$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft File: izRxuQt6W8ds4_wJrKyJKOtNgXk.mft (raw, json) Hash identifier: BltWv5pr7SqNCwUlLp4cS88kqru3DJ2PvOqvq8sDLdU= Subject key identifier: 6F:75:D7:30:95:0B:E6:03:EC:A4:C0:FE:3D:5E:C6:55:00:95:DD:E3 Authority key identifier: 8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 Certificate issuer: /CN=A9156854/serialNumber=8B3471B90B7A5BC76CE3FC09ACAC8928EB4D8179 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft Manifest number: 14 Signing time: Wed 05 Feb 2025 06:25:18 +0000 Manifest this update: Wed 05 Feb 2025 06:25:18 +0000 Manifest next update: Wed 12 Feb 2025 06:25:18 +0000 Files and hashes: 1: izRxuQt6W8ds4_wJrKyJKOtNgXk.crl (hash: Aty1CoT7of7+db8Ff6RgTKDQyzqnMMRLsNT0ci5Ul0A=) 2: 5A10C6A2CB2411EF8B3DD72FC4F9AE02.roa (hash: kmYpUmgxb3wr64V1d2UHNWVWGeyj8uSK/iwpecQP9vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854 Validity Not Before: Feb 5 06:25:18 2025 GMT Not After : Feb 12 06:25:18 2025 GMT Subject: CN=67a3044e-4676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:46:26:e1:e5:e1:f0:17:14:5e:1d:b6:4e: 9a:69:f6:61:c8:92:13:e0:1e:28:9a:ba:4a:ba:d1: b2:41:c5:68:42:ca:d6:83:ca:2c:9d:bc:2b:8b:dd: 0e:63:54:88:0b:2b:59:52:37:ef:b7:7c:6d:5f:a9: 3d:d3:e8:48:04:0a:90:91:cc:bb:eb:75:92:9f:75: 09:0f:d9:4b:11:c3:74:be:e8:29:1b:11:09:9f:42: 27:a4:5d:07:7f:30:92:2c:08:a6:ca:4c:4f:a2:6a: db:8e:39:66:1c:22:04:25:32:6a:ad:c9:5b:e7:b4: c9:6e:07:cc:3e:27:1b:38:1d:2c:ac:07:55:f5:5b: 0d:b5:79:0c:1e:e4:91:ba:09:5e:dc:a1:25:f9:67: 35:bd:35:38:36:76:7b:22:fe:3f:b3:e3:a1:43:92: 77:18:a6:7c:41:ca:eb:26:5b:57:0b:94:32:9b:0f: f5:d9:22:8e:37:22:2b:48:04:7b:7b:99:ae:0d:a0: 33:8f:5f:98:20:25:7c:d8:50:0a:07:76:44:99:cf: f1:05:d0:47:1e:e3:c5:bf:e3:63:cd:01:e3:a6:88: d4:39:29:2e:ff:ec:c6:dd:42:ef:3a:31:5b:ae:69: eb:f2:04:93:2e:9c:34:a4:b5:8d:9b:4e:3c:fe:37: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:75:D7:30:95:0B:E6:03:EC:A4:C0:FE:3D:5E:C6:55:00:95:DD:E3 X509v3 Authority Key Identifier: keyid:8B:34:71:B9:0B:7A:5B:C7:6C:E3:FC:09:AC:AC:89:28:EB:4D:81:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/izRxuQt6W8ds4_wJrKyJKOtNgXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/D53E1B6ECB2311EF9E86682EC4F9AE02/izRxuQt6W8ds4_wJrKyJKOtNgXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7e:a2:5b:4c:d6:8c:35:50:36:05:16:fb:60:6d:8c:37:a3: 