$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: 2MDfzHMclBdCCRnz0XdtAiyQM++hPLlRI9XUMle4Bw4= Subject key identifier: 12:4F:2C:44:C0:44:6C:FD:44:32:3D:A6:36:29:6B:E3:5E:68:9E:D0 Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: 18 Signing time: Wed 05 Feb 2025 06:22:35 +0000 Manifest this update: Wed 05 Feb 2025 06:22:35 +0000 Manifest next update: Wed 12 Feb 2025 06:22:35 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: t0HpzSoD/HJePN1vENcuvj9aau3B9P9wNxCcfsMZ6JE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07 Validity Not Before: Feb 5 06:22:35 2025 GMT Not After : Feb 12 06:22:35 2025 GMT Subject: CN=67a303ab-5847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:bd:e9:c3:3b:67:ef:b2:68:a1:ca:8d:b7: 85:69:c2:1f:22:31:97:ca:63:32:f7:9d:2d:fe:ed: d5:0c:40:9f:0c:e0:39:20:db:c7:c6:f1:15:7a:b0: bf:5f:f6:ce:0f:45:90:e0:61:96:c5:98:65:42:21: bc:5a:fa:85:01:3d:14:58:cb:49:04:d6:46:df:ef: 70:af:b9:d0:f6:79:b0:bf:44:26:d2:87:ae:6d:c0: 9f:d7:d7:36:a9:4c:0f:8d:5c:3c:d7:84:97:c0:7c: f1:6a:1c:e3:81:7c:6c:e5:1f:ef:4a:96:6d:cc:97: 61:ac:c4:e2:81:03:ad:9a:17:f0:01:26:71:7a:9a: ea:10:c0:3d:2c:79:fe:e4:62:d2:96:8b:d2:24:5e: 14:f9:0e:8c:f8:73:4b:c7:c4:aa:cb:87:dd:4f:bc: 4d:d2:22:35:0d:24:07:5f:a7:ed:01:f7:79:c9:37: 77:87:f3:cc:9c:3c:43:12:a3:a1:d7:0e:bb:3b:2e: 3b:f9:6c:93:9e:fa:f7:3e:a6:59:ff:b8:d4:19:2e: 99:3a:e0:88:cd:8b:b7:b0:d7:22:05:ea:a4:b5:73: a5:18:69:19:0f:70:04:fd:a0:52:26:02:de:c9:a7: 9d:cd:11:74:54:bc:0f:35:3a:d9:dd:1b:ac:e8:f7: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4F:2C:44:C0:44:6C:FD:44:32:3D:A6:36:29:6B:E3:5E:68:9E:D0 X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b9:a5:78:ff:ff:af:81:ea:62:bc:83:99:3e:03:c3:a9:f1: e9:9a:e5:0f:b0:6e:97:77:34:8b:75:32:5b:58:1f:b2:c8:20: 46:d5:b9:85:80:1b:2e:61:96:c8:43:ad:5a:fc:9e:54:9f:c6: f6:eb:14:e5:3e:98:98:4f:62:d7:f2:37:6c:d9:ac:8d:94:47: 1d:77:7f:12:36:df:89:e8:59:79:93:f7:85:6d:05:95:a2:d8: 0d:a2:75:fc:79:59:f6:c3:fc:36:6a:e7:ac:82:4a:c8:32:86: 01:ac:18:5b:3f:56:ec:94:0d:ab:6f:45:32:73:f5:b5:99:f6: d7:8d:01:b0:f7:5c:c4:af:1e:14:13:fa:a2:1d:eb:b2:05:de: c7:df:96:ed:7a:2e:09:4e:7c:5d:c2:f1:c0:42:5e:b1:81:64: 29:f5:92:11:90:54:5c:fd:b9:78:6c:e8:95:ae:1e:c6:a3:7d: 39:6c:4e:a9:22:e4:ff:80:cf:b0:96:4b:02:52:72:c0:5d:67: fd:01:80:58:be:1a:fe:76:c6:ba:af:f9:7f:a4:ba:a0:fd:94: f8:c4:2b:04:1e:3c:1a:0c:70:34:07:5f:43:cf:1b:6a:7e:fa: 10:25:a2:e5:54:ad:6b:1a:b8:9d:0d:b0:60:8c:cd:fa:1c:e2: 08:67:de:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUYwNzExMC8GA1UEBRMoMzczOEZGM0M1QkFGMTkxMTgyRUJBMTRCNzhDODQ4QTVB RUZBNENBQTAeFw0yNTAyMDUwNjIyMzVaFw0yNTAyMTIwNjIyMzVaMBgxFjAUBgNV BAMTDTY3YTMwM2FiLTU4NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPIb3pwztn77JoocqNt4Vpwh8iMZfKYzL3nS3+7dUMQJ8M4Dkg28fG8RV6sL9f 9s4PRZDgYZbFmGVCIbxa+oUBPRRYy0kE1kbf73CvudD2ebC/RCbSh65twJ/X1zap TA+NXDzXhJfAfPFqHOOBfGzlH+9Klm3Ml2GsxOKBA62aF/ABJnF6muoQwD0sef7k YtKWi9IkXhT5Doz4c0vHxKrLh91PvE3SIjUNJAdfp+0B93nJN3eH88ycPEMSo6HX Drs7Ljv5bJOe+vc+pln/uNQZLpk64IjNi7ew1yIF6qS1c6UYaRkPcAT9oFImAt7J p53NEXRUvA81OtndG6zo9wsnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEk8sRMBE bP1EMj2mNilr415ontAwHwYDVR0jBBgwFoAUNzj/PFuvGRGC66FLeMhIpa76TKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RjA3LzM3MzdBMkJDQzM1 QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnpqX1BGdXZHUkdDNjZGTGVNaElwYTc2VEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RjA3LzM3MzdBMkJDQzM1QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JH QzY2RkxlTWhJcGE3NlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI25pXj//6+B6mK8g5k+A8Op8ema5Q+wbpd3NIt1MltYH7LIIEbVuYWA Gy5hlshDrVr8nlSfxvbrFOU+mJhPYtfyN2zZrI2URx13fxI234noWXmT94VtBZWi 2A2idfx5WfbD/DZq56yCSsgyhgGsGFs/VuyUDatvRTJz9bWZ9teNAbD3XMSvHhQT +qId67IF3sfflu16LglOfF3C8cBCXrGBZCn1khGQVFz9uXhs6JWuHsajfTlsTqki 5P+Az7CWSwJScsBdZ/0BgFi+Gv52xrqv+X+kuqD9lPjEKwQePBoMcDQHX0PPG2p+ +hAlouVUrWsauJ0NsGCMzfoc4ghn3jM= -----END CERTIFICATE-----Generated at Thu Feb 6 05:01:45 2025 by rpki-client