$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json) Hash identifier: 8aWmJ9oxXUKpKXFxcwGabelDqo/2EEdXJf8qfMiYfa4= Subject key identifier: B7:03:FB:53:0E:2A:F9:85:BF:24:1B:98:9F:EA:1F:A1:51:34:39:1B Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft Manifest number: 03A6 Signing time: Sat 15 Feb 2025 01:41:53 +0000 Manifest this update: Sat 15 Feb 2025 01:41:52 +0000 Manifest next update: Sat 22 Feb 2025 01:41:52 +0000 Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: IZtpnWXUMImtS6T8RhETo5CukedrU+IIKiqgu/WyeSc=) 2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: PLGw9NG/LDLAwYupVxB/HWVn7IiF43r6Nw3857fc1oc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080 Validity Not Before: Feb 15 01:41:52 2025 GMT Not After : Feb 22 01:41:52 2025 GMT Subject: CN=67aff0e0-0340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d9:17:66:da:b1:bf:23:ec:a0:c5:40:2d:85: 9e:f8:e7:d9:a9:0a:2b:b4:1a:c9:0d:bb:f1:a9:b5: d2:69:9b:3f:b4:5d:11:84:8f:91:21:9c:29:d6:00: 5e:b5:db:22:60:46:8d:ce:0c:7c:28:36:27:04:11: 1b:0a:db:16:2c:51:10:db:3a:77:6c:66:e4:81:ad: 96:67:6c:92:c8:6c:b9:1d:ec:8d:c8:79:f3:97:f2: fa:d1:f5:21:86:64:1f:9a:4a:40:af:e5:ec:bc:7a: a1:54:5b:3d:00:16:ab:49:e6:c8:1f:c2:42:be:c6: 00:cc:5d:1e:1f:04:3b:80:ab:e4:84:2e:62:07:49: a0:c9:ea:98:fe:b2:5d:5b:56:ea:56:5a:5d:bb:ca: c1:db:e6:2d:a0:ba:15:97:ef:91:76:55:22:5a:10: 49:9e:26:c4:fe:64:64:6f:29:da:72:05:ae:bc:a1: e7:65:ca:fd:8b:93:d3:5e:c3:94:48:37:e9:a8:58: 1a:0e:94:e2:0d:59:69:dc:8b:87:3a:86:66:68:2b: 35:64:63:9e:de:63:6f:c1:93:12:b2:8a:8d:15:40: 55:86:00:9b:fa:9d:8d:62:ba:fb:fa:3a:dc:d1:c1: 17:64:39:86:00:ee:88:0e:9e:98:09:c8:b3:93:a9: ad:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:03:FB:53:0E:2A:F9:85:BF:24:1B:98:9F:EA:1F:A1:51:34:39:1B X509v3 Authority Key Identifier: keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:35:14:ed:29:4a:f6:09:03:55:a1:04:0c:08:e5:9f:ce:ab: 17:5b:a2:38:1c:f7:e9:73:bf:5c:57:35:fc:ed:df:25:d3:44: 9e:0f:1d:21:2b:34:f1:b9:c1:71:05:34:e8:12:a3:e2:34:4d: 0a:e7:cf:1f:8b:e5:85:49:49:2e:db:79:4a:05:60:d9:33:6c: f8:25:97:af:2d:35:cb:ac:3e:8c:96:1c:38:a6:c7:46:f0:0d: 6e:c8:30:ff:7e:ee:b7:c9:f9:f4:2d:0c:2e:7c:ee:2f:0f:c5: 59:4f:4f:1d:86:71:64:6c:a4:27:88:bb:37:21:24:1e:66:54: 5f:ed:ed:cf:cb:52:6c:90:6f:a0:6a:89:b1:7b:82:34:66:c5: 65:97:59:69:e9:ec:ca:d6:e0:4a:68:44:da:7c:33:46:d2:7f: 88:2b:60:a9:d4:ef:96:d1:17:d0:80:50:66:5f:20:05:14:47: 6a:72:23:21:05:8d:1a:d5:2f:3c:f7:99:b6:5d:a1:18:77:7c: 50:8f:b2:e7:7b:e8:c2:f5:56:2f:7a:63:67:af:8e:cc:bb:b2: 7f:89:85:5a:79:8e:1e:86:20:b4:a7:a2:75:75:d2:ba:26:c2: 59:8d:89:b8:f5:60:37:b2:07:eb:c3:6d:d4:e2:06:9b:87:70: 61:4d:cc:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKEMzQzNCNkEyQUJDRDcxNURFNTlBMzBCMzVERkM2MTQ5 MDVCRkU2NDMwHhcNMjUwMjE1MDE0MTUyWhcNMjUwMjIyMDE0MTUyWjAYMRYwFAYD VQQDEw02N2FmZjBlMC0wMzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29kXZtqxvyPsoMVALYWe+OfZqQortBrJDbvxqbXSaZs/tF0RhI+RIZwp1gBe tdsiYEaNzgx8KDYnBBEbCtsWLFEQ2zp3bGbkga2WZ2ySyGy5HeyNyHnzl/L60fUh hmQfmkpAr+XsvHqhVFs9ABarSebIH8JCvsYAzF0eHwQ7gKvkhC5iB0mgyeqY/rJd W1bqVlpdu8rB2+YtoLoVl++RdlUiWhBJnibE/mRkbynacgWuvKHnZcr9i5PTXsOU SDfpqFgaDpTiDVlp3IuHOoZmaCs1ZGOe3mNvwZMSsoqNFUBVhgCb+p2NYrr7+jrc 0cEXZDmGAO6IDp6YCcizk6mtMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcD+1MO KvmFvyQbmJ/qH6FRNDkbMB8GA1UdIwQYMBaAFMPDtqKrzXFd5Zows138YUkFv+ZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8xODVBRThBMjg1 NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNWM2xtakN6WGZ4aFNRV181 a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c4TzJvcXZOY1YzbG1qQ3pYZnhoU1FXXzVrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8xODVBRThBMjg1NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNW M2xtakN6WGZ4aFNRV181a00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2NRTtKUr2CQNVoQQMCOWfzqsXW6I4HPfpc79cVzX87d8l00SeDx0h KzTxucFxBTToEqPiNE0K588fi+WFSUku23lKBWDZM2z4JZevLTXLrD6Mlhw4psdG 8A1uyDD/fu63yfn0LQwufO4vD8VZT08dhnFkbKQniLs3ISQeZlRf7e3Py1JskG+g aomxe4I0ZsVll1lp6ezK1uBKaETafDNG0n+IK2Cp1O+W0RfQgFBmXyAFFEdqciMh BY0a1S8895m2XaEYd3xQj7Lne+jC9VYvemNnr47Mu7J/iYVaeY4ehiC0p6J1ddK6 JsJZjYm49WA3sgfrw23U4gabh3BhTcyH -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:54 2025 by rpki-client