21:f4:d6:2a:36:2c:1d:79:ae:c3:26:b7:d6:74:a9:eb:9c:49: de:0b:5d:bc:25:01:d1:c7:a4:09:c2:c9:d5:bc:93:90:70:e1: 8b:c3:24:b5:d3:8b:00:f7:50:46:68:8b:9c:65:f1:96:2e:d3: 40:e3:f8:78:9a:15:15:35:16:ae:27:d2:d7:cf:64:3d:9c:a2: 1a:09:f1:27:9d:47:c3:65:51:76:d1:b8:33:76:16:4d:ce:ac: 44:b3:1e:26:13:82:57:29:28:84:31:b0:b2:f4:29:65:96:79: 9a:be:d2:0c:8b:8c:a3:17:63:05:04:ee:5f:22:82:36:2f:0b: c6:1a:bc:e9:08:4b:d4:d6:3c:21:e7:5a:4f:52:1d:54:d3:84: 4d:c6:a0:56:aa:08:bd:d5:ff:56:3d:81:0a:01:bd:14:95:fc: a3:e1:97:dc:77:50:51:28:63:09:70:d2:ae:3a:50:81:e9:c8: f4:84:f8:71:ed:94:73:00:03:73:ae:fd:f1:fe:db:6f:3d:95: 63:54:4b:c4:c7:35:b0:c2:68:e4:b0:1c:ee:fa:86:4b:1e:39: 6e:10:ce:e6:96:d6:6b:8c:a4:15:40:b3:f2:7d:12:c6:6b:8e: 69:60:18:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Njg1NDExMC8GA1UEBRMoOEIzNDcxQjkwQjdBNUJDNzZDRTNGQzA5QUNBQzg5MjhF QjREODE3OTAeFw0yNTAyMDUwNjI1MThaFw0yNTAyMTIwNjI1MThaMBgxFjAUBgNV BAMTDTY3YTMwNDRlLTQ2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkG0Ym4eXh8BcUXh22Tppp9mHIkhPgHiiaukq60bJBxWhCytaDyiydvCuL3Q5j VIgLK1lSN++3fG1fqT3T6EgECpCRzLvrdZKfdQkP2UsRw3S+6CkbEQmfQiekXQd/ MJIsCKbKTE+iatuOOWYcIgQlMmqtyVvntMluB8w+Jxs4HSysB1X1Ww21eQwe5JG6 CV7coSX5ZzW9NTg2dnsi/j+z46FDkncYpnxByusmW1cLlDKbD/XZIo43IitIBHt7 ma4NoDOPX5ggJXzYUAoHdkSZz/EF0Ece48W/42PNAeOmiNQ5KS7/7MbdQu86MVuu aevyBJMunDSktY2bTjz+N0pfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb3XXMJUL 5gPspMD+PV7GVQCV3eMwHwYDVR0jBBgwFoAUizRxuQt6W8ds4/wJrKyJKOtNgXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2ODU0L0Q1M0UxQjZFQ0Iy MzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2VzhkczRfd0pyS3lKS090TmdY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaXpSeHVRdDZXOGRzNF93SnJLeUpLT3ROZ1hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 ODU0L0Q1M0UxQjZFQ0IyMzExRUY5RTg2NjgyRUM0RjlBRTAyL2l6Unh1UXQ2Vzhk czRfd0pyS3lKS090TmdYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHx+oltM1ow1UDYFFvtgbYw3oyH01io2LB15rsMmt9Z0qeucSd4LXbwl AdHHpAnCydW8k5Bw4YvDJLXTiwD3UEZoi5xl8ZYu00Dj+HiaFRU1Fq4n0tfPZD2c ohoJ8SedR8NlUXbRuDN2Fk3OrESzHiYTglcpKIQxsLL0KWWWeZq+0gyLjKMXYwUE 7l8igjYvC8YavOkIS9TWPCHnWk9SHVTThE3GoFaqCL3V/1Y9gQoBvRSV/KPhl9x3 UFEoYwlw0q46UIHpyPSE+HHtlHMAA3Ou/fH+2289lWNUS8THNbDCaOSwHO76hkse OW4QzuaW1muMpBVAs/J9EsZrjmlgGKc= -----END CERTIFICATE-----Generated at Wed Feb 5 19:53:53 2025 by rpki-client