$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft File: u9oqUrUEjxqKq79cJBcmASd8svM.mft (raw, json) Hash identifier: 2FT9fWtONOUOM5db3GTX5v5FAbn8yZbnnEjn6b4v5c4= Subject key identifier: 9C:18:A3:47:7E:88:A4:C2:1C:50:64:74:21:F7:99:B4:33:66:24:17 Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 Certificate issuer: /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft Manifest number: BB Signing time: Sat 15 Feb 2025 07:04:41 +0000 Manifest this update: Sat 15 Feb 2025 07:04:41 +0000 Manifest next update: Sat 22 Feb 2025 07:04:41 +0000 Files and hashes: 1: u9oqUrUEjxqKq79cJBcmASd8svM.crl (hash: lW8sDRCn53uJDzJNaoIwi0bHafJX3z9sdAcCh7TAPfY=) 2: 32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (hash: Zf2aGirHutcUGM8OKVSuTfZK9xWSl0wXe0Qvn8CL4Y4=) 3: 6133230CEB3311EEA75DE77DC4F9AE02.roa (hash: Ro0WjrfgWaHXMYveHr1ptLiLsehp8t34UtftOvsWgq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82 Validity Not Before: Feb 15 07:04:41 2025 GMT Not After : Feb 22 07:04:41 2025 GMT Subject: CN=67b03c89-a3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:90:84:14:87:5c:dd:16:c4:56:98:26:46:d6: 0b:00:9f:df:d9:2d:b4:7d:81:cf:60:0e:92:46:ee: ea:ac:c8:93:cf:1c:ab:90:14:0e:03:46:bb:77:32: 76:fc:89:88:c1:e5:b4:b4:e9:e2:22:a2:2d:3f:af: 3f:ce:6c:e3:d3:0a:37:8a:df:a9:2b:d9:53:ce:a6: c8:51:74:6b:b4:0c:a2:07:d2:b1:71:39:8d:6e:88: 37:a7:ed:a7:33:c1:72:b4:db:31:a7:c3:a2:b1:b5: 11:73:45:6f:55:42:d1:0b:92:58:e3:34:06:17:57: 3b:b7:cc:1b:40:78:a1:4e:4a:1f:59:44:8e:c5:c3: 34:e2:31:6f:27:42:87:41:49:c7:ad:77:b2:27:d9: 76:40:8c:c4:ec:97:4e:0a:7c:4b:cf:10:7e:51:3d: a9:57:f8:ff:f5:f3:cb:bb:6d:d9:c9:40:9f:a8:e0: 9d:57:d1:3e:98:fa:b5:de:6f:a6:1b:82:25:fc:99: 07:46:48:66:08:9a:99:ac:d2:bd:02:a6:e6:03:ad: 75:27:b5:de:64:47:4e:33:aa:d2:fe:41:58:8f:cd: a8:c2:fe:95:e6:f1:b5:a1:29:26:4f:ab:b5:6d:d5: f1:6a:a5:46:52:5c:72:33:8a:e1:cc:c2:91:ce:5b: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:18:A3:47:7E:88:A4:C2:1C:50:64:74:21:F7:99:B4:33:66:24:17 X509v3 Authority Key Identifier: keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:5f:d2:ca:b9:9f:3f:c1:9a:e1:60:be:bc:a6:aa:3b:c8: 2d:57:9a:f0:e2:50:51:5d:31:7d:92:cc:ce:fa:9f:80:0c:92: 30:90:6f:b1:ae:3b:b3:bb:b2:7d:e9:a7:12:fe:a4:98:d8:f8: a1:83:dc:95:11:6e:08:b8:c9:36:81:66:a6:b7:a9:1a:53:4d: 92:95:b4:b3:82:b4:eb:c2:a6:85:75:88:06:0c:85:49:8e:af: 7a:69:2e:35:36:a5:b7:1d:60:0d:9c:34:56:6b:be:e2:69:1c: b8:d4:dd:81:e0:96:c3:91:45:22:bb:3e:70:b4:fc:81:75:f8: 79:f9:dc:37:87:70:fa:9b:42:15:9b:a9:39:98:88:4b:df:9b: 27:da:a0:8d:7b:88:e9:72:26:c2:53:04:1f:a1:fc:03:79:09: 83:58:3f:8e:b0:b1:d2:b7:b3:45:00:33:4b:d5:41:74:ec:18: c4:f1:75:ce:59:42:d0:b6:f8:58:53:60:d3:19:6f:e1:7c:d6: 9a:ad:6f:83:00:c1:90:24:2d:92:cd:9e:f1:8c:7a:d6:30:79: 86:bf:1b:c7:b1:ac:7f:07:46:45:91:ce:b8:d7:40:da:a6:6d: 3b:9c:41:07:7f:60:0d:23:71:24:7d:1f:04:96:f9:65:48:f9: 25:25:ce:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEJCREEyQTUyQjUwNDhGMUE4QUFCQkY1QzI0MTcyNjAx Mjc3Q0IyRjMwHhcNMjUwMjE1MDcwNDQxWhcNMjUwMjIyMDcwNDQxWjAYMRYwFAYD VQQDEw02N2IwM2M4OS1hM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65CEFIdc3RbEVpgmRtYLAJ/f2S20fYHPYA6SRu7qrMiTzxyrkBQOA0a7dzJ2 /ImIweW0tOniIqItP68/zmzj0wo3it+pK9lTzqbIUXRrtAyiB9KxcTmNbog3p+2n M8FytNsxp8OisbURc0VvVULRC5JY4zQGF1c7t8wbQHihTkofWUSOxcM04jFvJ0KH QUnHrXeyJ9l2QIzE7JdOCnxLzxB+UT2pV/j/9fPLu23ZyUCfqOCdV9E+mPq13m+m G4Il/JkHRkhmCJqZrNK9AqbmA611J7XeZEdOM6rS/kFYj82owv6V5vG1oSkmT6u1 bdXxaqVGUlxyM4rhzMKRzltyAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwYo0d+ iKTCHFBkdCH3mbQzZiQXMB8GA1UdIwQYMBaAFLvaKlK1BI8aiqu/XCQXJgEnfLLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GMjYwMTRFOENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4cUtxNzljSkJjbUFTZDhz dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U5b3FVclVFanhxS3E3OWNKQmNtQVNkOHN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GMjYwMTRFOENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi91OW9xVXJVRWp4 cUtxNzljSkJjbUFTZDhzdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN6V/SyrmfP8Ga4WC+vKaqO8gtV5rw4lBRXTF9kszO+p+ADJIwkG+x rjuzu7J96acS/qSY2Pihg9yVEW4IuMk2gWamt6kaU02SlbSzgrTrwqaFdYgGDIVJ jq96aS41NqW3HWANnDRWa77iaRy41N2B4JbDkUUiuz5wtPyBdfh5+dw3h3D6m0IV m6k5mIhL35sn2qCNe4jpcibCUwQfofwDeQmDWD+OsLHSt7NFADNL1UF07BjE8XXO WULQtvhYU2DTGW/hfNaarW+DAMGQJC2SzZ7xjHrWMHmGvxvHsax/B0ZFkc6410Da pm07nEEHf2ANI3EkfR8ElvllSPklJc5e -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:12 2025 by rpki-client