$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: iNwqbad2AxkAHtVtr2L7Si9eVzn5NfQsUzQ6fTqNWiY= Subject key identifier: CB:81:9A:D3:91:CC:04:01:91:AA:09:EF:74:F3:FE:FA:2C:B4:CC:00 Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: 49 Signing time: Sat 15 Feb 2025 08:37:56 +0000 Manifest this update: Sat 15 Feb 2025 08:37:56 +0000 Manifest next update: Sat 22 Feb 2025 08:37:56 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: TqnYjVdPc+iX5wuzHtYCE/6peiQgl73m7wndWrwcMPY=) 2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: YBs0kfZTY2sABIi/xaIJAg5Ddfxg9MhnEpmdNb3MBps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E Validity Not Before: Feb 15 08:37:56 2025 GMT Not After : Feb 22 08:37:56 2025 GMT Subject: CN=67b05264-7887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:ba:7d:49:a9:bc:44:a2:d2:e2:f9:63:ab: 17:f4:dc:62:73:24:98:85:ca:3f:5c:7b:80:dc:39: 87:cc:45:4f:10:e4:c1:b0:b2:cb:69:03:24:a8:6f: c3:7d:a3:b0:88:09:63:1e:e8:50:0e:34:60:1b:4a: 7e:64:fe:d7:23:3c:e1:87:27:32:65:4f:20:f3:02: 25:e0:b0:2c:d4:8a:e0:8f:3c:bd:aa:f6:e8:90:3b: 4b:18:fd:8b:1c:17:ad:ca:9c:e0:13:6a:98:89:ec: 0a:ce:66:bd:ec:7d:e2:f6:c7:c8:2b:d2:fe:1f:f6: be:b8:87:48:1e:69:ea:05:90:9b:26:7e:88:cd:db: 7c:cf:ca:b8:65:7a:14:36:05:05:10:50:54:7b:fe: 04:9d:6b:79:bf:1d:78:bb:de:6e:94:15:e2:a5:0d: f9:34:59:87:a5:f9:aa:71:11:63:b6:fd:7f:0c:65: c6:4e:1d:ca:b2:d5:f7:9d:e3:8f:0b:c8:cd:c8:25: 40:5f:12:18:3d:5b:bb:80:bf:9e:ff:4a:65:c9:53: 06:e6:56:3b:ed:7f:a3:f5:c8:03:00:ce:a6:98:27: 10:ab:25:47:9a:9e:83:fd:e2:52:af:93:48:1b:59: 97:16:d1:e5:17:68:99:83:de:26:0a:87:1a:5e:ff: a3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:81:9A:D3:91:CC:04:01:91:AA:09:EF:74:F3:FE:FA:2C:B4:CC:00 X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:99:d4:0c:4b:63:11:1b:fc:b2:7d:a8:3d:d9:6e:58:a1:eb: eb:65:50:ec:59:dd:ce:3c:08:63:3d:ce:69:50:66:20:69:c6: b9:46:43:8d:8c:5f:6c:41:79:d7:81:be:eb:5c:16:de:9b:34: 0c:29:fc:4f:26:e4:1e:80:88:6b:7e:00:07:66:6f:a0:6a:85: 5f:e3:ce:54:53:81:d2:c5:e3:90:62:26:38:2f:2a:b1:91:d9: 61:61:a8:8b:9c:57:d4:ac:00:9b:5d:70:15:17:26:12:b0:b7: 10:92:b9:47:8d:04:72:c2:36:aa:e2:04:73:6c:d1:4b:98:c0: f5:d5:62:44:ba:c0:d6:7b:de:f2:8e:3d:ee:df:e6:69:fb:27: e2:e1:47:56:96:4e:cd:38:99:af:34:d7:bc:ad:e5:fc:67:46: 87:85:fb:f7:bd:0c:89:75:6c:6f:1d:18:51:4b:39:48:53:07: d6:d4:5b:a6:c4:27:bc:b9:81:4f:98:a4:b9:64:3f:7b:fe:77: e6:3a:ad:ae:ef:50:43:e5:01:80:c1:d2:9d:2f:1a:01:70:24: d5:32:80:e8:23:8a:f1:c3:b7:a9:51:d3:c4:c4:6d:3c:15:34: dc:e1:b4:e8:8a:4a:21:ba:5c:61:35:00:fd:f1:18:fa:35:18: 87:96:48:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NUQ0RTExMC8GA1UEBRMoRjdDNEY1QzcyOEQwQzA0NzZDNTMyRUFDMThDMjkyN0Mx RDVCODMzQjAeFw0yNTAyMTUwODM3NTZaFw0yNTAyMjIwODM3NTZaMBgxFjAUBgNV BAMTDTY3YjA1MjY0LTc4ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt9rp9Sam8RKLS4vljqxf03GJzJJiFyj9ce4DcOYfMRU8Q5MGwsstpAySob8N9 o7CICWMe6FAONGAbSn5k/tcjPOGHJzJlTyDzAiXgsCzUiuCPPL2q9uiQO0sY/Ysc F63KnOATapiJ7ArOZr3sfeL2x8gr0v4f9r64h0geaeoFkJsmfojN23zPyrhlehQ2 BQUQUFR7/gSda3m/HXi73m6UFeKlDfk0WYel+apxEWO2/X8MZcZOHcqy1fed448L yM3IJUBfEhg9W7uAv57/SmXJUwbmVjvtf6P1yAMAzqaYJxCrJUeanoP94lKvk0gb WZcW0eUXaJmD3iYKhxpe/6NBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy4Ga05HM BAGRqgnvdPP++iy0zAAwHwYDVR0jBBgwFoAU98T1xyjQwEdsUy6sGMKSfB1bgzsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1RDRFLzVCODQ0MjAyN0ZG MjExRUY5MEUxNEY2MEM0RjlBRTAyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOThUMXh5alF3RWRzVXk2c0dNS1NmQjFiZ3pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 RDRFLzVCODQ0MjAyN0ZGMjExRUY5MEUxNEY2MEM0RjlBRTAyLzk4VDF4eWpRd0Vk c1V5NnNHTUtTZkIxYmd6cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKZ1AxLYxEb/LJ9qD3Zblih6+tlUOxZ3c48CGM9zmlQZiBpxrlGQ42M X2xBedeBvutcFt6bNAwp/E8m5B6AiGt+AAdmb6BqhV/jzlRTgdLF45BiJjgvKrGR 2WFhqIucV9SsAJtdcBUXJhKwtxCSuUeNBHLCNqriBHNs0UuYwPXVYkS6wNZ73vKO Pe7f5mn7J+LhR1aWTs04ma8017yt5fxnRoeF+/e9DIl1bG8dGFFLOUhTB9bUW6bE J7y5gU+YpLlkP3v+d+Y6ra7vUEPlAYDB0p0vGgFwJNUygOgjivHDt6lR08TEbTwV NNzhtOiKSiG6XGE1AP3xGPo1GIeWSLo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:04 2025 by rpki-client