$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json) Hash identifier: I2n86xOp5wgMKwW1UYJ+pmtNzLJo/riobWFN8DQlLa4= Subject key identifier: AB:75:C5:AB:AC:01:AB:DB:47:B5:B7:D4:D9:90:05:C8:DD:B0:47:D4 Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft Manifest number: 76 Signing time: Sat 15 Feb 2025 07:55:38 +0000 Manifest this update: Sat 15 Feb 2025 07:55:37 +0000 Manifest next update: Sat 22 Feb 2025 07:55:37 +0000 Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: Dx3t5tU2Z3D+gyvFP+D8IfGK4FSQJvVRTNDgAw360qk=) 2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: SBjUcQwgq8eYibunzuM6B0MYbh92vDqaJjZbumGPIz4=) 3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: rxylyIaFWofGp8fi7f1ysoxvtfFGdtzKVIc05XTsdvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A Validity Not Before: Feb 15 07:55:37 2025 GMT Not After : Feb 22 07:55:37 2025 GMT Subject: CN=67b04879-b60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:c3:62:76:67:34:b5:73:57:85:6c:49:78: d4:37:ae:1a:47:4a:fe:69:85:7d:53:53:7a:9f:65: 4b:d3:e2:e5:c8:f0:80:aa:19:54:25:c3:ea:55:20: fa:1a:87:0f:66:08:13:02:52:15:00:bc:fd:7b:df: 6f:52:80:98:cd:b9:43:49:ea:44:34:30:c7:63:b1: 1c:3f:d3:2f:e8:32:be:a8:60:80:23:03:a3:2a:6e: a8:76:64:f9:58:72:1d:27:7e:89:be:b2:9d:d0:a7: e7:91:05:62:fd:f5:13:38:6d:44:c7:63:1e:f8:35: 83:54:18:33:3c:0e:b9:7b:6f:db:68:f7:ea:ab:26: 4b:75:dd:3d:e0:0a:b4:6b:71:04:10:c3:05:b6:22: 5a:49:79:fd:24:0f:34:c2:7e:26:f5:76:bc:b8:8e: 50:16:9d:d8:0b:f2:20:1b:fc:76:ec:8a:23:c1:4b: f4:0f:2a:ec:80:cc:ec:ed:15:2d:d1:4e:48:db:9e: a5:31:ba:b4:72:72:12:da:38:ab:8a:ed:98:21:21: 51:e8:34:77:47:25:c6:ec:ba:54:e0:7a:da:a6:6c: 0a:15:a2:dc:b0:75:e8:f7:63:06:8f:aa:49:7a:c8: e5:87:48:50:be:08:5c:2b:58:8d:af:99:c7:eb:39: 11:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:75:C5:AB:AC:01:AB:DB:47:B5:B7:D4:D9:90:05:C8:DD:B0:47:D4 X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:cd:0f:75:51:90:12:28:f6:43:05:b0:fc:fc:05:42:21:cd: 07:ea:55:4d:1d:db:5f:79:56:d5:b6:f7:6a:c4:34:b7:5a:30: 58:a0:9e:06:df:53:97:65:b0:ca:1d:18:44:0c:1f:d6:c8:92: 5d:aa:ea:f5:8e:89:b2:ff:12:d5:51:6e:a2:69:11:9d:b6:c5: ac:d0:d8:1b:e2:ff:1a:df:5f:21:c4:3c:c5:54:7f:c2:4b:1e: 52:45:c5:a1:2b:75:66:ef:da:2e:48:3e:f2:1f:46:33:38:9b: 4b:ac:a0:05:f4:e2:c2:d8:7f:cf:2f:ff:78:63:3c:d7:21:c5: f7:3b:26:57:5b:4a:3c:7d:7b:5b:81:dc:ed:f0:59:8e:f1:8d: dc:30:4f:b6:28:ef:f1:ca:e5:69:87:63:7c:ef:0d:96:88:db: e0:b4:a4:4d:da:48:d5:f7:15:97:0d:3c:8b:f8:d8:5d:bf:34: b8:0a:7e:7a:97:8a:2d:e9:c7:47:aa:54:2d:09:35:ac:ed:ec: 61:dd:d3:1d:70:5d:4b:ab:6c:90:c1:ef:00:db:11:1b:b9:31: 64:f8:10:79:cc:ca:73:07:5a:fe:6f:53:02:c6:48:65:e7:3c: 01:3b:dd:e4:17:d1:88:e8:3c:cd:69:51:d7:5f:db:f0:ae:06: d8:66:10:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk1QTExMC8GA1UEBRMoRjI0QzQ0MzIxMEY3NDFDQkU1OUQwMTRFQkE2RUU5NzJC NUNEREFFNzAeFw0yNTAyMTUwNzU1MzdaFw0yNTAyMjIwNzU1MzdaMBgxFjAUBgNV BAMTDTY3YjA0ODc5LWI2MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmHMNidmc0tXNXhWxJeNQ3rhpHSv5phX1TU3qfZUvT4uXI8ICqGVQlw+pVIPoa hw9mCBMCUhUAvP17329SgJjNuUNJ6kQ0MMdjsRw/0y/oMr6oYIAjA6Mqbqh2ZPlY ch0nfom+sp3Qp+eRBWL99RM4bUTHYx74NYNUGDM8Drl7b9to9+qrJkt13T3gCrRr cQQQwwW2IlpJef0kDzTCfib1dry4jlAWndgL8iAb/HbsiiPBS/QPKuyAzOztFS3R TkjbnqUxurRychLaOKuK7ZghIVHoNHdHJcbsulTgetqmbAoVotywdej3YwaPqkl6 yOWHSFC+CFwrWI2vmcfrORGfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq3XFq6wB q9tHtbfU2ZAFyN2wR9QwHwYDVR0jBBgwFoAU8kxEMhD3QcvlnQFOum7pcrXN2ucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTVBLzUxMkM3MDVFMzdB RTExRUY4QTQ1OEUzN0M0RjlBRTAyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGt4RU1oRDNRY3ZsblFGT3VtN3BjclhOMnVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTVBLzUxMkM3MDVFMzdBRTExRUY4QTQ1OEUzN0M0RjlBRTAyLzhreEVNaEQzUWN2 bG5RRk91bTdwY3JYTjJ1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADnND3VRkBIo9kMFsPz8BUIhzQfqVU0d2195VtW292rENLdaMFigngbf U5dlsModGEQMH9bIkl2q6vWOibL/EtVRbqJpEZ22xazQ2Bvi/xrfXyHEPMVUf8JL HlJFxaErdWbv2i5IPvIfRjM4m0usoAX04sLYf88v/3hjPNchxfc7JldbSjx9e1uB 3O3wWY7xjdwwT7Yo7/HK5WmHY3zvDZaI2+C0pE3aSNX3FZcNPIv42F2/NLgKfnqX ii3px0eqVC0JNazt7GHd0x1wXUurbJDB7wDbERu5MWT4EHnMynMHWv5vUwLGSGXn PAE73eQX0YjoPM1pUddf2/CuBthmEC0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:00 2025 by rpki-client