$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft File: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json) Hash identifier: A/oBJ2A2fePqukd9X9ZGelMyPKWi1U2nFls49LD8z7c= Subject key identifier: 0D:E3:BA:18:BA:78:EB:4C:EF:87:BA:FC:29:43:E4:A8:8B:D4:78:FC Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 Certificate issuer: /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft Manifest number: 0460 Signing time: Mon 17 Feb 2025 01:11:12 +0000 Manifest this update: Mon 17 Feb 2025 01:11:11 +0000 Manifest next update: Mon 24 Feb 2025 01:11:11 +0000 Files and hashes: 1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: ysb6/d0+WLdXMFSlb1180If4RuAvViDtzg4acqCakMk=) 2: 56530120D47E11EFB2639C53C4F9AE02.roa (hash: 1whcSR6JX/pYt55ZCs0pw4Y1DC7NV0axD3riMwYblGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D65 Validity Not Before: Feb 17 01:11:11 2025 GMT Not After : Feb 24 01:11:11 2025 GMT Subject: CN=67b28cb0-bfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:67:98:59:c4:5e:28:e3:e0:b6:82:6d:9e: c0:03:4c:5a:59:d1:b3:1d:c6:cd:21:41:57:ef:bc: e5:3f:e5:08:aa:14:1e:e7:06:46:89:6a:5f:8f:bb: 18:f3:c2:5c:9b:72:e0:ed:01:2c:2a:b8:85:51:0c: 86:c2:cc:9a:52:0c:b6:28:15:77:cb:52:94:b1:9f: 1f:5e:9c:35:f9:98:5d:62:96:c9:50:0d:15:1d:57: 30:e7:09:fa:0f:8f:55:1e:96:a1:51:92:d5:bf:51: 2e:7b:1c:6a:b9:c1:28:60:c7:3f:37:3f:c3:79:ab: b9:25:ff:f1:85:00:dc:55:27:8c:d5:86:b0:4b:a6: 80:23:bc:70:b0:4c:31:c0:7e:03:ed:d0:97:db:31: da:e3:60:96:27:e8:ff:c3:54:c9:40:d2:0b:cd:06: b7:25:d7:e6:d3:50:71:6b:4b:1f:ee:64:c3:8c:c5: 40:fe:08:ab:52:f7:03:3c:c5:d1:ad:77:de:4a:1e: bf:19:b2:bf:85:6f:49:ed:44:b0:05:25:d3:5d:98: 4f:37:0f:f7:66:2c:9e:2e:f5:d4:29:da:61:43:91: 36:45:2a:c6:aa:fe:59:fe:cb:83:df:35:de:df:1b: 40:4e:98:eb:59:8d:f5:8a:a2:13:7e:23:1d:d4:05: 1e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E3:BA:18:BA:78:EB:4C:EF:87:BA:FC:29:43:E4:A8:8B:D4:78:FC X509v3 Authority Key Identifier: keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:26:53:b0:bd:77:a6:c9:4b:4f:57:19:52:68:d3:44:78:ee: 53:95:62:05:71:3d:00:7e:09:89:04:48:0f:24:fb:7d:34:6f: eb:74:0a:19:58:49:f6:9a:5e:54:f4:fc:1c:08:0d:66:cd:d5: 6d:1d:06:e1:2d:40:b9:b5:75:0d:1c:ed:bc:57:2f:b1:b1:52: ce:53:a2:88:0f:43:f7:f8:37:a6:6d:4e:6d:e2:47:c7:03:3f: b3:64:4c:67:ca:5b:a3:e2:e7:cc:db:67:02:70:07:68:d3:c9: 6f:0e:6a:8c:de:95:5f:59:87:22:00:61:9b:96:5c:00:6c:5b: 71:84:a7:5e:92:75:38:e9:45:53:52:f1:69:d7:59:b7:6e:47: 9a:c3:d1:98:30:5b:8a:17:19:b2:66:3d:12:b3:b7:da:28:3e: f2:d3:00:00:e0:ef:46:32:2e:8a:b2:9a:7f:35:fd:2a:64:f8: 00:85:49:18:5c:de:82:1b:4c:ef:59:01:91:9d:89:0f:0b:e9: 52:9f:0d:32:47:f2:77:1e:1a:bc:c6:bb:49:79:bf:ba:66:11: d0:17:ec:bb:fb:98:ae:c5:14:96:2c:60:6d:e9:15:3d:73:bf: c3:3a:d2:fb:fd:50:86:24:52:09:51:6d:64:b5:5e:5f:bc:4e: 62:6e:4c:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJENjUxMTAvBgNVBAUTKEQ3MTUxOEZDNkU1NkM3QzRFQ0E5RUExOEIxQjU0MUQ4 QjBDMkNBMjIwHhcNMjUwMjE3MDExMTExWhcNMjUwMjI0MDExMTExWjAYMRYwFAYD VQQDEw02N2IyOGNiMC1iZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzENnmFnEXijj4LaCbZ7AA0xaWdGzHcbNIUFX77zlP+UIqhQe5wZGiWpfj7sY 88Jcm3Lg7QEsKriFUQyGwsyaUgy2KBV3y1KUsZ8fXpw1+ZhdYpbJUA0VHVcw5wn6 D49VHpahUZLVv1EuexxqucEoYMc/Nz/Deau5Jf/xhQDcVSeM1YawS6aAI7xwsEwx wH4D7dCX2zHa42CWJ+j/w1TJQNILzQa3Jdfm01Bxa0sf7mTDjMVA/girUvcDPMXR rXfeSh6/GbK/hW9J7USwBSXTXZhPNw/3ZiyeLvXUKdphQ5E2RSrGqv5Z/suD3zXe 3xtATpjrWY31iqITfiMd1AUewwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3juhi6 eOtM74e6/ClD5KiL1Hj8MB8GA1UdIwQYMBaAFNcVGPxuVsfE7KnqGLG1Qdiwwsoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ2NS80RjQyMUY1MjNC MEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4VHNxZW9Zc2JWQjJMREN5 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4VVlfRzVXeDhUc3Flb1lzYlZCMkxEQ3lpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ2NS80RjQyMUY1MjNCMEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4 VHNxZW9Zc2JWQjJMREN5aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQJlOwvXemyUtPVxlSaNNEeO5TlWIFcT0AfgmJBEgPJPt9NG/rdAoZ WEn2ml5U9PwcCA1mzdVtHQbhLUC5tXUNHO28Vy+xsVLOU6KID0P3+DembU5t4kfH Az+zZExnyluj4ufM22cCcAdo08lvDmqM3pVfWYciAGGbllwAbFtxhKdeknU46UVT UvFp11m3bkeaw9GYMFuKFxmyZj0Ss7faKD7y0wAA4O9GMi6Kspp/Nf0qZPgAhUkY XN6CG0zvWQGRnYkPC+lSnw0yR/J3Hhq8xrtJeb+6ZhHQF+y7+5iuxRSWLGBt6RU9 c7/DOtL7/VCGJFIJUW1ktV5fvE5ibkzo -----END CERTIFICATE-----Generated at Mon Feb 17 08:04:13 2025 by rpki-client