$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft File: G96wwnXJDoG_o6r-IT5OcSHrc0o.mft (raw, json) Hash identifier: /EMaTUSXWTCVfAwtvQI6ISP777qRUE9a9DbKIYshs7A= Subject key identifier: C4:C5:92:25:2A:4A:66:44:0E:FC:B3:ED:A4:E6:21:C4:8A:EC:CD:FE Authority key identifier: 1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A Certificate issuer: /CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft Manifest number: 59 Signing time: Thu 13 Mar 2025 05:15:50 +0000 Manifest this update: Thu 13 Mar 2025 05:15:49 +0000 Manifest next update: Thu 20 Mar 2025 05:15:49 +0000 Files and hashes: 1: G96wwnXJDoG_o6r-IT5OcSHrc0o.crl (hash: Yj2yR5bprkqJZTIoBmZQ1I39VlUUpSbixkgIBA8aMAo=) 2: 31B5D564824311EF9C69B985C4F9AE02.roa (hash: IVX22Sj0l4iAKc50j77MELQdp1CwcB3skhe7+xJHsEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 05:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E Validity Not Before: Mar 13 05:15:49 2025 GMT Not After : Mar 20 05:15:49 2025 GMT Subject: CN=67d26a06-de49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8b:bc:72:9a:b3:b5:60:1d:52:a4:4a:f4:b9: 12:1e:67:0a:4d:89:b8:48:f7:b7:c9:6c:3a:41:3a: b5:24:ac:fc:3e:86:aa:a3:20:92:f4:9a:6f:c7:e1: d6:cc:21:7c:39:62:f0:b8:24:1e:c0:47:5e:74:3d: 55:89:8d:84:35:e4:25:c2:c7:24:36:b9:2f:59:5c: ca:33:eb:00:b2:e2:ee:4a:fc:39:9f:59:a8:e3:d3: c0:c5:b8:fb:b9:91:46:0d:92:89:5e:c5:d9:2a:54: aa:cc:89:6e:9f:cc:9e:ec:5b:a4:ed:6d:41:7d:90: 3b:a3:7f:79:dd:6b:18:ea:18:0f:37:75:c9:01:e6: 22:4e:63:88:2c:88:27:fe:1b:a9:b5:f1:87:24:1c: f9:94:73:66:7d:d6:41:83:d8:7c:ef:79:e3:c7:9f: d3:76:5e:57:cb:d9:25:dd:72:29:a9:dc:50:df:0d: c9:27:75:2f:42:53:de:64:09:ee:dd:33:4c:79:11: fb:0c:0f:68:7a:74:0a:30:7e:75:5a:79:9f:dc:6f: 74:45:c0:30:aa:c9:88:cb:99:ac:dc:df:6d:e4:2a: 82:fc:cd:cd:5c:30:cb:9d:c5:17:12:2c:ab:eb:82: cb:fd:42:ba:04:2a:2f:47:66:13:53:2b:9d:15:fb: 9c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C5:92:25:2A:4A:66:44:0E:FC:B3:ED:A4:E6:21:C4:8A:EC:CD:FE X509v3 Authority Key Identifier: keyid:1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:b5:fd:a5:27:a7:ea:6f:e3:bc:ff:0d:84:ec:dc:97:d4:0c: e7:f8:1f:b1:fd:49:1b:44:3f:32:c6:e8:9f:20:f9:b2:69:b1: 25:7d:de:7d:b8:1f:c1:d4:b1:0a:6d:ea:21:24:62:ae:0f:cd: c1:89:19:89:61:bc:e1:8b:fe:f0:c6:8c:c7:5b:51:ce:8a:66: 81:08:af:d7:43:42:f8:64:c2:3e:3a:dc:83:6b:b7:91:e4:2f: 2e:d2:26:8d:ff:0d:f5:61:8d:7b:4f:54:2b:03:6c:86:fb:8c: 45:4f:29:d2:00:0b:e9:c3:52:4d:55:a3:7b:d6:05:58:33:42: 5f:42:ec:48:9a:7a:be:31:79:a8:8d:d1:54:50:7d:a7:c9:15: 69:18:f7:36:2c:3c:c9:f0:65:2e:71:59:be:35:fa:6d:31:ab: 12:81:45:ed:37:29:8d:86:4e:26:5c:79:bd:87:83:83:35:57: 25:a0:ea:8d:ac:14:1a:0e:ff:cf:b5:5f:b5:c1:7b:db:b9:2b: 14:dd:0d:b6:a2:a5:52:9f:ac:6f:2c:69:31:f9:35:8b:ec:89: ad:93:8b:e6:36:b7:41:12:85:3e:4d:89:98:04:ab:8f:07:46: 92:da:01:7a:4e:54:4a:30:2f:6e:0e:16:26:a2:30:73:01:11: e7:d8:e3:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkUxRTExMC8GA1UEBRMoMUJERUIwQzI3NUM5MEU4MUJGQTNBQUZFMjEzRTRFNzEy MUVCNzM0QTAeFw0yNTAzMTMwNTE1NDlaFw0yNTAzMjAwNTE1NDlaMBgxFjAUBgNV BAMTDTY3ZDI2YTA2LWRlNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTi7xymrO1YB1SpEr0uRIeZwpNibhI97fJbDpBOrUkrPw+hqqjIJL0mm/H4dbM IXw5YvC4JB7AR150PVWJjYQ15CXCxyQ2uS9ZXMoz6wCy4u5K/DmfWajj08DFuPu5 kUYNkolexdkqVKrMiW6fzJ7sW6TtbUF9kDujf3ndaxjqGA83dckB5iJOY4gsiCf+ G6m18YckHPmUc2Z91kGD2HzveePHn9N2XlfL2SXdcimp3FDfDckndS9CU95kCe7d M0x5EfsMD2h6dAowfnVaeZ/cb3RFwDCqyYjLmazc323kKoL8zc1cMMudxRcSLKvr gsv9QroEKi9HZhNTK50V+5wJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxMWSJSpK ZkQO/LPtpOYhxIrszf4wHwYDVR0jBBgwFoAUG96wwnXJDoG/o6r+IT5OcSHrc0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRTFFLzEzRDgwNjA4ODI0 MjExRUZBRDNEODE4MUM0RjlBRTAyL0c5Nnd3blhKRG9HX282ci1JVDVPY1NIcmMw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzk2d3duWEpEb0dfbzZyLUlUNU9jU0hyYzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RTFFLzEzRDgwNjA4ODI0MjExRUZBRDNEODE4MUM0RjlBRTAyL0c5Nnd3blhKRG9H X282ci1JVDVPY1NIcmMwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK61/aUnp+pv47z/DYTs3JfUDOf4H7H9SRtEPzLG6J8g+bJpsSV93n24 H8HUsQpt6iEkYq4PzcGJGYlhvOGL/vDGjMdbUc6KZoEIr9dDQvhkwj463INrt5Hk Ly7SJo3/DfVhjXtPVCsDbIb7jEVPKdIAC+nDUk1Vo3vWBVgzQl9C7Eiaer4xeaiN 0VRQfafJFWkY9zYsPMnwZS5xWb41+m0xqxKBRe03KY2GTiZceb2Hg4M1VyWg6o2s FBoO/8+1X7XBe9u5KxTdDbaipVKfrG8saTH5NYvsia2Ti+Y2t0EShT5NiZgEq48H RpLaAXpOVEowL24OFiaiMHMBEefY4xA= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:56 2025 by rpki-client