$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json) Hash identifier: +JC0QE7bjF//Xn64NkNdTOJ4rqPwvW+Ru54oqP2mwWg= Subject key identifier: E6:2B:7C:A5:4C:77:D2:D6:34:A4:03:AF:12:5A:6E:7D:D6:8D:3D:47 Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft Manifest number: 0252 Signing time: Sat 15 Feb 2025 03:29:13 +0000 Manifest this update: Sat 15 Feb 2025 03:29:13 +0000 Manifest next update: Sat 22 Feb 2025 03:29:13 +0000 Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: G/b47IDtHoFBdS8F3AU2PrdPPQDI+ZR+cRYW+gArcrs=) 2: 941EE9A46BB911ED97343873C4F9AE02.roa (hash: 5ZbVoX8toC5MCMXRauyxLFjSv/lDIxp6UGtS1LazqGA=) 3: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: hUG9zbqpZfh8Oh0Hkb9QWVdKId5Yw0YN3vAbtZe8GC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494 Validity Not Before: Feb 15 03:29:13 2025 GMT Not After : Feb 22 03:29:13 2025 GMT Subject: CN=67b00a09-3a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:94:64:74:04:c0:b7:f1:2a:0b:1d:95:4a: 58:3b:68:3a:4b:02:36:ff:81:cf:bd:bb:d7:2e:5a: ca:0a:c2:92:6c:dd:8d:af:ac:a3:08:b5:04:37:5a: ba:ff:14:0c:82:dc:33:a0:4c:fa:ef:4d:71:53:72: 76:8e:10:ea:7b:5a:80:1c:dc:66:67:4e:fe:2c:c1: f0:3f:c4:65:cc:a3:d6:f3:7f:b1:05:9e:50:a2:8a: 7b:c3:8c:8f:ed:99:ff:c3:5b:29:ca:56:a6:89:75: 4b:58:21:7a:a2:11:ee:6c:4f:37:fe:ae:2d:12:a1: df:ef:94:8a:ab:98:19:25:bf:47:3f:2c:40:d9:9c: d8:2b:5d:49:8d:6a:df:80:4f:59:c4:fb:6f:80:bb: c1:7f:fb:b5:b5:75:4a:0b:aa:98:99:1e:a7:8a:06: 35:13:e9:0b:9c:44:45:0e:ea:34:34:bb:12:03:59: 5b:b6:a6:25:36:35:12:63:3a:c2:5e:1b:a8:66:ac: f9:a5:bb:49:79:14:1d:ff:b3:c1:aa:94:ed:41:2b: 8f:f8:55:af:8c:0e:a5:12:e4:5b:1f:24:cf:dd:2e: 91:59:aa:86:db:4c:38:b2:6d:6f:4c:dc:03:78:5e: 2a:e7:0f:05:03:86:c9:09:7e:c1:70:de:84:d5:17: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2B:7C:A5:4C:77:D2:D6:34:A4:03:AF:12:5A:6E:7D:D6:8D:3D:47 X509v3 Authority Key Identifier: keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:5d:12:be:2e:d1:a4:d2:5c:03:7a:cf:b4:5f:e1:7a:ea:18: 97:2d:32:a8:ff:1c:be:20:fd:b0:40:5e:df:72:a6:37:76:d9: 56:28:98:c9:e7:fd:b6:48:b0:39:4e:1e:eb:bc:47:2e:65:2f: a7:0f:f4:95:66:8a:e3:47:39:f7:84:97:5d:9f:94:ae:2b:0b: ee:b3:64:1c:d0:60:97:72:f4:21:9c:3c:cf:d6:80:2f:d3:e5: 54:f8:fb:00:d8:ae:a7:79:99:21:4e:62:3f:ae:77:40:72:6e: 04:d4:be:97:ec:04:db:59:c5:e0:75:28:84:be:a3:5c:7b:c7: 08:2d:1f:6c:17:bb:33:b9:d1:e7:91:66:23:51:2b:a0:16:4c: d6:88:82:31:de:f8:cf:f1:dc:a3:ea:39:4d:c4:97:b7:83:72: 57:e0:58:88:96:16:59:81:9e:2b:28:26:80:8b:b6:8e:6b:fa: ac:8b:35:a8:27:94:4e:ad:72:5f:f4:79:60:ab:66:cc:b8:d9: b1:01:26:f9:8d:88:af:48:03:69:d7:ee:08:ed:85:84:15:a2: 05:06:5a:a2:08:76:d0:66:5d:17:72:bf:78:26:cc:c0:42:ef: 00:2d:6a:a1:71:75:bd:90:f9:14:86:6a:ad:e8:bd:32:5b:19: 15:bc:7b:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw RjdBOTc3ODkwHhcNMjUwMjE1MDMyOTEzWhcNMjUwMjIyMDMyOTEzWjAYMRYwFAYD VQQDEw02N2IwMGEwOS0zYTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoyUZHQEwLfxKgsdlUpYO2g6SwI2/4HPvbvXLlrKCsKSbN2Nr6yjCLUEN1q6 /xQMgtwzoEz6701xU3J2jhDqe1qAHNxmZ07+LMHwP8RlzKPW83+xBZ5Qoop7w4yP 7Zn/w1spylamiXVLWCF6ohHubE83/q4tEqHf75SKq5gZJb9HPyxA2ZzYK11JjWrf gE9ZxPtvgLvBf/u1tXVKC6qYmR6nigY1E+kLnERFDuo0NLsSA1lbtqYlNjUSYzrC XhuoZqz5pbtJeRQd/7PBqpTtQSuP+FWvjA6lEuRbHyTP3S6RWaqG20w4sm1vTNwD eF4q5w8FA4bJCX7BcN6E1Re8PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYrfKVM d9LWNKQDrxJabn3WjT1HMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zMUI4MjYzQzA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9F ZzB6U3B2LUNHTlFQZXBkNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnXRK+LtGk0lwDes+0X+F66hiXLTKo/xy+IP2wQF7fcqY3dtlWKJjJ 5/22SLA5Th7rvEcuZS+nD/SVZorjRzn3hJddn5SuKwvus2Qc0GCXcvQhnDzP1oAv 0+VU+PsA2K6neZkhTmI/rndAcm4E1L6X7ATbWcXgdSiEvqNce8cILR9sF7szudHn kWYjUSugFkzWiIIx3vjP8dyj6jlNxJe3g3JX4FiIlhZZgZ4rKCaAi7aOa/qsizWo J5ROrXJf9Hlgq2bMuNmxASb5jYivSANp1+4I7YWEFaIFBlqiCHbQZl0Xcr94JszA Qu8ALWqhcXW9kPkUhmqt6L0yWxkVvHsp -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:03 2025 by rpki-client