$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft File: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft (raw, json) Hash identifier: yrEdL7YM7scRVMcxGK/x4Wl1Kbfr7PsXoHDk1TRhgEU= Subject key identifier: 8C:EC:D4:14:58:14:EC:B6:D0:6C:9F:D5:44:2B:05:45:99:F8:C2:AE Authority key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C Certificate issuer: /CN=A918CC02/serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft Manifest number: 20 Signing time: Wed 05 Feb 2025 06:20:15 +0000 Manifest this update: Wed 05 Feb 2025 06:20:15 +0000 Manifest next update: Wed 12 Feb 2025 06:20:15 +0000 Files and hashes: 1: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl (hash: Z2/K1yvHKn9yZkIKK3Y0eqyoSEDk4Ce2uIYtKzH0noQ=) 2: AF9A0636B86B11EFA561215AC4F9AE02.roa (hash: IQuVhRxEVEVGhjHjWm/5ZT8FALp9LUYdzNWsXFb85sc=) 3: 34B9DBFAC5C011EF88F56A0AC4F9AE02.roa (hash: Q0xEzY7OClm7DHfEFVGlhio77iseRkYBQy+gJxQGWpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CC02 Validity Not Before: Feb 5 06:20:15 2025 GMT Not After : Feb 12 06:20:15 2025 GMT Subject: CN=67a3031f-f846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:80:e7:a5:09:cf:0d:74:37:d3:c1:e8:cc: 99:2e:64:7b:6e:78:9c:1e:49:2c:ee:d4:62:03:60: 8a:6e:45:61:ae:89:c9:a5:fa:c1:d1:7f:fe:5f:d1: 50:35:42:f5:2a:46:c6:ab:28:4a:e0:b5:d8:ee:65: 5e:8c:c5:f8:a5:81:05:f9:fb:71:ec:cf:0a:98:cf: 2d:59:c1:24:8f:97:36:d3:7e:8b:66:5e:c9:11:68: 77:34:39:7d:15:ba:bc:43:57:e4:38:01:65:7f:6e: ca:3d:2e:b3:c0:0c:40:6d:55:a6:be:ad:36:69:f9: e5:05:7a:d0:af:bc:c3:fb:ee:36:25:56:53:f9:f5: 3f:40:ff:6e:91:ed:aa:1e:53:72:44:5c:c4:12:38: b8:e2:f2:72:21:fa:e6:4b:ea:4e:93:84:3d:f0:60: 60:0b:f5:bb:0c:9d:f3:3b:69:43:22:a3:c2:37:9e: 90:79:b6:d1:69:44:50:95:6f:c6:bf:e5:27:f9:ea: 98:7d:c4:b8:1f:f7:d7:bc:8c:35:3c:24:16:b1:a8: a6:d6:3d:7f:f0:9d:31:0d:2a:4d:25:5a:32:d7:95: 6c:28:b1:f3:2c:03:6e:ea:52:a6:bb:e4:58:68:fe: c7:c2:84:11:44:57:0f:3f:80:f9:b8:c8:e8:bf:46: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EC:D4:14:58:14:EC:B6:D0:6C:9F:D5:44:2B:05:45:99:F8:C2:AE X509v3 Authority Key Identifier: keyid:7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cf:f7:d4:e3:73:fc:d2:62:b1:43:5a:b2:b9:d2:85:40:78: 65:ae:d6:1e:99:ac:37:71:1e:4d:87:eb:11:27:42:59:a5:ab: 