$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json) Hash identifier: Hk7TA7HZD+VU0zyH6otUQ+fYK8/dphk6dhmttTS6udc= Subject key identifier: C2:93:6F:6A:4D:2F:0F:89:57:74:4F:3F:35:97:C3:DF:83:D0:FB:62 Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft Manifest number: 16 Signing time: Wed 05 Feb 2025 06:22:55 +0000 Manifest this update: Wed 05 Feb 2025 06:22:54 +0000 Manifest next update: Wed 12 Feb 2025 06:22:54 +0000 Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: Pwpb80L7MozJlW4WTxzSHBlnauq+qtsNrxPNRchyJ68=) 2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: Dm+Qler0DP4/BlS/cktwlrkhP2z4/Lue67gvK431F+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC Validity Not Before: Feb 5 06:22:54 2025 GMT Not After : Feb 12 06:22:54 2025 GMT Subject: CN=67a303be-c8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:23:03:1d:63:c7:60:79:0a:71:a6:78:cb: d2:a5:d9:27:05:03:25:59:64:e7:47:69:7a:96:2f: 12:48:6d:c9:9f:b4:f9:33:10:59:41:bd:24:9a:fd: 46:b0:2e:43:56:7b:07:40:98:8c:23:1f:43:2b:1c: b6:65:c9:d3:86:1a:c3:b2:50:91:1d:e4:e2:e9:0e: 37:35:d7:36:f4:29:0b:2a:0d:01:65:9a:8f:e7:ec: 7f:c4:a3:be:1e:ca:83:d6:11:0b:b6:fe:47:3a:98: 49:8b:1d:ab:e4:29:68:46:ee:3b:0a:6d:de:b0:a3: bd:07:66:ad:f8:23:71:33:6a:0e:3e:18:ba:9d:6c: 01:15:93:47:60:96:45:bc:7e:2f:d0:63:42:a0:ee: 5d:8f:ca:89:5c:6c:95:1c:ab:c3:e5:e9:bb:55:78: c3:0a:78:09:d2:c4:44:64:71:1f:c7:d7:90:2f:53: 76:b1:62:af:ab:f2:ab:d1:16:a0:ba:d5:44:67:8d: c3:b9:d2:40:02:28:da:cf:27:07:12:8b:30:32:95: a5:57:61:5e:59:ed:56:82:2f:a9:59:4a:5d:fd:12: 56:89:88:fa:0b:6d:70:5a:61:18:bc:49:14:63:b2: 48:5b:99:9d:b1:62:38:24:ba:71:b7:35:cc:17:4b: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:93:6F:6A:4D:2F:0F:89:57:74:4F:3F:35:97:C3:DF:83:D0:FB:62 X509v3 Authority Key Identifier: keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:17:fd:ec:7e:ad:03:f8:10:10:cb:73:0c:db:f2:a3:e7:38: a9:e1:61:a0:7e:98:b2:28:84:63:eb:4c:9e:72:2f:2b:0e:e6: ed:cb:fc:6c:59:e6:fd:15:36:f6:90:1d:dc:7b:c1:87:f6:07: 08:1d:bf:4b:91:f9:ca:d7:f9:86:60:c0:83:28:f7:60:8f:fd: 41:f0:de:8c:66:5e:4d:d1:c7:66:9f:41:76:22:0a:64:67:7b: c0:9b:74:50:2a:da:a1:6a:37:93:7c:27:1c:7c:1b:b4:6d:3a: 21:89:7d:d0:95:a2:82:6c:68:0f:b7:73:f8:68:54:e4:cd:2b: 53:17:66:b1:c4:67:41:fc:30:7d:61:f8:39:40:ac:2d:9f:5a: 75:73:71:90:c2:be:31:08:20:36:c8:2a:17:32:b9:88:24:84: 8b:80:0f:18:a6:7d:32:de:59:b3:aa:31:b3:6d:40:c5:67:a9: 95:23:26:5c:5f:ee:a2:e1:dd:c0:ea:72:0f:a9:ed:64:c9:b3: 22:f6:99:f9:3d:d5:56:a2:4b:0a:61:30:b4:bf:fc:b1:63:81: 9b:ae:a2:c0:2a:d5:2f:b2:aa:aa:8f:a6:33:f5:70:eb:56:dd: d2:84:b4:4b:7b:68:c3:36:c7:02:89:26:c1:94:9a:f5:7f:bb: ae:1e:60:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzdEQzExMC8GA1UEBRMoNjVBOEQwOEIyRUM4RjQyRDQzQjlBQTdBNDIzNTE3MkJC N0VEMTY2NTAeFw0yNTAyMDUwNjIyNTRaFw0yNTAyMTIwNjIyNTRaMBgxFjAUBgNV BAMTDTY3YTMwM2JlLWM4ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxDCMDHWPHYHkKcaZ4y9Kl2ScFAyVZZOdHaXqWLxJIbcmftPkzEFlBvSSa/Uaw LkNWewdAmIwjH0MrHLZlydOGGsOyUJEd5OLpDjc11zb0KQsqDQFlmo/n7H/Eo74e yoPWEQu2/kc6mEmLHavkKWhG7jsKbd6wo70HZq34I3Ezag4+GLqdbAEVk0dglkW8 fi/QY0Kg7l2PyolcbJUcq8Pl6btVeMMKeAnSxERkcR/H15AvU3axYq+r8qvRFqC6 1URnjcO50kACKNrPJwcSizAylaVXYV5Z7VaCL6lZSl39ElaJiPoLbXBaYRi8SRRj skhbmZ2xYjgkunG3NcwXSxvHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwpNvak0v D4lXdE8/NZfD34PQ+2IwHwYDVR0jBBgwFoAUZajQiy7I9C1Duap6QjUXK7ftFmUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDN0RDLzY0QkE0QkE4QzU4 QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMxRHVhcDZRalVYSzdmdEZt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFqUWl5N0k5QzFEdWFwNlFqVVhLN2Z0Rm1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD N0RDLzY0QkE0QkE4QzU4QjExRUZCODdFNUYzM0M0RjlBRTAyL1phalFpeTdJOUMx RHVhcDZRalVYSzdmdEZtVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFUX/ex+rQP4EBDLcwzb8qPnOKnhYaB+mLIohGPrTJ5yLysO5u3L/GxZ 5v0VNvaQHdx7wYf2Bwgdv0uR+crX+YZgwIMo92CP/UHw3oxmXk3Rx2afQXYiCmRn e8CbdFAq2qFqN5N8Jxx8G7RtOiGJfdCVooJsaA+3c/hoVOTNK1MXZrHEZ0H8MH1h +DlArC2fWnVzcZDCvjEIIDbIKhcyuYgkhIuADximfTLeWbOqMbNtQMVnqZUjJlxf 7qLh3cDqcg+p7WTJsyL2mfk91VaiSwphMLS//LFjgZuuosAq1S+yqqqPpjP1cOtW 3dKEtEt7aMM2xwKJJsGUmvV/u64eYM0= -----END CERTIFICATE-----Generated at Wed Feb 5 19:01:21 2025 by rpki-client