$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft File: SC2tuZLeLPG_mQg2R44ZlEmVseA.mft (raw, json) Hash identifier: hvBkru5l2Dd9FPXYGVGXg18z5AVtT42dlP6p48jx7yg= Subject key identifier: B6:FE:3C:9A:2F:85:19:AD:32:B7:B9:4F:DF:D4:4E:64:64:E4:C6:8B Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0 Certificate serial: 0E80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft Manifest number: 0E77 Signing time: Sun 16 Feb 2025 18:05:59 +0000 Manifest this update: Sun 16 Feb 2025 18:05:59 +0000 Manifest next update: Sun 23 Feb 2025 18:05:59 +0000 Files and hashes: 1: SC2tuZLeLPG_mQg2R44ZlEmVseA.crl (hash: 52zEt1mZAEQTI3wQGGIS1InjE+0mD7fmUPQm6u9v7oc=) 2: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (hash: IptQh9J7jeiBWTQD/hPt8ei062oDoKw0nZ49KCuQKMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3712 (0xe80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E898 Validity Not Before: Feb 16 18:05:59 2025 GMT Not After : Feb 23 18:05:59 2025 GMT Subject: CN=67b22907-006e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7d:9d:41:87:f9:4d:8c:00:c2:3a:b6:c1:17: 17:92:29:d0:60:61:05:dc:13:55:46:92:14:66:2d: cb:83:b8:c6:6b:46:74:ad:3a:20:e8:c2:f1:14:92: f0:c1:e1:80:61:12:7d:f9:62:fa:2d:7a:72:42:ad: e4:1a:4b:5a:a2:60:62:85:f7:e7:61:b5:a8:72:89: 51:59:b0:24:d7:7e:e8:bd:34:11:17:e6:fa:92:06: 52:51:38:34:b0:4f:f8:99:21:b2:c6:b2:d3:0b:fc: 78:02:ef:31:37:05:4a:dc:04:f8:ea:82:f2:cc:9d: 94:63:55:02:cf:24:27:4c:47:a7:17:45:42:56:fa: 64:85:34:d5:2b:9d:db:62:2a:8e:88:f6:66:3a:62: d3:0a:b8:2e:6b:17:92:75:49:7d:70:3b:be:35:c7: 31:00:b2:23:ca:44:a7:f9:3e:08:4e:d2:0a:27:43: 84:87:da:c0:95:21:4b:8a:9b:32:0d:cf:d1:64:01: f4:43:92:94:64:4c:8b:e7:89:ff:1a:3e:fa:4a:f7: 6e:bd:53:d8:2e:0c:e0:1a:2c:40:bf:33:ad:b8:bc: 3c:5c:b5:52:1e:d4:4b:12:fd:70:22:d7:2a:5b:c3: 72:18:68:d1:b1:67:42:ef:0a:c1:31:00:7a:e3:e5: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FE:3C:9A:2F:85:19:AD:32:B7:B9:4F:DF:D4:4E:64:64:E4:C6:8B X509v3 Authority Key Identifier: keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:51:47:66:67:08:0f:8d:ac:1b:87:5b:99:58:7e:40:81:dc: 02:3f:a5:1a:60:9f:71:f2:0e:12:db:9a:7b:c4:02:3f:85:88: ef:e0:7e:a8:83:a7:4f:72:77:0e:81:07:ce:f1:fe:06:37:d2: d3:85:ff:8b:c4:4f:06:91:db:85:cd:3e:e8:17:87:6d:c2:71: b6:ea:b0:6a:bb:83:8b:45:b1:88:80:39:8d:10:db:c8:81:96: 3d:32:61:f4:6f:d7:f7:45:ef:d0:3f:0f:41:af:20:bb:a3:99: b8:4f:52:8a:65:99:03:b5:82:74:b5:2c:ce:db:3d:66:b1:1d: 31:d6:4c:db:62:e2:95:40:d6:92:f5:ca:ae:89:47:3f:54:47: 53:7b:c6:8d:a3:97:bc:c9:37:9b:c9:a7:89:9d:0e:d0:d7:4a: d3:b2:05:83:07:6b:55:39:9f:12:94:05:7c:d3:58:8f:44:57: 0b:13:29:bb:1c:2b:ba:f6:76:7b:8c:19:3f:05:56:21:d9:53: e0:87:5b:24:e3:f9:3b:5f:d1:a1:d5:14:4f:0f:58:9b:ba:63: 79:8a:a8:c9:dc:36:49:79:ec:f4:45:01:cf:77:1c:f0:43:bb: 1b:14:51:aa:e8:57:c3:ca:73:29:81:8f:16:03:1b:6f:cf:3c: 1c:24:e6:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4OTgxMTAvBgNVBAUTKDQ4MkRBREI5OTJERTJDRjFCRjk5MDgzNjQ3OEUxOTk0 NDk5NUIxRTAwHhcNMjUwMjE2MTgwNTU5WhcNMjUwMjIzMTgwNTU5WjAYMRYwFAYD VQQDEw02N2IyMjkwNy0wMDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9H2dQYf5TYwAwjq2wRcXkinQYGEF3BNVRpIUZi3Lg7jGa0Z0rTog6MLxFJLw weGAYRJ9+WL6LXpyQq3kGktaomBihffnYbWocolRWbAk137ovTQRF+b6kgZSUTg0 sE/4mSGyxrLTC/x4Au8xNwVK3AT46oLyzJ2UY1UCzyQnTEenF0VCVvpkhTTVK53b YiqOiPZmOmLTCrguaxeSdUl9cDu+NccxALIjykSn+T4ITtIKJ0OEh9rAlSFLipsy Dc/RZAH0Q5KUZEyL54n/Gj76SvduvVPYLgzgGixAvzOtuLw8XLVSHtRLEv1wItcq W8NyGGjRsWdC7wrBMQB64+U3SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb+PJov hRmtMre5T9/UTmRk5MaLMB8GA1UdIwQYMBaAFEgtrbmS3izxv5kINkeOGZRJlbHg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg5OC8yMTFDNjQ0NjhD MjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQR19tUWcyUjQ0WmxFbVZz ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMnR1WkxlTFBHX21RZzJSNDRabEVtVnNlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg5OC8yMTFDNjQ0NjhDMjgxMUU5QjAyQkNEODBDNEY5QUUwMi9TQzJ0dVpMZUxQ R19tUWcyUjQ0WmxFbVZzZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRUUdmZwgPjawbh1uZWH5AgdwCP6UaYJ9x8g4S25p7xAI/hYjv4H6o g6dPcncOgQfO8f4GN9LThf+LxE8GkduFzT7oF4dtwnG26rBqu4OLRbGIgDmNENvI gZY9MmH0b9f3Re/QPw9BryC7o5m4T1KKZZkDtYJ0tSzO2z1msR0x1kzbYuKVQNaS 9cquiUc/VEdTe8aNo5e8yTebyaeJnQ7Q10rTsgWDB2tVOZ8SlAV801iPRFcLEym7 HCu69nZ7jBk/BVYh2VPgh1sk4/k7X9Gh1RRPD1ibumN5iqjJ3DZJeez0RQHPdxzw Q7sbFFGq6FfDynMpgY8WAxtvzzwcJOYp -----END CERTIFICATE-----Generated at Mon Feb 17 08:05:06 2025 by rpki-client