$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft File: _MSmV91TDZU6LW8_FZMv_gHykdY.mft (raw, json) Hash identifier: W5vzQaXCFWi0IG62DQu+ABFpge1Yc4fCbI1yTma2yvE= Subject key identifier: 67:38:7B:40:2E:AD:CB:C7:CD:62:93:FE:CA:CD:D3:EB:14:F0:94:10 Authority key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6 Certificate issuer: /CN=A916BF2B/serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft Manifest number: 25 Signing time: Wed 05 Feb 2025 06:18:17 +0000 Manifest this update: Wed 05 Feb 2025 06:18:17 +0000 Manifest next update: Wed 12 Feb 2025 06:18:17 +0000 Files and hashes: 1: _MSmV91TDZU6LW8_FZMv_gHykdY.crl (hash: ewSDbLgW0QMP2HSJYHTiLRIdM7CDKyRphET0W7ZGWEg=) 2: 8AD1FCF8BBBF11EF87907310C4F9AE02.roa (hash: Rt4bwv9SSiv+XiRqx1M1+YBUJXfxko335m5/WVQTRcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BF2B Validity Not Before: Feb 5 06:18:17 2025 GMT Not After : Feb 12 06:18:17 2025 GMT Subject: CN=67a302a9-7aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:09:6f:56:ea:4d:c5:d6:81:31:bf:f3:4f:25: 2f:75:85:f3:38:c5:bd:dd:b3:5c:51:de:d7:3d:c5: a0:83:58:2d:17:e7:82:e2:48:52:e8:99:17:0e:e9: 87:a9:93:fb:c4:18:23:c4:37:d0:0b:3c:61:89:0c: 7d:ce:84:63:7f:95:0c:01:78:c1:21:e0:60:64:78: 0f:01:fe:fc:85:2f:02:a2:5d:64:b7:4f:cb:fd:88: 0c:7f:6a:fc:c9:6f:0e:ba:1a:3b:f0:37:38:ca:b4: 9f:e1:41:cb:89:02:16:91:20:fb:af:dc:17:b9:3d: c9:54:1f:68:f4:9b:3e:9e:4e:34:5e:d5:0e:02:66: 07:94:74:22:c9:23:3b:f4:b5:3a:64:8b:66:09:53: 65:46:86:d5:b4:04:f8:1b:3f:c5:3a:af:54:5e:31: d9:cf:a5:e7:38:a3:6d:d1:78:c6:7d:11:cf:8b:32: 90:ca:1c:36:bb:ec:a9:9a:28:bf:b2:5f:21:8c:e7: 58:56:32:36:01:99:f5:10:48:22:39:fc:c8:5e:a8: f9:5e:d1:ee:79:15:d9:bd:00:b0:2f:b0:64:f6:51: 75:b5:d6:32:b3:9e:13:12:ca:6c:7c:4c:0a:a0:0f: 63:97:51:05:ba:7e:24:67:21:ed:2f:6a:a5:e2:b4: e6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:38:7B:40:2E:AD:CB:C7:CD:62:93:FE:CA:CD:D3:EB:14:F0:94:10 X509v3 Authority Key Identifier: keyid:FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:f0:21:81:4e:90:2b:95:ed:9c:47:d8:ab:23:cd:ff:3d:ed: 48:a5:e7:83:da:cc:5c:f1:07:03:95:26:68:da:f8:4f:c7:95: 93:99:5d:ac:dc:24:dc:6d:d0:34:52:05:1d:95:4d:f0:5b:dc: 8f:49:01:70:b9:f5:01:52:12:78:f3:3f:b3:a9:30:b3:90:5f: 7c:1c:8b:55:cb:d0:1e:dc:69:5a:e7:76:5d:e2:8e:43:e8:a9: 39:b6:b0:17:34:bf:80:e7:e9:af:97:26:01:9d:d6:a5:51:d9: 59:41:02:02:94:82:23:ec:58:a8:ff:4c:a1:89:41:19:52:75: 3b:1a:4b:20:29:9b:c2:36:39:d0:31:e5:7a:95:53:32:71:08: 62:85:f2:c3:d3:24:4d:a1:6e:01:e3:54:a3:36:3d:7f:1d:55: 20:ec:38:d4:29:73:15:51:0f:45:95:0e:47:14:a2:8f:64:1b: 22:00:b6:f2:10:9a:3e:72:e5:9e:2c:9d:d1:6b:d8:b1:11:d3: 26:e7:98:b9:3a:e5:3d:9c:c9:d6:84:b5:d8:1e:1f:93:4c:3b: c8:9e:8c:26:cb:74:ab:a4:4c:1a:5f:90:c7:c6:4f:e2:88:0b: 68:92:b6:67:1f:32:46:fd:fe:11:79:62:27:a1:d9:9f:98:ae: 2a:00:07:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkYyQjExMC8GA1UEBRMoRkNDNEE2NTdERDUzMEQ5NTNBMkQ2RjNGMTU5MzJGRkUw MUYyOTFENjAeFw0yNTAyMDUwNjE4MTdaFw0yNTAyMTIwNjE4MTdaMBgxFjAUBgNV BAMTDTY3YTMwMmE5LTdhZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqCW9W6k3F1oExv/NPJS91hfM4xb3ds1xR3tc9xaCDWC0X54LiSFLomRcO6Yep k/vEGCPEN9ALPGGJDH3OhGN/lQwBeMEh4GBkeA8B/vyFLwKiXWS3T8v9iAx/avzJ bw66GjvwNzjKtJ/hQcuJAhaRIPuv3Be5PclUH2j0mz6eTjRe1Q4CZgeUdCLJIzv0 tTpki2YJU2VGhtW0BPgbP8U6r1ReMdnPpec4o23ReMZ9Ec+LMpDKHDa77KmaKL+y XyGM51hWMjYBmfUQSCI5/MheqPle0e55Fdm9ALAvsGT2UXW11jKznhMSymx8TAqg D2OXUQW6fiRnIe0vaqXitOb/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZzh7QC6t y8fNYpP+ys3T6xTwlBAwHwYDVR0jBBgwFoAU/MSmV91TDZU6LW8/FZMv/gHykdYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCRjJCLzQ1OUU2NjZFQjc4 QTExRUZCODc0Mjc2RUM0RjlBRTAyL19NU21WOTFURFpVNkxXOF9GWk12X2dIeWtk WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX01TbVY5MVREWlU2TFc4X0ZaTXZfZ0h5a2RZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC RjJCLzQ1OUU2NjZFQjc4QTExRUZCODc0Mjc2RUM0RjlBRTAyL19NU21WOTFURFpV NkxXOF9GWk12X2dIeWtkWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMrwIYFOkCuV7ZxH2Ksjzf897Uil54PazFzxBwOVJmja+E/HlZOZXazc JNxt0DRSBR2VTfBb3I9JAXC59QFSEnjzP7OpMLOQX3wci1XL0B7caVrndl3ijkPo qTm2sBc0v4Dn6a+XJgGd1qVR2VlBAgKUgiPsWKj/TKGJQRlSdTsaSyApm8I2OdAx 5XqVUzJxCGKF8sPTJE2hbgHjVKM2PX8dVSDsONQpcxVRD0WVDkcUoo9kGyIAtvIQ mj5y5Z4sndFr2LER0ybnmLk65T2cydaEtdgeH5NMO8iejCbLdKukTBpfkMfGT+KI C2iStmcfMkb9/hF5Yieh2Z+YrioAB8U= -----END CERTIFICATE-----Generated at Wed Feb 5 20:15:26 2025 by rpki-client