$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: 7BHSN55Y7+A9u/5V7m+rEhrmmqSPe++pziE/4ZErLcc= Subject key identifier: FF:19:2C:B3:01:5E:20:9C:11:91:4E:6A:7D:12:09:EB:A3:B0:C3:29 Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: 25 Signing time: Wed 05 Feb 2025 06:17:21 +0000 Manifest this update: Wed 05 Feb 2025 06:17:20 +0000 Manifest next update: Wed 12 Feb 2025 06:17:20 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: HnxTgS5qY3a77iO15aJWmwCQyC5g2HmB4zsX+ufB1QE=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958 Validity Not Before: Feb 5 06:17:20 2025 GMT Not After : Feb 12 06:17:20 2025 GMT Subject: CN=67a30271-90cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:ff:7f:99:f7:05:d1:7b:3b:16:9a:d5:8f: 32:ee:9c:22:d3:ec:63:1f:aa:83:bd:6d:16:c7:6e: 5d:cb:7e:b2:5d:08:b0:8f:29:2b:fb:26:99:96:3e: ec:ef:79:94:1c:6c:be:95:2e:5b:9b:ab:55:d4:35: 82:6c:f8:ff:be:29:01:92:9d:d6:9f:62:e7:ca:f9: bc:21:fa:53:8b:66:20:6b:19:b5:3a:87:6b:0c:b8: dc:9b:1d:8e:5d:69:af:5c:2e:e4:fc:e0:cd:56:c6: e6:ba:68:f9:97:32:b5:86:cf:37:a5:8f:73:ac:be: 30:2b:b9:9c:8e:35:a1:72:2f:90:a9:dd:d9:6d:55: 57:f2:aa:f1:b7:9e:18:02:14:00:77:0b:23:34:f5: 64:e3:aa:79:a4:9d:6d:d2:26:f9:3c:95:80:ab:d0: 7f:c3:f0:32:04:59:b2:9d:fa:a0:0d:2f:fd:cc:f7: 5e:32:8b:b3:e2:3b:20:69:46:d9:e0:fc:02:5a:0b: 2e:b6:ed:35:60:4a:5f:e1:e2:ca:40:12:4f:39:ed: 2c:65:86:35:3a:d9:ee:5e:78:ec:97:04:bc:9f:58: f3:e6:ee:6a:18:af:07:f4:66:6d:84:8c:e5:bb:c3: 7b:48:9e:6b:fe:0e:9f:93:56:7d:78:25:3d:c4:8f: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:19:2C:B3:01:5E:20:9C:11:91:4E:6A:7D:12:09:EB:A3:B0:C3:29 X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:8e:57:9a:88:cb:f5:e6:0b:de:54:50:2e:dd:ae:cc:18:0d: 5a:a0:86:6c:70:68:dd:36:6e:c1:e9:53:ea:94:3e:6c:da:59: ab:6a:7a:88:74:ca:8b:d6:9c:a6:51:40:00:72:e7:01:54:f1: ac:72:cf:f4:2c:c8:70:26:a2:e8:6a:c1:5b:fb:30:6b:14:c4: 67:a9:11:07:2e:0d:d5:c8:e0:be:cd:84:e6:f0:0f:0a:ec:09: e6:f2:f2:41:60:7f:2c:1e:23:1b:71:f0:0d:46:b8:6c:bc:c0: 9b:fc:c9:f4:6d:45:f6:65:2a:8f:88:51:cf:fb:37:ac:c8:a5: 07:44:13:1f:8e:ad:48:2f:15:5f:6a:f7:d7:61:dd:f9:5a:65: b9:a3:70:d7:ca:01:9f:1a:39:2a:bd:d0:58:38:6a:9b:c4:74: b0:40:2c:bd:60:ce:b1:b0:bf:51:5d:88:32:07:8a:b9:6a:ba: a2:42:fb:4b:45:21:09:90:40:69:ef:59:ea:fe:65:18:2c:a5: b9:6f:32:6d:b0:0e:ad:9a:59:bf:18:3d:45:65:e1:62:e0:a4: 01:a8:32:2b:2b:de:80:6a:0e:8b:8d:ab:82:fc:ff:72:e5:12: 29:93:9f:0a:6c:3b:d2:9f:7f:fd:fa:62:7d:cd:38:4d:c8:a3: c0:db:3b:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDk1ODExMC8GA1UEBRMoOUY0OTA2QzBENENDOTY0NUQ5QkZEOTMzNjRBMjNBNUEz M0VGNThEQjAeFw0yNTAyMDUwNjE3MjBaFw0yNTAyMTIwNjE3MjBaMBgxFjAUBgNV BAMTDTY3YTMwMjcxLTkwY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMvf9/mfcF0Xs7FprVjzLunCLT7GMfqoO9bRbHbl3LfrJdCLCPKSv7JpmWPuzv eZQcbL6VLlubq1XUNYJs+P++KQGSndafYufK+bwh+lOLZiBrGbU6h2sMuNybHY5d aa9cLuT84M1Wxua6aPmXMrWGzzelj3OsvjAruZyONaFyL5Cp3dltVVfyqvG3nhgC FAB3CyM09WTjqnmknW3SJvk8lYCr0H/D8DIEWbKd+qANL/3M914yi7PiOyBpRtng /AJaCy627TVgSl/h4spAEk857SxlhjU62e5eeOyXBLyfWPPm7moYrwf0Zm2EjOW7 w3tInmv+Dp+TVn14JT3Ejz51AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/xksswFe IJwRkU5qfRIJ66OwwykwHwYDVR0jBBgwFoAUn0kGwNTMlkXZv9kzZKI6WjPvWNsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEOTU4LzY3MkRCMDQ4QjM5 QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbjBrR3dOVE1sa1hadjlrelpLSTZXalB2V05zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE OTU4LzY3MkRCMDQ4QjM5QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtY WnY5a3paS0k2V2pQdldOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGeOV5qIy/XmC95UUC7drswYDVqghmxwaN02bsHpU+qUPmzaWatqeoh0 yovWnKZRQABy5wFU8axyz/QsyHAmouhqwVv7MGsUxGepEQcuDdXI4L7NhObwDwrs Ceby8kFgfyweIxtx8A1GuGy8wJv8yfRtRfZlKo+IUc/7N6zIpQdEEx+OrUgvFV9q 99dh3flaZbmjcNfKAZ8aOSq90Fg4apvEdLBALL1gzrGwv1FdiDIHirlquqJC+0tF IQmQQGnvWer+ZRgspblvMm2wDq2aWb8YPUVl4WLgpAGoMisr3oBqDouNq4L8/3Ll EimTnwpsO9Kff/36Yn3NOE3Io8DbO2Y= -----END CERTIFICATE-----Generated at Wed Feb 5 20:12:56 2025 by rpki-client