$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft File: fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json) Hash identifier: WHniWlcDRr/RkPf6InqcxULVBGpKfBUa/7Jc9o+Eij4= Subject key identifier: 72:D0:2E:21:71:29:8E:CF:3C:DD:36:BC:5A:71:42:F2:15:99:4D:91 Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 Certificate issuer: /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft Manifest number: 26 Signing time: Wed 05 Feb 2025 06:13:44 +0000 Manifest this update: Wed 05 Feb 2025 06:13:44 +0000 Manifest next update: Wed 12 Feb 2025 06:13:44 +0000 Files and hashes: 1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: S6ntpSR7p2Gxd7qVVoaTV6CvzCyWYDCNi2btkQdgZGQ=) 2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142420 Validity Not Before: Feb 5 06:13:44 2025 GMT Not After : Feb 12 06:13:44 2025 GMT Subject: CN=67a30198-7845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:b6:20:9f:fd:20:e8:39:df:d6:b1:12:0f: 53:68:e7:13:64:66:3e:d1:57:13:c0:1f:b5:7e:26: cf:51:8f:2f:46:71:27:da:d8:0e:30:ea:0f:d7:86: b5:3b:fc:9f:6d:1d:4f:2b:fb:eb:17:b6:80:3a:cb: 4e:be:08:69:33:e9:52:ea:65:41:ab:74:49:c8:cf: 40:3e:04:81:5c:37:95:c9:2d:3b:63:3c:32:25:11: a1:ba:8e:34:f5:91:ce:3b:68:8c:9b:27:94:08:47: 90:55:a8:fd:32:bc:25:78:86:d7:f9:d7:a1:91:7d: e9:53:62:db:2e:cd:bb:a9:4f:88:fe:31:9d:08:ef: 30:5b:f6:a7:8b:7a:e0:35:86:a0:f4:12:df:39:68: 7b:bc:c9:40:1d:55:f7:8c:4a:66:2e:e6:f5:0b:19: 81:50:2f:88:38:da:ec:3f:6b:69:d0:e6:c2:eb:7a: c2:87:82:38:69:0f:a2:a4:c4:7b:f0:44:40:04:b1: 19:4a:b6:54:49:e9:54:2e:ac:94:eb:8e:cf:b3:72: 71:75:dc:23:5c:3e:54:3e:1d:ad:21:bd:2a:a4:68: 6d:2e:10:84:0f:3f:5b:ca:66:07:a7:6b:a5:c1:e9: 48:89:6a:40:20:17:a2:a5:ca:b9:50:44:39:1f:41: 39:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D0:2E:21:71:29:8E:CF:3C:DD:36:BC:5A:71:42:F2:15:99:4D:91 X509v3 Authority Key Identifier: keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fe:92:b8:e5:2b:35:42:6e:69:42:ab:ac:d8:89:ad:9a:1b: 27:0f:ff:e2:09:3f:33:99:75:b9:f0:45:44:23:3b:97:a6:60: 34:e0:db:9c:75:a7:3b:2c:2b:b1:0b:ca:86:95:21:4a:c0:90: f6:a2:6d:36:3b:e5:5f:89:0a:73:6f:a8:2a:ed:e7:31:66:e8: 7b:56:5a:2a:25:76:e2:1e:9b:4d:ea:37:99:f4:8c:ed:83:b1: 4b:e2:af:48:15:4c:b7:29:f4:99:b8:cf:af:73:f1:90:e2:84: 9b:19:d2:30:92:ca:ef:74:a0:15:ad:7c:64:19:bd:1a:e8:11: e7:32:0c:d1:0c:39:cd:4d:aa:37:d2:ab:b8:38:f9:e1:3f:c5: 80:20:a4:dc:cc:4a:1d:bd:c7:a7:7e:44:78:78:06:fc:d2:10: 62:c2:be:0b:77:58:2d:ae:59:87:d9:c8:5a:03:f1:c1:12:87: b8:b9:3e:5c:72:73:d8:1a:88:40:94:66:8d:b8:d4:56:f2:d7: f6:95:9a:c1:f7:24:79:ef:12:0e:cb:d7:51:d7:b7:c3:83:0e: 83:fa:6e:ac:52:02:61:45:7c:aa:6c:66:f4:f4:3f:63:c7:cc: 66:a3:b1:ec:d6:33:9c:e9:be:f3:3f:53:b1:58:f1:3f:03:77: 6d:bd:4c:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQyMDExMC8GA1UEBRMoN0UzQUE0OEQ2N0VCOTk2OTlDMDJCODFGNzE2OTZERjQ2 NUE4QTZFNTAeFw0yNTAyMDUwNjEzNDRaFw0yNTAyMTIwNjEzNDRaMBgxFjAUBgNV BAMTDTY3YTMwMTk4LTc4NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgp7Ygn/0g6Dnf1rESD1No5xNkZj7RVxPAH7V+Js9Rjy9GcSfa2A4w6g/XhrU7 /J9tHU8r++sXtoA6y06+CGkz6VLqZUGrdEnIz0A+BIFcN5XJLTtjPDIlEaG6jjT1 kc47aIybJ5QIR5BVqP0yvCV4htf516GRfelTYtsuzbupT4j+MZ0I7zBb9qeLeuA1 hqD0Et85aHu8yUAdVfeMSmYu5vULGYFQL4g42uw/a2nQ5sLresKHgjhpD6KkxHvw REAEsRlKtlRJ6VQurJTrjs+zcnF13CNcPlQ+Ha0hvSqkaG0uEIQPP1vKZgena6XB 6UiJakAgF6KlyrlQRDkfQTmFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUctAuIXEp js883Ta8WnFC8hWZTZEwHwYDVR0jBBgwFoAUfjqkjWfrmWmcArgfcWlt9GWopuUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDIwL0M0MkIzM0Q0QUM4 RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdtY0FyZ2ZjV2x0OUdXb3B1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZmpxa2pXZnJtV21jQXJnZmNXbHQ5R1dvcHVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDIwL0M0MkIzM0Q0QUM4RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdt Y0FyZ2ZjV2x0OUdXb3B1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABb+krjlKzVCbmlCq6zYia2aGycP/+IJPzOZdbnwRUQjO5emYDTg25x1 pzssK7ELyoaVIUrAkPaibTY75V+JCnNvqCrt5zFm6HtWWiolduIem03qN5n0jO2D sUvir0gVTLcp9Jm4z69z8ZDihJsZ0jCSyu90oBWtfGQZvRroEecyDNEMOc1NqjfS q7g4+eE/xYAgpNzMSh29x6d+RHh4BvzSEGLCvgt3WC2uWYfZyFoD8cESh7i5Plxy c9gaiECUZo241Fby1/aVmsH3JHnvEg7L11HXt8ODDoP6bqxSAmFFfKpsZvT0P2PH zGajsezWM5zpvvM/U7FY8T8Dd229THQ= -----END CERTIFICATE-----Generated at Wed Feb 5 19:58:47 2025 by rpki-client