$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: M75CC2bAK0dk2YHX0dQCsFJ7quD8rez0xG4PqKjBFRI= Subject key identifier: 7A:3F:11:92:3E:8D:CF:1E:2E:12:43:DF:89:97:B5:45:9B:31:3A:C5 Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: BD Signing time: Sat 15 Feb 2025 05:08:19 +0000 Manifest this update: Sat 15 Feb 2025 05:08:18 +0000 Manifest next update: Sat 22 Feb 2025 05:08:18 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: +uHyVpgy4A8IjLd7ctL0flXbk8+ooKDrHH4JGXaEnBE=) 2: 21212316C5FF11EF8E8D5A6AC4F9AE02.roa (hash: DxgiZd6nbMHN4rkZj8tOgLIGMrVl7gt/knulj2GC6BU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC Validity Not Before: Feb 15 05:08:18 2025 GMT Not After : Feb 22 05:08:18 2025 GMT Subject: CN=67b02142-be7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:89:cb:17:df:38:64:17:43:e4:2b:f6:72: 46:3f:77:f1:07:5c:b5:88:eb:11:26:ef:8a:87:8e: f3:5b:97:a1:2b:68:a3:9c:ae:69:d3:4a:69:67:63: c7:e9:92:95:bf:6c:21:78:29:fd:bc:81:fe:6f:56: ca:ec:bb:08:95:6a:3f:2e:c3:aa:83:27:c0:e8:81: cc:c2:a9:2b:b3:5b:70:b8:09:da:8e:f0:38:dd:31: 54:fd:41:ab:b5:de:eb:e8:1b:80:fa:11:6d:50:f5: a9:5e:4c:3a:02:2c:72:33:42:c0:49:93:d3:68:a0: f1:1d:d2:da:e6:31:73:15:5f:ce:3c:90:ac:50:43: b2:93:af:5a:5b:20:cb:6c:3f:4f:b3:1f:ad:a5:66: de:d6:11:db:1c:5d:ca:af:71:65:12:3e:2d:cc:f0: 79:64:2f:13:3a:b9:e9:cd:90:c8:5b:fe:fd:cb:69: 0a:18:8e:bd:cf:84:49:a0:b0:7b:e5:bb:e8:5b:f0: 93:18:15:a0:1a:51:7d:83:dd:b2:56:62:f6:35:3e: bc:eb:e7:eb:8f:37:dc:00:59:10:cc:74:ef:c2:dd: a6:be:57:de:84:1c:04:46:dc:78:b5:4b:d0:fb:7b: ad:4a:2d:e7:8d:a5:2e:33:be:13:bc:a9:39:bf:8d: cd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3F:11:92:3E:8D:CF:1E:2E:12:43:DF:89:97:B5:45:9B:31:3A:C5 X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:e3:3e:98:6b:8b:af:ba:cb:d4:8f:12:25:2f:a0:be:64:f1: 2c:47:e3:f5:ea:9a:9c:5c:54:38:61:da:83:12:31:4c:96:a4: 25:4e:19:1e:25:2f:17:8e:8e:f0:7c:17:a8:42:c7:9c:9c:26: 78:93:31:3a:89:e9:77:b2:47:49:63:77:97:d1:6d:83:82:dc: f2:0a:1b:e3:92:c4:26:c2:fd:77:de:86:e4:bb:1c:6d:3f:3d: 08:f0:61:99:60:3d:c4:68:71:40:ad:0c:8a:54:f8:88:0c:92: 30:0a:dd:85:9b:e8:67:55:e0:84:af:c3:15:ef:9f:40:bc:90: 41:b8:e9:da:17:60:f1:3a:8a:b9:02:30:60:64:b9:df:05:0a: fd:e4:56:62:6c:c9:bc:b0:88:09:be:87:b1:23:37:2a:6a:fc: 1f:6f:9d:88:eb:87:a8:87:f0:5f:bd:c3:a9:61:6c:3d:7b:45: b9:8c:9d:f8:e5:18:5c:36:12:cc:99:1a:6a:3a:fe:58:05:2c: 30:1a:de:c5:6a:df:b4:b6:45:4c:35:cc:74:e1:3c:9b:9d:1d: bd:5c:61:91:e8:35:bd:29:43:2f:a0:07:3a:5a:e5:f4:ca:db: f7:01:dd:f8:ce:76:94:b1:fa:98:25:88:ef:79:48:ed:4e:31: 67:7a:7f:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUwMjE1MDUwODE4WhcNMjUwMjIyMDUwODE4WjAYMRYwFAYD VQQDEw02N2IwMjE0Mi1iZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOOJyxffOGQXQ+Qr9nJGP3fxB1y1iOsRJu+Kh47zW5ehK2ijnK5p00ppZ2PH 6ZKVv2wheCn9vIH+b1bK7LsIlWo/LsOqgyfA6IHMwqkrs1twuAnajvA43TFU/UGr td7r6BuA+hFtUPWpXkw6AixyM0LASZPTaKDxHdLa5jFzFV/OPJCsUEOyk69aWyDL bD9Psx+tpWbe1hHbHF3Kr3FlEj4tzPB5ZC8TOrnpzZDIW/79y2kKGI69z4RJoLB7 5bvoW/CTGBWgGlF9g92yVmL2NT686+frjzfcAFkQzHTvwt2mvlfehBwERtx4tUvQ +3utSi3njaUuM74TvKk5v43NjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHo/EZI+ jc8eLhJD34mXtUWbMTrFMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU4z6Ya4uvusvUjxIlL6C+ZPEsR+P16pqcXFQ4YdqDEjFMlqQlThke JS8Xjo7wfBeoQsecnCZ4kzE6iel3skdJY3eX0W2DgtzyChvjksQmwv133obkuxxt Pz0I8GGZYD3EaHFArQyKVPiIDJIwCt2Fm+hnVeCEr8MV759AvJBBuOnaF2DxOoq5 AjBgZLnfBQr95FZibMm8sIgJvoexIzcqavwfb52I64eoh/BfvcOpYWw9e0W5jJ34 5RhcNhLMmRpqOv5YBSwwGt7Fat+0tkVMNcx04TybnR29XGGR6DW9KUMvoAc6WuX0 ytv3Ad34znaUsfqYJYjveUjtTjFnen8F -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:41 2025 by rpki-client