$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft File: gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json) Hash identifier: fPPN44PNdUC8KzCSzgbbF1lLdWnvB5NDcjE/6E+fn6E= Subject key identifier: BA:3F:CB:5E:8F:D3:D6:40:A4:94:56:5B:C3:23:4D:CB:70:C3:DB:BB Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0BAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft Manifest number: 0B9D Signing time: Fri 14 Feb 2025 19:42:12 +0000 Manifest this update: Fri 14 Feb 2025 19:42:11 +0000 Manifest next update: Fri 21 Feb 2025 19:42:11 +0000 Files and hashes: 1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: IAOwaGjq8K1p1N3QKrHlAlvFUFC55zOp9vICARPHafs=) 2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: jHX60u9ArdYh7GwRrx6uREAMvSVK0+kOgD9fYQ7pbX8=) 3: B3148DDA1BD711EAB801703AC4F9AE02.roa (hash: vAnu7lUAwo4HH4C945cyzFyVOcsgKeAbmVZGK6iXYjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2990 (0xbae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9 Validity Not Before: Feb 14 19:42:11 2025 GMT Not After : Feb 21 19:42:11 2025 GMT Subject: CN=67af9c94-8aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:45:49:68:dc:e8:50:25:55:b4:f0:01:4e:7e: 43:b5:b7:c5:71:c4:fa:44:a7:1d:bb:05:60:d2:b6: 24:90:19:04:79:0e:3f:d3:2a:dd:22:17:e1:00:e2: 95:a3:ea:b2:d7:7b:24:4b:9a:83:1e:4e:de:99:b4: 24:7c:b5:24:2b:27:6d:28:27:8d:b9:3b:44:19:e2: 82:03:5b:a4:6d:47:5f:23:b1:87:1f:c4:7e:cb:d2: 34:36:74:21:a0:f2:a7:3f:e9:b2:42:e4:24:51:02: 58:7f:3a:16:df:b1:15:88:35:1c:99:4f:e8:29:f8: c5:14:98:76:b1:de:8f:bd:3a:19:d4:20:ad:ee:6f: 9f:4c:a6:5c:17:66:18:40:46:7a:2b:b3:f0:0d:ac: 03:6b:2f:51:f2:8d:73:e8:59:ad:10:64:4c:04:c6: 5f:8d:8a:14:da:ff:0f:14:cd:a8:7a:e9:93:57:6f: 93:cc:5a:b2:d7:e7:ba:15:e3:43:5a:0b:7f:5d:f5: 37:fb:58:10:90:0c:57:f7:56:33:ea:49:5b:ab:f1: 5e:b4:b6:58:46:4e:e5:23:0b:bf:99:a7:d3:c6:d0: 70:21:dd:4d:c6:0e:bf:66:82:9d:0e:b1:37:23:43: 0d:d9:ef:89:9c:e7:49:a8:91:e4:c3:7b:95:2f:87: f3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3F:CB:5E:8F:D3:D6:40:A4:94:56:5B:C3:23:4D:CB:70:C3:DB:BB X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:70:d2:d7:ff:00:4a:0b:96:59:7a:0b:40:7e:fb:de:0a:76: 08:6a:d6:ff:23:87:42:43:7a:1b:d6:34:a9:1c:af:aa:1b:bc: 35:6b:cb:29:1a:40:b9:61:cf:df:50:f4:b4:df:81:5e:fd:dc: 47:7f:b3:02:4e:67:c3:b0:05:6e:d3:7a:e1:14:0e:c2:e7:41: 63:68:c9:b0:18:9f:01:f0:dd:85:b5:a4:c9:ca:37:70:4b:8b: bc:1f:f4:f6:ba:0e:4b:b7:3e:7b:27:e8:5f:c5:87:13:3d:17: 5d:e7:8e:6f:52:ee:de:86:c4:35:b3:1f:c3:94:b3:c7:7c:c3: 4f:54:5d:4a:9a:b1:bf:a6:f6:78:ff:b7:41:a4:42:6a:76:6e: 12:a5:7f:96:07:69:09:3e:a1:f1:a6:ea:90:38:0b:ab:8d:b1: 3c:ad:2c:25:9b:ff:d0:59:55:44:a5:bf:22:47:c6:bc:b5:a8: f7:75:e1:c2:4d:20:e6:d0:c9:0a:ed:11:b5:26:fa:a1:d9:03: 09:ce:3e:59:2b:e7:dd:d3:db:71:9a:55:0d:d5:cb:d4:a8:55: 55:db:8b:a4:c8:e6:d6:a0:93:d8:a2:9f:63:8a:06:89:44:11: 51:49:df:80:6c:d3:c7:3c:39:3b:fe:68:6c:88:89:29:d7:26: a5:7e:3f:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwMjE0MTk0MjExWhcNMjUwMjIxMTk0MjExWjAYMRYwFAYD VQQDEw02N2FmOWM5NC04YWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UVJaNzoUCVVtPABTn5DtbfFccT6RKcduwVg0rYkkBkEeQ4/0yrdIhfhAOKV o+qy13skS5qDHk7embQkfLUkKydtKCeNuTtEGeKCA1ukbUdfI7GHH8R+y9I0NnQh oPKnP+myQuQkUQJYfzoW37EViDUcmU/oKfjFFJh2sd6PvToZ1CCt7m+fTKZcF2YY QEZ6K7PwDawDay9R8o1z6FmtEGRMBMZfjYoU2v8PFM2oeumTV2+TzFqy1+e6FeND Wgt/XfU3+1gQkAxX91Yz6klbq/FetLZYRk7lIwu/mafTxtBwId1Nxg6/ZoKdDrE3 I0MN2e+JnOdJqJHkw3uVL4fz6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLo/y16P 09ZApJRWW8MjTctww9u7MB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9ENjlCNDVFODFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhL QjBnSEhOdXg0bkQydGNZUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQcNLX/wBKC5ZZegtAfvveCnYIatb/I4dCQ3ob1jSpHK+qG7w1a8sp GkC5Yc/fUPS034Fe/dxHf7MCTmfDsAVu03rhFA7C50FjaMmwGJ8B8N2FtaTJyjdw S4u8H/T2ug5Ltz57J+hfxYcTPRdd545vUu7ehsQ1sx/DlLPHfMNPVF1KmrG/pvZ4 /7dBpEJqdm4SpX+WB2kJPqHxpuqQOAurjbE8rSwlm//QWVVEpb8iR8a8taj3deHC TSDm0MkK7RG1Jvqh2QMJzj5ZK+fd09txmlUN1cvUqFVV24ukyObWoJPYop9jigaJ RBFRSd+AbNPHPDk7/mhsiIkp1yalfj97 -----END CERTIFICATE-----Generated at Sun Feb 16 20:37:30 2025 by rpki-client