$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: WnpNytkjgYZ5o6oxPuJXvFdNzKmB3RZ4Z37BvG0Vq8M= Subject key identifier: 6D:AC:5F:57:BF:9E:0B:A2:0C:52:94:6E:16:C3:65:4A:D1:80:44:FA Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 124F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 1248 Signing time: Sun 16 Feb 2025 17:27:45 +0000 Manifest this update: Sun 16 Feb 2025 17:27:45 +0000 Manifest next update: Sun 23 Feb 2025 17:27:45 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: fl2gDomNAwiRf7Lblh3O6qxPLGJh6YGSp9zJGHTkP5w=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: /xC7PbFaPdYR1z14EMh8nZ3np50j+H8RH/0TSNmCnBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4687 (0x124f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983 Validity Not Before: Feb 16 17:27:45 2025 GMT Not After : Feb 23 17:27:45 2025 GMT Subject: CN=67b22011-7e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:ae:4b:74:ff:06:7a:a9:1d:79:ea:81:79: 9e:4c:7d:2b:7f:eb:d0:17:3e:d4:02:3e:f5:d4:3b: 14:66:7d:e3:e3:98:c6:fb:1c:c8:07:6b:db:6b:71: ea:76:77:5f:17:4e:a9:1c:89:b2:03:cb:71:9a:93: f7:e3:25:64:50:2e:d8:eb:26:4e:12:c3:19:a1:f8: 08:a6:2c:38:1c:be:52:ee:e1:93:02:3c:89:86:c2: ef:8a:d5:22:9e:6d:06:ab:38:b2:e5:40:1b:d0:a9: e3:65:39:1c:0b:f3:62:ad:23:48:cb:aa:92:40:d6: f0:9b:7d:15:c0:12:8b:f0:bd:9a:d4:6c:91:99:84: f6:14:07:36:89:be:e5:83:93:16:b8:85:cb:0b:e5: 0f:9f:2f:bd:d1:d6:1f:5d:7f:d6:14:53:87:e9:f3: db:16:51:a3:f5:56:b9:a1:69:43:15:dd:5f:6e:c9: 98:d4:8b:8c:17:4d:69:21:43:c2:b2:6a:f7:42:9e: e9:27:01:36:87:36:bc:38:21:de:59:b3:6a:63:12: d1:18:fc:22:4b:b2:16:b0:2d:b9:3d:33:6f:46:c3: 3e:fb:d7:03:34:a1:19:b7:f4:56:4b:26:13:f3:b9: 7e:8e:93:51:7f:aa:93:25:88:2b:fa:28:39:17:2e: 3a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AC:5F:57:BF:9E:0B:A2:0C:52:94:6E:16:C3:65:4A:D1:80:44:FA X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:13:22:8d:5a:cb:bf:8d:1b:bf:e1:d3:10:d0:95:0d:8b:01: 48:81:24:a7:b1:03:ba:77:81:fe:35:f4:af:06:25:06:00:1e: c9:d4:e7:16:1a:91:0d:f5:a8:5a:ba:f9:70:df:ba:9b:97:c4: 8e:bc:d4:30:f4:82:cc:a6:ca:a1:f7:ac:ec:dd:63:37:c5:f0: 9f:02:ba:4a:53:86:6e:82:05:2d:ff:cb:b8:bf:87:dc:29:02: 16:d4:49:0a:20:0b:28:52:84:cc:20:11:5d:b4:69:93:d8:d7: 62:99:6a:a8:ea:51:0b:4a:ed:8b:cb:92:39:08:f5:a2:f6:f8: 85:7c:e5:24:6e:5d:e4:4b:c5:6f:92:48:f5:96:35:23:69:b6: 6f:20:3a:dc:0e:9e:34:dd:d2:eb:fd:70:f4:a7:a3:4c:dd:69: a7:17:4a:97:8a:03:4d:d2:2c:bd:e4:a0:8c:48:0c:66:ad:47: 07:b5:bf:78:79:0c:dc:78:07:1c:50:be:20:6c:31:d7:50:21: fe:42:2b:31:ea:93:2e:2b:68:38:cf:17:08:98:4d:a9:a5:d6: ef:33:67:30:72:9a:87:36:5d:24:0e:b2:ae:94:b8:71:96:d5: 7c:fa:65:d9:2c:b6:f3:42:f8:21:10:ba:3e:96:05:32:72:62: 2c:aa:25:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjUwMjE2MTcyNzQ1WhcNMjUwMjIzMTcyNzQ1WjAYMRYwFAYD VQQDEw02N2IyMjAxMS03ZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbiuS3T/BnqpHXnqgXmeTH0rf+vQFz7UAj711DsUZn3j45jG+xzIB2vba3Hq dndfF06pHImyA8txmpP34yVkUC7Y6yZOEsMZofgIpiw4HL5S7uGTAjyJhsLvitUi nm0Gqziy5UAb0KnjZTkcC/NirSNIy6qSQNbwm30VwBKL8L2a1GyRmYT2FAc2ib7l g5MWuIXLC+UPny+90dYfXX/WFFOH6fPbFlGj9Va5oWlDFd1fbsmY1IuMF01pIUPC smr3Qp7pJwE2hza8OCHeWbNqYxLRGPwiS7IWsC25PTNvRsM++9cDNKEZt/RWSyYT 87l+jpNRf6qTJYgr+ig5Fy46awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2sX1e/ nguiDFKUbhbDZUrRgET6MB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALEyKNWsu/jRu/4dMQ0JUNiwFIgSSnsQO6d4H+NfSvBiUGAB7J1OcW GpEN9ahauvlw37qbl8SOvNQw9ILMpsqh96zs3WM3xfCfArpKU4ZuggUt/8u4v4fc KQIW1EkKIAsoUoTMIBFdtGmT2NdimWqo6lELSu2Ly5I5CPWi9viFfOUkbl3kS8Vv kkj1ljUjabZvIDrcDp403dLr/XD0p6NM3WmnF0qXigNN0iy95KCMSAxmrUcHtb94 eQzceAccUL4gbDHXUCH+Qisx6pMuK2g4zxcImE2ppdbvM2cwcpqHNl0kDrKulLhx ltV8+mXZLLbzQvghELo+lgUycmIsqiV0 -----END CERTIFICATE-----Generated at Mon Feb 17 08:20:20 2025 by rpki-client