$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft File: Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json) Hash identifier: HUwuQk9YoGtq4Rq9b3mecJiG0rrR6thg9wpwZt+IF5s= Subject key identifier: ED:F8:43:0A:C6:14:AA:A7:1C:BA:B9:F6:B1:7A:3F:E9:31:0F:3D:25 Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft Manifest number: 0F Signing time: Wed 05 Feb 2025 06:30:21 +0000 Manifest this update: Wed 05 Feb 2025 06:30:21 +0000 Manifest next update: Wed 12 Feb 2025 06:30:21 +0000 Files and hashes: 1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: 7bZilXF3OHYGvsquBfdFX3FcXURggAPWs01Y6cpX3GU=) 2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: H+Re+gqiRgpMCNcLPAgkDV7non7PY7SZMMWDfs8kqJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8 Validity Not Before: Feb 5 06:30:21 2025 GMT Not After : Feb 12 06:30:21 2025 GMT Subject: CN=67a3057d-d264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:dd:5a:66:cf:35:67:de:05:97:b1:4f:dc: e3:0a:07:e2:10:b1:ec:81:7a:d4:23:a8:ee:7f:1f: 07:c7:0c:c6:79:21:94:18:77:30:3b:e5:bf:4d:6c: 04:6a:5f:07:ed:8a:0d:43:89:8d:36:ed:bf:fb:52: 09:27:e3:50:21:c4:d0:94:e9:df:df:33:e1:d5:c9: 11:86:bd:ae:da:9b:0b:7b:e9:0b:72:e2:be:0b:38: d2:6f:28:90:52:2c:23:a0:48:c6:02:c8:80:53:08: a7:02:9b:c6:12:4d:82:5c:03:2a:b8:f8:f8:0a:37: be:aa:54:36:f2:b5:6f:04:a8:07:7d:65:fe:c2:a5: 64:2e:e0:be:94:57:ab:bb:55:fa:39:82:99:28:c0: b4:db:e1:01:40:46:39:bf:c8:9c:97:dd:fa:2f:3e: 66:c4:ec:73:72:29:35:af:93:3a:5e:bd:be:b3:93: 3a:bc:8f:45:01:8a:6f:bd:4a:e9:5a:8d:a8:b0:64: 39:e0:cf:f4:c0:38:de:7a:27:0c:6a:94:98:02:88: 1e:83:e9:a5:50:59:ff:52:07:88:7f:b8:9b:90:ed: b2:6a:0e:76:9e:b6:02:be:4e:26:04:25:78:7e:86: 94:7c:9d:0e:a5:a3:d4:bd:94:17:2e:84:a8:ea:11: 95:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F8:43:0A:C6:14:AA:A7:1C:BA:B9:F6:B1:7A:3F:E9:31:0F:3D:25 X509v3 Authority Key Identifier: keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:02:cb:f9:75:e2:be:30:85:96:33:95:0e:12:49:5d:22:fb: 59:eb:f3:e2:4e:c0:37:86:a5:34:23:a4:fc:61:b5:b2:66:3c: 5d:58:70:97:4c:9a:b8:f0:3c:56:e2:7f:08:c6:45:6d:06:eb: 03:7a:c4:bb:7d:cb:a8:ea:c5:5e:67:8b:da:b8:77:a0:11:ce: ca:43:f1:91:c4:2e:7e:68:05:cb:11:0f:fd:38:34:89:10:5d: ef:ad:3d:a7:1c:72:75:47:cc:53:6f:10:b8:55:65:e9:93:68: 60:dc:31:22:0e:7e:de:09:25:a2:86:84:bb:16:7b:c3:ec:d7: 56:6c:e9:d8:87:74:69:ec:65:ca:2a:dc:06:a2:3c:bc:59:cf: 9f:06:78:0b:03:e9:42:b9:c9:7f:bd:7c:c9:a5:1f:d7:15:a9: 1e:d1:b5:68:a5:3b:51:6f:77:91:e5:12:05:71:43:67:27:8c: dc:d5:0b:40:06:a2:d4:c5:6c:08:0b:e8:1f:bc:89:09:b2:ae: 19:9c:b1:20:91:84:25:7c:a2:d8:f1:13:28:23:14:58:de:88: f1:bb:9a:15:63:ad:f2:00:7e:e6:26:7f:ca:88:27:f2:e3:d9: 4a:e1:15:d9:30:01:85:42:5c:9b:ee:0d:a5:be:5f:78:ca:93: 11:ca:99:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEFCODExMC8GA1UEBRMoMUE2RUI3NUIyQjQ3MTM2MEVENUE5MjVDMzUxQ0M0MEMx OTQxNjgyNzAeFw0yNTAyMDUwNjMwMjFaFw0yNTAyMTIwNjMwMjFaMBgxFjAUBgNV BAMTDTY3YTMwNTdkLWQyNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeA91aZs81Z94Fl7FP3OMKB+IQseyBetQjqO5/HwfHDMZ5IZQYdzA75b9NbARq Xwftig1DiY027b/7Ugkn41AhxNCU6d/fM+HVyRGGva7amwt76Qty4r4LONJvKJBS LCOgSMYCyIBTCKcCm8YSTYJcAyq4+PgKN76qVDbytW8EqAd9Zf7CpWQu4L6UV6u7 Vfo5gpkowLTb4QFARjm/yJyX3fovPmbE7HNyKTWvkzpevb6zkzq8j0UBim+9Sula jaiwZDngz/TAON56JwxqlJgCiB6D6aVQWf9SB4h/uJuQ7bJqDnaetgK+TiYEJXh+ hpR8nQ6lo9S9lBcuhKjqEZXpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7fhDCsYU qqccurn2sXo/6TEPPSUwHwYDVR0jBBgwFoAUGm63WytHE2DtWpJcNRzEDBlBaCcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0QUI4LzMzMDk2RUM4RDFC MDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJEdFdwSmNOUnpFREJsQmFD Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR202M1d5dEhFMkR0V3BKY05SekVEQmxCYUNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 QUI4LzMzMDk2RUM4RDFCMDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJE dFdwSmNOUnpFREJsQmFDYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANYCy/l14r4whZYzlQ4SSV0i+1nr8+JOwDeGpTQjpPxhtbJmPF1YcJdM mrjwPFbifwjGRW0G6wN6xLt9y6jqxV5ni9q4d6ARzspD8ZHELn5oBcsRD/04NIkQ Xe+tPacccnVHzFNvELhVZemTaGDcMSIOft4JJaKGhLsWe8Ps11Zs6diHdGnsZcoq 3AaiPLxZz58GeAsD6UK5yX+9fMmlH9cVqR7RtWilO1Fvd5HlEgVxQ2cnjNzVC0AG otTFbAgL6B+8iQmyrhmcsSCRhCV8otjxEygjFFjeiPG7mhVjrfIAfuYmf8qIJ/Lj 2UrhFdkwAYVCXJvuDaW+X3jKkxHKmVM= -----END CERTIFICATE-----Generated at Wed Feb 5 18:57:48 2025 by rpki-client