$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json) Hash identifier: B0St74L0F/ls9D5MZc/kxFdbH0/Bevm7hiVEQmMyK94= Subject key identifier: BB:60:8C:3B:02:25:F4:EE:66:C7:02:91:D5:3E:02:76:56:F7:E4:0F Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft Manifest number: 16 Signing time: Wed 05 Feb 2025 06:22:57 +0000 Manifest this update: Wed 05 Feb 2025 06:22:57 +0000 Manifest next update: Wed 12 Feb 2025 06:22:56 +0000 Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: WOz0ktC+r80QxENWrmgzxw2sZgHofAMDNQV1on34ykE=) 2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: KRcguCIL3wMi3PwztLJpTVhTUzHmH2MqWyforuoA8o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC Validity Not Before: Feb 5 06:22:57 2025 GMT Not After : Feb 12 06:22:56 2025 GMT Subject: CN=67a303c1-bc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ec:10:36:ee:1b:64:57:bc:10:db:46:cf:00: 6a:2c:6a:83:6a:80:aa:b0:da:3b:93:d9:7f:7a:02: 92:84:ab:1b:8e:98:92:85:1c:4e:51:ee:b2:90:dc: fd:98:14:45:79:b0:22:f7:6b:7a:a3:e6:69:b2:e2: cb:4c:76:e2:58:9f:63:38:84:7a:15:28:a4:06:3d: b9:44:02:bf:33:6b:f4:d7:03:32:e3:18:15:de:d8: be:d8:cd:66:48:63:68:32:b5:96:02:e0:d4:c4:94: d9:69:89:9c:6b:21:c5:6b:28:9c:6a:a3:88:94:e2: 95:fa:47:33:57:9c:d1:3c:8d:bc:65:56:3d:10:17: f6:25:fb:c5:79:13:5f:8f:bc:8e:a8:6d:a1:74:74: 68:79:f5:d2:e0:10:a9:fc:a4:46:f8:8d:23:5f:e6: 16:8e:5e:94:61:93:a0:b1:91:b3:c0:0f:97:e8:c2: ac:02:c8:77:c0:ad:6d:fc:f7:48:7e:c0:48:7c:55: 6d:c6:25:69:56:f2:ff:2d:fa:5a:d3:0c:49:6f:11: 0b:b8:94:85:fb:73:3d:f0:cc:0a:2e:a7:4a:87:87: e4:6f:25:1b:3a:b4:45:e6:0d:89:7d:f1:45:ca:44: df:6d:f2:1c:c4:e1:94:b6:93:e4:54:de:f0:3f:e1: 78:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:60:8C:3B:02:25:F4:EE:66:C7:02:91:D5:3E:02:76:56:F7:E4:0F X509v3 Authority Key Identifier: keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6d:27:42:55:a9:5c:f6:d5:3f:18:6f:2e:8e:c7:2e:70:d7: d7:23:7e:51:d7:83:c9:2a:83:47:57:ea:2b:dc:84:00:71:59: ed:dd:50:0d:59:c1:78:28:6a:90:a2:73:4f:20:3f:bd:c5:c5: 70:1a:df:d6:94:f5:83:e1:d1:d2:bd:fb:a7:34:e7:5d:fe:fc: 7f:be:d0:29:37:d0:36:28:dc:c3:0e:fb:f3:07:2d:da:3b:c9: 14:cd:20:ac:bb:97:0b:7b:04:77:9c:fb:8c:61:9a:49:70:71: 07:ff:22:5d:34:e7:90:68:10:29:c9:ce:17:62:be:59:de:71: 09:73:61:18:03:c6:df:1d:5f:bf:36:5e:a3:e0:c8:aa:ad:1f: 99:f9:60:90:91:c5:a4:02:14:5d:da:35:b5:c5:4b:7b:6f:9b: 27:58:6f:80:e2:20:4b:36:e5:61:ce:0e:68:09:02:20:38:cb: 3a:68:ff:5e:73:31:e4:14:76:c8:f7:45:4e:77:24:3b:3f:9a: 56:14:c3:3f:28:41:f9:ac:96:26:ae:39:77:76:25:8c:d9:c2: 00:33:7d:5f:18:88:8b:8f:9a:2c:91:d4:7e:1e:7b:8c:5d:a6: ec:95:ac:fe:12:f7:db:02:65:ee:c8:19:01:7b:cd:1c:91:fb: 7a:16:31:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzdEQzExMC8GA1UEBRMoOTlCNzBCRjIwMjVFRERDREY5MkE0N0QwNENCNzU2QUNC MDczREM0NTAeFw0yNTAyMDUwNjIyNTdaFw0yNTAyMTIwNjIyNTZaMBgxFjAUBgNV BAMTDTY3YTMwM2MxLWJjMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCX7BA27htkV7wQ20bPAGosaoNqgKqw2juT2X96ApKEqxuOmJKFHE5R7rKQ3P2Y FEV5sCL3a3qj5mmy4stMduJYn2M4hHoVKKQGPblEAr8za/TXAzLjGBXe2L7YzWZI Y2gytZYC4NTElNlpiZxrIcVrKJxqo4iU4pX6RzNXnNE8jbxlVj0QF/Yl+8V5E1+P vI6obaF0dGh59dLgEKn8pEb4jSNf5haOXpRhk6CxkbPAD5fowqwCyHfArW3890h+ wEh8VW3GJWlW8v8t+lrTDElvEQu4lIX7cz3wzAoup0qHh+RvJRs6tEXmDYl98UXK RN9t8hzE4ZS2k+RU3vA/4XiVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu2CMOwIl 9O5mxwKR1T4Cdlb35A8wHwYDVR0jBBgwFoAUmbcL8gJe3c35KkfQTLdWrLBz3EUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDN0RDLzZERUZEQjcwQzU4 QjExRUZCODdFNUYzM0M0RjlBRTAyL21iY0w4Z0plM2MzNUtrZlFUTGRXckxCejNF VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWJjTDhnSmUzYzM1S2tmUVRMZFdyTEJ6M0VVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD N0RDLzZERUZEQjcwQzU4QjExRUZCODdFNUYzM0M0RjlBRTAyL21iY0w4Z0plM2Mz NUtrZlFUTGRXckxCejNFVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACNtJ0JVqVz21T8Yby6Oxy5w19cjflHXg8kqg0dX6ivchABxWe3dUA1Z wXgoapCic08gP73FxXAa39aU9YPh0dK9+6c0513+/H++0Ck30DYo3MMO+/MHLdo7 yRTNIKy7lwt7BHec+4xhmklwcQf/Il0055BoECnJzhdivlnecQlzYRgDxt8dX782 XqPgyKqtH5n5YJCRxaQCFF3aNbXFS3tvmydYb4DiIEs25WHODmgJAiA4yzpo/15z MeQUdsj3RU53JDs/mlYUwz8oQfmsliauOXd2JYzZwgAzfV8YiIuPmiyR1H4ee4xd puyVrP4S99sCZe7IGQF7zRyR+3oWMdE= -----END CERTIFICATE-----Generated at Thu Feb 6 06:42:40 2025 by rpki-client