$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: +yzdEd7PaTMwKpWPXvQquUSof/Yo0wrzmdG/xZHHPoQ= Subject key identifier: 3B:45:5F:2B:A0:D7:7C:ED:65:34:97:D4:7E:B9:07:33:99:74:67:94 Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 10 Signing time: Tue 04 Feb 2025 14:27:42 +0000 Manifest this update: Tue 04 Feb 2025 14:27:41 +0000 Manifest next update: Tue 11 Feb 2025 14:27:41 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: RinVzm0z9kmEDgzGzS3Tv4iNuwYAI/O/KFgUdqy4fzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Feb 2025 14:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C Validity Not Before: Feb 4 14:27:41 2025 GMT Not After : Feb 11 14:27:41 2025 GMT Subject: CN=67a223dd-168f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:67:b2:2d:85:5f:04:31:e3:07:e9:83:1e: 87:74:6e:8b:14:3a:57:38:e5:fe:b0:57:0b:fb:df: 73:84:1e:f5:99:94:7a:ea:a7:8c:54:6b:9c:b4:af: ab:88:70:71:58:fd:1b:9a:68:2a:b8:21:77:47:35: 7e:2b:df:97:af:dc:b0:65:f1:b3:6c:0e:bf:89:30: 4d:4a:8f:8e:6c:e3:94:68:ea:f7:75:df:ee:55:81: 35:13:69:96:4e:d8:9a:26:6f:21:5d:bf:2d:70:59: 18:5e:ed:b0:9a:a4:37:1e:02:62:a4:9d:ec:41:ef: 1f:f7:97:aa:9d:ef:80:1f:82:3a:73:83:5b:be:24: c5:5e:04:21:0c:24:f0:87:af:cb:ac:60:d2:63:87: 67:dc:95:7c:28:16:82:64:fa:fc:04:12:ab:46:f7: 3e:34:36:f4:4f:9d:a3:b8:14:11:d7:ab:10:c1:ac: 11:86:46:f0:23:c3:2f:d0:52:18:9b:a4:c4:8f:01: 4c:44:a6:30:0f:51:6c:11:dc:d4:a2:a7:41:a7:65: bb:b9:56:a7:fe:74:e5:7e:35:b7:55:06:11:6b:39: e0:98:2f:9d:32:74:84:99:e2:5a:e4:89:97:56:7b: fc:72:a0:8f:9d:30:52:34:a6:ad:f5:f6:5c:4b:a4: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:45:5F:2B:A0:D7:7C:ED:65:34:97:D4:7E:B9:07:33:99:74:67:94 X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c7:6e:4a:70:94:0c:39:e8:e6:a3:a7:d3:20:90:25:5d:4f: 09:87:d5:23:5c:1f:ac:86:63:85:09:c1:17:cc:a7:f5:e2:0b: f1:cd:bc:42:d6:ff:1b:1f:df:29:e4:d6:88:3f:40:15:dd:cb: c1:c0:4f:f7:f6:e9:6f:65:17:ae:ab:0b:c6:cb:dd:6c:55:8a: c5:d2:51:37:c7:a6:99:53:05:27:1f:d9:38:b3:43:b8:ea:42: 3a:cc:bf:f9:0c:ce:55:e2:ff:fb:29:fa:f7:e7:98:29:5a:97: 49:b9:17:1c:60:ea:ec:f9:cd:ed:89:a3:f5:35:cc:4f:38:dc: 4e:f3:6a:22:d5:d3:d4:49:0c:50:00:31:2e:e1:f7:2b:20:1e: 9e:c9:bf:dc:dd:58:ac:15:77:46:8e:b2:e5:be:67:a8:72:3b: a5:89:b4:12:30:ef:fb:15:71:e0:bb:05:ac:83:c3:47:ea:3e: e3:a6:26:e1:e5:d5:b2:e7:6e:a5:40:2e:17:05:26:33:e1:50: 3e:0e:67:79:9b:3b:58:87:fd:f8:18:7f:bd:1d:e0:ed:c8:cd: a8:0a:ab:13:63:3c:23:3b:51:95:fb:82:d0:cb:1c:e9:c2:52: 0d:59:05:1e:7d:4d:d3:4c:fd:cf:f4:f0:01:e4:85:8f:86:7d: 3d:00:53:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MTQyQzExMC8GA1UEBRMoRUMwMkNEMDZCNzQ3Mzc4QjJDMUNDNUEyMjFFNkUwODY2 MURBODIyNTAeFw0yNTAyMDQxNDI3NDFaFw0yNTAyMTExNDI3NDFaMBgxFjAUBgNV BAMTDTY3YTIyM2RkLTE2OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF+WeyLYVfBDHjB+mDHod0bosUOlc45f6wVwv733OEHvWZlHrqp4xUa5y0r6uI cHFY/RuaaCq4IXdHNX4r35ev3LBl8bNsDr+JME1Kj45s45Ro6vd13+5VgTUTaZZO 2JombyFdvy1wWRhe7bCapDceAmKknexB7x/3l6qd74Afgjpzg1u+JMVeBCEMJPCH r8usYNJjh2fclXwoFoJk+vwEEqtG9z40NvRPnaO4FBHXqxDBrBGGRvAjwy/QUhib pMSPAUxEpjAPUWwR3NSip0GnZbu5Vqf+dOV+NbdVBhFrOeCYL50ydISZ4lrkiZdW e/xyoI+dMFI0pq319lxLpBBpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO0VfK6DX fO1lNJfUfrkHM5l0Z5QwHwYDVR0jBBgwFoAU7ALNBrdHN4ssHMWiIebghmHagiUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxNDJDLzJDMkY2RTUwQ0VF OTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdp VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN0FMTkJyZEhONHNzSE1XaUllYmdobUhhZ2lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx NDJDLzJDMkY2RTUwQ0VFOTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRz c0hNV2lJZWJnaG1IYWdpVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHTHbkpwlAw56Oajp9MgkCVdTwmH1SNcH6yGY4UJwRfMp/XiC/HNvELW /xsf3ynk1og/QBXdy8HAT/f26W9lF66rC8bL3WxVisXSUTfHpplTBScf2TizQ7jq QjrMv/kMzlXi//sp+vfnmClal0m5Fxxg6uz5ze2Jo/U1zE843E7zaiLV09RJDFAA MS7h9ysgHp7Jv9zdWKwVd0aOsuW+Z6hyO6WJtBIw7/sVceC7BayDw0fqPuOmJuHl 1bLnbqVALhcFJjPhUD4OZ3mbO1iH/fgYf70d4O3IzagKqxNjPCM7UZX7gtDLHOnC Ug1ZBR59TdNM/c/08AHkhY+GfT0AU3Y= -----END CERTIFICATE-----Generated at Wed Feb 5 20:03:41 2025 by rpki-client