$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft File: MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json) Hash identifier: 1QgUGHc9hcXoPRa5tfOxeUOT1QLKBnzhEOD6X284TxA= Subject key identifier: 4F:1A:3A:DD:AF:89:AA:D1:0E:DB:88:A6:1D:8A:23:CE:13:14:D0:DE Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft Manifest number: 7B Signing time: Thu 13 Mar 2025 05:00:47 +0000 Manifest this update: Thu 13 Mar 2025 05:00:46 +0000 Manifest next update: Thu 20 Mar 2025 05:00:46 +0000 Files and hashes: 1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: yDLGTb7QbR7CeNJeYWsl314R277GaeAqpWz6xifqYo0=) 2: 52D80E00FCC411EF8DCF3F31C4F9AE02.roa (hash: TsKzccZlVomVV3THVnPmoFvq3M8RMDhgrBAK7vI/i3s=) 3: DB9E3242C8E811EF86365B2AC4F9AE02.roa (hash: v6pTRro113en+h2WsmtXqk2rxE6NwkgghVA0fGJU70E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64 Validity Not Before: Mar 13 05:00:46 2025 GMT Not After : Mar 20 05:00:46 2025 GMT Subject: CN=67d2667e-e359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:43:bc:7c:39:95:58:4a:5c:a5:d7:45:d1: bd:22:e3:21:a7:74:f5:27:de:7c:b8:e3:42:9b:33: 5b:cc:b7:dd:3f:b1:98:21:ec:43:92:5e:2a:9c:c1: cf:55:ae:c1:4b:e8:d1:55:22:de:3d:57:01:ee:72: 58:4e:d1:ff:88:34:ef:47:cb:7d:72:de:58:79:cb: a6:73:6d:bc:8b:13:04:46:31:8c:90:5e:6b:82:8a: 39:9d:33:1e:a4:ea:8e:47:da:53:f3:8b:ea:86:2d: 53:7c:0d:f1:21:e2:1e:26:90:be:ba:02:dc:33:c1: 11:d6:1d:72:d6:01:e1:41:df:10:fa:78:d1:ad:3f: 9d:64:57:c5:a7:e7:99:1c:07:38:a6:3e:45:fb:bf: 86:9a:ce:28:d7:e2:51:ed:8d:ee:7e:70:bd:59:e7: 7a:30:c3:c9:80:14:4c:4f:6e:43:ab:71:0a:17:11: 16:31:ba:38:3c:8d:fa:94:11:f0:b6:49:0e:48:ac: 03:5c:f4:0b:96:6c:3f:c8:ba:89:2b:7c:24:57:11: 71:c3:de:f0:6e:f0:c8:3a:a2:e6:21:cc:2d:78:b3: 4c:7f:61:7d:85:34:6f:12:69:dc:b2:73:dd:17:ca: d4:36:28:2a:b3:32:a6:89:20:98:fb:48:02:c8:f4: 7b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1A:3A:DD:AF:89:AA:D1:0E:DB:88:A6:1D:8A:23:CE:13:14:D0:DE X509v3 Authority Key Identifier: keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a5:90:5e:1e:96:40:e9:5a:07:92:b3:a7:7a:f7:75:b6:bf: 59:e8:0e:25:94:81:d6:44:3a:94:ae:b1:52:b2:1f:7d:64:6d: c9:4b:42:3b:12:3b:0f:9b:4c:90:94:d5:9f:73:6c:e1:17:50: e4:c0:d7:e7:61:5a:82:c6:39:19:cf:40:c9:0f:28:fd:08:bb: d2:79:f2:c8:f1:09:60:7c:bf:a2:29:bf:87:d9:56:7b:d3:7a: 2f:18:8b:ad:9d:91:47:76:fb:fe:05:99:d5:04:84:d4:0e:4e: 67:59:56:0f:76:3b:e1:0c:25:cb:84:8d:37:d0:ec:85:04:15: 24:a8:41:d8:22:8b:c8:28:a2:06:21:42:5f:4c:1b:fd:96:fd: 0d:08:11:25:7a:86:34:1a:22:50:30:0e:19:cd:86:1d:8f:04: 8b:53:b9:3d:60:6d:73:cc:4f:b3:1a:18:a1:c8:0c:42:1e:79: bc:22:4d:2a:fe:8d:1e:31:5d:7a:dd:15:23:ba:fc:e7:c4:96: 17:9d:26:6a:a7:d6:7c:92:2e:e3:fb:c0:04:a9:b5:2c:95:48: ea:e3:69:b6:8a:4a:d3:70:01:9b:e9:b6:4d:42:8d:24:34:6b: b1:5c:24:8a:0b:b3:83:13:24:57:87:dc:ad:14:25:ac:95:63: 6a:57:42:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKDMyRDM1Mzc0M0M4RkUyRjA4RTk3QjIyRTVCNjA5QUJD MTRDQ0ZFM0IwHhcNMjUwMzEzMDUwMDQ2WhcNMjUwMzIwMDUwMDQ2WjAYMRYwFAYD VQQDEw02N2QyNjY3ZS1lMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUdDvHw5lVhKXKXXRdG9IuMhp3T1J958uONCmzNbzLfdP7GYIexDkl4qnMHP Va7BS+jRVSLePVcB7nJYTtH/iDTvR8t9ct5Yecumc228ixMERjGMkF5rgoo5nTMe pOqOR9pT84vqhi1TfA3xIeIeJpC+ugLcM8ER1h1y1gHhQd8Q+njRrT+dZFfFp+eZ HAc4pj5F+7+Gms4o1+JR7Y3ufnC9Wed6MMPJgBRMT25Dq3EKFxEWMbo4PI36lBHw tkkOSKwDXPQLlmw/yLqJK3wkVxFxw97wbvDIOqLmIcwteLNMf2F9hTRvEmncsnPd F8rUNigqszKmiSCY+0gCyPR7zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8aOt2v iarRDtuIph2KI84TFNDeMB8GA1UdIwQYMBaAFDLTU3Q8j+LwjpeyLltgmrwUzP47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC83N0JGMDE5MjYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2Q09sN0l1VzJDYXZCVE1f anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL010TlRkRHlQNHZDT2w3SXVXMkNhdkJUTV9qcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC83N0JGMDE5MjYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2 Q09sN0l1VzJDYXZCVE1fanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZpZBeHpZA6VoHkrOnevd1tr9Z6A4llIHWRDqUrrFSsh99ZG3JS0I7 EjsPm0yQlNWfc2zhF1DkwNfnYVqCxjkZz0DJDyj9CLvSefLI8QlgfL+iKb+H2VZ7 03ovGIutnZFHdvv+BZnVBITUDk5nWVYPdjvhDCXLhI030OyFBBUkqEHYIovIKKIG IUJfTBv9lv0NCBEleoY0GiJQMA4ZzYYdjwSLU7k9YG1zzE+zGhihyAxCHnm8Ik0q /o0eMV163RUjuvznxJYXnSZqp9Z8ki7j+8AEqbUslUjq42m2ikrTcAGb6bZNQo0k NGuxXCSKC7ODEyRXh9ytFCWslWNqV0LG -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:58 2025 by rpki-client