$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json) Hash identifier: M5xlLARglACl6Qu/GPiwYus/dG7c97yuSW/vqaMqw80= Subject key identifier: C5:F8:DC:2A:80:D9:11:97:FB:6B:51:CE:71:0E:53:A5:10:82:F1:17 Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft Manifest number: 23 Signing time: Wed 05 Feb 2025 06:15:47 +0000 Manifest this update: Wed 05 Feb 2025 06:15:47 +0000 Manifest next update: Wed 12 Feb 2025 06:15:47 +0000 Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: oUlrIPq85euJR9DqnXfPPZv3eGL5RkrjAA3gGGFPXJs=) 2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: 6bS2IOUFxNL/dxgXXkv7hlgTjA3VB1/wSeyQ+zl4/9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13 Validity Not Before: Feb 5 06:15:47 2025 GMT Not After : Feb 12 06:15:47 2025 GMT Subject: CN=67a30213-32f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:83:b7:19:23:c6:34:30:c3:97:27:3b:c6: 55:b7:80:41:2d:68:8d:dd:8e:c1:b6:c3:7b:b5:a1: 31:04:cf:e2:49:6f:6d:b8:11:b4:f2:3a:be:c2:f2: 4a:e1:68:69:54:fb:73:5c:44:29:1a:32:2a:22:9b: e0:50:0b:05:ea:3f:bf:9f:79:ce:9e:17:b8:77:4d: 85:a6:e3:c6:4d:dd:b2:5f:65:ec:60:e9:40:2d:0d: 56:0a:c2:dc:82:cf:70:05:27:fa:e2:a4:b6:79:3f: c2:9a:bd:60:7f:dd:78:4e:10:ac:f8:6f:6f:dc:33: fb:19:c4:15:5a:bf:5d:b9:d3:5a:0b:c7:12:a8:da: c2:fb:60:08:c7:ba:32:9f:c7:3d:f0:a0:15:60:f6: 99:ab:bf:52:e0:84:80:b0:0d:30:a8:f1:74:2f:1b: 11:00:74:e0:64:a6:19:78:e9:53:30:43:e5:b2:b1: eb:fe:7d:49:69:01:00:a3:25:20:bf:5e:42:8f:73: 87:88:d9:0d:b3:1d:23:52:5e:26:6c:17:b9:f2:c7: 1e:bb:38:b9:8f:84:e9:5a:a8:da:ca:37:d2:1f:4e: b6:bb:dd:65:c5:85:82:53:9b:40:07:59:d2:2d:ea: 83:ab:0c:5c:d2:bc:89:02:95:b4:2c:61:83:d4:36: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F8:DC:2A:80:D9:11:97:FB:6B:51:CE:71:0E:53:A5:10:82:F1:17 X509v3 Authority Key Identifier: keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8c:9f:7f:ca:0d:a8:cb:04:b5:aa:9f:6b:6d:64:7f:ff:35: 51:74:9a:32:af:1f:35:3f:e4:de:29:29:ee:a7:bf:1e:aa:2f: 90:11:16:98:6f:03:9e:fc:43:65:75:da:67:df:85:fd:88:13: d5:d8:bb:9e:fb:d5:82:fb:3d:d3:3c:c4:39:f0:81:f4:d3:dd: 9e:a6:74:7a:a2:1e:f6:76:3c:64:4f:78:df:fe:9a:c5:e3:fd: a8:16:aa:b0:54:ad:4b:1c:b4:79:55:79:3d:4e:e8:e9:ba:21: 9a:3c:50:76:10:06:d4:ff:f3:dc:20:d0:eb:f1:b2:c8:8b:74: 1d:2d:8c:0b:8b:83:df:ae:83:89:e2:67:82:b5:d5:19:7c:af: 8a:ef:f3:77:6b:99:09:ad:45:75:1e:e5:0a:fb:52:51:05:10: 4d:aa:d7:75:15:02:e3:9e:18:92:dc:aa:a9:89:3e:6d:b8:fa: f7:92:05:e7:ca:5a:2e:7e:93:88:d6:08:18:10:78:96:c3:4b: 03:18:0d:a1:88:e6:f4:c6:9e:a4:74:7b:92:93:7f:b7:d5:93: 86:39:cf:4c:2d:25:92:d6:bc:0c:63:bb:c1:a8:b2:02:cd:82: 9f:36:90:8f:bb:30:da:49:db:7f:37:b7:da:31:7b:68:44:8b: ce:69:47:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUIxMzExMC8GA1UEBRMoRTNGMTZGOUQ3M0NDRUUyNjkzOTE1QTI0NEY0NEI1NTNB NERCM0RDQzAeFw0yNTAyMDUwNjE1NDdaFw0yNTAyMTIwNjE1NDdaMBgxFjAUBgNV BAMTDTY3YTMwMjEzLTMyZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1AIO3GSPGNDDDlyc7xlW3gEEtaI3djsG2w3u1oTEEz+JJb224EbTyOr7C8krh aGlU+3NcRCkaMioim+BQCwXqP7+fec6eF7h3TYWm48ZN3bJfZexg6UAtDVYKwtyC z3AFJ/ripLZ5P8KavWB/3XhOEKz4b2/cM/sZxBVav12501oLxxKo2sL7YAjHujKf xz3woBVg9pmrv1LghICwDTCo8XQvGxEAdOBkphl46VMwQ+Wysev+fUlpAQCjJSC/ XkKPc4eI2Q2zHSNSXiZsF7nyxx67OLmPhOlaqNrKN9IfTra73WXFhYJTm0AHWdIt 6oOrDFzSvIkClbQsYYPUNrkxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxfjcKoDZ EZf7a1HOcQ5TpRCC8RcwHwYDVR0jBBgwFoAU4/FvnXPM7iaTkVokT0S1U6TbPcww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjEzLzQ2MzdGQkYyQjEy ODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBNN2lhVGtWb2tUMFMxVTZUYlBj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNF9Gdm5YUE03aWFUa1Zva1QwUzFVNlRiUGN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 QjEzLzQ2MzdGQkYyQjEyODExRUZCNzUwQTUyQkM0RjlBRTAyLzRfRnZuWFBNN2lh VGtWb2tUMFMxVTZUYlBjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB2Mn3/KDajLBLWqn2ttZH//NVF0mjKvHzU/5N4pKe6nvx6qL5ARFphv A578Q2V12mffhf2IE9XYu5771YL7PdM8xDnwgfTT3Z6mdHqiHvZ2PGRPeN/+msXj /agWqrBUrUsctHlVeT1O6Om6IZo8UHYQBtT/89wg0OvxssiLdB0tjAuLg9+ug4ni Z4K11Rl8r4rv83drmQmtRXUe5Qr7UlEFEE2q13UVAuOeGJLcqqmJPm24+veSBefK Wi5+k4jWCBgQeJbDSwMYDaGI5vTGnqR0e5KTf7fVk4Y5z0wtJZLWvAxju8GosgLN gp82kI+7MNpJ2383t9oxe2hEi85pR+0= -----END CERTIFICATE-----Generated at Wed Feb 5 20:09:05 2025 by rpki-client