$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: 4lWGXwk5vK4/s3WjwM615KYLgwP0hm9HOKi481Q85w0= Subject key identifier: 68:9B:C5:62:4E:33:B6:61:3F:29:87:15:E4:FA:45:4A:C4:D6:9E:D9 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 078A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 0770 Signing time: Fri 14 Feb 2025 22:30:58 +0000 Manifest this update: Fri 14 Feb 2025 22:30:57 +0000 Manifest next update: Fri 21 Feb 2025 22:30:57 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: zlW47LPxHmQoqNBeX9RVKEucbf2bOjujaGYnsfllKIc=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=) 5: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=) 6: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1930 (0x78a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18 Validity Not Before: Feb 14 22:30:57 2025 GMT Not After : Feb 21 22:30:57 2025 GMT Subject: CN=67afc421-8f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2e:76:ce:2a:0c:ce:c6:72:a3:92:f3:f5:8b: b0:b9:ce:b2:24:0a:23:ee:82:6c:d8:05:26:4a:0b: 5b:b9:68:71:6b:6a:c4:12:c8:8f:ab:ae:71:2c:1e: 0e:30:1b:d6:ad:0f:41:c0:79:4b:be:c7:6a:b5:35: 76:86:47:24:47:b2:97:ed:0b:3c:8c:bf:a3:7f:d3: ed:94:68:57:2b:5f:ad:c9:88:53:34:c2:88:a5:35: 5d:59:9e:20:73:22:54:a9:5b:ae:16:5d:5d:3d:5d: 88:4f:07:84:9f:12:34:a2:20:9b:60:12:62:38:24: 45:59:2d:2d:de:a2:03:94:08:ff:7f:68:42:e6:07: fb:96:b4:bc:ef:2a:fa:1f:ff:d8:f0:f0:d8:f0:d6: 37:85:81:20:aa:b5:56:ed:c1:cf:0b:a4:82:28:9f: 59:56:c1:0a:76:cc:99:3d:25:de:87:a0:07:03:2e: 3c:71:a0:74:61:a0:3f:f6:6a:e9:17:a7:1a:96:be: e9:86:a2:e5:af:3f:55:9c:e1:c8:f2:ac:67:d7:92: 91:5d:12:80:39:42:46:8a:dc:18:76:ac:14:c8:c8: 90:12:64:cb:45:07:e5:f2:1a:b6:ac:fd:2e:64:1b: b4:35:fb:dd:df:5d:17:ac:53:02:4b:be:2f:1c:19: c7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9B:C5:62:4E:33:B6:61:3F:29:87:15:E4:FA:45:4A:C4:D6:9E:D9 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:d3:8b:5d:fe:6d:a6:fc:30:a2:09:e9:26:e6:0e:49:27:b8: 61:8c:13:d4:56:1b:91:5b:78:fb:dd:73:49:a6:24:ca:ff:ef: 1c:0b:85:ca:25:d2:4e:99:51:29:5c:cc:37:6a:97:a7:e5:8b: 6a:9e:24:52:ff:bb:db:e5:b7:c0:8c:db:45:1d:a8:32:7d:93: 37:d1:fa:38:84:e7:87:26:41:0a:45:6a:5d:41:bd:bc:4f:1e: 07:f6:92:78:ff:59:28:2b:82:8e:af:cd:67:e4:95:18:e4:74: 74:6f:57:b1:0f:1c:2c:cd:c0:cf:fa:6f:00:1e:e0:ed:e7:a5: 4c:ee:51:e5:8d:c6:ad:0e:6d:da:70:e0:10:0f:4f:c8:87:6a: 85:e1:1c:4b:be:8d:b5:68:8c:9a:bc:d4:d3:08:27:31:01:d2: 59:b4:69:b1:78:c3:b9:56:97:55:1c:02:2e:79:c5:0a:dc:32: 9e:29:70:e0:57:81:7e:cb:79:b6:30:96:ee:b6:2e:20:4b:1b: 45:cf:70:18:ef:81:b3:83:11:07:ec:c5:83:08:aa:f3:1b:ff: 43:cb:da:33:d5:6e:71:28:7a:50:7b:1e:42:ad:c4:21:62:ba: de:93:85:18:3d:c7:5c:aa:17:21:39:94:18:8b:28:9b:62:fc: 6a:86:81:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwMjE0MjIzMDU3WhcNMjUwMjIxMjIzMDU3WjAYMRYwFAYD VQQDEw02N2FmYzQyMS04ZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3S52zioMzsZyo5Lz9Yuwuc6yJAoj7oJs2AUmSgtbuWhxa2rEEsiPq65xLB4O MBvWrQ9BwHlLvsdqtTV2hkckR7KX7Qs8jL+jf9PtlGhXK1+tyYhTNMKIpTVdWZ4g cyJUqVuuFl1dPV2ITweEnxI0oiCbYBJiOCRFWS0t3qIDlAj/f2hC5gf7lrS87yr6 H//Y8PDY8NY3hYEgqrVW7cHPC6SCKJ9ZVsEKdsyZPSXeh6AHAy48caB0YaA/9mrp F6calr7phqLlrz9VnOHI8qxn15KRXRKAOUJGitwYdqwUyMiQEmTLRQfl8hq2rP0u ZBu0Nfvd310XrFMCS74vHBnHzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGibxWJO M7ZhPymHFeT6RUrE1p7ZMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA04td/m2m/DCiCekm5g5JJ7hhjBPUVhuRW3j73XNJpiTK/+8cC4XK JdJOmVEpXMw3apen5YtqniRS/7vb5bfAjNtFHagyfZM30fo4hOeHJkEKRWpdQb28 Tx4H9pJ4/1koK4KOr81n5JUY5HR0b1exDxwszcDP+m8AHuDt56VM7lHljcatDm3a cOAQD0/Ih2qF4RxLvo21aIyavNTTCCcxAdJZtGmxeMO5VpdVHAIuecUK3DKeKXDg V4F+y3m2MJbuti4gSxtFz3AY74GzgxEH7MWDCKrzG/9Dy9oz1W5xKHpQex5CrcQh Yrrek4UYPcdcqhchOZQYiyibYvxqhoFK -----END CERTIFICATE-----Generated at Sun Feb 16 20:26:51 2025 by rpki-client