$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json) Hash identifier: AgcrnRccqeaaG0y5QzwpvfKFn3McAh9SpSYGXNlGkiA= Subject key identifier: C3:4C:D6:14:2C:B6:FE:06:11:D1:17:FC:96:37:A5:9E:D0:5F:92:47 Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft Manifest number: BE Signing time: Sat 15 Feb 2025 07:05:17 +0000 Manifest this update: Sat 15 Feb 2025 07:05:16 +0000 Manifest next update: Sat 22 Feb 2025 07:05:16 +0000 Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: UAsr++a6KVDHHbo9jqCCuYmqEc7aEPQFFjdOB/YIq9I=) 2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: UI9VDDNj5/gUUO3ewueElxsuAaYwPSQhrOvYuANf840=) 3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: kxgR+t9G3Yoo6D6Yn73+0inhOBPdrEAQX82yP7J/c8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C651 Validity Not Before: Feb 15 07:05:16 2025 GMT Not After : Feb 22 07:05:16 2025 GMT Subject: CN=67b03cac-d58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:b9:55:0a:32:a0:fe:f0:e4:bf:a5:9d:6e: a5:f8:84:c7:e6:0e:60:0a:f6:83:ca:83:f9:6d:d7: c7:a6:76:82:53:10:63:11:1e:72:87:24:83:f1:c7: 51:93:df:8c:6d:0f:bd:90:16:c6:bf:3c:1a:a2:84: 9a:2d:cf:3a:78:ef:86:2d:c1:9b:4d:c9:14:78:5c: 8f:41:59:12:1b:14:95:c1:ec:74:4b:ca:ad:51:de: 30:01:ee:84:34:ae:5b:ff:e9:5e:5b:05:19:02:fb: 21:86:cb:ba:29:67:e0:11:1b:9d:39:3b:9d:ac:0c: b6:69:50:cf:15:03:34:03:50:07:12:61:85:b5:15: 9a:85:e1:26:61:21:70:99:ef:ce:6a:5f:2f:25:bc: f6:55:80:9b:f3:8c:fe:c5:09:6f:be:9f:4c:9e:58: 8c:f6:63:a3:c1:a0:24:df:9b:d3:77:5f:30:9d:93: af:89:2c:98:f4:e6:67:f7:11:bf:9c:9d:c0:16:c9: 25:a6:b2:8b:fb:21:70:62:24:bc:65:ce:8f:c6:f2: bc:76:83:aa:92:f6:69:b1:c2:36:ee:29:75:4d:99: 65:f0:02:2f:7c:ef:6b:20:c7:2a:cb:7c:b4:2b:00: ff:fc:dd:bb:c7:1a:d4:bc:af:49:b9:a9:17:34:f4: a8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4C:D6:14:2C:B6:FE:06:11:D1:17:FC:96:37:A5:9E:D0:5F:92:47 X509v3 Authority Key Identifier: keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:86:33:46:31:92:da:92:a3:b1:b1:64:e2:3f:fb:23:2b:33: 3e:82:d5:1d:eb:2c:a4:03:18:0b:23:c5:ec:e5:4b:d5:14:fd: b4:95:5e:5f:4c:05:ee:fe:d2:e3:c1:06:bf:a8:c9:7b:4c:a4: b9:cd:ee:ad:ff:3f:c1:03:6a:d7:07:07:a4:c1:bd:f1:36:2d: 2f:3b:0b:17:52:4b:29:8c:55:65:1d:e4:c0:f5:4a:ec:50:1d: 81:05:25:49:dd:c9:34:33:e3:fa:52:c4:e8:43:38:9b:9e:28: db:cc:57:3d:df:48:b8:c5:91:7c:83:70:5e:5c:85:61:ac:ef: 32:12:f8:c8:01:ff:91:6e:53:12:d1:c7:d9:31:df:5e:de:81: 76:b3:5a:f2:80:19:0f:d3:36:3e:ad:56:ee:75:56:7e:ac:ab: 0e:ce:93:1e:10:62:90:e0:b4:0c:d9:85:1c:ba:95:b9:77:77: 40:f5:00:f9:49:1c:fd:d0:a4:d0:82:2e:15:c6:05:9c:57:11: 09:0b:e4:a3:f7:5f:be:1e:2c:87:b5:5f:e7:e4:fe:92:3d:75: 11:5c:55:1d:42:cd:eb:13:b6:78:87:bb:07:03:ac:54:38:5e: 9c:7e:9c:fa:aa:6d:0a:96:ae:41:8d:5a:15:0b:05:84:b7:59: fa:c3:1c:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM2NTExMTAvBgNVBAUTKDc2RDZGQTdDRjlCRjhFNDE1RjJGNDI2MTlCODA0Mjg4 NzYzRTY3QTIwHhcNMjUwMjE1MDcwNTE2WhcNMjUwMjIyMDcwNTE2WjAYMRYwFAYD VQQDEw02N2IwM2NhYy1kNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjC5VQoyoP7w5L+lnW6l+ITH5g5gCvaDyoP5bdfHpnaCUxBjER5yhySD8cdR k9+MbQ+9kBbGvzwaooSaLc86eO+GLcGbTckUeFyPQVkSGxSVwex0S8qtUd4wAe6E NK5b/+leWwUZAvshhsu6KWfgERudOTudrAy2aVDPFQM0A1AHEmGFtRWaheEmYSFw me/Oal8vJbz2VYCb84z+xQlvvp9MnliM9mOjwaAk35vTd18wnZOviSyY9OZn9xG/ nJ3AFsklprKL+yFwYiS8Zc6PxvK8doOqkvZpscI27il1TZll8AIvfO9rIMcqy3y0 KwD//N27xxrUvK9JuakXNPSoIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNM1hQs tv4GEdEX/JY3pZ7QX5JHMB8GA1UdIwQYMBaAFHbW+nz5v45BXy9CYZuAQoh2Pmei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzY1MS8zMzRGNjhDOENF RUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2prRmZMMEpobTRCQ2lIWS1a NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzY1MS8zMzRGNjhDOENFRUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2pr RmZMMEpobTRCQ2lIWS1aNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPhjNGMZLakqOxsWTiP/sjKzM+gtUd6yykAxgLI8Xs5UvVFP20lV5f TAXu/tLjwQa/qMl7TKS5ze6t/z/BA2rXBwekwb3xNi0vOwsXUkspjFVlHeTA9Urs UB2BBSVJ3ck0M+P6UsToQzibnijbzFc930i4xZF8g3BeXIVhrO8yEvjIAf+RblMS 0cfZMd9e3oF2s1rygBkP0zY+rVbudVZ+rKsOzpMeEGKQ4LQM2YUcupW5d3dA9QD5 SRz90KTQgi4VxgWcVxEJC+Sj91++HiyHtV/n5P6SPXURXFUdQs3rE7Z4h7sHA6xU OF6cfpz6qm0Klq5BjVoVCwWEt1n6wxxB -----END CERTIFICATE-----Generated at Sun Feb 16 20:50:15 2025 by rpki-client