$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft File: STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json) Hash identifier: X70paX4PsYrKz3LjbKVFKUFz3ymUqkZmluDgRf8GlAg= Subject key identifier: 8E:CF:0B:46:9B:10:73:7C:61:4D:99:6C:AF:7D:97:86:40:11:2E:D1 Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft Manifest number: 26 Signing time: Wed 05 Feb 2025 06:13:05 +0000 Manifest this update: Wed 05 Feb 2025 06:13:05 +0000 Manifest next update: Wed 12 Feb 2025 06:13:05 +0000 Files and hashes: 1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: Oc6haxY2tLa+iKzCyG6GBxLHddF/kgiAxZx/y2FrlEI=) 2: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: cCfazgVutgovqhRC5t2GJ/Mjc/vHjupt8cwmHtHH4B8=) 3: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: SbzIGZNMNJa87oLQ8CifAe8qrbXoaQRi0TmhIZboCMQ=) 4: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: Bsg5k0qU8j6671l5YxjaD4zP3w4U1PtCaRkw1jmRyr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 04:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6 Validity Not Before: Feb 5 06:13:05 2025 GMT Not After : Feb 12 06:13:05 2025 GMT Subject: CN=67a30171-d9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:d4:8e:e8:61:c9:39:08:73:82:7b:6d:46: 5f:20:90:17:a8:04:93:ac:27:be:51:c3:d5:ba:d1: 65:0b:0c:2c:1b:5d:c0:34:87:17:8b:e3:df:6d:9a: da:68:ba:d7:2e:2a:aa:1c:0f:2c:47:f7:88:37:05: f1:19:9d:38:44:6c:53:b8:36:fd:f8:1c:36:c7:73: e3:bb:c0:e1:f8:44:83:11:e1:b6:84:10:7d:ba:e0: 38:ab:18:7c:30:48:76:cb:52:16:a6:e6:1f:83:f9: b9:14:a7:fd:4a:02:d0:13:d2:a5:7e:ea:48:1d:2d: 52:6b:08:3d:cf:0d:99:26:9c:94:c3:0d:db:36:e8: 82:a7:e9:7e:cf:b1:49:fe:76:a9:fb:5b:60:f5:87: 8f:93:ad:f8:5a:c2:7d:56:e2:c5:8f:45:99:47:80: 54:fa:53:1b:79:37:73:f9:15:9f:9d:30:da:0e:8a: 4f:43:e8:53:a1:c7:36:8b:b4:a8:9f:bc:6b:f0:2e: 2e:f7:51:4b:28:d5:da:8f:70:5c:f8:54:d3:8a:08: dc:98:74:09:29:c7:7b:d2:1c:7f:ef:1f:a5:03:05: b6:76:59:4c:54:51:26:4f:58:05:c9:95:78:53:44: f4:df:39:8f:45:be:ef:01:85:60:ca:45:aa:92:f4: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CF:0B:46:9B:10:73:7C:61:4D:99:6C:AF:7D:97:86:40:11:2E:D1 X509v3 Authority Key Identifier: keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:44:85:29:a4:76:4f:72:4f:5b:96:48:9b:ef:0c:d1:38:8c: 29:01:cc:b1:ef:44:4a:96:58:c2:71:33:79:d6:33:cf:28:98: 32:8e:17:49:f2:2f:82:56:25:f5:18:56:01:1b:cf:80:2e:83: 0e:94:b0:53:dc:65:4c:59:53:e0:2d:98:f1:79:93:06:5d:1a: 2b:0f:bf:00:c4:a9:4b:a5:59:c6:24:cd:20:b7:85:4e:6c:8e: 2e:26:f9:29:34:d0:7d:14:8e:7e:3e:a0:59:f6:98:77:cd:87: ef:6f:67:28:a2:20:09:c4:56:4f:58:6b:e8:33:4c:36:0f:c9: 2c:0f:f6:11:24:b9:77:09:d4:d4:18:8a:82:b3:f0:53:34:7f: 29:cf:a7:1c:b3:c7:2a:1d:99:31:34:4e:e2:3e:de:50:59:cf: 3a:db:73:90:00:d9:8b:41:60:b8:a2:64:aa:68:71:ca:11:99: bd:b5:01:5b:2c:af:d7:be:3b:37:52:97:b0:32:2e:a7:2a:61: c5:5f:84:cc:6f:f5:df:fe:9e:28:97:a4:a0:00:fc:de:a1:1a: c1:53:ef:1d:8e:6b:a3:fb:38:54:76:08:e2:1c:00:1f:4e:f8: b5:6a:b9:fc:8f:5a:25:d4:6f:b8:62:19:aa:2b:5f:5e:7e:58: e6:e5:2c:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUZCNjExMC8GA1UEBRMoNDkzOTdFMzNCMzFDMEE4RjY4RkNEMjA3MkJEQTlBQ0NC NjVEMDJFQzAeFw0yNTAyMDUwNjEzMDVaFw0yNTAyMTIwNjEzMDVaMBgxFjAUBgNV BAMTDTY3YTMwMTcxLWQ5ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCFdSO6GHJOQhzgnttRl8gkBeoBJOsJ75Rw9W60WULDCwbXcA0hxeL499tmtpo utcuKqocDyxH94g3BfEZnThEbFO4Nv34HDbHc+O7wOH4RIMR4baEEH264DirGHww SHbLUham5h+D+bkUp/1KAtAT0qV+6kgdLVJrCD3PDZkmnJTDDds26IKn6X7PsUn+ dqn7W2D1h4+Trfhawn1W4sWPRZlHgFT6Uxt5N3P5FZ+dMNoOik9D6FOhxzaLtKif vGvwLi73UUso1dqPcFz4VNOKCNyYdAkpx3vSHH/vH6UDBbZ2WUxUUSZPWAXJlXhT RPTfOY9Fvu8BhWDKRaqS9PmJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjs8LRpsQ c3xhTZlsr32XhkARLtEwHwYDVR0jBBgwFoAUSTl+M7McCo9o/NIHK9qazLZdAuww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RkI2Lzg2NDdFNDFFQUM2 NDExRUZCNjg0MjY3QkM0RjlBRTAyL1NUbC1NN01jQ285b19OSUhLOXFhekxaZEF1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1RsLU03TWNDbzlvX05JSEs5cWF6TFpkQXV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RkI2Lzg2NDdFNDFFQUM2NDExRUZCNjg0MjY3QkM0RjlBRTAyL1NUbC1NN01jQ285 b19OSUhLOXFhekxaZEF1dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALdEhSmkdk9yT1uWSJvvDNE4jCkBzLHvREqWWMJxM3nWM88omDKOF0ny L4JWJfUYVgEbz4Augw6UsFPcZUxZU+AtmPF5kwZdGisPvwDEqUulWcYkzSC3hU5s ji4m+Sk00H0Ujn4+oFn2mHfNh+9vZyiiIAnEVk9Ya+gzTDYPySwP9hEkuXcJ1NQY ioKz8FM0fynPpxyzxyodmTE0TuI+3lBZzzrbc5AA2YtBYLiiZKpoccoRmb21AVss r9e+OzdSl7AyLqcqYcVfhMxv9d/+niiXpKAA/N6hGsFT7x2Oa6P7OFR2COIcAB9O +LVqufyPWiXUb7hiGaorX15+WOblLOw= -----END CERTIFICATE-----Generated at Wed Feb 5 12:51:31 2025 by rpki-client