$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json) Hash identifier: 0YK7zlc/rL9La8fHJ/74EQqmg9hWORGjyTl5G9ngLU4= Subject key identifier: C3:25:92:2C:5F:A4:25:BD:51:C2:B0:3B:17:0E:D5:55:F4:BC:B1:06 Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft Manifest number: 1F Signing time: Wed 05 Feb 2025 06:20:02 +0000 Manifest this update: Wed 05 Feb 2025 06:20:01 +0000 Manifest next update: Wed 12 Feb 2025 06:20:01 +0000 Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: Stw/3BQ5LhRptq4sG/XDuUNvBu82PNYsgFbx4wEoef0=) 2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: +OL0LwWDdzCSmXdG5gDsUEjfzy5Uq5zJxTv17RF0xXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47 Validity Not Before: Feb 5 06:20:01 2025 GMT Not After : Feb 12 06:20:01 2025 GMT Subject: CN=67a30312-1705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4d:ed:00:df:c7:55:6a:48:68:ce:ea:06:1d: fc:05:e7:85:75:3f:b1:8c:0e:d2:fd:9e:1e:0f:1c: a8:00:69:9f:95:fa:6f:c7:24:c1:30:dc:70:16:75: 13:ca:b3:8b:46:b6:f4:f8:c8:bf:e0:f5:fe:e7:82: 79:7f:64:ef:00:93:d2:e9:0b:63:12:24:1d:24:f4: 9a:0a:3e:51:5f:ad:74:1f:aa:dc:50:08:26:52:57: 51:d6:29:b1:23:dd:79:34:18:5e:68:4c:9b:88:24: 8d:0b:50:36:03:3d:de:d3:7b:49:ef:a6:71:13:a5: 6d:70:95:90:78:7d:44:a5:ea:01:56:f4:aa:0c:1d: e3:56:da:93:7e:91:5e:1c:68:01:e8:cb:ec:85:7b: 89:b8:30:4f:b1:88:b4:35:8d:b0:d4:01:cf:b0:4c: 94:d8:58:e6:85:83:f3:f9:f1:a1:e4:34:fb:65:e7: 17:ef:c7:b4:3f:fb:51:7c:91:d8:5b:c2:23:b2:ba: c6:a3:8c:f1:64:91:a0:d0:4e:5b:d5:6c:ef:89:64: 33:dd:f1:cc:de:fc:0a:7f:6d:ab:81:d4:b3:a2:69: cf:e3:3b:66:da:21:db:80:8a:1a:22:f0:22:16:06: 87:6a:35:14:cc:94:76:63:5c:89:77:7e:f9:a3:cc: 9b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:25:92:2C:5F:A4:25:BD:51:C2:B0:3B:17:0E:D5:55:F4:BC:B1:06 X509v3 Authority Key Identifier: keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ef:af:20:9b:2f:9f:45:cc:ef:94:f7:51:c9:d9:f4:4a:20: a2:3f:06:34:b8:ac:04:11:69:14:89:06:f4:fd:28:28:eb:84: 77:56:8f:0c:15:a7:89:7f:2f:1c:f2:d4:bc:32:49:67:c2:ef: 38:37:df:6b:86:86:10:a0:d6:01:f1:e5:36:c3:95:c9:66:a1: 4d:33:71:8d:6d:07:80:79:63:f3:82:87:f0:0f:2c:85:e4:eb: 8d:94:9b:fa:49:0f:12:0e:cf:04:a5:55:2b:70:74:b9:2a:05: 69:12:78:e5:a1:a2:fb:4a:c9:23:7d:61:f7:b9:16:5b:f2:80: aa:cb:21:82:91:90:84:fb:26:cf:d7:8b:c8:74:b1:20:4e:57: 06:72:af:f6:a0:36:ce:fd:05:11:65:b1:9f:e8:3e:53:8a:de: b8:c6:6f:0b:48:9b:c7:97:11:97:a9:9a:dc:95:99:41:32:ee: 2e:96:1d:0c:0d:c4:64:bd:ae:14:b6:0e:fb:98:d3:72:4a:b7: ca:60:72:74:19:74:5d:69:40:8b:c1:4e:ec:ac:9f:49:5d:60: ff:52:bf:8c:0e:50:f7:14:c0:b8:e7:69:48:e2:04:98:11:9a: fa:21:97:19:93:f0:43:23:6e:f6:e8:3b:b6:6c:3d:fb:f5:13: 70:b2:60:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoN0Y3NzU5MjA0MkUzQzg3QkU1NkVFRDgxRDlDQ0IwRTk3 NDAyQ0RENzAeFw0yNTAyMDUwNjIwMDFaFw0yNTAyMTIwNjIwMDFaMBgxFjAUBgNV BAMTDTY3YTMwMzEyLTE3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHTe0A38dVakhozuoGHfwF54V1P7GMDtL9nh4PHKgAaZ+V+m/HJMEw3HAWdRPK s4tGtvT4yL/g9f7ngnl/ZO8Ak9LpC2MSJB0k9JoKPlFfrXQfqtxQCCZSV1HWKbEj 3Xk0GF5oTJuIJI0LUDYDPd7Te0nvpnETpW1wlZB4fUSl6gFW9KoMHeNW2pN+kV4c aAHoy+yFe4m4ME+xiLQ1jbDUAc+wTJTYWOaFg/P58aHkNPtl5xfvx7Q/+1F8kdhb wiOyusajjPFkkaDQTlvVbO+JZDPd8cze/Ap/bauB1LOiac/jO2baIduAihoi8CIW BodqNRTMlHZjXIl3fvmjzJtrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwyWSLF+k Jb1RwrA7Fw7VVfS8sQYwHwYDVR0jBBgwFoAUf3dZIELjyHvlbu2B2cyw6XQCzdcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3LzE1OTA3QzIyQjgy MTExRUZBQUU2RjU2N0M0RjlBRTAyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pk Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvZjNkWklFTGp5SHZsYnUyQjJjeXc2WFFDemRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3LzE1OTA3QzIyQjgyMTExRUZBQUU2RjU2N0M0RjlBRTAyL2YzZFpJRUxqeUh2 bGJ1MkIyY3l3NlhRQ3pkYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfvryCbL59FzO+U91HJ2fRKIKI/BjS4rAQRaRSJBvT9KCjrhHdWjwwV p4l/Lxzy1LwySWfC7zg332uGhhCg1gHx5TbDlclmoU0zcY1tB4B5Y/OCh/APLIXk 642Um/pJDxIOzwSlVStwdLkqBWkSeOWhovtKySN9Yfe5FlvygKrLIYKRkIT7Js/X i8h0sSBOVwZyr/agNs79BRFlsZ/oPlOK3rjGbwtIm8eXEZepmtyVmUEy7i6WHQwN xGS9rhS2DvuY03JKt8pgcnQZdF1pQIvBTuysn0ldYP9Sv4wOUPcUwLjnaUjiBJgR mvohlxmT8EMjbvboO7ZsPfv1E3CyYM0= -----END CERTIFICATE-----Generated at Wed Feb 5 21:52:43 2025 by rpki-client