$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: lbZe9HFv0Hr7T7P/xuIaONzfCT6RIadj64R4ONb34uY= Subject key identifier: 03:A6:81:CD:BE:C6:98:26:CF:A2:85:03:A0:19:70:D5:C3:DA:CA:8C Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 24F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 24E6 Signing time: Fri 14 Feb 2025 16:00:14 +0000 Manifest this update: Fri 14 Feb 2025 16:00:13 +0000 Manifest next update: Fri 21 Feb 2025 16:00:13 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: RRApmvfzhkGLwgeQR73P7h8J54tsW4tfz4iq1gjau98=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: bILzWIi7SfN0oZ29P+We7rkWjU1abIhmL+TRmVZttNg=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: A+fjTwtG6/7wteTJpdAw9ZNsTS7E+yeIkAmgl1S9yHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9460 (0x24f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD Validity Not Before: Feb 14 16:00:13 2025 GMT Not After : Feb 21 16:00:13 2025 GMT Subject: CN=67af688d-3d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6d:c5:96:0b:34:09:71:c9:f8:ee:f8:1d:2b: c1:c9:60:9f:b2:42:ab:11:f0:90:fc:3f:48:95:56: f2:97:28:c3:ee:20:2d:78:d1:d1:c4:d5:f2:c6:02: c6:c3:76:ed:28:62:f6:3e:c3:3e:7a:2b:67:11:81: eb:3f:6d:e7:0f:81:79:93:9e:b0:48:df:b9:8d:c3: 66:23:ae:9d:08:70:83:a2:d8:83:43:90:fb:04:92: 4d:53:8a:49:27:36:a3:75:93:b1:44:66:ca:08:04: e4:94:f9:66:a2:6d:99:d3:00:77:67:e9:a0:73:36: bb:f1:b3:40:d9:db:f6:6c:f0:68:72:3b:b7:38:28: a9:71:ab:56:5c:5b:b9:2e:60:34:c2:71:4f:ff:29: 40:f4:bc:fb:15:78:55:66:fd:32:ea:70:c4:70:63: d5:79:a0:b8:d0:e6:91:14:50:7a:62:d1:7d:7e:c3: 4b:63:3f:50:5c:d8:6f:78:57:f6:48:68:98:9c:b6: 25:0e:2e:b3:a4:c8:2c:91:37:d5:1c:d0:96:21:2f: 33:4b:af:e6:2b:99:06:38:de:8b:88:b9:c6:f3:8f: cc:db:58:52:31:41:7f:4b:ec:d2:3f:63:3f:ac:a5: 3d:6b:b4:93:ff:c4:9c:46:7f:9b:d4:2b:58:28:c8: 1e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A6:81:CD:BE:C6:98:26:CF:A2:85:03:A0:19:70:D5:C3:DA:CA:8C X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:90:f5:57:b4:03:97:40:3d:10:33:76:ad:bb:fa:25:bd:08: ff:bf:89:7e:2f:97:61:ff:f9:0f:f8:3a:92:55:95:ce:6e:50: 90:73:8d:9c:d1:a6:01:7c:32:54:34:e7:b1:a3:6c:9e:2f:60: 3f:dd:6f:65:1f:87:db:4c:f1:6f:a1:d9:a9:ac:4a:c5:be:8a: cd:be:30:86:09:94:18:72:24:c0:39:38:8c:b9:4e:85:44:9d: a0:bb:b5:a2:ea:2d:6f:84:55:56:8b:25:8a:64:c4:d7:3c:77: 7e:ab:28:53:b9:60:c6:bd:e4:26:63:20:24:07:36:e3:1b:1a: a1:73:58:a9:3f:52:58:bc:52:69:77:86:b7:6c:a5:e6:7c:86: f6:6b:66:3f:36:05:2f:80:4c:8c:1c:9d:47:71:0d:fc:9a:a8: 6e:b6:8b:54:b3:98:67:a4:6a:57:b4:b5:6b:db:b0:cb:f3:27: 5c:cd:b7:70:a9:96:e7:42:d6:aa:56:e7:aa:02:3f:18:da:5a: 1a:2b:c4:8c:e9:79:db:99:7b:53:d3:9d:4f:c4:a5:68:59:36: 78:25:36:67:3c:68:15:22:2b:ad:9c:2c:46:4d:89:d8:f5:d5: 78:a1:2c:90:88:84:72:98:72:7d:d0:3b:9d:71:36:54:16:2a: 7c:fd:a7:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjUwMjE0MTYwMDEzWhcNMjUwMjIxMTYwMDEzWjAYMRYwFAYD VQQDEw02N2FmNjg4ZC0zZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0W3Flgs0CXHJ+O74HSvByWCfskKrEfCQ/D9IlVbylyjD7iAteNHRxNXyxgLG w3btKGL2PsM+eitnEYHrP23nD4F5k56wSN+5jcNmI66dCHCDotiDQ5D7BJJNU4pJ JzajdZOxRGbKCATklPlmom2Z0wB3Z+mgcza78bNA2dv2bPBocju3OCipcatWXFu5 LmA0wnFP/ylA9Lz7FXhVZv0y6nDEcGPVeaC40OaRFFB6YtF9fsNLYz9QXNhveFf2 SGiYnLYlDi6zpMgskTfVHNCWIS8zS6/mK5kGON6LiLnG84/M21hSMUF/S+zSP2M/ rKU9a7ST/8ScRn+b1CtYKMgeRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOmgc2+ xpgmz6KFA6AZcNXD2sqMMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTkPVXtAOXQD0QM3atu/olvQj/v4l+L5dh//kP+DqSVZXOblCQc42c 0aYBfDJUNOexo2yeL2A/3W9lH4fbTPFvodmprErFvorNvjCGCZQYciTAOTiMuU6F RJ2gu7Wi6i1vhFVWiyWKZMTXPHd+qyhTuWDGveQmYyAkBzbjGxqhc1ipP1JYvFJp d4a3bKXmfIb2a2Y/NgUvgEyMHJ1HcQ38mqhutotUs5hnpGpXtLVr27DL8ydczbdw qZbnQtaqVueqAj8Y2loaK8SM6XnbmXtT051PxKVoWTZ4JTZnPGgVIiutnCxGTYnY 9dV4oSyQiIRymHJ90DudcTZUFip8/ads -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:32 2025 by rpki-client