$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json) Hash identifier: FikI9I8DA1OaReBjdErQxihZlC1+S7HH9s19efvj+DI= Subject key identifier: 68:55:EB:30:6E:35:E5:D7:CC:03:80:4E:C8:99:4F:13:80:2C:97:78 Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft Manifest number: 80 Signing time: Sat 15 Feb 2025 07:51:31 +0000 Manifest this update: Sat 15 Feb 2025 07:51:30 +0000 Manifest next update: Sat 22 Feb 2025 07:51:30 +0000 Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: +WtbvEFcT/4kPjqYspG9p4O9xYXZwewM0neMDCkpcnE=) 2: D4F9C46CDCA511EF9BCCFC59C4F9AE02.roa (hash: OuazFSoXGYM6zJItNa4jp1IfJllzFolsgf+lOTd60NE=) 3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: YFXHXJDviBoPayGDb4OGE7GmrzEy24l7DcHuFpblUcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC Validity Not Before: Feb 15 07:51:30 2025 GMT Not After : Feb 22 07:51:30 2025 GMT Subject: CN=67b04782-fff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e6:05:5d:7b:99:56:71:c9:ee:34:25:f7:36: 62:14:78:8b:a7:ca:33:95:8c:48:c7:e4:35:ad:ca: 28:90:ad:85:1c:f2:4a:ca:b7:4f:8e:6c:44:63:aa: ed:13:dd:60:13:45:6a:01:25:43:b9:de:0a:af:af: cf:e1:48:89:34:01:ff:60:5b:96:f4:f0:be:7e:60: e7:a3:07:d8:74:7a:1d:b6:fc:4c:7d:cf:c7:22:f9: 77:da:3f:50:0c:f4:31:a1:53:e9:fb:66:e4:68:86: 81:47:d4:93:05:47:34:de:4e:1d:fc:6e:50:58:86: 86:b4:ee:f6:ba:92:c1:ee:15:ef:13:bc:07:8b:2b: 31:e0:6c:92:ba:74:0d:b5:ba:17:ff:c5:9d:4a:c0: 04:10:89:37:07:d3:bd:29:03:3f:16:d8:11:50:06: b2:79:99:a2:d1:b4:a8:07:70:04:3f:8a:33:ba:df: 43:a0:8a:3e:75:71:d3:5c:f8:27:32:27:d0:4d:06: e4:5f:ea:75:11:28:50:a0:6b:57:16:be:5d:97:29: 05:f6:50:eb:b8:7f:5b:c9:89:0e:58:58:04:de:72: 93:df:8d:27:a8:17:98:a7:94:23:01:62:a3:54:4f: 2e:5c:47:0d:3e:55:cf:71:20:bd:36:64:48:7d:0d: e5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:55:EB:30:6E:35:E5:D7:CC:03:80:4E:C8:99:4F:13:80:2C:97:78 X509v3 Authority Key Identifier: keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:67:c9:44:db:4f:c4:59:0f:5e:6b:3e:82:e1:32:05:4b:bf: 5f:bb:52:e4:8e:64:4e:d7:08:21:c5:94:8b:e5:c1:d8:fb:5f: a1:ae:4b:73:46:1f:57:72:28:6d:2f:3f:77:c4:3c:0c:46:b3: e6:2b:e0:4d:82:94:81:5c:b6:71:5f:35:e5:6d:b1:8e:ca:9a: 12:a3:aa:1b:7c:ed:9f:c3:6c:fe:54:46:50:c4:1a:f5:11:7f: 86:ad:37:d0:c8:28:a7:c1:f9:e5:54:16:f7:e3:00:fe:d3:6c: e4:6d:90:ea:42:e1:85:9f:c2:c4:dc:b5:87:19:3c:38:49:46: cb:f2:17:6c:e9:8a:74:ef:ef:39:f7:a3:56:86:de:2d:92:8f: 00:b4:c7:ab:7c:e7:7d:5d:ce:d6:26:3e:75:7e:43:2c:9f:a8: 9d:5b:b5:29:be:80:d8:2f:99:b1:a0:00:35:38:77:08:43:56: 47:03:d1:b7:7e:7a:70:70:3f:79:a6:0e:da:c4:07:16:80:69: 23:85:43:ae:b4:42:48:e3:92:59:df:64:a0:bb:19:44:3d:32: c0:87:c4:6a:a9:85:e8:05:fe:3c:ec:9b:0b:67:57:23:11:a3: 23:b3:f0:71:83:f2:ea:8c:d4:d0:2b:14:2f:a2:60:83:21:20: 94:44:4d:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEZFQUJBRDkyMzVBRUYxNzAyM0NEQ0ZCMTYxOTAyNkYz Q0VEQjJDN0YwHhcNMjUwMjE1MDc1MTMwWhcNMjUwMjIyMDc1MTMwWjAYMRYwFAYD VQQDEw02N2IwNDc4Mi1mZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+YFXXuZVnHJ7jQl9zZiFHiLp8ozlYxIx+Q1rcookK2FHPJKyrdPjmxEY6rt E91gE0VqASVDud4Kr6/P4UiJNAH/YFuW9PC+fmDnowfYdHodtvxMfc/HIvl32j9Q DPQxoVPp+2bkaIaBR9STBUc03k4d/G5QWIaGtO72upLB7hXvE7wHiysx4GySunQN tboX/8WdSsAEEIk3B9O9KQM/FtgRUAayeZmi0bSoB3AEP4ozut9DoIo+dXHTXPgn MifQTQbkX+p1EShQoGtXFr5dlykF9lDruH9byYkOWFgE3nKT340nqBeYp5QjAWKj VE8uXEcNPlXPcSC9NmRIfQ3lKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhV6zBu NeXXzAOATsiZTxOALJd4MB8GA1UdIwQYMBaAFP6rrZI1rvFwI83PsWGQJvPO2yx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy85N0RGN0ExMjMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThYQWp6Yy14WVpBbTg4N2JM SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThY QWp6Yy14WVpBbTg4N2JMSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFZ8lE20/EWQ9eaz6C4TIFS79fu1LkjmRO1wghxZSL5cHY+1+hrktz Rh9XcihtLz93xDwMRrPmK+BNgpSBXLZxXzXlbbGOypoSo6obfO2fw2z+VEZQxBr1 EX+GrTfQyCinwfnlVBb34wD+02zkbZDqQuGFn8LE3LWHGTw4SUbL8hds6Yp07+85 96NWht4tko8AtMerfOd9Xc7WJj51fkMsn6idW7UpvoDYL5mxoAA1OHcIQ1ZHA9G3 fnpwcD95pg7axAcWgGkjhUOutEJI45JZ32SguxlEPTLAh8RqqYXoBf487JsLZ1cj EaMjs/Bxg/LqjNTQKxQvomCDISCURE1R -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:12 2025 by rpki-client