$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json) Hash identifier: FtlzkFCwVD5PGQYz+WRlIk/lfYrbvSgMnxeqgnvvGb8= Subject key identifier: B3:C8:FD:33:0E:E7:B8:C3:FC:2C:8C:88:0D:E2:2A:B9:FB:B1:4B:77 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 0360 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft Manifest number: 035A Signing time: Sat 15 Feb 2025 02:33:10 +0000 Manifest this update: Sat 15 Feb 2025 02:33:10 +0000 Manifest next update: Sat 22 Feb 2025 02:33:10 +0000 Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: vXuzLidsdPRJr+3yvZnXLTguDXr9zwviUhxOJtKfa0k=) 2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: Cw84e/VfW9TbWmA54uCuBjCrxoDUPH36P2MA5oHYwqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864 (0x360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1 Validity Not Before: Feb 15 02:33:10 2025 GMT Not After : Feb 22 02:33:10 2025 GMT Subject: CN=67affce6-7f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:01:5d:e8:6b:7e:80:76:3f:8e:eb:8f:1c: 6e:10:2d:45:9e:57:20:4f:bf:79:85:b8:4b:89:aa: 1a:95:1e:97:85:21:0c:e6:b8:36:db:01:45:b5:38: 43:80:97:d6:a6:4e:57:79:f6:9d:e4:68:34:b3:27: 95:f3:e3:7b:e3:d0:01:fb:29:c5:f1:d7:7b:f1:e9: 38:14:76:85:8c:8b:48:95:40:d6:f4:b3:07:5a:49: 8f:21:23:98:11:c9:85:04:b6:40:06:3b:37:eb:b6: a1:54:3f:24:6e:6a:4c:3d:8c:93:cc:79:54:c5:ef: 0a:2e:33:7a:c2:77:60:9c:fd:7e:ba:9a:3c:a1:d4: 52:b2:8e:0a:f1:43:38:44:2e:91:3d:f0:41:0a:67: ad:8b:19:b8:c9:6e:00:fe:2a:20:4c:48:aa:de:7e: a8:e4:8f:7b:a4:7b:6e:f9:9d:c4:9c:e5:b9:0b:f7: b1:31:81:25:27:56:63:06:6d:f8:30:f4:3a:00:de: f4:0e:10:58:4f:2d:ee:e0:49:08:e2:70:13:fa:7b: 83:44:29:56:85:f2:97:3c:7a:75:1e:f8:c7:11:cb: 5b:47:74:6b:12:69:fc:9e:04:19:99:83:97:21:23: 88:85:09:42:72:28:31:15:df:60:87:28:63:20:4c: 05:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C8:FD:33:0E:E7:B8:C3:FC:2C:8C:88:0D:E2:2A:B9:FB:B1:4B:77 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:98:ff:fa:6b:7d:89:bf:86:b1:cb:da:3e:ee:c0:ef:b4:6a: 93:af:e4:0d:cd:a7:84:b0:18:ec:b5:53:0f:c5:96:13:5b:f7: 0d:1b:8c:5f:04:33:3d:d3:7e:56:b7:49:9e:0f:bb:4c:db:8d: 13:ad:93:ce:b2:35:62:93:88:c1:31:1b:d7:1d:10:70:09:b4: 7b:77:e6:f7:a6:88:3d:e0:9c:90:bf:1e:59:10:a8:9f:f1:94: bd:76:32:1d:17:23:3a:70:81:8a:1d:a9:d6:f8:a3:b2:c3:27: 39:a3:44:e7:5f:19:8b:65:55:df:d1:75:78:70:3e:f8:2c:a5: 79:a9:95:a3:98:eb:f4:37:d7:dc:29:1d:9b:30:b8:de:61:48: 03:ad:61:0e:93:97:11:b2:ce:42:47:a7:4d:f7:42:17:cd:49: 67:0e:67:3e:c2:f3:f3:47:82:76:e7:d0:9f:28:0b:37:76:dc: ac:29:d3:6f:8c:46:cd:b2:7e:53:e9:95:a3:97:d4:48:b2:7f: fd:d0:f2:aa:89:48:ca:ed:0c:48:fd:c0:cc:d2:f4:e5:ff:90: f3:7c:2d:60:85:43:bf:b3:08:54:5a:84:b1:e9:20:61:eb:09: fd:bf:10:4d:80:77:84:20:fc:cf:d2:eb:49:c5:ea:26:73:c7: 20:ba:7e:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjUwMjE1MDIzMzEwWhcNMjUwMjIyMDIzMzEwWjAYMRYwFAYD VQQDEw02N2FmZmNlNi03ZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvwBXehrfoB2P47rjxxuEC1FnlcgT795hbhLiaoalR6XhSEM5rg22wFFtThD gJfWpk5Xefad5Gg0syeV8+N749AB+ynF8dd78ek4FHaFjItIlUDW9LMHWkmPISOY EcmFBLZABjs367ahVD8kbmpMPYyTzHlUxe8KLjN6wndgnP1+upo8odRSso4K8UM4 RC6RPfBBCmetixm4yW4A/iogTEiq3n6o5I97pHtu+Z3EnOW5C/exMYElJ1ZjBm34 MPQ6AN70DhBYTy3u4EkI4nAT+nuDRClWhfKXPHp1HvjHEctbR3RrEmn8ngQZmYOX ISOIhQlCcigxFd9ghyhjIEwFewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPI/TMO 57jD/CyMiA3iKrn7sUt3MB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS84NjgzNTUwNkEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlC YjQtQjBZdXRvdl80ZkJYeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOmP/6a32Jv4axy9o+7sDvtGqTr+QNzaeEsBjstVMPxZYTW/cNG4xf BDM9035Wt0meD7tM240TrZPOsjVik4jBMRvXHRBwCbR7d+b3pog94JyQvx5ZEKif 8ZS9djIdFyM6cIGKHanW+KOywyc5o0TnXxmLZVXf0XV4cD74LKV5qZWjmOv0N9fc KR2bMLjeYUgDrWEOk5cRss5CR6dN90IXzUlnDmc+wvPzR4J259CfKAs3dtysKdNv jEbNsn5T6ZWjl9RIsn/90PKqiUjK7QxI/cDM0vTl/5DzfC1ghUO/swhUWoSx6SBh 6wn9vxBNgHeEIPzP0utJxeomc8cgun5+ -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:40 2025 by rpki-client