$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft File: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json) Hash identifier: EMb7Hy5naMko5eIn43LGazKLUDeJzINQtklS/h9yyWA= Subject key identifier: 12:FF:69:30:A7:E1:27:02:AA:1C:C8:61:6C:A9:D3:9E:0F:63:96:98 Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA Certificate issuer: /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Certificate serial: 133F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft Manifest number: 1338 Signing time: Sun 16 Feb 2025 17:19:49 +0000 Manifest this update: Sun 16 Feb 2025 17:19:49 +0000 Manifest next update: Sun 23 Feb 2025 17:19:49 +0000 Files and hashes: 1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: JsWoGMf7vxrxdmoZ54FYjmiWX4y+piCMiXYKPb1GPLo=) 2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: zF4nygNChVvUs9Ge82/WKpjyi9YwONpMsx8hvCjTDOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4927 (0x133f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F22A Validity Not Before: Feb 16 17:19:49 2025 GMT Not After : Feb 23 17:19:49 2025 GMT Subject: CN=67b21e35-82b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:31:b8:06:48:a1:ae:65:ff:21:bb:5e:cc:d7: 8f:23:4a:2d:7d:93:30:43:20:fd:23:a1:39:f7:05: cd:e7:2d:8b:74:b9:ad:27:6b:49:56:36:72:a4:8b: 61:1c:37:13:2e:3f:40:cf:87:2e:ea:c2:bc:4a:f0: 10:d0:17:74:8b:8b:05:f2:5d:80:80:63:5f:23:39: a8:85:df:6c:5b:cf:83:38:eb:e6:02:38:0e:cc:ee: 4b:ca:f3:49:d3:bb:b2:55:5d:52:f4:24:b8:22:3e: a7:92:ff:e4:e5:39:14:15:f2:13:84:ff:95:06:a8: 66:29:15:3a:01:17:c2:24:ca:b9:71:7a:bc:b8:c7: 23:9d:3b:ca:3e:67:a8:a8:bd:9d:6f:c1:36:1c:8e: 94:98:4a:af:ba:5e:60:38:84:f2:ca:12:56:e0:9f: 56:a5:09:b7:85:f5:30:6b:d2:9c:dd:dc:4d:49:d0: cb:ca:59:a8:57:25:45:09:8a:71:6f:7f:f9:ce:f6: a4:d1:c5:82:84:14:50:d6:14:c9:2c:08:4b:a9:f4: ea:40:40:71:1a:46:31:fa:c2:ff:91:b9:1a:9f:83: ec:bf:ec:18:ae:ca:82:fc:fa:1c:ab:96:42:78:b8: bf:5d:61:61:11:12:ca:65:f5:e7:d0:fb:7b:38:48: 9a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FF:69:30:A7:E1:27:02:AA:1C:C8:61:6C:A9:D3:9E:0F:63:96:98 X509v3 Authority Key Identifier: keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:db:0e:2c:8d:ce:9a:c3:cd:2f:32:b8:60:f4:98:7e:5e:f3: d9:56:6c:63:fb:5a:ea:14:0e:63:1c:cd:38:2a:7f:a8:dc:db: 64:78:dc:d8:14:32:db:80:cb:e1:e2:ed:6d:03:f5:f4:ae:e4: 2f:19:5e:7b:40:68:b1:37:62:d9:b7:c2:6d:10:56:42:fe:c4: 82:2e:80:c9:79:1e:77:15:4b:4a:35:04:bc:00:83:9e:a4:4b: ec:21:96:53:68:66:dc:f1:02:7a:33:c5:c4:24:e5:38:65:6b: fb:64:1e:2c:ff:e1:27:32:0f:5b:9f:2e:8e:78:2d:6a:1c:db: f3:3c:a6:a1:53:c2:cc:80:d8:fe:5f:88:b0:6d:98:89:84:e1: 4b:fe:ff:40:26:d3:88:aa:39:5f:64:c3:5d:a4:f3:f4:76:10: 40:a9:21:c8:ca:1b:cf:61:17:da:2b:ee:4f:27:bf:aa:d9:fe: ca:15:d4:db:d9:11:44:d4:7f:f6:93:cc:ea:2a:8c:ad:d6:d7: e1:ae:8e:53:6a:6c:49:46:bf:65:2e:75:38:5d:bf:fa:44:af: 9f:bc:82:61:e7:d0:ee:15:99:f8:d4:72:01:7d:5e:6e:be:8f: dd:6e:e9:45:cc:bf:93:2c:23:55:76:6b:7a:23:66:58:61:69: a6:b3:b6:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2 QTBERDkwRkEwHhcNMjUwMjE2MTcxOTQ5WhcNMjUwMjIzMTcxOTQ5WjAYMRYwFAYD VQQDEw02N2IyMWUzNS04MmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TG4BkihrmX/IbtezNePI0otfZMwQyD9I6E59wXN5y2LdLmtJ2tJVjZypIth HDcTLj9Az4cu6sK8SvAQ0Bd0i4sF8l2AgGNfIzmohd9sW8+DOOvmAjgOzO5LyvNJ 07uyVV1S9CS4Ij6nkv/k5TkUFfIThP+VBqhmKRU6ARfCJMq5cXq8uMcjnTvKPmeo qL2db8E2HI6UmEqvul5gOITyyhJW4J9WpQm3hfUwa9Kc3dxNSdDLylmoVyVFCYpx b3/5zvak0cWChBRQ1hTJLAhLqfTqQEBxGkYx+sL/kbkan4Psv+wYrsqC/Pocq5ZC eLi/XWFhERLKZfXn0Pt7OEiabQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBL/aTCn 4ScCqhzIYWyp054PY5aYMB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDN2w4sjc6aw80vMrhg9Jh+XvPZVmxj+1rqFA5jHM04Kn+o3NtkeNzY FDLbgMvh4u1tA/X0ruQvGV57QGixN2LZt8JtEFZC/sSCLoDJeR53FUtKNQS8AIOe pEvsIZZTaGbc8QJ6M8XEJOU4ZWv7ZB4s/+EnMg9bny6OeC1qHNvzPKahU8LMgNj+ X4iwbZiJhOFL/v9AJtOIqjlfZMNdpPP0dhBAqSHIyhvPYRfaK+5PJ7+q2f7KFdTb 2RFE1H/2k8zqKoyt1tfhro5TamxJRr9lLnU4Xb/6RK+fvIJh59DuFZn41HIBfV5u vo/dbulFzL+TLCNVdmt6I2ZYYWmms7b8 -----END CERTIFICATE-----Generated at Thu Feb 20 03:17:21 2025 by rpki-client