$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json) Hash identifier: /VGWEqH1cCuYNWD2RJbbm5DBbnDFcbDbI8mZpSOSJ3o= Subject key identifier: 0D:5A:A7:8E:9F:A8:ED:8C:D4:92:8A:25:03:EA:30:AB:83:B4:C1:BF Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft Manifest number: 1F Signing time: Wed 05 Feb 2025 06:19:59 +0000 Manifest this update: Wed 05 Feb 2025 06:19:59 +0000 Manifest next update: Wed 12 Feb 2025 06:19:59 +0000 Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: bgmXud0ysFqeHjSut13R4U7qV48HMyq/T6m/zh8bU/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47 Validity Not Before: Feb 5 06:19:59 2025 GMT Not After : Feb 12 06:19:59 2025 GMT Subject: CN=67a3030f-4793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:46:b5:0f:61:36:18:2e:ff:bb:01:e1:6f: 88:70:1b:d2:b0:0c:fa:be:2c:ed:93:b7:cb:db:5d: 1e:17:d9:c8:d0:52:a7:08:60:28:97:8a:fe:38:01: 48:bd:d4:50:e6:6c:f6:07:ba:c7:3a:1a:5e:2c:4e: 1e:8b:a7:f6:4b:37:88:70:8c:57:b6:d7:dc:33:48: a6:8e:52:9b:9e:cd:56:3b:e4:9e:0c:18:7b:0d:87: 5f:13:96:82:34:1f:72:1e:44:03:0e:f6:27:e3:fb: e4:14:57:f0:77:6b:5f:e5:83:78:b8:8e:c8:f0:7e: 12:9a:b8:fa:89:88:99:59:50:21:fd:e2:a5:f9:83: 05:38:ec:0f:d8:d9:06:d2:49:25:c4:89:d0:7c:86: 55:9f:d9:3f:1c:67:ff:d3:d7:07:dd:cb:ec:27:29: a8:17:0f:2e:fa:cc:9f:a3:90:9d:9c:77:26:28:58: 00:a5:11:cb:fd:af:d0:77:2c:15:22:41:d1:6f:a4: 77:12:01:75:b8:11:41:80:3f:84:f8:07:ff:83:fb: bb:a5:2c:67:e1:9d:c8:d6:1c:17:3f:9c:91:27:37: d9:a4:75:4e:6e:3f:78:26:fb:cf:b5:1f:b2:55:07: cd:ab:e6:d3:7f:e0:02:36:40:1a:db:08:a5:a6:6b: be:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5A:A7:8E:9F:A8:ED:8C:D4:92:8A:25:03:EA:30:AB:83:B4:C1:BF X509v3 Authority Key Identifier: keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:02:ea:f5:7b:24:30:d4:f9:1d:38:38:b5:2c:c9:b8:37:2e: cc:15:7c:d7:77:00:bf:48:c4:f8:b5:f6:4e:20:85:b6:50:6e: 5c:bf:30:a5:d9:d3:a4:24:d6:3e:57:03:69:df:0d:42:03:1d: 83:72:85:f9:b5:9a:97:4a:15:99:d6:6e:5e:df:2e:03:1f:6a: 22:79:93:1b:82:76:1c:70:cc:4a:5d:2f:34:4f:75:68:ed:fd: 14:39:92:39:40:2f:ff:95:b4:8f:f4:d4:a0:6b:74:e3:d0:d6: 35:da:8e:9b:c2:a6:cd:60:19:4d:55:f4:fa:7e:31:d4:e0:9f: 0d:d8:dc:03:88:25:99:69:4a:84:0b:21:cf:28:9c:ce:a6:1a: 0c:bf:c7:43:ea:2d:15:f3:e3:23:08:09:f4:66:6e:e4:fe:90: 2c:07:ee:b0:44:70:58:2c:5a:f3:81:3a:32:a8:5a:95:d1:03: 62:2d:fd:f0:50:35:64:54:73:8b:b5:15:ab:2b:eb:04:c6:37: 83:5c:87:89:c6:82:c9:f6:12:15:ca:97:e8:27:72:bf:d4:11: 0c:86:09:74:9d:a0:4f:28:cc:bc:2e:c8:3d:a5:22:5c:69:0e: df:16:e5:38:08:77:b8:5f:33:df:8b:64:3f:92:a8:6f:b0:c0: 4b:c8:f9:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoNDNCMjIyRkUzQkU0OTFBRDcwNThCRUQzODA0MjE0NDI1 RDY5NDFCNzAeFw0yNTAyMDUwNjE5NTlaFw0yNTAyMTIwNjE5NTlaMBgxFjAUBgNV BAMTDTY3YTMwMzBmLTQ3OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0TUa1D2E2GC7/uwHhb4hwG9KwDPq+LO2Tt8vbXR4X2cjQUqcIYCiXiv44AUi9 1FDmbPYHusc6Gl4sTh6Lp/ZLN4hwjFe219wzSKaOUpuezVY75J4MGHsNh18TloI0 H3IeRAMO9ifj++QUV/B3a1/lg3i4jsjwfhKauPqJiJlZUCH94qX5gwU47A/Y2QbS SSXEidB8hlWf2T8cZ//T1wfdy+wnKagXDy76zJ+jkJ2cdyYoWAClEcv9r9B3LBUi QdFvpHcSAXW4EUGAP4T4B/+D+7ulLGfhncjWHBc/nJEnN9mkdU5uP3gm+8+1H7JV B82r5tN/4AI2QBrbCKWma765AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDVqnjp+o 7YzUkoolA+owq4O0wb8wHwYDVR0jBBgwFoAUQ7Ii/jvkka1wWL7TgEIUQl1pQbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3L0U1QkZFQTQ2Qjgy MDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Exd1dMN1RnRUlVUWwxcFFi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUTdJaV9qdmtrYTF3V0w3VGdFSVVRbDFwUWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3L0U1QkZFQTQ2QjgyMDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Ex d1dMN1RnRUlVUWwxcFFiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA8C6vV7JDDU+R04OLUsybg3LswVfNd3AL9IxPi19k4ghbZQbly/MKXZ 06Qk1j5XA2nfDUIDHYNyhfm1mpdKFZnWbl7fLgMfaiJ5kxuCdhxwzEpdLzRPdWjt /RQ5kjlAL/+VtI/01KBrdOPQ1jXajpvCps1gGU1V9Pp+MdTgnw3Y3AOIJZlpSoQL Ic8onM6mGgy/x0PqLRXz4yMICfRmbuT+kCwH7rBEcFgsWvOBOjKoWpXRA2It/fBQ NWRUc4u1Fasr6wTGN4Nch4nGgsn2EhXKl+gncr/UEQyGCXSdoE8ozLwuyD2lIlxp Dt8W5TgId7hfM9+LZD+SqG+wwEvI+Rs= -----END CERTIFICATE-----Generated at Wed Feb 5 20:01:27 2025 by rpki-client