxGBAMB8GA1UdIwQYMBaAFG9nWBA4U01NvOPIG18tiGHFNrZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgzNi9GQTI1RURFMjQz MUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRVMjg0OGdiWHkySVljVTJ0 bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyZFlFRGhUVFUyODQ4Z2JYeTJJWWNVMnRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgzNi9GQTI1RURFMjQzMUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRV Mjg0OGdiWHkySVljVTJ0bncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnSNgA5zPPOZWDoEvsxDxwHAWvuuUh4bEyB+JtQsdiToMlufmsuFL4 syswi7qiw7TsvDT3mTkHRIb0u6cOvPfTb2FIghbHzjyQfjDljFLtVEjInT5WVN74 7ZiOcRYHEzvRJiOeMH4st1yF1nrpCeinTjrcQ4UJOiACuENhKRMcQkKPcylWivRK jWFhqLN9AX646YSdsmZ75/7bN1WhLLTEF1JYgSuiqkqDMwCXBmBiZZf36DkiEz2z bzFN6LghMrZYgiqyTa4UF98TBOLeoHU9ji8HTEbMfxTUu8fJAcuFq+wi/A4Pkd41 rdLSGAmR7yR+S4+YLTLbw1Z/xoG2v5gQ -----END CERTIFICATE-----Generated at Sun Feb 16 22:27:10 2025 by rpki-client