$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft File: uIC429cILNkYtiF73qCXWEWR290.mft (raw, json) Hash identifier: HUPwpbwxVJJ+CibC+1lB1X35s2Tvv2qXLIWCiGccdMo= Subject key identifier: C2:30:B5:20:D1:8E:78:E9:6C:FC:CC:17:8A:50:17:B9:0F:E7:E2:5B Authority key identifier: B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD Certificate issuer: /CN=A913EF9C/serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft Manifest number: 0F Signing time: Wed 05 Feb 2025 06:31:34 +0000 Manifest this update: Wed 05 Feb 2025 06:31:33 +0000 Manifest next update: Wed 12 Feb 2025 06:31:33 +0000 Files and hashes: 1: uIC429cILNkYtiF73qCXWEWR290.crl (hash: 0xWqVryIwR6mwD6DOPCirryVOtA2+f6nkdivXHrMOJo=) 2: 08476846D3EC11EFBFE6E864C4F9AE02.roa (hash: rxJJmD5OYbq6xF7owInMRKSqMF5l2EY96R9IaFA9M1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF9C Validity Not Before: Feb 5 06:31:33 2025 GMT Not After : Feb 12 06:31:33 2025 GMT Subject: CN=67a305c6-93ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:11:9b:ad:80:e6:09:35:cc:b6:86:24:cd:b0: 71:b6:b2:3b:fe:b2:86:11:b7:a7:93:3c:ea:0b:de: 91:f8:50:c3:c2:17:c8:30:16:ea:00:ed:9b:26:db: 89:37:2b:28:4d:60:be:43:95:c1:6c:48:6f:9c:01: 81:d1:05:1f:02:5d:04:4b:83:75:64:5a:a6:69:75: 2e:9c:99:eb:5c:7e:c9:1b:88:fb:da:90:b0:c7:f5: 09:9d:e3:63:32:92:fd:7a:4a:50:1e:ee:37:ce:58: ea:e6:fb:48:87:55:1a:d8:61:64:eb:99:f5:9e:56: bf:15:80:82:f7:d6:cd:95:8f:e6:86:6a:a5:86:7a: 8d:8c:6c:61:03:d0:3e:c0:4f:e8:0b:58:97:53:11: 6b:28:fd:61:96:e8:32:5c:2c:48:aa:1b:92:30:6e: b9:7a:08:74:35:9d:f6:2f:1f:75:92:3e:19:4e:71: 12:b9:ba:aa:7b:12:ed:9d:62:90:42:f0:17:86:84: d0:3e:6c:43:67:0a:1c:54:d9:f8:cc:59:08:ba:86: 66:08:0c:83:37:4c:55:7d:ee:ae:c3:48:01:4e:bf: f1:c3:e4:68:2e:9e:8b:58:4a:c5:b0:84:01:e0:59: 1c:4d:ba:d8:4d:80:f5:c7:79:14:6d:a1:00:92:01: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:30:B5:20:D1:8E:78:E9:6C:FC:CC:17:8A:50:17:B9:0F:E7:E2:5B X509v3 Authority Key Identifier: keyid:B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:e3:e1:f3:11:9c:1a:33:10:97:f7:a7:9d:2d:de:32:0e:b3: 55:9f:3b:1e:f8:0a:85:17:b2:0a:a5:0b:8c:98:b7:c8:fa:57: 41:ef:29:4d:51:9b:52:aa:8d:5c:a2:90:8c:a6:c3:fd:e8:68: 4f:c2:62:9a:6c:3d:f5:45:7a:32:d8:f6:cf:91:01:a1:4d:f7: 47:f0:53:e8:a8:f4:41:8b:7f:db:7a:18:26:6c:1c:85:be:bf: 3e:0c:b8:fc:85:cb:e3:ec:cc:93:1d:f3:0e:d1:af:34:7c:9f: d4:c7:97:91:3f:bd:c4:08:95:57:23:dc:05:c5:c3:a6:c8:d0: d2:76:bc:ec:b8:e1:ae:93:13:c3:fa:25:bc:4b:c4:8a:cf:a2: 90:ad:55:0f:28:cc:e6:cc:c7:f7:ff:36:ff:1e:14:a7:eb:b0: 77:e4:fa:ab:86:e2:b9:ec:a0:51:ae:ed:50:5a:4e:56:c3:04: 39:a7:4c:fd:c2:24:c0:79:a1:93:3b:77:e9:e7:14:0c:67:b3: 17:31:a8:ac:21:02:a0:06:ac:d2:e7:22:aa:ea:60:4a:85:54: b5:4f:31:8e:e5:6e:ad:68:10:d2:b3:d9:26:b9:de:3e:78:ce: ac:40:33:cb:2a:56:06:4e:1a:6c:16:cf:18:79:17:4b:45:49: 21:37:a0:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RUY5QzExMC8GA1UEBRMoQjg4MEI4REJENzA4MkNEOTE4QjYyMTdCREVBMDk3NTg0 NTkxREJERDAeFw0yNTAyMDUwNjMxMzNaFw0yNTAyMTIwNjMxMzNaMBgxFjAUBgNV BAMTDTY3YTMwNWM2LTkzZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwEZutgOYJNcy2hiTNsHG2sjv+soYRt6eTPOoL3pH4UMPCF8gwFuoA7Zsm24k3 KyhNYL5DlcFsSG+cAYHRBR8CXQRLg3VkWqZpdS6cmetcfskbiPvakLDH9Qmd42My kv16SlAe7jfOWOrm+0iHVRrYYWTrmfWeVr8VgIL31s2Vj+aGaqWGeo2MbGED0D7A T+gLWJdTEWso/WGW6DJcLEiqG5Iwbrl6CHQ1nfYvH3WSPhlOcRK5uqp7Eu2dYpBC 8BeGhNA+bENnChxU2fjMWQi6hmYIDIM3TFV97q7DSAFOv/HD5GgunotYSsWwhAHg WRxNuthNgPXHeRRtoQCSAVuRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwjC1INGO eOls/MwXilAXuQ/n4lswHwYDVR0jBBgwFoAUuIC429cILNkYtiF73qCXWEWR290w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFRjlDL0M0RkVDMjg4RDNF QTExRUZBNjZDNDc2MEM0RjlBRTAyL3VJQzQyOWNJTE5rWXRpRjczcUNYV0VXUjI5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdUlDNDI5Y0lMTmtZdGlGNzNxQ1hXRVdSMjkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF RjlDL0M0RkVDMjg4RDNFQTExRUZBNjZDNDc2MEM0RjlBRTAyL3VJQzQyOWNJTE5r WXRpRjczcUNYV0VXUjI5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGLj4fMRnBozEJf3p50t3jIOs1WfOx74CoUXsgqlC4yYt8j6V0HvKU1R m1KqjVyikIymw/3oaE/CYppsPfVFejLY9s+RAaFN90fwU+io9EGLf9t6GCZsHIW+ vz4MuPyFy+PszJMd8w7RrzR8n9THl5E/vcQIlVcj3AXFw6bI0NJ2vOy44a6TE8P6 JbxLxIrPopCtVQ8ozObMx/f/Nv8eFKfrsHfk+quG4rnsoFGu7VBaTlbDBDmnTP3C JMB5oZM7d+nnFAxnsxcxqKwhAqAGrNLnIqrqYEqFVLVPMY7lbq1oENKz2Sa53j54 zqxAM8sqVgZOGmwWzxh5F0tFSSE3oNs= -----END CERTIFICATE-----Generated at Wed Feb 5 20:08:59 2025 by rpki-client