$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft File: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft (raw, json) Hash identifier: pAMb2OXR9q4gA3JkWJHBt1vBazJvQA7k843pERtq5E4= Subject key identifier: F4:7E:A0:DF:3C:7E:F0:26:5D:DD:FD:61:3A:45:AA:F1:A1:AF:53:17 Authority key identifier: 52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 Certificate issuer: /CN=A91774FB/serialNumber=5296BC801402C73909F591E19095F22465414324 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft Manifest number: 79 Signing time: Sat 15 Feb 2025 07:54:18 +0000 Manifest this update: Sat 15 Feb 2025 07:54:18 +0000 Manifest next update: Sat 22 Feb 2025 07:54:18 +0000 Files and hashes: 1: Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl (hash: +FVeFbbBF5b/CA2E+xvGcUAYnfHdnvVizx/ivJwJYqM=) 2: 24142938343C11EFA0165876C4F9AE02.roa (hash: IdxIHC09tqUl/qL5Re/ky1cTF3HFezxRLbNar6MjEZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB Validity Not Before: Feb 15 07:54:18 2025 GMT Not After : Feb 22 07:54:18 2025 GMT Subject: CN=67b0482a-ea40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:76:78:19:ea:5c:6c:f7:ae:d5:42:8f:e9: 2c:d6:62:9b:57:05:22:cb:cc:f5:03:3d:c0:a9:13: f9:a1:2e:79:9d:1b:97:33:55:15:b1:1a:66:6f:93: b7:41:e0:f9:09:11:57:b3:a1:f3:23:d2:47:26:41: 04:18:d4:ba:e1:78:57:7f:30:51:88:3f:b1:f6:ee: 33:9b:7e:e7:67:0c:4a:00:b9:da:0d:b6:c9:54:06: b2:38:a2:3c:ae:93:81:2c:6f:9d:d1:71:62:34:8d: 8c:73:36:0d:0c:fa:d8:7a:f0:bf:dd:a7:8a:ec:2f: d3:fe:2f:64:c9:3b:92:e3:87:03:ec:db:5c:31:72: 96:48:58:a4:24:1e:5d:05:92:1a:35:14:72:29:4c: 55:db:6c:b2:a8:71:49:e4:ba:30:3c:5e:d3:be:bd: 4e:5d:7f:c5:98:87:de:84:6e:7a:a3:22:9a:96:0a: ed:fd:69:95:da:a7:5f:41:99:7c:64:49:d9:fc:b1: 54:6a:84:fd:c5:07:c5:1e:01:46:51:9e:38:91:42: 02:2e:94:c8:52:b7:58:76:4b:9b:41:fa:70:5b:3a: aa:4b:29:ff:59:c8:ec:9e:e9:67:21:ad:46:4d:25: fa:db:00:7d:63:d4:b1:70:ec:b2:7d:21:71:1f:16: 7f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7E:A0:DF:3C:7E:F0:26:5D:DD:FD:61:3A:45:AA:F1:A1:AF:53:17 X509v3 Authority Key Identifier: keyid:52:96:BC:80:14:02:C7:39:09:F5:91:E1:90:95:F2:24:65:41:43:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/7897F816343911EF9C3D213EC4F9AE02/Upa8gBQCxzkJ9ZHhkJXyJGVBQyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f0:ab:5c:2e:c2:49:24:06:90:b5:f7:4a:fc:68:cb:5d:92: 92:14:af:3f:aa:a0:69:3b:86:73:8a:b5:bf:74:bc:9d:8f:35: 65:77:72:49:27:1c:57:58:ef:73:a5:af:3f:36:61:96:c8:36: 24:6e:bb:68:fa:35:a3:63:14:01:4d:1c:59:2c:cd:83:7c:08: d6:7a:7c:0e:5d:38:f5:95:57:07:d4:24:ae:21:7b:31:e8:f0: aa:12:e3:8c:22:dd:91:98:99:d8:e0:fb:90:a4:71:bb:87:d1: 57:ef:11:de:46:12:18:e5:37:81:79:d8:0d:6d:70:59:10:57: 76:57:14:fd:ef:be:33:eb:89:c2:fa:cc:08:88:e7:c4:b4:da: 9e:67:f7:21:2c:10:d0:e6:fd:a6:d2:ac:b3:9e:4e:fe:bd:97: 2e:71:b1:38:0d:c9:ae:db:2a:1b:72:16:0e:4e:91:50:9b:5a: 38:f2:9c:dd:22:86:d3:79:40:48:13:1d:26:62:6a:03:0c:1c: 9b:48:92:8b:b7:fb:d7:f3:60:dd:f7:5b:35:e5:63:8a:0e:72: ae:15:c8:da:0b:e9:c0:a0:0a:a3:b1:f9:b2:16:3d:d3:2e:ea: ce:1f:99:ed:9a:f9:1d:3f:32:fb:87:53:18:46:c6:cc:b8:a2: f3:d2:fb:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NzRGQjExMC8GA1UEBRMoNTI5NkJDODAxNDAyQzczOTA5RjU5MUUxOTA5NUYyMjQ2 NTQxNDMyNDAeFw0yNTAyMTUwNzU0MThaFw0yNTAyMjIwNzU0MThaMBgxFjAUBgNV BAMTDTY3YjA0ODJhLWVhNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWK3Z4GepcbPeu1UKP6SzWYptXBSLLzPUDPcCpE/mhLnmdG5czVRWxGmZvk7dB 4PkJEVezofMj0kcmQQQY1LrheFd/MFGIP7H27jObfudnDEoAudoNtslUBrI4ojyu k4Esb53RcWI0jYxzNg0M+th68L/dp4rsL9P+L2TJO5LjhwPs21wxcpZIWKQkHl0F kho1FHIpTFXbbLKocUnkujA8XtO+vU5df8WYh96EbnqjIpqWCu39aZXap19BmXxk Sdn8sVRqhP3FB8UeAUZRnjiRQgIulMhSt1h2S5tB+nBbOqpLKf9ZyOye6WchrUZN JfrbAH1j1LFw7LJ9IXEfFn+dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9H6g3zx+ 8CZd3f1hOkWq8aGvUxcwHwYDVR0jBBgwFoAUUpa8gBQCxzkJ9ZHhkJXyJGVBQyQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3NEZCLzc4OTdGODE2MzQz OTExRUY5QzNEMjEzRUM0RjlBRTAyL1VwYThnQlFDeHprSjlaSGhrSlh5SkdWQlF5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVXBhOGdCUUN4emtKOVpIaGtKWHlKR1ZCUXlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 NEZCLzc4OTdGODE2MzQzOTExRUY5QzNEMjEzRUM0RjlBRTAyL1VwYThnQlFDeHpr SjlaSGhrSlh5SkdWQlF5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACPwq1wuwkkkBpC190r8aMtdkpIUrz+qoGk7hnOKtb90vJ2PNWV3ckkn HFdY73Olrz82YZbINiRuu2j6NaNjFAFNHFkszYN8CNZ6fA5dOPWVVwfUJK4hezHo 8KoS44wi3ZGYmdjg+5CkcbuH0VfvEd5GEhjlN4F52A1tcFkQV3ZXFP3vvjPricL6 zAiI58S02p5n9yEsENDm/abSrLOeTv69ly5xsTgNya7bKhtyFg5OkVCbWjjynN0i htN5QEgTHSZiagMMHJtIkou3+9fzYN33WzXlY4oOcq4VyNoL6cCgCqOx+bIWPdMu 6s4fme2a+R0/MvuHUxhGxsy4ovPS+yI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:39 2025 by rpki-client