$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft File: plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json) Hash identifier: C9bZwELv3XLASZPNBEIha/Dx5eix5cCC/Sgod0CqztM= Subject key identifier: 48:6A:F5:F9:11:1A:AF:79:35:CB:B7:19:D0:49:38:26:8D:57:2F:C3 Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 Certificate issuer: /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Certificate serial: 1028 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft Manifest number: 1020 Signing time: Sun 16 Feb 2025 17:47:25 +0000 Manifest this update: Sun 16 Feb 2025 17:47:25 +0000 Manifest next update: Sun 23 Feb 2025 17:47:25 +0000 Files and hashes: 1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: IHX8bd0fObwGdOzeXbdHvNpbrOC14i1yOGZxwtu5flQ=) 2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: hG1fGJzQ3JbtXbpeIbWQ7QaLlc8Fngz5Q1TdRya0bg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4136 (0x1028) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974 Validity Not Before: Feb 16 17:47:25 2025 GMT Not After : Feb 23 17:47:25 2025 GMT Subject: CN=67b224ad-e9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:7a:57:69:40:b7:6c:48:f7:0f:e4:06:b2: a4:6e:c4:d4:87:e2:e6:40:07:71:9f:f3:e1:0d:42: 79:7d:cf:8d:c0:c4:e8:33:e3:be:22:74:5b:00:ee: 1c:d4:a7:81:0d:d5:0c:35:24:eb:a2:97:fb:42:3f: ba:1d:a3:55:d4:96:6c:cc:27:3f:b6:b6:3e:22:de: 8a:87:1d:84:42:87:35:3a:c9:45:14:bf:9f:96:0b: 13:17:e0:de:eb:23:44:54:95:f8:ba:15:4f:ef:a2: c3:1a:03:9c:6b:80:63:5b:50:29:e8:63:17:c9:25: c2:83:4b:fd:13:07:6b:ef:7a:c7:bb:12:57:d0:3e: 10:c5:ad:01:d8:88:9e:87:1d:16:36:aa:86:ea:28: 61:f1:fa:6f:b2:65:80:15:b9:34:67:cc:49:5c:1e: 67:89:f2:2c:b4:28:1d:d6:69:d1:b2:2a:8a:15:9b: 38:12:20:bf:c6:1a:99:4a:8f:89:06:69:a4:46:10: 49:1b:71:d6:fb:3b:ab:3f:e2:fc:3e:a6:4a:71:83: b2:45:19:58:3f:88:63:9b:bd:91:41:f9:39:db:ca: 60:ad:08:8a:b1:99:5c:bc:9b:e8:26:b7:1f:50:1d: a7:a3:de:7f:07:88:15:26:8c:8c:62:99:94:15:d8: 52:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6A:F5:F9:11:1A:AF:79:35:CB:B7:19:D0:49:38:26:8D:57:2F:C3 X509v3 Authority Key Identifier: keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:fd:e1:f6:6f:99:ce:83:1b:7c:d2:aa:50:4a:16:6f:8f:55: e1:d5:0f:3f:5b:6b:5c:95:63:ea:24:2e:cc:6d:92:d1:2b:aa: 63:db:78:49:2d:d4:82:f1:e5:31:ca:10:1f:d1:2c:b9:63:1c: c6:73:fe:e5:72:03:df:e6:f2:ef:01:be:73:ab:d9:92:6b:d1: 5e:17:c7:fd:0b:e7:4c:4a:a1:d2:4a:b8:22:12:ef:a0:f7:1a: fa:7f:e4:ae:be:83:63:f6:9d:fb:ba:f3:f9:c1:32:3b:eb:b1: 75:d2:56:da:a1:57:38:39:55:ec:cc:c4:6d:dc:f9:90:9d:a3: e5:62:7d:82:97:f7:7a:41:70:8b:bd:22:f0:d8:5a:20:a1:87: d4:d7:35:9d:be:25:b0:ca:a2:98:cf:24:ea:01:bb:4b:f6:92: c2:c2:d2:0a:0e:ee:10:63:46:ce:5c:0c:3c:7e:0c:b4:c5:50: 3f:69:c0:87:2e:77:83:45:03:f3:89:6e:63:c6:59:7b:9d:71: e7:93:6b:93:8d:79:c2:87:e0:98:5f:fa:3e:da:b3:c9:9e:90: 8d:80:f3:65:10:f5:ec:5b:da:2e:2b:4c:e0:36:78:f7:4b:2b: e6:3c:a3:a3:92:88:05:59:f4:a1:bc:5d:bd:1c:03:8b:2c:25: a5:d4:34:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEE2NTEwNERDNzZBOEUwRTZBM0Q5MjE0Njc4OTY4MEI3 M0RERTVGNTgwHhcNMjUwMjE2MTc0NzI1WhcNMjUwMjIzMTc0NzI1WjAYMRYwFAYD VQQDEw02N2IyMjRhZC1lOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHt6V2lAt2xI9w/kBrKkbsTUh+LmQAdxn/PhDUJ5fc+NwMToM+O+InRbAO4c 1KeBDdUMNSTropf7Qj+6HaNV1JZszCc/trY+It6Khx2EQoc1OslFFL+flgsTF+De 6yNEVJX4uhVP76LDGgOca4BjW1Ap6GMXySXCg0v9Ewdr73rHuxJX0D4Qxa0B2Iie hx0WNqqG6ihh8fpvsmWAFbk0Z8xJXB5nifIstCgd1mnRsiqKFZs4EiC/xhqZSo+J BmmkRhBJG3HW+zurP+L8PqZKcYOyRRlYP4hjm72RQfk528pgrQiKsZlcvJvoJrcf UB2no95/B4gVJoyMYpmUFdhSmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhq9fkR Gq95Ncu3GdBJOCaNVy/DMB8GA1UdIwQYMBaAFKZRBNx2qODmo9khRniWgLc93l9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC8wMzMyNDBDMDNB NEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRPYWoyU0ZHZUphQXR6M2VY MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BsRUUzSGFvNE9hajJTRkdlSmFBdHozZVgxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC8wMzMyNDBDMDNBNEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRP YWoyU0ZHZUphQXR6M2VYMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW/eH2b5nOgxt80qpQShZvj1Xh1Q8/W2tclWPqJC7MbZLRK6pj23hJ LdSC8eUxyhAf0Sy5YxzGc/7lcgPf5vLvAb5zq9mSa9FeF8f9C+dMSqHSSrgiEu+g 9xr6f+SuvoNj9p37uvP5wTI767F10lbaoVc4OVXszMRt3PmQnaPlYn2Cl/d6QXCL vSLw2FogoYfU1zWdviWwyqKYzyTqAbtL9pLCwtIKDu4QY0bOXAw8fgy0xVA/acCH LneDRQPziW5jxll7nXHnk2uTjXnCh+CYX/o+2rPJnpCNgPNlEPXsW9ouK0zgNnj3 SyvmPKOjkogFWfShvF29HAOLLCWl1DSO -----END CERTIFICATE-----Generated at Mon Feb 17 07:44:52 2025 by rpki-client