$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft File: 1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json) Hash identifier: GUJM60B6L5GoOxmA+lCnVsWS7MjhNwfCgd7bakwITV0= Subject key identifier: A5:FF:69:42:69:73:F6:50:AD:05:C1:D5:63:DE:FA:7D:E1:80:F1:7C Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft Manifest number: 84 Signing time: Sat 15 Feb 2025 07:48:45 +0000 Manifest this update: Sat 15 Feb 2025 07:48:45 +0000 Manifest next update: Sat 22 Feb 2025 07:48:45 +0000 Files and hashes: 1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: wsfs2qKsSp+qJI0ZH8ZCPJ6e3xx9RLZcsUcwqMGMu7M=) 2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: /2rgCrByQXfEl3QFcxBS9yU2VX/WpSZOCuakY+zsero=) 3: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: THvSuu89zBwF6bcGi2lQr5DOft4c27TPpxpcQHdJvh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A909 Validity Not Before: Feb 15 07:48:45 2025 GMT Not After : Feb 22 07:48:45 2025 GMT Subject: CN=67b046dd-2334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:4b:d8:89:cb:c9:48:eb:61:c3:0d:a1:62: ad:58:8e:4f:ce:a9:64:5f:c7:5c:db:23:56:fb:bc: 9d:68:17:57:07:33:9e:ab:ec:5f:4d:16:9e:e0:3d: f2:f5:c3:24:b0:eb:99:05:bd:65:0e:ea:76:89:b2: 35:ed:3b:1b:4f:01:cf:d6:74:3f:a3:bc:fe:c4:e0: cb:83:6a:f8:b2:5e:43:0c:b9:18:70:d6:69:e9:6e: 23:ec:3f:e5:dc:a4:a4:2f:33:3f:8e:55:33:dd:65: 61:45:a6:c4:15:ad:b8:98:96:98:d3:f5:b4:b3:99: 65:cd:1e:4a:4e:03:fd:3f:4a:71:6b:39:66:54:7d: c0:47:98:6f:5d:27:a0:92:8c:e5:04:71:94:99:23: 08:f7:70:a6:b0:be:8a:8c:f1:62:ee:2b:49:92:4f: 88:73:a0:b1:cf:52:0b:f2:0f:8a:cb:f2:ae:14:55: 65:06:b6:51:15:f1:0d:7b:c4:f3:c5:2b:e7:38:6c: e9:7b:f1:28:c7:6e:55:7b:47:a7:c7:2e:25:2e:03: 7c:62:4a:d9:09:92:86:8e:82:73:79:39:e2:71:23: 12:6c:f7:87:fd:6e:66:72:d3:1a:2d:87:eb:1c:b0: 9c:a8:86:9c:1a:6d:f4:25:4d:14:dd:ff:4a:59:63: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FF:69:42:69:73:F6:50:AD:05:C1:D5:63:DE:FA:7D:E1:80:F1:7C X509v3 Authority Key Identifier: keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f9:97:a0:3a:85:65:ba:5b:3c:3d:26:b8:ef:f7:36:54:d8: b4:db:53:41:d7:18:ab:3b:47:c8:a0:cd:0b:7e:76:d9:85:03: 2d:7d:48:37:91:f0:bc:c3:b0:09:b5:f0:9f:f2:13:d8:93:19: d2:37:c7:27:40:54:53:da:eb:14:60:fb:76:c1:6a:05:61:56: d9:14:02:c9:0b:35:6b:75:5d:f3:da:62:21:ca:71:b5:c0:88: d5:dc:08:af:27:7d:6f:ae:ac:31:d4:2e:ec:6c:f8:ac:28:f2: 0f:38:e8:e4:b9:ba:bd:0b:4e:5c:e6:9f:cc:02:c9:d0:65:29: f2:09:be:35:3e:62:5f:77:a0:9e:44:57:2d:fe:fe:12:56:f8: fe:b5:b3:43:1f:56:67:6f:8a:50:74:0d:3c:f4:6f:ea:4d:c1: 2d:03:d1:66:31:0a:d4:34:d1:cc:54:a8:5a:f3:43:7b:7c:77: 86:19:ab:d7:99:9a:40:56:8c:bf:9c:f1:da:2b:64:49:bf:a2: 0e:f3:37:da:c2:94:de:d1:bb:1e:42:e6:cb:22:58:12:9f:b7: bf:37:87:8d:73:03:b2:72:65:17:d8:7b:4e:d4:50:d1:44:64: 53:15:da:c2:dc:9e:e3:dc:ee:f1:f3:e9:3e:ed:0e:0e:9e:8f: 54:a9:9a:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5MDkxMTAvBgNVBAUTKEQ3MjEwQjZFOTk0MjRBOUU4MkE0RDQ1MDAyNzM2RjY0 ODNBQTI3OUEwHhcNMjUwMjE1MDc0ODQ1WhcNMjUwMjIyMDc0ODQ1WjAYMRYwFAYD VQQDEw02N2IwNDZkZC0yMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA9L2InLyUjrYcMNoWKtWI5PzqlkX8dc2yNW+7ydaBdXBzOeq+xfTRae4D3y 9cMksOuZBb1lDup2ibI17TsbTwHP1nQ/o7z+xODLg2r4sl5DDLkYcNZp6W4j7D/l 3KSkLzM/jlUz3WVhRabEFa24mJaY0/W0s5llzR5KTgP9P0pxazlmVH3AR5hvXSeg kozlBHGUmSMI93CmsL6KjPFi7itJkk+Ic6Cxz1IL8g+Ky/KuFFVlBrZRFfENe8Tz xSvnOGzpe/Eox25Ve0enxy4lLgN8YkrZCZKGjoJzeTnicSMSbPeH/W5mctMaLYfr HLCcqIacGm30JU0U3f9KWWMxDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKX/aUJp c/ZQrQXB1WPe+n3hgPF8MB8GA1UdIwQYMBaAFNchC26ZQkqegqTUUAJzb2SDqiea MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8xNjZFNzQ3QzJB MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1NwNkNwTlJRQW5OdlpJT3FK NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzF5RUxicGxDU3A2Q3BOUlFBbk52WklPcUo1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTkwOS8xNjZFNzQ3QzJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1Nw NkNwTlJRQW5OdlpJT3FKNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6+ZegOoVluls8PSa47/c2VNi021NB1xirO0fIoM0LfnbZhQMtfUg3 kfC8w7AJtfCf8hPYkxnSN8cnQFRT2usUYPt2wWoFYVbZFALJCzVrdV3z2mIhynG1 wIjV3AivJ31vrqwx1C7sbPisKPIPOOjkubq9C05c5p/MAsnQZSnyCb41PmJfd6Ce RFct/v4SVvj+tbNDH1Znb4pQdA089G/qTcEtA9FmMQrUNNHMVKha80N7fHeGGavX mZpAVoy/nPHaK2RJv6IO8zfawpTe0bseQubLIlgSn7e/N4eNcwOycmUX2HtO1FDR RGRTFdrC3J7j3O7x8+k+7Q4Ono9UqZo6 -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:23 2025 by rpki-client