$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft File: R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json) Hash identifier: JB6NuSa3EFIcxVPO1jFQz3LowRfvj7tfn5YyJFpvvTk= Subject key identifier: F2:97:1B:F1:91:E3:EB:91:41:87:14:D0:86:57:07:2B:E8:D0:ED:E3 Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 Certificate issuer: /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft Manifest number: BA Signing time: Sat 15 Feb 2025 07:06:23 +0000 Manifest this update: Sat 15 Feb 2025 07:06:23 +0000 Manifest next update: Sat 22 Feb 2025 07:06:23 +0000 Files and hashes: 1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: orVKHTntPy9iX7OKnIqVjcfesWJz0KCvw4eBFUByDkE=) 2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: CylyyzwIG08L70kRCG76cWxCrDSIPb2MuuRknQBCs64=) 3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: SQ0tWzqj2x2vx8fy9K7AJ1cebETDa6gFcypKPROA2yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153490 Validity Not Before: Feb 15 07:06:23 2025 GMT Not After : Feb 22 07:06:23 2025 GMT Subject: CN=67b03cef-bf8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:d7:99:c7:42:f8:de:44:46:9d:29:2c:2f: 73:ca:60:03:11:d0:6c:2c:5b:b7:e7:36:21:58:0e: 60:36:62:1a:d0:76:4a:6e:dd:90:80:04:e3:66:b7: 2e:90:ab:f7:5e:c2:8f:cb:e8:21:d0:57:e5:16:a6: 38:81:8d:df:8a:9d:83:e4:bf:f6:d6:bb:15:68:e2: d5:45:08:d9:36:59:6d:f6:d3:fc:98:0b:05:72:99: ca:37:d4:db:44:f3:db:6b:d2:49:47:0a:3c:6e:04: a0:1f:2e:0e:a5:7b:d8:3e:02:b2:be:70:55:0b:cb: 58:7a:47:37:8e:04:e2:4a:d5:dc:ee:be:59:cf:79: 84:0c:ed:8d:ff:20:d9:20:60:8d:7c:68:df:54:17: 81:79:30:88:7b:07:69:d3:f8:ec:af:34:88:f9:fc: 71:cc:c4:52:f8:87:9e:81:a7:a7:96:b3:c6:8a:e7: 4e:a0:d3:9e:7b:0d:93:12:b1:5c:b0:fb:4c:e3:83: f9:d4:b4:64:58:69:af:c2:b6:a8:60:d3:ab:af:26: 89:ef:52:99:e8:19:94:c3:85:76:3c:af:c0:f6:7e: 6f:df:39:71:f2:33:05:10:07:56:6a:91:be:01:5c: 1b:04:56:aa:88:ec:d8:c5:76:a7:63:f4:04:e1:df: e5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:97:1B:F1:91:E3:EB:91:41:87:14:D0:86:57:07:2B:E8:D0:ED:E3 X509v3 Authority Key Identifier: keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:24:69:59:a4:30:de:79:1b:0f:b6:eb:5d:32:14:83:37:a6: d8:7f:e4:8c:4b:4f:e6:31:cb:d8:48:1d:a6:6b:a9:a6:21:62: e5:85:21:e8:08:44:62:68:f2:01:72:ac:13:77:40:c9:02:15: d3:7c:e2:b6:f6:2b:15:22:8e:cd:c0:9e:d6:4e:10:49:b0:e9: 18:0d:df:f8:ba:54:aa:7d:c5:98:b8:14:d2:a9:6a:7f:4f:b8: 64:74:c5:1d:f2:3f:83:58:93:17:da:bf:cd:23:9f:ea:3a:c3: 85:7e:ca:b8:eb:0e:8c:27:02:ea:7a:0e:a3:58:f6:96:b8:07: 94:c3:95:d7:78:2a:93:72:3c:8b:63:13:9b:3e:de:65:b1:69: 9e:17:5a:3c:bc:34:ae:86:21:84:39:fc:8b:93:76:6b:0a:92: 82:44:31:7b:62:e6:42:0c:f2:8e:ca:58:fc:8e:72:45:a6:19: 8a:1d:14:42:56:f3:59:45:c2:2c:a5:44:07:3d:5c:53:0c:2a: 3e:d3:7c:bf:31:23:ef:d3:a0:b7:5e:eb:e2:c1:13:be:c2:5f: 13:9b:41:f2:0a:da:82:da:9e:b2:6a:ea:51:52:e5:c4:76:16: 30:2e:5b:cb:b6:3a:1a:6a:71:67:b6:16:ba:60:b3:c2:6a:58: 04:5d:0e:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0OTAxMTAvBgNVBAUTKDQ3RjUwQzk1OEJGOUNGNTQ1QzYwMUFERUIwNEY4QTA1 RTEwMUQ5QTUwHhcNMjUwMjE1MDcwNjIzWhcNMjUwMjIyMDcwNjIzWjAYMRYwFAYD VQQDEw02N2IwM2NlZi1iZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJLXmcdC+N5ERp0pLC9zymADEdBsLFu35zYhWA5gNmIa0HZKbt2QgATjZrcu kKv3XsKPy+gh0FflFqY4gY3fip2D5L/21rsVaOLVRQjZNllt9tP8mAsFcpnKN9Tb RPPba9JJRwo8bgSgHy4OpXvYPgKyvnBVC8tYekc3jgTiStXc7r5Zz3mEDO2N/yDZ IGCNfGjfVBeBeTCIewdp0/jsrzSI+fxxzMRS+IeegaenlrPGiudOoNOeew2TErFc sPtM44P51LRkWGmvwraoYNOrryaJ71KZ6BmUw4V2PK/A9n5v3zlx8jMFEAdWapG+ AVwbBFaqiOzYxXanY/QE4d/lAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKXG/GR 4+uRQYcU0IZXByvo0O3jMB8GA1UdIwQYMBaAFEf1DJWL+c9UXGAa3rBPigXhAdml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC84RjUyNDg4RUQw NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9SX1VNbFl2NXoxUmNZQnJlc0UtS0JlRUIy YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JfVU1sWXY1ejFSY1lCcmVzRS1LQmVFQjJhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ5MC84RjUyNDg4RUQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9SX1VNbFl2NXox UmNZQnJlc0UtS0JlRUIyYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUJGlZpDDeeRsPtutdMhSDN6bYf+SMS0/mMcvYSB2ma6mmIWLlhSHo CERiaPIBcqwTd0DJAhXTfOK29isVIo7NwJ7WThBJsOkYDd/4ulSqfcWYuBTSqWp/ T7hkdMUd8j+DWJMX2r/NI5/qOsOFfsq46w6MJwLqeg6jWPaWuAeUw5XXeCqTcjyL YxObPt5lsWmeF1o8vDSuhiGEOfyLk3ZrCpKCRDF7YuZCDPKOylj8jnJFphmKHRRC VvNZRcIspUQHPVxTDCo+03y/MSPv06C3XuviwRO+wl8Tm0HyCtqC2p6yaupRUuXE dhYwLlvLtjoaanFntha6YLPCalgEXQ5D -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:41 2025 by rpki-client