$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft File: N9xhaClE8PMXT6CFW5rORz_enSY.mft (raw, json) Hash identifier: nUprwCyjmOWd/aa+g2oAd3pl9p3rcNbCOoQB+YCtgsA= Subject key identifier: 29:02:68:D5:BC:79:19:7E:23:B4:B1:7C:6C:A8:18:61:47:B2:34:D5 Authority key identifier: 37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 Certificate issuer: /CN=A91476E2/serialNumber=37DC61682944F0F3174FA0855B9ACE473FDE9D26 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft Manifest number: 12 Signing time: Wed 05 Feb 2025 06:25:29 +0000 Manifest this update: Wed 05 Feb 2025 06:25:28 +0000 Manifest next update: Wed 12 Feb 2025 06:25:28 +0000 Files and hashes: 1: N9xhaClE8PMXT6CFW5rORz_enSY.crl (hash: b5c2PuWZhCxsbQZ0tKoIAiuJA2oHOdCHDhm1UjTQoqg=) 2: A0B32E60CB4211EF80440147C4F9AE02.roa (hash: JL7M+cgdK8FBVwPaXyOqt4o/Eo1xHoyPJEMVHoLhZlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2 Validity Not Before: Feb 5 06:25:28 2025 GMT Not After : Feb 12 06:25:28 2025 GMT Subject: CN=67a30459-3435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:f5:e6:42:47:ab:d9:35:75:fc:ee:3f:eb: 0a:64:7e:1a:08:e5:85:27:05:46:e5:10:ed:b1:b7: e1:39:98:de:12:f1:fe:b8:56:ba:2e:1d:a2:1c:fd: b3:73:90:50:71:70:36:a5:da:b8:28:d1:bd:a4:c8: 84:e8:24:ec:eb:89:3b:34:32:f7:f5:c3:bb:9b:50: 3a:fa:01:28:9c:1f:1d:db:36:8a:58:f1:e0:87:be: 64:25:d5:49:56:00:4d:32:07:3d:19:63:fe:34:b0: 16:d4:a9:32:55:ac:b2:3a:c8:d4:9a:ef:a1:49:49: e4:7e:52:c5:95:e2:89:96:89:65:c2:a3:f4:9e:62: 5c:b0:08:b8:2c:73:e4:92:0d:32:a7:0f:cf:1b:1e: 93:20:52:65:c9:5b:5f:2f:0a:ca:0d:d0:0d:68:7e: 93:6f:22:ae:0d:82:43:46:5f:78:fc:0b:9e:e2:a7: d9:20:fe:fe:a3:ac:5e:6f:f9:2f:66:c1:62:b3:a7: f3:3b:4c:ec:21:c9:38:2e:13:1f:f7:c9:d4:71:45: 74:f1:a6:6e:bd:77:d9:83:33:c2:c2:b6:a2:7c:78: c3:67:68:0d:cd:db:64:3a:8c:ab:72:fb:7e:32:6e: a3:b2:1a:ac:78:61:47:b4:52:0f:41:01:25:d7:a9: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:02:68:D5:BC:79:19:7E:23:B4:B1:7C:6C:A8:18:61:47:B2:34:D5 X509v3 Authority Key Identifier: keyid:37:DC:61:68:29:44:F0:F3:17:4F:A0:85:5B:9A:CE:47:3F:DE:9D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9xhaClE8PMXT6CFW5rORz_enSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/4366EBB6CB3D11EF8703F75AC4F9AE02/N9xhaClE8PMXT6CFW5rORz_enSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:da:ca:b2:3b:46:17:34:ac:29:d1:cf:ac:70:95:2f:ad:24: 