$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json) Hash identifier: 2BQSUmYRmDfmpw/jhMcHpGfQYZZl4O4dE4LhdvyboD8= Subject key identifier: EB:C1:62:D1:5F:B3:7E:EB:A1:11:E4:65:36:2F:30:53:D4:A1:BE:1E Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft Manifest number: 6B Signing time: Sat 15 Feb 2025 08:07:37 +0000 Manifest this update: Sat 15 Feb 2025 08:07:36 +0000 Manifest next update: Sat 22 Feb 2025 08:07:36 +0000 Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: qvFvzQgCX5kcODwmLEQmG++3vxsSgy3BecfKCf7Me5k=) 2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: t4ZfZhgJCrUUcwGkxWGjP42WHOWCXQN3AYaH4hz5LAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE Validity Not Before: Feb 15 08:07:36 2025 GMT Not After : Feb 22 08:07:36 2025 GMT Subject: CN=67b04b48-5c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:82:31:23:1c:fb:b5:b2:12:f4:a8:23:bd: 02:b4:07:ff:4c:01:09:33:b6:cb:22:73:53:4b:65: fc:6d:ae:02:ef:8b:7d:ad:a0:0b:ce:1a:bd:68:09: 5d:40:de:4c:87:c6:40:92:8d:d1:ae:84:f5:46:09: a9:4f:5a:27:4a:7e:70:af:c8:1c:51:c7:3f:6f:85: 9c:65:a4:ae:32:0f:c9:cd:5f:cc:2b:1f:c4:0e:2f: b8:f8:93:ac:68:06:01:43:6e:6e:16:91:8d:21:72: db:1f:f9:98:b9:2c:37:20:bc:fc:e8:3d:06:dc:a9: fc:f5:32:5c:13:e5:cf:9a:aa:76:24:df:38:95:c0: d4:05:15:e0:27:c2:6f:a3:f5:e6:3c:d1:5e:45:53: e6:c1:d0:c3:11:d6:54:db:39:2c:86:e2:50:d7:0f: bf:00:7b:f9:0f:60:10:23:91:f0:e5:68:a7:e7:df: 9c:07:54:71:21:2e:b5:80:1b:b5:e3:74:a3:90:b3: 47:6b:c9:af:76:df:88:8b:b3:30:db:92:12:a4:98: 9d:ee:71:a4:43:e9:c3:7c:94:84:20:2c:ac:d9:4a: 46:bc:d0:ac:d0:b4:f3:05:d2:6c:ae:7d:06:30:45: d3:71:0a:91:e5:a6:0f:3c:53:eb:1f:2b:ea:ba:58: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C1:62:D1:5F:B3:7E:EB:A1:11:E4:65:36:2F:30:53:D4:A1:BE:1E X509v3 Authority Key Identifier: keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:36:c2:87:7a:2f:27:f2:2f:cd:2d:30:31:14:58:04:14:3d: ba:74:8e:85:61:f5:76:73:27:99:c6:d1:cf:b7:4f:bc:44:b6: 49:ed:97:7a:39:f6:9b:63:9f:ba:54:01:b5:aa:b5:ad:f1:61: 1d:99:4c:79:af:31:7c:da:98:3f:45:01:7e:c3:9f:e0:51:9b: 2e:4f:78:88:e4:51:0e:9f:07:de:b0:31:fd:f7:49:46:e5:4b: bb:c9:94:a6:cf:f4:84:b7:83:00:26:55:37:22:5e:b4:59:d6: 64:b8:e8:e5:fc:ef:d3:14:e2:2c:92:41:99:b5:d7:c6:6d:6a: 17:fa:f8:de:9b:9a:29:70:e4:cf:72:ee:9c:79:7b:59:3d:a6: 87:55:00:59:97:ba:18:a0:bc:7e:08:be:cf:14:a5:53:dc:39: 2b:75:53:b2:94:d0:4b:4d:a2:11:c8:7e:fa:45:99:6f:39:c8: 49:25:64:14:be:3a:45:30:26:92:43:e8:7c:4e:67:29:db:98: 8d:8d:3f:ff:7b:e8:36:ee:01:a1:2a:2b:25:05:06:8a:86:ce: 81:1e:74:e4:2b:6f:f0:1d:47:5e:9a:78:fc:25:33:cf:e2:34: f5:15:bf:a8:c8:e3:c3:29:b6:9f:a2:8a:98:7b:4a:8d:50:63: 80:2b:6f:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDNDRTExMC8GA1UEBRMoMTUyNTAxRTJENUQyQkRDQUUxODhDMzRBNjUzRTQwRjQw OUEyQjZENzAeFw0yNTAyMTUwODA3MzZaFw0yNTAyMjIwODA3MzZaMBgxFjAUBgNV BAMTDTY3YjA0YjQ4LTVjMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGmoIxIxz7tbIS9KgjvQK0B/9MAQkztssic1NLZfxtrgLvi32toAvOGr1oCV1A 3kyHxkCSjdGuhPVGCalPWidKfnCvyBxRxz9vhZxlpK4yD8nNX8wrH8QOL7j4k6xo BgFDbm4WkY0hctsf+Zi5LDcgvPzoPQbcqfz1MlwT5c+aqnYk3ziVwNQFFeAnwm+j 9eY80V5FU+bB0MMR1lTbOSyG4lDXD78Ae/kPYBAjkfDlaKfn35wHVHEhLrWAG7Xj dKOQs0drya9234iLszDbkhKkmJ3ucaRD6cN8lIQgLKzZSka80KzQtPMF0myufQYw RdNxCpHlpg88U+sfK+q6WDmnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU68Fi0V+z fuuhEeRlNi8wU9Shvh4wHwYDVR0jBBgwFoAUFSUB4tXSvcrhiMNKZT5A9Amittcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEM0NFLzE0MkEyQjA4NDk1 RTExRUZCRThGMjA3OUM0RjlBRTAyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRlNVQjR0WFN2Y3JoaU1OS1pUNUE5QW1pdHRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE M0NFLzE0MkEyQjA4NDk1RTExRUZCRThGMjA3OUM0RjlBRTAyL0ZTVUI0dFhTdmNy aGlNTktaVDVBOUFtaXR0Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEg2wod6LyfyL80tMDEUWAQUPbp0joVh9XZzJ5nG0c+3T7xEtkntl3o5 9ptjn7pUAbWqta3xYR2ZTHmvMXzamD9FAX7Dn+BRmy5PeIjkUQ6fB96wMf33SUbl S7vJlKbP9IS3gwAmVTciXrRZ1mS46OX879MU4iySQZm118Ztahf6+N6bmilw5M9y 7px5e1k9podVAFmXuhigvH4Ivs8UpVPcOSt1U7KU0EtNohHIfvpFmW85yEklZBS+ OkUwJpJD6HxOZynbmI2NP/976DbuAaEqKyUFBoqGzoEedOQrb/AdR16aePwlM8/i NPUVv6jI48Mptp+iiph7So1QY4Arbwg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:55 2025 by rpki-client