$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json) Hash identifier: TyuALWtT1EFLqb11ikvqfFC/76OhEAV5uqsx1GSCeLk= Subject key identifier: 15:7C:5D:A6:D1:F9:2E:AC:C2:23:1C:C9:06:4D:97:68:72:C8:62:4A Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft Manifest number: 12 Signing time: Wed 05 Feb 2025 06:25:10 +0000 Manifest this update: Wed 05 Feb 2025 06:25:10 +0000 Manifest next update: Wed 12 Feb 2025 06:25:10 +0000 Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: luJ4R4I3tL2dcC0ejon6GJkWKzbr8zpgtxiPuL39GQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA Validity Not Before: Feb 5 06:25:10 2025 GMT Not After : Feb 12 06:25:10 2025 GMT Subject: CN=67a30446-587a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:2c:a4:e9:5a:76:89:9b:cc:b9:64:2f:86: 5b:3e:57:bc:a1:5d:5c:66:7b:f0:a1:90:7a:b4:87: 82:ec:77:ac:e5:9a:d7:6d:16:f0:77:81:ec:78:41: 4b:f3:d9:16:fb:84:5d:6b:31:76:46:f0:8b:39:2d: 0c:13:58:2b:28:9c:2d:33:49:d8:1c:2a:bf:e8:37: 9d:c2:28:75:16:e2:73:af:f6:c8:05:38:e1:8f:35: 5b:40:36:cd:42:fc:b9:87:26:18:2e:89:3e:74:41: b3:88:6b:cd:cd:b0:49:5e:b1:10:0b:5b:f7:f1:f7: a6:0f:6c:0f:30:ae:f0:cb:24:9f:14:2a:e5:2c:72: df:ce:96:5a:b8:ad:ee:90:af:f8:45:95:b3:c6:c1: 7e:15:03:7c:35:2d:b1:8a:02:87:da:8e:1b:be:4d: 3e:d4:da:7e:5e:34:f5:87:39:aa:64:10:e2:c0:c2: 84:e8:1e:d8:1b:a6:c5:ca:d7:0f:64:24:30:46:99: cd:f5:e9:df:b1:50:dd:30:cd:14:64:df:26:5c:13: 76:4d:14:6e:a9:25:89:6a:e0:34:e2:51:ef:fd:a1: cf:ef:2d:b9:6e:31:2c:39:0b:21:02:dd:42:42:40: 37:1b:aa:63:d8:be:71:3d:f4:8d:92:e7:ec:f4:8e: da:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7C:5D:A6:D1:F9:2E:AC:C2:23:1C:C9:06:4D:97:68:72:C8:62:4A X509v3 Authority Key Identifier: keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ec:cd:4d:20:30:ee:71:0c:e5:14:64:62:2f:54:23:1b:3c: 14:ad:14:73:58:85:16:4f:6b:a4:6b:f9:18:15:c5:5e:a4:14: 35:05:4d:12:c5:10:5a:26:fe:67:82:46:bc:88:b6:c3:ab:97: a7:01:c3:47:43:22:ec:aa:ed:83:00:6e:78:8f:82:4e:83:64: 25:9a:69:15:db:51:3d:2d:49:4c:da:64:86:3f:fe:63:ec:20: ce:4d:c9:43:94:cc:91:23:f0:e0:b0:d1:01:80:8a:21:bf:20: 45:37:93:78:50:34:9c:50:6f:bc:b8:86:6f:9a:07:17:a2:2c: b9:e6:45:51:de:04:90:5c:15:6b:9d:e7:5e:30:55:a1:12:a0: 58:01:eb:e7:b6:57:c8:2d:e0:65:b2:ac:4c:35:d8:d8:67:5b: 81:2f:fb:66:1a:c6:91:35:b4:80:ae:41:9a:e3:4e:bf:81:f7: 20:d8:c5:03:aa:56:50:fa:c7:11:bd:5d:ea:e9:72:78:ef:8a: 9a:2d:41:12:c0:10:e3:6d:3f:59:22:e7:f8:ff:46:4c:90:e6: ed:7e:6e:11:fc:5e:7a:dc:19:7f:4b:12:68:30:5c:dd:d9:7f: 9a:50:09:4e:4c:99:cb:8b:34:a6:aa:05:ee:bf:38:dd:53:78: 18:40:1a:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDQTExMC8GA1UEBRMoODVDNTY3MjU5MTAzRDlFMjI5MkU2NERCRkI3OUZEMzlC MjU2RkRFNDAeFw0yNTAyMDUwNjI1MTBaFw0yNTAyMTIwNjI1MTBaMBgxFjAUBgNV BAMTDTY3YTMwNDQ2LTU4N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Uyyk6Vp2iZvMuWQvhls+V7yhXVxme/ChkHq0h4Lsd6zlmtdtFvB3gex4QUvz 2Rb7hF1rMXZG8Is5LQwTWCsonC0zSdgcKr/oN53CKHUW4nOv9sgFOOGPNVtANs1C /LmHJhguiT50QbOIa83NsElesRALW/fx96YPbA8wrvDLJJ8UKuUsct/Ollq4re6Q r/hFlbPGwX4VA3w1LbGKAofajhu+TT7U2n5eNPWHOapkEOLAwoToHtgbpsXK1w9k JDBGmc316d+xUN0wzRRk3yZcE3ZNFG6pJYlq4DTiUe/9oc/vLbluMSw5CyEC3UJC QDcbqmPYvnE99I2S5+z0jtqBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFXxdptH5 LqzCIxzJBk2XaHLIYkowHwYDVR0jBBgwFoAUhcVnJZED2eIpLmTb+3n9ObJW/eQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RENBLzU4M0ZGQzk0Q0Ix RjExRUZCN0FDMjc4NkM0RjlBRTAyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19l US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGNWbkpaRUQyZUlwTG1UYi0zbjlPYkpXX2VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RENBLzU4M0ZGQzk0Q0IxRjExRUZCN0FDMjc4NkM0RjlBRTAyL2hjVm5KWkVEMmVJ cExtVGItM245T2JKV19lUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABPszU0gMO5xDOUUZGIvVCMbPBStFHNYhRZPa6Rr+RgVxV6kFDUFTRLF EFom/meCRryItsOrl6cBw0dDIuyq7YMAbniPgk6DZCWaaRXbUT0tSUzaZIY//mPs IM5NyUOUzJEj8OCw0QGAiiG/IEU3k3hQNJxQb7y4hm+aBxeiLLnmRVHeBJBcFWud 514wVaESoFgB6+e2V8gt4GWyrEw12NhnW4Ev+2YaxpE1tICuQZrjTr+B9yDYxQOq VlD6xxG9XerpcnjvipotQRLAEONtP1ki5/j/RkyQ5u1+bhH8XnrcGX9LEmgwXN3Z f5pQCU5MmcuLNKaqBe6/ON1TeBhAGkQ= -----END CERTIFICATE-----Generated at Thu Feb 6 04:41:22 2025 by rpki-client