7d:ba:5c:71:27:d2:f3:46:21:d4:a7:04:b8:79:fa:48:00:d1: 0a:cc:2f:78:19:b9:ca:ea:8e:45:50:a7:85:4e:87:3c:4c:05: e0:5c:6f:4a:ab:35:5d:b7:d9:b4:26:8e:99:ea:0a:be:46:46: 00:74:50:8b:63:14:03:a7:b2:f0:b7:57:8b:e3:c4:69:a2:05: fa:4f:5e:04:a9:ed:b3:1e:90:50:f3:c7:4d:ac:4d:fb:4d:c6: b1:be:d4:74:00:b4:1a:72:a6:f6:bb:5f:9f:8c:71:27:7f:78: 5c:fb:1f:85:aa:f9:65:42:7b:e1:6d:99:3e:b9:23:42:d8:53: d8:f9:fa:3a:06:9d:e3:c6:f6:df:99:d3:f7:a8:fe:cd:80:b6: 9a:f3:12:b9:a3:5b:2c:4f:4d:a5:82:df:33:6b:42:d5:07:15: 07:06:b0:cc:e0:31:fa:b2:47:6d:c4:d9:93:fb:55:99:46:d5: da:1c:ca:c2:57:a5:0c:db:28:e5:61:df:7b:ae:43:6f:67:9a: d0:de:43:3a:79:fc:c4:63:7b:72:c6:43:25:0a:f6:a0:56:11: 5c:45:4f:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Q0MwMjExMC8GA1UEBRMoN0YwNjdBMjJBNEE5RTA5NkZEODZBNkJBMzU1QTU5MjQ5 MDY3RDgwQzAeFw0yNTAyMDUwNjIwMTVaFw0yNTAyMTIwNjIwMTVaMBgxFjAUBgNV BAMTDTY3YTMwMzFmLWY4NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeUIDnpQnPDXQ308HozJkuZHtueJweSSzu1GIDYIpuRWGuicml+sHRf/5f0VA1 QvUqRsarKErgtdjuZV6MxfilgQX5+3HszwqYzy1ZwSSPlzbTfotmXskRaHc0OX0V urxDV+Q4AWV/bso9LrPADEBtVaa+rTZp+eUFetCvvMP77jYlVlP59T9A/26R7aoe U3JEXMQSOLji8nIh+uZL6k6ThD3wYGAL9bsMnfM7aUMio8I3npB5ttFpRFCVb8a/ 5Sf56ph9xLgf99e8jDU8JBaxqKbWPX/wnTENKk0lWjLXlWwosfMsA27qUqa75Fho /sfChBFEVw8/gPm4yOi/RkrBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjOzUFFgU 7LbQbJ/VRCsFRZn4wq4wHwYDVR0jBBgwFoAUfwZ6IqSp4Jb9hqa6NVpZJJBn2Aww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDQzAyLzY4MEM2MjQ2Qjg2 QjExRUY5QTZBNTA1OEM0RjlBRTAyL2Z3WjZJcVNwNEpiOWhxYTZOVnBaSkpCbjJB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZndaNklxU3A0SmI5aHFhNk5WcFpKSkJuMkF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD QzAyLzY4MEM2MjQ2Qjg2QjExRUY5QTZBNTA1OEM0RjlBRTAyL2Z3WjZJcVNwNEpi OWhxYTZOVnBaSkpCbjJBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB/P99Tjc/zSYrFDWrK50oVAeGWu1h6ZrDdxHk2H6xEnQlmlq326XHEn 0vNGIdSnBLh5+kgA0QrML3gZucrqjkVQp4VOhzxMBeBcb0qrNV232bQmjpnqCr5G RgB0UItjFAOnsvC3V4vjxGmiBfpPXgSp7bMekFDzx02sTftNxrG+1HQAtBpypva7 X5+McSd/eFz7H4Wq+WVCe+FtmT65I0LYU9j5+joGnePG9t+Z0/eo/s2AtprzErmj WyxPTaWC3zNrQtUHFQcGsMzgMfqyR23E2ZP7VZlG1docysJXpQzbKOVh33uuQ29n mtDeQzp5/MRje3LGQyUK9qBWEVxFT9g= -----END CERTIFICATE-----Generated at Wed Feb 5 20:12:09 2025 by rpki-client