$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft File: e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json) Hash identifier: owJHhUpoScSBo9IunALuPBuAeRgtwYfhYIDtkF8DVJg= Subject key identifier: 2D:48:2C:AC:A7:52:77:32:C2:77:9F:4E:A0:47:59:61:AD:1C:CD:EC Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft Manifest number: 15 Signing time: Wed 05 Feb 2025 06:28:53 +0000 Manifest this update: Wed 05 Feb 2025 06:28:52 +0000 Manifest next update: Wed 12 Feb 2025 06:28:52 +0000 Files and hashes: 1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: I2mJ/TrDOe62Nr3dEmGFf1dNjU0SK7t+SbvmZYs92tY=) 2: A820DC30D29811EFBEF3795BC4F9AE02.roa (hash: 43KJEtvV4hfXvCmybyTUtWVgtTE0vpH8H17YgxHvO3E=) 3: 6BD3578AD26611EFA344CE41C4F9AE02.roa (hash: dSll1ip+XHFYmq7I1J8Fez/v6/+VDAfP/s7BBVZh5Cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC Validity Not Before: Feb 5 06:28:52 2025 GMT Not After : Feb 12 06:28:52 2025 GMT Subject: CN=67a30525-e291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ee:70:a0:10:fb:db:c3:44:c5:2e:ea:c7:83: c3:ac:6b:60:98:d8:ac:ab:3a:1d:30:5b:12:8f:07: dd:8d:ca:49:b3:d8:d0:07:1a:b6:d9:8e:1b:df:81: ad:9f:68:18:a6:7e:90:1c:e1:59:73:56:7d:7e:80: 53:5f:50:cf:c4:c8:9f:36:5a:49:32:9f:57:c4:5d: dd:dc:c6:8d:b0:11:c1:48:62:61:dd:7f:d7:2e:f1: bc:f3:3a:2f:b5:47:18:0b:4c:2d:d3:b9:15:2b:70: 1e:bd:85:4f:64:04:f6:f9:62:e7:1d:d4:96:48:46: 8e:7b:38:3c:ef:d0:fc:16:fc:04:02:a5:d5:d1:c0: 51:f0:27:1e:29:0e:8e:2a:d7:a6:8f:d1:27:70:94: 43:bd:98:78:59:e0:71:47:b8:44:27:d7:59:9e:09: 42:cb:f0:44:e4:b7:a4:59:b4:b0:9e:61:be:e8:bf: 33:4b:c4:5c:09:6f:ec:fe:ff:50:fc:74:53:9d:fe: 16:23:8e:d1:c2:6f:25:24:c8:4d:17:cd:7f:3d:7f: 88:53:5f:70:30:f8:85:fb:97:9b:aa:dd:b0:85:89: ba:03:d7:5d:89:be:b4:7f:43:4c:57:85:13:9b:bf: cc:6a:b2:87:a5:e1:03:a2:98:3e:2e:82:8b:5e:3e: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:48:2C:AC:A7:52:77:32:C2:77:9F:4E:A0:47:59:61:AD:1C:CD:EC X509v3 Authority Key Identifier: keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2c:5d:b2:b2:04:6e:7b:45:0c:b6:b6:8f:07:7e:9f:73:6a: 10:63:6c:32:e0:47:4b:f5:ca:85:12:b7:a4:de:e5:40:f3:f8: bd:fb:00:a2:62:26:7c:ed:be:58:f8:59:4f:6f:3e:ac:39:e3: d5:04:88:40:38:ac:d4:3b:9f:25:15:5d:4e:39:1a:b7:39:c1: 4c:c4:c2:b1:d7:46:bb:c0:8b:67:2a:59:d1:ad:d1:d1:40:cd: ec:50:30:e3:ef:dd:b2:6c:fe:ba:f5:9e:fa:27:7f:85:c0:07: 58:b6:ee:d3:10:e2:e8:20:27:a1:79:b7:ea:fb:9b:76:d3:41: 96:55:fb:49:57:a6:09:51:ab:c2:7d:be:41:50:3c:6f:5b:0d: 09:61:97:84:99:22:01:2c:b0:0d:4b:2f:c7:80:10:30:39:c9: a1:88:43:36:04:87:bd:00:6d:e7:c2:ed:1e:87:8b:11:f9:10: 97:58:4b:5a:91:03:27:dd:56:e8:48:1b:27:38:e9:83:dc:a7: 2e:8e:0c:75:1f:df:df:8d:63:62:0e:a1:91:d0:31:74:9c:05: 2e:57:55:ca:63:10:1a:ee:0b:01:c2:c4:9e:08:8a:a4:3a:31: f5:51:b6:60:bf:13:46:a7:de:6f:55:ef:f7:f7:b6:e2:35:32: 4f:cc:14:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoN0I2MjYyMEJGRUIzOENFQjY0RDIxMEM5ODA1REMyNDgw NDE1NzA3RDAeFw0yNTAyMDUwNjI4NTJaFw0yNTAyMTIwNjI4NTJaMBgxFjAUBgNV BAMTDTY3YTMwNTI1LWUyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDm7nCgEPvbw0TFLurHg8Osa2CY2KyrOh0wWxKPB92Nykmz2NAHGrbZjhvfga2f aBimfpAc4VlzVn1+gFNfUM/EyJ82Wkkyn1fEXd3cxo2wEcFIYmHdf9cu8bzzOi+1 RxgLTC3TuRUrcB69hU9kBPb5Yucd1JZIRo57ODzv0PwW/AQCpdXRwFHwJx4pDo4q 16aP0SdwlEO9mHhZ4HFHuEQn11meCULL8ETkt6RZtLCeYb7ovzNLxFwJb+z+/1D8 dFOd/hYjjtHCbyUkyE0XzX89f4hTX3Aw+IX7l5uq3bCFiboD112JvrR/Q0xXhROb v8xqsoel4QOimD4ugotePukLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULUgsrKdS dzLCd59OoEdZYa0czewwHwYDVR0jBBgwFoAUe2JiC/6zjOtk0hDJgF3CSAQVcH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0JFMzE4RkIwRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90azBoREpnRjNDU0FRVmNI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZTJKaUNfNnpqT3RrMGhESmdGM0NTQVFWY0gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0JFMzE4RkIwRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL2UySmlDXzZ6ak90 azBoREpnRjNDU0FRVmNIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ4sXbKyBG57RQy2to8Hfp9zahBjbDLgR0v1yoUSt6Te5UDz+L37AKJi Jnztvlj4WU9vPqw549UEiEA4rNQ7nyUVXU45Grc5wUzEwrHXRrvAi2cqWdGt0dFA zexQMOPv3bJs/rr1nvonf4XAB1i27tMQ4uggJ6F5t+r7m3bTQZZV+0lXpglRq8J9 vkFQPG9bDQlhl4SZIgEssA1LL8eAEDA5yaGIQzYEh70AbefC7R6HixH5EJdYS1qR AyfdVuhIGyc46YPcpy6ODHUf39+NY2IOoZHQMXScBS5XVcpjEBruCwHCxJ4IiqQ6 MfVRtmC/E0an3m9V7/f3tuI1Mk/MFJg= -----END CERTIFICATE-----Generated at Wed Feb 5 19:54:58 2025 by rpki-client