$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: IAWti1Uis/6K/il15lTFUL9amYoohAVFxvL98bmyXvM= Subject key identifier: BB:2F:17:C0:87:E9:6B:BA:66:60:4C:D7:7C:B6:83:D4:AB:9D:57:3F Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: 19 Signing time: Wed 05 Feb 2025 06:21:59 +0000 Manifest this update: Wed 05 Feb 2025 06:21:58 +0000 Manifest next update: Wed 12 Feb 2025 06:21:58 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: 64V19r+TZg98N5ydzWfpMLkehNjQ1S3yLc/UJ/Khgno=) 2: 853312D2C0DD11EFB5F0D24AC4F9AE02.roa (hash: FGrsxVel52tLC2c3tTf2jw58e+atsnyXCQDnNztZqg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909 Validity Not Before: Feb 5 06:21:58 2025 GMT Not After : Feb 12 06:21:58 2025 GMT Subject: CN=67a30387-c099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:1a:71:21:bb:9b:df:44:93:01:b8:e1:5d: 43:7c:9f:9c:cc:d9:66:c8:46:8c:0a:1d:27:5f:e2: 35:88:13:08:2d:1e:71:c3:96:c4:b1:06:e7:d1:9b: bf:36:9b:31:97:95:31:8d:ea:28:2d:12:38:54:c3: f3:8b:ab:d7:8b:03:a1:2d:aa:5c:ee:47:37:22:36: c8:cd:fa:36:cb:a6:82:ba:eb:36:b4:7d:24:c0:bf: 87:15:b0:8c:3f:ad:f2:05:72:e4:be:4a:f8:92:82: b4:bc:9c:74:bc:ea:32:f0:26:e4:ca:f7:6d:8e:6a: 5a:c2:01:f5:f6:9a:1e:d4:1d:80:5c:c2:51:74:b8: 0f:8b:50:ed:20:22:ea:46:e3:a5:13:33:fe:a0:1b: cf:53:32:47:90:bd:23:be:7b:84:cd:42:45:13:b6: a7:d0:58:62:40:16:6a:22:5e:4c:33:21:c0:c5:5e: 2a:6b:83:96:b1:d8:9f:ee:d8:3d:d3:13:ae:34:35: 18:82:4a:29:29:3a:6d:10:90:1d:7a:63:b4:86:8d: 2a:76:48:be:e8:ad:9b:dd:f8:29:fe:48:3e:35:8d: 20:84:48:27:01:6d:cb:f0:c6:e1:f6:4c:2a:24:97: 8b:d1:06:11:b4:c8:70:f3:83:92:74:b5:d4:82:ca: 1f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2F:17:C0:87:E9:6B:BA:66:60:4C:D7:7C:B6:83:D4:AB:9D:57:3F X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ea:1c:c1:53:6f:6c:e6:9d:c6:6f:82:4d:dc:f4:69:fc:9c: 8a:4c:ed:c9:4c:59:a9:02:d6:e3:9d:11:f3:ce:ed:b1:6e:74: 1e:63:9c:89:6d:75:33:da:dd:bf:40:4e:2d:3c:99:6c:fd:62: 23:7b:79:73:d6:96:e5:06:bc:5e:65:80:1d:2c:5b:eb:33:e3: 80:d7:77:45:be:d0:bb:66:1d:9b:ff:32:96:11:83:94:0f:79: f4:6e:08:b7:93:dd:4a:e7:21:a9:9f:91:45:59:b2:91:bb:a2: d1:cb:41:2d:0b:59:44:2b:8a:be:33:31:08:80:67:a1:49:30: 45:29:82:2c:2a:3f:a3:9f:c5:cb:53:12:80:64:99:6e:dd:be: b5:80:69:89:d1:89:e4:66:cc:d6:f1:79:ab:c5:18:d1:c0:68: 91:1c:a0:be:d7:11:c2:e1:ab:6e:82:c2:3f:a4:14:71:d1:71: 68:e5:f3:ee:eb:b8:fd:a6:37:62:ef:88:94:c5:63:35:43:51: 2c:bf:2c:d1:fe:26:ac:2d:2b:f2:11:ca:b7:92:7f:7f:86:28: d3:6f:02:e5:61:33:ca:2b:3f:0c:de:f6:90:d8:f7:2e:b1:fe: f0:58:84:1f:18:80:cb:f9:cb:8d:d3:2e:be:cc:91:6c:10:7c: 9a:f1:ec:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzkwOTExMC8GA1UEBRMoNTlGOUQ0OEREOTE2OTA5NzgzRTMxNzcxRDhBRDdFQ0Iz MERDM0JBMjAeFw0yNTAyMDUwNjIxNThaFw0yNTAyMTIwNjIxNThaMBgxFjAUBgNV BAMTDTY3YTMwMzg3LWMwOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl8RpxIbub30STAbjhXUN8n5zM2WbIRowKHSdf4jWIEwgtHnHDlsSxBufRm782 mzGXlTGN6igtEjhUw/OLq9eLA6EtqlzuRzciNsjN+jbLpoK66za0fSTAv4cVsIw/ rfIFcuS+SviSgrS8nHS86jLwJuTK922OalrCAfX2mh7UHYBcwlF0uA+LUO0gIupG 46UTM/6gG89TMkeQvSO+e4TNQkUTtqfQWGJAFmoiXkwzIcDFXiprg5ax2J/u2D3T E640NRiCSikpOm0QkB16Y7SGjSp2SL7orZvd+Cn+SD41jSCESCcBbcvwxuH2TCok l4vRBhG0yHDzg5J0tdSCyh/DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuy8XwIfp a7pmYEzXfLaD1KudVz8wHwYDVR0jBBgwFoAUWfnUjdkWkJeD4xdx2K1+yzDcO6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDOTA5L0ZGN0M1RkRDQzBE QjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2ZuVWpka1drSmVENHhkeDJLMS15ekRjTzZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD OTA5L0ZGN0M1RkRDQzBEQjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0pl RDR4ZHgySzEteXpEY082SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAELqHMFTb2zmncZvgk3c9Gn8nIpM7clMWakC1uOdEfPO7bFudB5jnIlt dTPa3b9ATi08mWz9YiN7eXPWluUGvF5lgB0sW+sz44DXd0W+0LtmHZv/MpYRg5QP efRuCLeT3UrnIamfkUVZspG7otHLQS0LWUQrir4zMQiAZ6FJMEUpgiwqP6OfxctT EoBkmW7dvrWAaYnRieRmzNbxeavFGNHAaJEcoL7XEcLhq26Cwj+kFHHRcWjl8+7r uP2mN2LviJTFYzVDUSy/LNH+JqwtK/IRyreSf3+GKNNvAuVhM8orPwze9pDY9y6x /vBYhB8YgMv5y43TLr7MkWwQfJrx7KQ= -----END CERTIFICATE-----Generated at Wed Feb 5 20:07:19 2025 by rpki-client