$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft File: xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json) Hash identifier: NTnRrk96N0XZraCU2uFCURY0jwtHRP757HRc1I9i7M4= Subject key identifier: 31:AB:FE:41:EE:B1:AE:69:7D:4B:09:39:DB:5B:D1:C5:04:EE:6E:84 Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49 Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft Manifest number: 0E Signing time: Wed 05 Feb 2025 06:29:49 +0000 Manifest this update: Wed 05 Feb 2025 06:29:49 +0000 Manifest next update: Wed 12 Feb 2025 06:29:49 +0000 Files and hashes: 1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: PlUGzW0d/aoAZsJnk3YYn1gxyScJboTZTWSf2jZWzCw=) 2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 8Wzv5veel/E+M5qspAlwBsfA0pAvjm21LyceiyRo5cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91186C2 Validity Not Before: Feb 5 06:29:49 2025 GMT Not After : Feb 12 06:29:49 2025 GMT Subject: CN=67a3055d-02c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:98:46:d5:f9:94:49:9e:c8:7a:7a:38:2a: 78:ee:df:e6:cc:37:13:85:70:bd:ea:00:ee:7e:63: 20:50:1b:4f:8f:2b:92:ba:46:fa:b8:84:4b:d8:8c: fa:64:80:4b:55:e8:c8:18:74:53:33:1a:de:7f:4c: 1c:21:be:bd:db:fd:99:03:78:8c:82:43:c6:f9:ab: 19:e7:c7:79:dc:34:ef:98:df:dc:aa:e5:d7:a1:62: 5e:ea:7b:ea:a1:74:67:b6:b0:aa:54:08:1a:9a:7b: 1c:43:3d:47:32:13:38:18:3f:16:8b:77:8c:5d:8e: 3e:3d:9c:f8:db:e3:dd:61:e3:77:9d:8b:23:d1:dd: 1d:47:33:9c:54:55:95:13:06:0a:b2:84:82:74:ec: 7f:5a:a9:05:25:bf:b5:da:a0:dc:be:7b:1b:49:29: 60:b4:1d:61:ee:c1:fe:64:2b:c9:47:ea:a9:c5:de: 67:c8:1b:66:ff:96:28:09:aa:43:34:0e:f4:05:cf: 2d:47:35:70:7d:26:85:7a:9c:2c:58:cd:c8:1d:80: dd:4a:dc:45:e7:f4:e2:83:0e:fc:10:c0:46:84:a4: cd:32:67:e0:bf:aa:b3:b3:ad:9e:ea:65:f6:21:28: e2:7f:43:28:de:b4:34:57:fa:fa:d1:91:30:b9:54: 36:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AB:FE:41:EE:B1:AE:69:7D:4B:09:39:DB:5B:D1:C5:04:EE:6E:84 X509v3 Authority Key Identifier: keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:91:48:98:11:f6:53:6a:2d:86:4a:f8:a6:d0:b9:36:5e:89: 67:46:ad:9a:29:58:a6:7e:17:31:82:db:6c:e5:bf:9f:58:aa: 06:e0:35:4e:51:b9:b5:7b:f6:bd:42:6e:1a:52:16:cb:8d:e9: e4:b6:53:df:03:59:41:f2:48:9f:ab:2f:57:d4:03:90:6a:ad: c9:9e:ef:04:36:c5:4b:9e:b8:92:c6:a8:ab:1a:98:7b:37:ec: 1b:ff:37:c8:5f:68:49:46:a0:03:b2:39:9f:06:81:d8:5b:86: e3:17:04:e7:c7:b0:42:a2:ac:8c:08:05:19:3f:e2:26:2b:d7: 11:3d:65:45:7b:99:d1:95:fb:4c:91:02:7b:d7:eb:f8:2f:1c: 1c:5b:04:b1:a2:53:58:4e:a6:e2:5a:d6:c4:7f:b3:a3:fb:5b: 7b:ce:e4:1d:75:30:02:05:e1:4f:d1:41:d2:d1:07:98:42:b1: 97:0d:7f:d2:1f:ae:f6:97:4c:cc:cf:d3:bf:07:83:a3:88:b4: 80:12:17:b3:ca:12:f0:2b:73:22:e0:66:17:3c:8c:75:86:f7: 58:a6:24:dc:6b:13:0a:a0:a6:ed:e9:1f:a7:d5:7b:74:06:96: 46:2e:89:7e:0e:d6:65:2d:71:c6:a1:0e:a2:74:a9:23:ad:fe: b7:9f:43:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODZDMjExMC8GA1UEBRMoQzYyNjU4MzI5ODU3OEQxRDRBRjcyNzNFQkQ3OTFDNzIz MEEzNzQ0OTAeFw0yNTAyMDUwNjI5NDlaFw0yNTAyMTIwNjI5NDlaMBgxFjAUBgNV BAMTDTY3YTMwNTVkLTAyYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvq5hG1fmUSZ7Ieno4Knju3+bMNxOFcL3qAO5+YyBQG0+PK5K6Rvq4hEvYjPpk gEtV6MgYdFMzGt5/TBwhvr3b/ZkDeIyCQ8b5qxnnx3ncNO+Y39yq5dehYl7qe+qh dGe2sKpUCBqaexxDPUcyEzgYPxaLd4xdjj49nPjb491h43ediyPR3R1HM5xUVZUT BgqyhIJ07H9aqQUlv7XaoNy+extJKWC0HWHuwf5kK8lH6qnF3mfIG2b/ligJqkM0 DvQFzy1HNXB9JoV6nCxYzcgdgN1K3EXn9OKDDvwQwEaEpM0yZ+C/qrOzrZ7qZfYh KOJ/QyjetDRX+vrRkTC5VDbTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMav+Qe6x rml9Swk521vRxQTuboQwHwYDVR0jBBgwFoAUxiZYMphXjR1K9yc+vXkccjCjdEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4NkMyLzFEMkYwNzI0RDE3 RjExRUZCMzg0NjkyOEM0RjlBRTAyL3hpWllNcGhYalIxSzl5Yy12WGtjY2pDamRF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveGlaWU1waFhqUjFLOXljLXZYa2NjakNqZEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 NkMyLzFEMkYwNzI0RDE3RjExRUZCMzg0NjkyOEM0RjlBRTAyL3hpWllNcGhYalIx Szl5Yy12WGtjY2pDamRFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGeRSJgR9lNqLYZK+KbQuTZeiWdGrZopWKZ+FzGC22zlv59YqgbgNU5R ubV79r1CbhpSFsuN6eS2U98DWUHySJ+rL1fUA5Bqrcme7wQ2xUueuJLGqKsamHs3 7Bv/N8hfaElGoAOyOZ8GgdhbhuMXBOfHsEKirIwIBRk/4iYr1xE9ZUV7mdGV+0yR AnvX6/gvHBxbBLGiU1hOpuJa1sR/s6P7W3vO5B11MAIF4U/RQdLRB5hCsZcNf9If rvaXTMzP078Hg6OItIASF7PKEvArcyLgZhc8jHWG91imJNxrEwqgpu3pH6fVe3QG lkYuiX4O1mUtccahDqJ0qSOt/refQ4E= -----END CERTIFICATE-----Generated at Wed Feb 5 19:09:40 2025 by rpki-client