$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: 0IgJYs1Vgeth7McXcxIVBTctschihkj6nYaH0NcDAFk= Subject key identifier: 07:4F:AA:24:C2:E2:1A:AF:06:0E:4A:61:D2:99:4A:BF:2F:8D:1D:5F Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: 6F Signing time: Sat 15 Feb 2025 08:03:29 +0000 Manifest this update: Sat 15 Feb 2025 08:03:29 +0000 Manifest next update: Sat 22 Feb 2025 08:03:29 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: BswEGit/9w0wNp8HwHDYgmTyXl1KFYhnWrDRxSOIlEE=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: UAQ2ui+thAeuq+PxdrfSFnEc0TOcjvunQ9qpCX61XwU=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: MJuZKMR1FAapsiCyrMHIkWD3kY2RmS87dJHgOPkpAew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9 Validity Not Before: Feb 15 08:03:29 2025 GMT Not After : Feb 22 08:03:29 2025 GMT Subject: CN=67b04a51-4ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ca:02:26:3d:22:4a:19:85:bc:c4:4f:e0:61: dc:1c:b7:05:65:12:fb:29:d4:0a:6a:cf:7e:33:23: c3:ac:08:10:01:bb:1f:6c:01:ed:26:37:6c:32:0b: cd:f6:b0:d3:ad:43:db:9a:e5:e8:a3:02:93:de:1e: c6:d6:1e:d9:94:3e:5b:e0:f1:4f:e0:92:aa:d6:54: ca:cd:d1:ed:52:bd:21:fc:98:8f:ff:59:81:67:81: 7c:6e:a4:18:e5:73:ca:a8:74:87:6c:23:35:30:c3: 0d:d7:c6:7f:f3:d7:7d:13:27:5d:ee:41:66:dc:82: 4a:24:df:33:bc:b8:08:9f:c4:a3:99:85:6c:0b:8f: 5f:e4:5d:d7:fc:d5:d9:08:b5:d4:bc:fc:7d:e7:89: 9a:13:98:fb:df:92:e3:50:fb:ce:55:96:d6:f3:dd: 10:fd:35:cc:6e:dd:56:d7:27:2b:07:b6:4b:ec:e8: 40:f2:83:4b:1b:8e:79:82:27:69:70:90:7a:41:a6: c7:42:a9:03:72:0e:7b:86:7e:35:be:7e:4d:00:9d: bf:3d:fc:60:34:69:27:93:5e:0b:df:48:76:41:45: a9:4a:88:f9:7a:bb:f1:50:eb:c0:6e:7b:2c:27:d8: 6c:db:70:18:7a:63:78:58:f1:69:3e:4a:e3:7a:18: fe:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4F:AA:24:C2:E2:1A:AF:06:0E:4A:61:D2:99:4A:BF:2F:8D:1D:5F X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:88:33:ff:e8:2c:1f:6f:29:63:cd:0e:26:2a:d8:13:b6:47: 70:1e:1a:65:02:16:7d:26:d8:5a:dc:47:73:5e:1f:27:7c:32: 7f:f4:8b:e4:65:44:1a:32:8f:ac:e2:24:d3:9d:82:84:b1:1c: 0d:e8:6b:be:a1:1d:f6:78:5a:00:35:41:17:41:b2:98:7b:e1: b2:36:55:e7:cf:a1:43:01:49:0a:0e:0d:78:03:92:c2:7c:ef: fb:3d:26:4f:c3:73:4e:af:5b:d2:5d:0c:17:e0:59:ca:1f:59: 56:79:81:c9:c7:36:d3:75:c0:ef:21:e8:d0:a4:87:91:25:c3: 1f:e3:34:56:5c:95:d0:41:77:cc:2a:a9:e9:ef:89:db:69:ae: fc:94:65:5a:de:b1:c9:ab:3a:04:51:42:f7:22:09:80:72:95: 53:7c:9a:f2:1b:ac:b8:2b:19:1e:b1:a1:c6:5b:69:11:80:0c: 82:c7:91:a5:4f:f0:cb:b0:28:0f:74:68:9b:2f:f4:21:98:68: 92:fb:88:2b:be:39:d0:a8:d1:d2:46:e1:95:25:a9:9d:d4:a3: db:5c:e2:cc:82:8a:e0:e5:2c:77:6b:f8:93:1c:5f:e3:62:34: 63:33:29:44:b0:5d:f8:1c:55:13:90:c6:49:d8:4b:55:6f:cd: 02:ec:76:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkRBOTExMC8GA1UEBRMoMjQ5MjBDNURGOTg5RkNDRDk5MEIwOEE4RjA0NzlFQTRB RkIzNjE5ODAeFw0yNTAyMTUwODAzMjlaFw0yNTAyMjIwODAzMjlaMBgxFjAUBgNV BAMTDTY3YjA0YTUxLTRlY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXygImPSJKGYW8xE/gYdwctwVlEvsp1Apqz34zI8OsCBABux9sAe0mN2wyC832 sNOtQ9ua5eijApPeHsbWHtmUPlvg8U/gkqrWVMrN0e1SvSH8mI//WYFngXxupBjl c8qodIdsIzUwww3Xxn/z130TJ13uQWbcgkok3zO8uAifxKOZhWwLj1/kXdf81dkI tdS8/H3niZoTmPvfkuNQ+85Vltbz3RD9Ncxu3VbXJysHtkvs6EDyg0sbjnmCJ2lw kHpBpsdCqQNyDnuGfjW+fk0Anb89/GA0aSeTXgvfSHZBRalKiPl6u/FQ68Bueywn 2GzbcBh6Y3hY8Wk+SuN6GP57AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB0+qJMLi Gq8GDkph0plKvy+NHV8wHwYDVR0jBBgwFoAUJJIMXfmJ/M2ZCwio8EeepK+zYZgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCREE5LzJFMENCNTVFNDRC RDExRUZCNzNEQjc3QkM0RjlBRTAyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstella Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSkpJTVhmbUpfTTJaQ3dpbzhFZWVwSy16WVpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC REE5LzJFMENCNTVFNDRCRDExRUZCNzNEQjc3QkM0RjlBRTAyL0pKSU1YZm1KX00y WkN3aW84RWVlcEstellaZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE+IM//oLB9vKWPNDiYq2BO2R3AeGmUCFn0m2FrcR3NeHyd8Mn/0i+Rl RBoyj6ziJNOdgoSxHA3oa76hHfZ4WgA1QRdBsph74bI2VefPoUMBSQoODXgDksJ8 7/s9Jk/Dc06vW9JdDBfgWcofWVZ5gcnHNtN1wO8h6NCkh5Elwx/jNFZcldBBd8wq qenvidtprvyUZVrescmrOgRRQvciCYBylVN8mvIbrLgrGR6xocZbaRGADILHkaVP 8MuwKA90aJsv9CGYaJL7iCu+OdCo0dJG4ZUlqZ3Uo9tc4syCiuDlLHdr+JMcX+Ni NGMzKUSwXfgcVROQxknYS1VvzQLsdhU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:00 2025 by rpki-client