$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: GLZ/26SJhO7a3LX+HMd3jOu0441rcEsy17/C9NnK044= Subject key identifier: 84:6D:EE:0D:17:B5:9D:5A:5E:0D:A4:24:C6:14:93:22:2E:6D:E7:86 Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2B71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2B71 Signing time: Fri 14 Feb 2025 15:49:07 +0000 Manifest this update: Fri 14 Feb 2025 15:49:07 +0000 Manifest next update: Fri 21 Feb 2025 15:49:07 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: L54fF9PaRZtxmuPorT4ogopK4q4QTIvwSjFhXxGsPIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11121 (0x2b71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0 Validity Not Before: Feb 14 15:49:07 2025 GMT Not After : Feb 21 15:49:07 2025 GMT Subject: CN=67af65f3-9165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:b2:28:a6:b4:d1:61:f1:ec:13:d7:0c:6d: df:f7:ad:ff:24:d9:90:08:83:dc:44:86:f9:28:7a: d0:76:79:56:ae:2a:e5:4e:a4:93:d1:26:12:37:66: d6:6b:da:40:c3:c3:4f:99:fd:84:fd:05:0d:5e:51: eb:47:38:88:b1:16:8b:5d:1e:1b:f4:f5:59:76:8c: 83:be:81:c5:21:5b:eb:23:73:20:68:75:7f:cc:e8: 0f:d5:05:49:4d:9e:16:de:20:ed:97:51:3c:5a:a6: fe:ac:f8:a9:bd:d3:bf:c3:64:78:da:b0:83:1d:34: 90:7a:2f:8e:47:4d:77:5b:32:fb:56:d7:ff:28:0d: 20:a6:9c:62:ff:39:fe:da:3b:a1:43:80:cc:e7:7b: 4e:2e:05:f6:b7:46:c8:c1:7c:c2:f4:b8:b9:e4:0c: 51:b0:56:72:4c:3e:32:c9:72:90:7f:d8:a0:8a:5f: 16:ca:7e:99:f9:c6:11:73:62:32:e5:29:3d:c7:15: 08:a2:be:83:43:4c:4d:98:05:cb:df:4f:59:77:56: 18:bd:09:28:d3:79:d5:5a:01:cf:27:16:17:63:2f: 87:69:de:90:e8:98:97:56:41:fd:24:0e:dc:7c:72: b7:4f:8b:fd:48:78:2d:e9:c8:d4:e9:1b:b4:d7:fd: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6D:EE:0D:17:B5:9D:5A:5E:0D:A4:24:C6:14:93:22:2E:6D:E7:86 X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:6e:74:ea:e1:e1:ff:ae:aa:05:45:48:5d:ec:a1:35:0b:d2: e9:af:dd:a3:85:20:15:38:2f:73:a5:28:71:ac:d9:f8:26:f6: af:0e:8b:11:0e:eb:1e:be:bd:6d:2d:23:b7:77:31:d1:da:3f: 8c:3c:b5:e8:f2:f4:42:f9:b8:1e:66:73:e5:30:8b:a7:54:4e: bc:f2:f3:69:de:ab:f6:ff:9e:00:be:80:f0:8a:40:2d:18:45: 49:1f:32:6e:84:4a:48:67:b2:cd:5e:3b:6e:68:6d:c0:e7:b3: c1:ec:24:9b:b6:7b:eb:24:d1:ff:68:74:3f:a7:96:33:cc:63: 17:07:c2:61:d6:10:b9:d9:7d:ae:e4:32:d9:7e:27:3f:59:6b: 43:8f:01:ba:7b:1d:13:d3:e3:16:de:31:9f:1b:28:7d:80:f9: 3b:15:2d:df:f9:09:05:15:bc:a7:0c:77:be:69:33:3b:47:62: f1:e1:9c:71:c6:14:76:e8:8d:1e:01:4d:8d:32:81:00:60:4c: 73:e6:87:35:14:1c:c8:76:a3:e8:79:da:ac:cc:63:c7:f6:67: 54:88:9e:de:83:57:84:49:1e:53:74:ff:45:41:72:09:e8:60: b0:9b:b4:bd:b6:00:85:99:b0:60:b0:cf:44:95:8d:cd:40:2b: 77:0b:ee:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjUwMjE0MTU0OTA3WhcNMjUwMjIxMTU0OTA3WjAYMRYwFAYD VQQDEw02N2FmNjVmMy05MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjKyKKa00WHx7BPXDG3f963/JNmQCIPcRIb5KHrQdnlWrirlTqST0SYSN2bW a9pAw8NPmf2E/QUNXlHrRziIsRaLXR4b9PVZdoyDvoHFIVvrI3MgaHV/zOgP1QVJ TZ4W3iDtl1E8Wqb+rPipvdO/w2R42rCDHTSQei+OR013WzL7Vtf/KA0gppxi/zn+ 2juhQ4DM53tOLgX2t0bIwXzC9Li55AxRsFZyTD4yyXKQf9igil8Wyn6Z+cYRc2Iy 5Sk9xxUIor6DQ0xNmAXL309Zd1YYvQko03nVWgHPJxYXYy+Had6Q6JiXVkH9JA7c fHK3T4v9SHgt6cjU6Ru01/3jNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRt7g0X tZ1aXg2kJMYUkyIubeeGMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRbnTq4eH/rqoFRUhd7KE1C9Lpr92jhSAVOC9zpShxrNn4JvavDosR Dusevr1tLSO3dzHR2j+MPLXo8vRC+bgeZnPlMIunVE688vNp3qv2/54AvoDwikAt GEVJHzJuhEpIZ7LNXjtuaG3A57PB7CSbtnvrJNH/aHQ/p5YzzGMXB8Jh1hC52X2u 5DLZfic/WWtDjwG6ex0T0+MW3jGfGyh9gPk7FS3f+QkFFbynDHe+aTM7R2Lx4Zxx xhR26I0eAU2NMoEAYExz5oc1FBzIdqPoedqszGPH9mdUiJ7eg1eESR5TdP9FQXIJ 6GCwm7S9tgCFmbBgsM9ElY3NQCt3C+58 -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:30 2025 by rpki-client