$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft File: 1pe7bz-Z6USA7gu609JoAKtBYmA.mft (raw, json) Hash identifier: 1DD5KJhsDp41DPxvwnkzaTX2t+flajLs9wsARGUCPAU= Subject key identifier: B7:8B:D2:71:B3:5B:34:54:16:63:5B:A3:4D:BE:28:39:CE:50:B1:F9 Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 34F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft Manifest number: 34A8 Signing time: Wed 12 Mar 2025 14:22:27 +0000 Manifest this update: Wed 12 Mar 2025 14:22:26 +0000 Manifest next update: Wed 19 Mar 2025 14:22:26 +0000 Files and hashes: 1: 1pe7bz-Z6USA7gu609JoAKtBYmA.crl (hash: coMvwNCYREEzpvTntHgalQJ7OAOjDiouPS+WiX9jtgE=) 2: 146766F4A47B11E9867CBF58C4F9AE02.roa (hash: Tkov50IGnDt1hyq9qJWuipAiAibSfj8yyNwvUl9JT4c=) 3: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (hash: WjrEbNUJ4DVarxA0iyhxVHDDaIrwbJkyI1tAP4DGJzI=) 4: 964F254A4AEC11EF91EC775FC4F9AE02.roa (hash: 4sO+Kf2WaaDXEC/1X4RERNKVRvAzlJHXuYZYU7/KNho=) 5: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (hash: klKJYHTI4INqcBgBGuobupIA1CcWLSCCQBLrEH0i7XE=) 6: 971866124AEC11EF91EC775FC4F9AE02.roa (hash: eRgET6FlBHt/Mo7JjkKJdhZ1XnrQ5sT4pK+CsAVXRfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 14:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13555 (0x34f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C Validity Not Before: Mar 12 14:22:26 2025 GMT Not After : Mar 19 14:22:26 2025 GMT Subject: CN=67d198a3-10d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:39:e8:63:79:c9:43:45:ce:52:88:d1:85:d0: c2:79:3e:f1:89:eb:9a:e9:86:ff:f6:f5:ce:d7:98: 69:86:90:38:85:a2:34:a5:8d:d4:84:38:75:fa:0c: 43:ff:28:22:dd:7c:f7:9d:a6:ac:8b:24:75:81:3d: 23:d2:d3:61:3a:44:ba:ad:f8:1b:35:24:8e:12:43: 85:f3:71:28:e3:f3:02:e2:21:96:45:75:bd:24:d0: bc:7e:f5:d0:48:9f:74:c8:0e:e6:2c:6d:2c:98:04: cb:33:11:e8:de:5a:4b:46:c5:1b:08:c9:03:4c:45: d2:99:df:81:4c:4f:b8:1a:05:58:69:f8:9b:d9:75: 71:60:64:31:97:23:bb:11:ec:33:a5:21:44:a7:70: 6a:ce:44:6e:ce:e8:1b:7e:66:47:17:66:34:69:35: 4b:51:40:43:11:93:28:96:45:6d:f7:f4:9d:45:2e: c9:4d:ae:cb:7c:ed:f5:40:7e:67:31:e3:4a:00:20: 67:53:aa:f4:dc:17:3f:8b:b1:ca:e2:24:8d:65:8c: a0:2b:59:db:ec:2a:38:58:49:c1:1b:b9:a4:2c:40: 07:1d:62:1e:b4:3e:0d:e3:67:2d:01:86:c4:51:53: 24:30:82:ec:f2:fb:5f:b5:8a:96:72:a4:19:73:d4: 32:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8B:D2:71:B3:5B:34:54:16:63:5B:A3:4D:BE:28:39:CE:50:B1:F9 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b8:d6:7c:4e:6e:1f:ed:9c:e7:47:98:36:ea:18:67:67:48: b4:91:fc:4c:4d:0f:3e:67:06:dd:8b:f5:45:18:9d:5a:9d:29: be:4b:05:51:e1:b7:67:06:ef:83:9b:85:90:7a:57:ba:98:02: 51:2b:ae:71:8f:de:88:f0:db:bf:77:f8:cb:4d:c5:6e:bc:f3: 57:d9:25:49:3b:9a:16:54:8b:e0:11:a9:cf:06:73:aa:6e:03: 0a:26:c8:ba:89:5b:f9:ca:d5:cb:38:f2:a6:6f:74:c5:ce:fb: bb:4f:10:9b:61:ec:e7:78:28:9c:ec:42:fb:11:3f:c3:5b:45: 25:23:ff:64:6f:a4:df:ca:63:80:15:63:85:b3:4d:3f:0b:f8: 82:d2:30:65:ac:ce:d5:58:59:38:9b:6a:dc:0b:01:c4:00:d3: d8:17:ec:60:81:3b:49:43:34:73:0c:80:b5:0f:08:5a:e3:0d: 69:f4:3f:c1:b1:4b:2f:3f:e3:a8:46:1c:7a:8c:37:55:30:57: 03:b9:d0:8b:d9:16:2b:f8:3d:f7:3e:ef:10:b1:70:95:67:8b: 2f:55:49:ad:1d:ba:24:01:01:a5:06:a1:0a:48:c9:18:36:95: 76:dc:7e:6f:5a:9a:4e:ff:7f:00:08:43:9f:0c:10:ec:2b:2c: 26:dd:aa:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjUwMzEyMTQyMjI2WhcNMjUwMzE5MTQyMjI2WjAYMRYwFAYD VQQDEw02N2QxOThhMy0xMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TnoY3nJQ0XOUojRhdDCeT7xieua6Yb/9vXO15hphpA4haI0pY3UhDh1+gxD /ygi3Xz3naasiyR1gT0j0tNhOkS6rfgbNSSOEkOF83Eo4/MC4iGWRXW9JNC8fvXQ SJ90yA7mLG0smATLMxHo3lpLRsUbCMkDTEXSmd+BTE+4GgVYafib2XVxYGQxlyO7 EewzpSFEp3BqzkRuzugbfmZHF2Y0aTVLUUBDEZMolkVt9/SdRS7JTa7LfO31QH5n MeNKACBnU6r03Bc/i7HK4iSNZYygK1nb7Co4WEnBG7mkLEAHHWIetD4N42ctAYbE UVMkMILs8vtftYqWcqQZc9QyVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeL0nGz WzRUFmNbo02+KDnOULH5MB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy81QjA3RjNBQzFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZV U0E3Z3U2MDlKb0FLdEJZbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3uNZ8Tm4f7ZznR5g26hhnZ0i0kfxMTQ8+Zwbdi/VFGJ1anSm+SwVR 4bdnBu+Dm4WQele6mAJRK65xj96I8Nu/d/jLTcVuvPNX2SVJO5oWVIvgEanPBnOq bgMKJsi6iVv5ytXLOPKmb3TFzvu7TxCbYezneCic7EL7ET/DW0UlI/9kb6TfymOA FWOFs00/C/iC0jBlrM7VWFk4m2rcCwHEANPYF+xggTtJQzRzDIC1Dwha4w1p9D/B sUsvP+OoRhx6jDdVMFcDudCL2RYr+D33Pu8QsXCVZ4svVUmtHbokAQGlBqEKSMkY NpV23H5vWppO/38ACEOfDBDsKywm3aqX -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:45 2025 by rpki-client