$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json) Hash identifier: fFey6QO0kMCxR4fW9lsSVTxptRS29LvBFVMBmVOfsrE= Subject key identifier: 43:42:7E:62:40:8B:B2:BC:9D:CE:17:6E:C5:6E:A3:18:F2:84:23:D6 Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft Manifest number: F9 Signing time: Sat 15 Feb 2025 06:19:41 +0000 Manifest this update: Sat 15 Feb 2025 06:19:40 +0000 Manifest next update: Sat 22 Feb 2025 06:19:40 +0000 Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: 5BYqvtfvknS5jBSqZJNubVkZu5k0ko3HDG9Hhp9zzS0=) 2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: VkMCaNU7sXjTR/CQAkH/z8BpEQbO8jbw+1o8r2q8dPA=) 3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: cg93R23INGR8fe5V8I1v0XqkWQVYbzGg1oKwaVZnx2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678 Validity Not Before: Feb 15 06:19:40 2025 GMT Not After : Feb 22 06:19:40 2025 GMT Subject: CN=67b031fc-4be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:6a:e5:01:e0:ff:7b:43:9a:0e:6e:ae:7d: 0a:5b:fd:06:38:1f:c5:42:49:78:85:83:3f:18:0e: 81:a5:6f:cf:82:14:7b:74:e0:b1:ca:87:48:d9:5a: ec:e0:b5:42:4e:1e:9a:19:ec:a4:66:83:70:a0:5c: c3:9a:7d:b8:7e:5e:87:92:97:3f:9b:25:51:3d:fa: cd:07:39:e2:ac:e0:c9:4a:3b:7f:b4:bb:1f:3f:b7: 3b:7e:c5:a2:43:b2:b7:98:7e:04:fc:a5:14:32:b4: e3:be:6a:7f:cb:b4:7a:71:a4:ef:96:38:33:06:47: c6:f2:4c:72:d9:cc:8b:a7:8e:3c:5a:e3:f2:ed:8a: e4:44:fe:8d:ea:46:1a:1c:c5:d6:1f:57:6c:24:88: 92:13:6d:9a:38:7d:71:15:4e:65:7a:b1:e0:10:61: a0:67:54:35:14:ca:1f:e4:71:6f:87:f6:96:92:36: bf:5e:ad:22:aa:80:ec:46:1f:81:44:16:46:2b:ed: 81:fa:88:4b:b3:52:5e:fb:4f:30:dd:1a:e5:ec:56: 4d:af:29:52:57:36:d8:1c:63:f6:20:15:fb:95:3f: 80:7a:67:b8:ea:58:c4:86:06:6d:43:6e:ca:fd:bd: 79:4e:1a:cc:2a:ed:f6:19:d3:c9:54:b6:87:34:28: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:42:7E:62:40:8B:B2:BC:9D:CE:17:6E:C5:6E:A3:18:F2:84:23:D6 X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:53:87:9a:a1:ba:76:f2:a6:64:fa:6e:25:a8:a9:68:37:42: f4:61:99:6f:b6:ca:7b:11:a4:0b:8a:c9:d7:f9:4c:36:55:7c: f2:fd:41:77:1e:ab:c8:28:be:cf:bd:46:49:cc:bd:9d:6b:59: ab:6c:51:45:55:72:a3:ad:72:5e:93:3f:f4:e2:91:70:01:78: ec:36:29:08:91:08:50:54:2c:a1:57:44:09:75:21:f4:cd:ca: 42:e8:e3:40:a9:0b:be:c3:df:0a:ee:c5:a2:9d:09:91:9e:ef: e0:97:c8:f9:2c:a7:53:3a:e2:bd:76:2e:f3:e3:9e:a2:75:b9: eb:a9:d7:86:a4:9a:87:6b:40:41:98:1b:96:ee:7d:4b:77:be: aa:f4:fc:a6:9e:da:db:fc:83:65:6a:fe:45:8f:76:f3:1d:90: c5:e2:df:7b:73:65:53:2c:23:52:f3:10:56:07:27:24:b4:da: a1:ea:88:15:94:f3:32:25:60:9e:29:9a:43:c0:4e:05:a6:75: 06:9e:84:dc:1b:80:74:ba:dc:f3:1b:72:70:6e:7c:72:b3:ad: 9c:5f:dc:ad:db:ea:85:f3:b8:dc:d2:f3:73:63:58:2c:dd:ba: a9:2f:c2:39:13:3d:f6:4d:d7:f4:35:c7:02:4d:50:07:d3:ce: 6e:ca:e8:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjUwMjE1MDYxOTQwWhcNMjUwMjIyMDYxOTQwWjAYMRYwFAYD VQQDEw02N2IwMzFmYy00YmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKRq5QHg/3tDmg5urn0KW/0GOB/FQkl4hYM/GA6BpW/PghR7dOCxyodI2Vrs 4LVCTh6aGeykZoNwoFzDmn24fl6Hkpc/myVRPfrNBznirODJSjt/tLsfP7c7fsWi Q7K3mH4E/KUUMrTjvmp/y7R6caTvljgzBkfG8kxy2cyLp448WuPy7YrkRP6N6kYa HMXWH1dsJIiSE22aOH1xFU5lerHgEGGgZ1Q1FMof5HFvh/aWkja/Xq0iqoDsRh+B RBZGK+2B+ohLs1Je+08w3Rrl7FZNrylSVzbYHGP2IBX7lT+Aeme46ljEhgZtQ27K /b15ThrMKu32GdPJVLaHNCjHuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENCfmJA i7K8nc4XbsVuoxjyhCPWMB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTY3OC83QUVFRDg2Mjc5MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9F RDlnd3NtelhaZ280TVJESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuU4eaobp28qZk+m4lqKloN0L0YZlvtsp7EaQLisnX+Uw2VXzy/UF3 HqvIKL7PvUZJzL2da1mrbFFFVXKjrXJekz/04pFwAXjsNikIkQhQVCyhV0QJdSH0 zcpC6ONAqQu+w98K7sWinQmRnu/gl8j5LKdTOuK9di7z456idbnrqdeGpJqHa0BB mBuW7n1Ld76q9Pymntrb/INlav5Fj3bzHZDF4t97c2VTLCNS8xBWBycktNqh6ogV lPMyJWCeKZpDwE4FpnUGnoTcG4B0utzzG3Jwbnxys62cX9yt2+qF87jc0vNzY1gs 3bqpL8I5Ez32Tdf0NccCTVAH085uyuhZ -----END CERTIFICATE-----Generated at Mon Feb 17 07:20:29 2025 by rpki-client