$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json) Hash identifier: uSXYM89Lf81/fqbXMCg0XOaPkKewD8JgcFP/KMokN/g= Subject key identifier: B6:7C:4B:58:06:87:9A:ED:39:4D:ED:37:1E:AD:0E:50:B6:41:0A:DF Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Certificate serial: 0588 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft Manifest number: 057F Signing time: Sat 15 Feb 2025 00:36:12 +0000 Manifest this update: Sat 15 Feb 2025 00:36:11 +0000 Manifest next update: Sat 22 Feb 2025 00:36:11 +0000 Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: btn7ulFNFwDhCR7nHFYgt6hVoyMd+ip7xax+jskjkl0=) 2: C3623470CF4611EBBBA79165C4F9AE02.roa (hash: 3vFM77FagLpqFr/nJpGYMXl7CPSlGG/bVu+mI2HwRkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738 Validity Not Before: Feb 15 00:36:11 2025 GMT Not After : Feb 22 00:36:11 2025 GMT Subject: CN=67afe17b-7047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:be:6e:3b:01:e9:62:f2:13:26:c6:a2:6e:40: 15:bd:0b:5b:b5:d8:ec:1f:04:9c:ed:43:68:2a:7c: 8f:b3:35:44:fe:63:54:bb:84:f4:68:08:d6:90:3a: 86:23:87:60:0b:0c:4a:09:bf:46:3f:48:89:53:8d: 17:0b:6e:89:bb:5b:56:ad:1c:9f:8d:6b:f0:4e:df: 49:69:36:0d:f4:5e:10:39:30:fe:61:53:09:b8:b1: 66:df:0a:65:b0:cb:81:2e:73:20:ae:7d:ef:77:08: ac:3e:7b:16:8a:ec:bc:aa:6a:19:c1:e9:74:42:af: 1a:24:91:b7:3b:42:3d:91:85:18:ad:24:b9:ac:97: c4:aa:71:75:c9:93:4c:40:14:8b:50:a8:92:8f:12: c7:8e:c5:0b:0f:4e:d1:27:86:69:57:37:1c:9f:9c: 04:ad:cc:95:53:c2:af:95:0d:60:77:cc:fc:f8:d4: 96:28:e0:db:18:f8:b2:9d:03:fe:d9:07:69:e6:ba: bc:3d:ec:8e:f3:11:b4:31:ee:14:48:da:04:33:56: a6:78:8f:76:1e:de:2a:85:17:cd:3b:7d:5a:48:e5: e5:3b:05:74:07:cd:09:5b:04:fb:ec:54:fb:28:aa: 92:83:6f:ba:19:0e:0a:76:cd:e5:36:08:97:22:ce: ce:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7C:4B:58:06:87:9A:ED:39:4D:ED:37:1E:AD:0E:50:B6:41:0A:DF X509v3 Authority Key Identifier: keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c6:e9:f4:94:29:ac:15:57:c1:21:1e:2b:63:28:81:72:64: a6:1a:47:51:f2:da:c6:37:d9:6f:7b:1d:fe:30:18:24:b8:d2: 91:04:d0:20:ef:ca:71:c0:78:2e:66:6d:39:f4:7b:b5:94:8f: 34:13:be:56:ff:fd:ea:55:71:0e:1e:b5:87:77:9b:69:43:de: 50:bc:46:04:63:e7:bf:20:80:00:b7:10:49:3c:a7:55:69:d2: dd:9d:dd:e3:a7:b3:05:80:a5:bb:6b:fd:9e:fc:b4:1a:7b:f5: f3:52:08:06:e6:ec:8b:e6:89:16:2f:9f:e2:f7:d2:c2:f6:e6: a7:a2:ed:3a:70:0b:1c:68:84:ce:c2:7e:43:ca:23:5e:ce:c1: e0:fb:25:3f:3c:db:36:e0:58:b5:ce:bb:6d:65:48:8a:56:c1: cc:fe:b4:7d:89:ee:e8:2a:65:3a:4f:a2:81:31:77:9b:02:f5: 4e:4d:41:15:67:34:75:2c:96:7e:46:17:21:0b:76:ba:a9:d7: 48:57:3e:42:6f:6e:1e:76:97:54:64:8a:a6:66:9d:e1:e9:b2: e1:e1:92:5a:97:e0:05:b6:1c:aa:d0:59:dc:cc:6e:1a:02:01: 89:21:30:33:8a:32:8c:61:d7:e1:b2:a3:55:a0:23:87:07:da: de:de:15:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy MjQxNjJBRjQwHhcNMjUwMjE1MDAzNjExWhcNMjUwMjIyMDAzNjExWjAYMRYwFAYD VQQDEw02N2FmZTE3Yi03MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA175uOwHpYvITJsaibkAVvQtbtdjsHwSc7UNoKnyPszVE/mNUu4T0aAjWkDqG I4dgCwxKCb9GP0iJU40XC26Ju1tWrRyfjWvwTt9JaTYN9F4QOTD+YVMJuLFm3wpl sMuBLnMgrn3vdwisPnsWiuy8qmoZwel0Qq8aJJG3O0I9kYUYrSS5rJfEqnF1yZNM QBSLUKiSjxLHjsULD07RJ4ZpVzccn5wErcyVU8KvlQ1gd8z8+NSWKODbGPiynQP+ 2Qdp5rq8PeyO8xG0Me4USNoEM1ameI92Ht4qhRfNO31aSOXlOwV0B80JWwT77FT7 KKqSg2+6GQ4Kds3lNgiXIs7OHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZ8S1gG h5rtOU3tNx6tDlC2QQrfMB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zMjBDM0E5QUM5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6 S1dZM2J5NEhWVUVpUVdLdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjxun0lCmsFVfBIR4rYyiBcmSmGkdR8trGN9lvex3+MBgkuNKRBNAg 78pxwHguZm059Hu1lI80E75W//3qVXEOHrWHd5tpQ95QvEYEY+e/IIAAtxBJPKdV adLdnd3jp7MFgKW7a/2e/LQae/XzUggG5uyL5okWL5/i99LC9uanou06cAscaITO wn5DyiNezsHg+yU/PNs24Fi1zrttZUiKVsHM/rR9ie7oKmU6T6KBMXebAvVOTUEV ZzR1LJZ+RhchC3a6qddIVz5Cb24edpdUZIqmZp3h6bLh4ZJal+AFthyq0FnczG4a AgGJITAzijKMYdfhsqNVoCOHB9re3hWF -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:26 2025 by rpki-client