$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft File: 0XRFPpVj66_LuzKsxs-Gb72OIvA.mft (raw, json) Hash identifier: FnwncMzK1LCJv/NLsZonVCqmOJGdLaI1LjnGvs2Vobs= Subject key identifier: DC:94:8D:9D:49:59:0B:13:4F:01:96:AD:5D:BD:3E:CD:67:D7:32:16 Authority key identifier: D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 Certificate issuer: /CN=A9187325/serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft Manifest number: 27 Signing time: Wed 05 Feb 2025 06:12:02 +0000 Manifest this update: Wed 05 Feb 2025 06:12:01 +0000 Manifest next update: Wed 12 Feb 2025 06:12:01 +0000 Files and hashes: 1: 0XRFPpVj66_LuzKsxs-Gb72OIvA.crl (hash: QdxM/Iu69PXApZE7ZUMwWwmy+suEV7NZLWv8pGt+iD8=) 2: D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa (hash: zhUDBt2wZDhknIJUCNitYM8EJRnUn0t65SOwAtO1PEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187325 Validity Not Before: Feb 5 06:12:01 2025 GMT Not After : Feb 12 06:12:01 2025 GMT Subject: CN=67a30132-dead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:77:03:6f:e2:13:ec:83:e8:da:87:9c:54: 96:68:09:b9:0f:3a:65:b3:ae:52:e6:af:7a:ab:6e: 04:9b:e2:b1:96:42:23:02:4b:4c:34:b6:99:b2:2b: fb:31:8d:a4:72:c7:55:9c:a0:c1:06:23:c9:f5:50: 27:7f:b7:b7:a7:20:14:99:2c:1c:d3:ab:c7:77:6a: 17:8d:f7:58:4e:6a:55:67:f7:b9:c9:19:ba:35:d9: 67:73:71:0d:2c:c7:2e:9b:b1:21:c8:f5:fb:4e:11: 89:b7:e5:eb:9d:57:d6:59:77:0b:be:4d:9a:e9:2a: 50:fb:96:e8:29:4b:f8:0b:a5:bf:02:80:67:dc:d1: 24:ef:41:ed:21:7c:de:99:f8:86:82:12:f3:dc:ff: fe:80:b3:f4:2f:96:84:2b:f2:01:3e:5e:d6:f4:20: 1e:69:7c:8b:ef:a1:a6:95:59:8d:2e:d7:ae:d0:a5: 79:2e:8b:24:6b:9b:89:14:52:ec:bf:b8:6f:a8:d2: 8c:c3:b5:c6:6b:1b:ba:a3:ff:55:68:68:a4:82:ad: ea:4d:f9:d5:9e:0a:6e:42:76:83:27:69:1c:3a:aa: 32:1a:58:a8:62:8e:96:ad:e2:a1:65:20:9e:c6:83: 55:bc:49:af:96:5c:9c:7b:22:ba:25:33:60:ce:92: 2a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:94:8D:9D:49:59:0B:13:4F:01:96:AD:5D:BD:3E:CD:67:D7:32:16 X509v3 Authority Key Identifier: keyid:D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:15:62:18:c1:35:23:e8:2f:0f:0a:0e:ee:88:62:e7:7f:f0: f7:bc:15:39:04:02:77:1c:f8:9a:9e:5b:12:03:2b:d1:72:3d: e5:38:fd:a6:ee:5b:81:17:ae:95:19:1a:7b:08:30:16:22:41: 81:2a:b6:57:e1:92:23:b3:ff:5b:f5:dd:43:46:78:83:a0:ab: 20:69:78:15:dd:ec:9d:4e:b4:21:82:a3:8a:0a:13:3a:e8:05: 43:18:b9:c9:14:da:46:a8:8c:61:d4:6d:f2:24:30:d9:40:90: 28:0f:55:d6:dc:a2:4b:fb:bc:88:7a:d8:75:63:10:14:d5:64: 85:aa:65:8a:ec:00:6e:73:ae:91:ea:e9:cc:86:23:bc:83:38: e1:d4:79:ed:6e:a2:eb:ad:50:5a:0d:98:f2:04:f6:65:cf:28: 01:53:b7:62:94:ed:c6:e9:a7:69:c9:2c:50:b0:75:6e:ca:d7: 16:5a:c9:45:17:a7:75:7f:d3:5d:3a:8d:80:ae:cb:37:fe:98: 6d:71:1b:3d:84:e5:56:24:d8:2c:99:41:13:4e:1f:77:a7:90: 1b:f5:01:12:e7:72:2e:19:9f:fb:e0:a9:ab:47:e6:b7:51:22: fe:2e:c3:11:e5:77:22:54:3f:79:0b:48:ce:dc:0d:5e:b3:c6: b5:8e:85:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzMyNTExMC8GA1UEBRMoRDE3NDQ1M0U5NTYzRUJBRkNCQkIzMkFDQzZDRjg2NkZC RDhFMjJGMDAeFw0yNTAyMDUwNjEyMDFaFw0yNTAyMTIwNjEyMDFaMBgxFjAUBgNV BAMTDTY3YTMwMTMyLWRlYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxoncDb+IT7IPo2oecVJZoCbkPOmWzrlLmr3qrbgSb4rGWQiMCS0w0tpmyK/sx jaRyx1WcoMEGI8n1UCd/t7enIBSZLBzTq8d3aheN91hOalVn97nJGbo12WdzcQ0s xy6bsSHI9ftOEYm35eudV9ZZdwu+TZrpKlD7lugpS/gLpb8CgGfc0STvQe0hfN6Z +IaCEvPc//6As/QvloQr8gE+Xtb0IB5pfIvvoaaVWY0u167QpXkuiyRrm4kUUuy/ uG+o0ozDtcZrG7qj/1VoaKSCrepN+dWeCm5CdoMnaRw6qjIaWKhijpat4qFlIJ7G g1W8Sa+WXJx7IrolM2DOkirzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3JSNnUlZ CxNPAZatXb0+zWfXMhYwHwYDVR0jBBgwFoAU0XRFPpVj66/LuzKsxs+Gb72OIvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3MzI1LzdCMzM0QTRBQUFF OTExRUZCNzIxQzI1REM0RjlBRTAyLzBYUkZQcFZqNjZfTHV6S3N4cy1HYjcyT0l2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMFhSRlBwVmo2Nl9MdXpLc3hzLUdiNzJPSXZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 MzI1LzdCMzM0QTRBQUFFOTExRUZCNzIxQzI1REM0RjlBRTAyLzBYUkZQcFZqNjZf THV6S3N4cy1HYjcyT0l2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANsVYhjBNSPoLw8KDu6IYud/8Pe8FTkEAncc+JqeWxIDK9FyPeU4/abu W4EXrpUZGnsIMBYiQYEqtlfhkiOz/1v13UNGeIOgqyBpeBXd7J1OtCGCo4oKEzro BUMYuckU2kaojGHUbfIkMNlAkCgPVdbcokv7vIh62HVjEBTVZIWqZYrsAG5zrpHq 6cyGI7yDOOHUee1uouutUFoNmPIE9mXPKAFTt2KU7cbpp2nJLFCwdW7K1xZayUUX p3V/0106jYCuyzf+mG1xGz2E5VYk2CyZQRNOH3enkBv1ARLnci4Zn/vgqatH5rdR Iv4uwxHldyJUP3kLSM7cDV6zxrWOhdE= -----END CERTIFICATE-----Generated at Wed Feb 5 20:03:54 2025 by rpki-client