$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: wCte1BW/EFROxg9a/BdtjExykvsdSuDesCidzzy0m30= Subject key identifier: EB:6F:DC:4D:2B:1D:5A:44:B1:FF:AD:D4:17:FE:0D:86:4E:B0:3A:FA Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 34E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 349B Signing time: Fri 14 Feb 2025 14:23:41 +0000 Manifest this update: Fri 14 Feb 2025 14:23:40 +0000 Manifest next update: Fri 21 Feb 2025 14:23:40 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: P39IN57dAFN0vwdgUCi5xs7kId1GAfjW9D8zRC+4pyQ=) 2: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: Tkov50IGnDt1hyq9qJWuipAiAibSfj8yyNwvUl9JT4c=) 3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: WjrEbNUJ4DVarxA0iyhxVHDDaIrwbJkyI1tAP4DGJzI=) 4: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: 4sO+Kf2WaaDXEC/1X4RERNKVRvAzlJHXuYZYU7/KNho=) 5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: klKJYHTI4INqcBgBGuobupIA1CcWLSCCQBLrEH0i7XE=) 6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: eRgET6FlBHt/Mo7JjkKJdhZ1XnrQ5sT4pK+CsAVXRfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C Validity Not Before: Feb 14 14:23:40 2025 GMT Not After : Feb 21 14:23:40 2025 GMT Subject: CN=67af51ed-ed62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:c7:4c:a0:fb:1e:30:98:e7:5e:c2:de:69: 91:36:5c:af:48:b8:04:6f:9e:f8:59:99:d5:05:6f: dc:d8:20:65:e0:1e:c9:66:d3:c4:05:66:ba:15:41: 96:f9:bd:3b:c0:9e:ba:2d:25:64:c1:27:c3:8c:8a: c8:16:56:25:54:84:ab:31:1b:d8:92:eb:b9:ce:18: 09:a1:c8:ce:d7:38:46:54:21:8c:bc:04:e9:99:a1: d4:56:9a:7b:d2:0e:b5:dc:ef:33:66:df:1c:27:d5: 78:65:8c:59:f2:d6:d8:db:60:57:44:a9:a7:ab:ae: 8b:f0:a4:35:03:e6:bc:0e:71:b1:d9:16:28:c9:4e: a5:4f:a8:07:c5:48:6f:fe:cc:a8:c0:99:e0:de:d4: 86:35:56:38:65:d8:3e:f7:8e:fe:31:df:53:cf:a2: 64:41:49:e6:e2:ce:1a:97:3a:f2:e0:11:1f:a7:1a: ab:5f:1d:c5:ce:ee:7a:13:eb:0e:41:f7:81:8d:96: 44:45:5c:00:29:09:86:f0:b2:d3:4c:a4:4d:90:9d: 69:f8:e6:a7:b0:f9:a3:de:39:e9:f1:18:43:75:b2: 9e:8f:bf:95:85:f7:10:f8:7c:ca:59:c2:2a:d3:b7: 66:e1:36:92:0d:f7:71:f6:0c:23:33:7b:40:55:24: da:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6F:DC:4D:2B:1D:5A:44:B1:FF:AD:D4:17:FE:0D:86:4E:B0:3A:FA X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:55:cc:ce:8b:12:06:28:44:45:86:3e:ab:d7:a8:71:33:9b: 67:db:e4:3a:b5:3d:ee:6c:6e:fd:9b:6c:c0:9e:98:8b:66:49: 69:0b:aa:4b:64:30:08:f1:be:64:fb:43:83:e3:f1:93:29:94: 8f:17:19:7c:24:3c:93:02:83:aa:2a:b3:67:b7:97:be:db:d5: a8:89:53:02:68:f8:7b:c2:39:e9:38:c8:75:36:6d:0a:a7:e3: 92:59:c8:cf:d7:0e:fb:43:10:04:ad:3f:df:44:8b:71:fc:22: a2:0b:48:73:bd:2c:c6:a5:4b:5a:be:ff:48:39:aa:93:14:af: f0:f3:70:0f:e1:59:ca:fc:aa:2b:d7:c3:c4:bd:38:30:a4:6e: 5c:f3:d3:b3:6c:af:2c:a9:a7:55:dc:c5:bc:76:5d:b3:01:10: 6c:5c:84:13:cb:00:eb:e3:18:ec:7a:94:ac:af:fb:d3:57:95: ce:2e:95:99:c7:bc:5f:bb:2c:9b:40:88:60:74:3b:be:76:a5: ae:55:b5:80:32:8c:7d:94:82:89:4f:db:db:6c:80:31:b4:ce: 4b:5f:b4:e9:1b:ae:3b:e2:ac:92:d2:46:f1:07:f9:97:cb:12: 69:3c:b7:64:0d:55:14:ac:e3:08:c4:d5:28:86:2d:18:14:93: 9f:10:cd:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjUwMjE0MTQyMzQwWhcNMjUwMjIxMTQyMzQwWjAYMRYwFAYD VQQDEw02N2FmNTFlZC1lZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNLHTKD7HjCY517C3mmRNlyvSLgEb574WZnVBW/c2CBl4B7JZtPEBWa6FUGW +b07wJ66LSVkwSfDjIrIFlYlVISrMRvYkuu5zhgJocjO1zhGVCGMvATpmaHUVpp7 0g613O8zZt8cJ9V4ZYxZ8tbY22BXRKmnq66L8KQ1A+a8DnGx2RYoyU6lT6gHxUhv /syowJng3tSGNVY4Zdg+947+Md9Tz6JkQUnm4s4alzry4BEfpxqrXx3Fzu56E+sO QfeBjZZERVwAKQmG8LLTTKRNkJ1p+OansPmj3jnp8RhDdbKej7+VhfcQ+HzKWcIq 07dm4TaSDfdx9gwjM3tAVSTaOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtv3E0r HVpEsf+t1Bf+DYZOsDr6MB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/VczOixIGKERFhj6r16hxM5tn2+Q6tT3ubG79m2zAnpiLZklpC6pL ZDAI8b5k+0OD4/GTKZSPFxl8JDyTAoOqKrNnt5e+29WoiVMCaPh7wjnpOMh1Nm0K p+OSWcjP1w77QxAErT/fRItx/CKiC0hzvSzGpUtavv9IOaqTFK/w83AP4VnK/Kor 18PEvTgwpG5c89OzbK8sqadV3MW8dl2zARBsXIQTywDr4xjsepSsr/vTV5XOLpWZ x7xfuyybQIhgdDu+dqWuVbWAMox9lIKJT9vbbIAxtM5LX7TpG6474qyS0kbxB/mX yxJpPLdkDVUUrOMIxNUohi0YFJOfEM1o -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:58 2025 by rpki-client