92:06:f8:7c:dc:bc:e5:37:db:4b:3c:6e:28:e7:ef:ea:0c:bd: 65:fe:20:26:42:22:b7:52:bf:d2:96:3f:27:54:85:1d:23:bb: d5:c2:c6:e1:65:17:c2:cc:4c:e3:6d:2d:dc:34:8a:73:30:fc: c2:da:7f:52:d8:d2:90:0b:13:15:20:aa:c3:af:34:fc:16:d0: e7:01:64:97:2e:62:ca:33:a7:1b:20:44:37:b4:30:bb:fe:0a: aa:5e:11:ab:4d:cc:03:86:56:12:ff:04:f0:8e:41:1d:fe:3c: 74:6f:45:a5:eb:d8:17:39:6c:8b:ad:23:31:37:c0:df:20:b9: a3:dd:bd:8f:6f:16:c8:91:23:03:59:07:6e:64:7e:80:48:68: 06:32:66:82:48:ee:7c:a4:7e:9a:df:6a:12:3d:e8:f9:59:9e: 31:5b:9e:f4:ea:b6:ab:81:79:15:ba:1c:9a:62:cd:f0:96:58: b3:d2:49:9f:66:43:fd:11:ff:2c:08:1c:b5:3c:ce:30:77:9b: 0c:ab:6b:e9:a9:ac:4b:a1:19:7f:2e:db:c7:9a:ca:34:5e:87: 8c:d6:0c:82:60:47:3b:29:a8:4f:5f:dd:ab:d7:4e:fd:b4:24: 7a:f3:28:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoMzdEQzYxNjgyOTQ0RjBGMzE3NEZBMDg1NUI5QUNFNDcz RkRFOUQyNjAeFw0yNTAyMDUwNjI1MjhaFw0yNTAyMTIwNjI1MjhaMBgxFjAUBgNV BAMTDTY3YTMwNDU5LTM0MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoK/XmQker2TV1/O4/6wpkfhoI5YUnBUblEO2xt+E5mN4S8f64VrouHaIc/bNz kFBxcDal2rgo0b2kyIToJOzriTs0Mvf1w7ubUDr6ASicHx3bNopY8eCHvmQl1UlW AE0yBz0ZY/40sBbUqTJVrLI6yNSa76FJSeR+UsWV4omWiWXCo/SeYlywCLgsc+SS DTKnD88bHpMgUmXJW18vCsoN0A1ofpNvIq4NgkNGX3j8C57ip9kg/v6jrF5v+S9m wWKzp/M7TOwhyTguEx/3ydRxRXTxpm69d9mDM8LCtqJ8eMNnaA3N22Q6jKty+34y bqOyGqx4YUe0Ug9BASXXqdR3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKQJo1bx5 GX4jtLF8bKgYYUeyNNUwHwYDVR0jBBgwFoAUN9xhaClE8PMXT6CFW5rORz/enSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzQzNjZFQkI2Q0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBNWFQ2Q0ZXNXJPUnpfZW5T WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjl4aGFDbEU4UE1YVDZDRlc1ck9Sel9lblNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzQzNjZFQkI2Q0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL045eGhhQ2xFOFBN WFQ2Q0ZXNXJPUnpfZW5TWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA3ayrI7Rhc0rCnRz6xwlS+tJJIG+HzcvOU320s8bijn7+oMvWX+ICZC IrdSv9KWPydUhR0ju9XCxuFlF8LMTONtLdw0inMw/MLaf1LY0pALExUgqsOvNPwW 0OcBZJcuYsozpxsgRDe0MLv+CqpeEatNzAOGVhL/BPCOQR3+PHRvRaXr2Bc5bIut IzE3wN8guaPdvY9vFsiRIwNZB25kfoBIaAYyZoJI7nykfprfahI96PlZnjFbnvTq tquBeRW6HJpizfCWWLPSSZ9mQ/0R/ywIHLU8zjB3mwyra+mprEuhGX8u28eayjRe h4zWDIJgRzspqE9f3avXTv20JHrzKLI= -----END CERTIFICATE-----Generated at Thu Feb 6 04:40:05 2025 by rpki-client