$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: cpk6ex9Yx7/ZfkEVOBeMFm8r9Knxrmzx1tqVtfMshbE= Subject key identifier: 71:5F:1D:99:08:33:AE:D3:C7:95:70:BE:3E:DE:B1:71:1A:3D:B9:2F Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 18 Signing time: Wed 05 Feb 2025 06:23:21 +0000 Manifest this update: Wed 05 Feb 2025 06:23:21 +0000 Manifest next update: Wed 12 Feb 2025 06:23:21 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: R8Nk+tpBiZeZgbv/Evnlg/wzqMqT+jP9/6DGa02u3XQ=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C Validity Not Before: Feb 5 06:23:21 2025 GMT Not After : Feb 12 06:23:21 2025 GMT Subject: CN=67a303d9-af16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:6d:d9:e1:40:f7:3a:f0:5b:4b:ae:1f:73: 8c:b2:9f:8c:ab:9e:ea:5d:01:07:91:d7:10:08:ab: 76:ef:c8:05:b3:40:6f:53:5d:95:81:12:ae:23:b2: 67:f0:ef:c6:d3:ca:9e:53:59:90:b2:86:74:51:32: 9a:31:84:48:bf:1d:07:75:be:b6:ab:2f:a2:61:de: 61:f5:96:59:8a:3a:7a:9f:51:a9:75:07:b0:75:4a: 75:46:dc:73:d1:38:22:b9:af:d3:86:0a:14:73:13: 3f:1b:25:48:1d:43:33:4d:3b:81:e4:75:80:7c:57: 4b:47:73:be:6c:ad:4d:b3:1e:74:92:67:0e:31:ee: 94:8c:1b:78:dc:5c:29:3a:a6:cc:8d:fc:d5:a8:61: 1a:6d:70:97:56:36:ec:34:55:af:33:a2:3f:a5:6d: 10:f2:03:f2:51:81:ba:d6:ab:a1:dc:bb:39:af:98: 8f:b4:4d:e6:e8:5d:fe:40:93:71:bc:6b:ca:e9:f1: 79:72:09:48:62:c2:4b:c8:ab:ec:05:13:ed:ba:e8: d2:c4:d8:fc:e6:7c:21:a9:fd:92:5d:eb:6a:7d:27: 54:45:51:d9:75:15:4e:02:80:df:a9:3c:46:0f:10: 20:08:09:52:1e:7b:37:2d:a9:ae:10:bd:71:f0:11: 38:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5F:1D:99:08:33:AE:D3:C7:95:70:BE:3E:DE:B1:71:1A:3D:B9:2F X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ec:b8:e3:de:71:22:9b:3f:b5:94:9d:00:7f:56:04:8a:ad: e5:98:91:8e:1a:0d:aa:a6:1b:b6:53:29:56:ff:a5:d9:d5:57: 2d:ac:34:5b:51:51:37:f5:65:2c:dc:bd:f9:60:f3:e0:7c:12: 58:8e:d6:74:e8:be:81:c0:52:6c:c9:ce:b4:c0:45:14:b3:5e: 51:81:cc:45:78:67:c8:49:cd:68:ba:e8:a9:bf:1b:84:fa:a4: 8c:b6:b8:ab:9d:ca:68:eb:ca:96:6c:1c:72:d5:54:8f:2d:b7: 6e:15:6f:41:1b:b6:0a:a8:dc:e4:54:81:72:62:fb:b8:42:12: f1:a1:1d:86:0e:5b:e0:90:bd:c4:33:12:00:97:40:99:59:5b: a3:97:52:ee:35:aa:13:8e:fa:2f:59:ac:55:a3:9b:24:7b:84: 99:54:98:78:77:15:9b:b6:d4:d5:5d:86:ea:ec:da:cf:e5:d3: 73:12:1b:5f:9f:36:46:f9:79:25:83:5b:49:26:19:b1:2e:a8: 7a:32:65:45:37:e8:8c:90:d3:06:a7:48:da:59:ba:ae:34:b3: 9f:79:57:50:ad:90:0d:34:61:be:9c:c2:ab:ff:26:d5:b0:83: dd:7f:52:fc:a4:2a:e2:e5:45:68:96:c5:9d:b5:5b:a9:96:98: 84:d1:5a:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoOTdCMDNEQTJGQjQ1RjU2RTNGNTgyMTYzREY3QkQ5NTA2 OTM5OTk0NDAeFw0yNTAyMDUwNjIzMjFaFw0yNTAyMTIwNjIzMjFaMBgxFjAUBgNV BAMTDTY3YTMwM2Q5LWFmMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvnG3Z4UD3OvBbS64fc4yyn4yrnupdAQeR1xAIq3bvyAWzQG9TXZWBEq4jsmfw 78bTyp5TWZCyhnRRMpoxhEi/HQd1vrarL6Jh3mH1llmKOnqfUal1B7B1SnVG3HPR OCK5r9OGChRzEz8bJUgdQzNNO4HkdYB8V0tHc75srU2zHnSSZw4x7pSMG3jcXCk6 psyN/NWoYRptcJdWNuw0Va8zoj+lbRDyA/JRgbrWq6HcuzmvmI+0TeboXf5Ak3G8 a8rp8XlyCUhiwkvIq+wFE+266NLE2PzmfCGp/ZJd62p9J1RFUdl1FU4CgN+pPEYP ECAICVIeezctqa4QvXHwETj9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcV8dmQgz rtPHlXC+Pt6xcRo9uS8wHwYDVR0jBBgwFoAUl7A9ovtF9W4/WCFj33vZUGk5mUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzczOTBCMzRBQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDdBOW92dEY5VzRfV0NGajMzdlpVR2s1bVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QTNDLzczOTBCMzRBQzZBMDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0 X1dDRmozM3ZaVUdrNW1VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFnsuOPecSKbP7WUnQB/VgSKreWYkY4aDaqmG7ZTKVb/pdnVVy2sNFtR UTf1ZSzcvflg8+B8EliO1nTovoHAUmzJzrTARRSzXlGBzEV4Z8hJzWi66Km/G4T6 pIy2uKudymjrypZsHHLVVI8tt24Vb0Ebtgqo3ORUgXJi+7hCEvGhHYYOW+CQvcQz EgCXQJlZW6OXUu41qhOO+i9ZrFWjmyR7hJlUmHh3FZu21NVdhurs2s/l03MSG1+f Nkb5eSWDW0kmGbEuqHoyZUU36IyQ0wanSNpZuq40s595V1CtkA00Yb6cwqv/JtWw g91/UvykKuLlRWiWxZ21W6mWmITRWjQ= -----END CERTIFICATE-----Generated at Wed Feb 5 20:04:59 2025 by rpki-client