$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: ep3iTdryWTw+4yUJd6rTlb0Td1XlQ6aqRXw32ZK2TuM= Subject key identifier: 0D:0E:BE:7C:DE:55:83:05:96:73:E2:93:FD:8D:F5:6C:EF:1C:B7:77 Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: 0E Signing time: Wed 05 Feb 2025 06:30:41 +0000 Manifest this update: Wed 05 Feb 2025 06:30:41 +0000 Manifest next update: Wed 12 Feb 2025 06:30:41 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: BbT/6dn7QxA0MtB8DJR2iHo1FaYtxgRxVnmXKtacmFU=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: cWI1CNGvgjuWGw7j5Q/yYWJkIlWwLO+A7fIPZIXhqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9 Validity Not Before: Feb 5 06:30:41 2025 GMT Not After : Feb 12 06:30:41 2025 GMT Subject: CN=67a30591-f1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:d4:a8:3c:c6:1c:46:5d:e0:af:c7:40:6a: c3:65:68:f3:6f:d0:c5:aa:06:18:26:25:60:a2:58: 79:77:e2:ad:35:b3:f9:f9:e9:90:de:8c:09:98:9b: b2:56:9d:e1:2e:f1:b8:0e:e3:e3:81:04:7f:81:27: 7f:aa:b7:f5:50:2f:80:07:81:2a:e1:3d:c5:e2:88: 5f:44:99:e6:1f:77:4c:b2:9d:1d:6d:24:59:c2:39: 58:3e:33:e9:74:fa:5b:c8:08:bd:c7:9e:18:93:ec: 34:36:8c:2f:6e:6e:a4:07:f9:cc:b9:b5:f0:da:6a: bb:d2:82:c9:bd:b0:1c:8f:f4:ed:5b:af:8d:6f:a4: 7c:26:fc:c7:cd:6d:d7:d6:23:e5:5d:0f:3f:70:ae: 36:5e:54:92:59:0f:c0:a9:2e:62:f0:b8:88:2d:2b: fa:7a:b5:84:ae:e9:23:b5:a0:47:ea:01:8a:48:03: d9:09:c3:54:ea:75:4c:4b:04:1b:53:30:ff:61:61: f3:a8:a1:3c:0e:19:23:83:c9:cf:bf:b1:2a:57:d6: c9:e2:5b:9f:79:e0:ae:6a:6b:44:7e:6f:4e:08:1a: c9:12:f0:91:8e:40:d5:fb:ae:a1:34:d1:68:83:24: 90:5d:e0:44:f9:b8:40:24:20:2c:f6:fa:9c:dc:e4: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0E:BE:7C:DE:55:83:05:96:73:E2:93:FD:8D:F5:6C:EF:1C:B7:77 X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6c:c3:20:90:d7:6a:1f:ef:d7:2a:14:da:8f:66:9a:c7:3b: 9b:27:43:25:a4:e7:91:f6:17:89:55:86:6d:c9:6d:b4:18:31: 71:6a:c2:e7:04:84:12:b7:67:6c:9a:13:42:48:07:b4:c7:09: 01:9e:6e:58:dd:68:5a:e6:d6:bd:a8:c6:09:48:ac:63:e1:bc: d8:f7:04:3e:c9:f7:55:1e:c0:11:a3:97:97:fe:94:3b:e5:d1: 73:2b:49:fb:15:f8:8d:58:a3:7f:62:72:6a:c9:1c:a6:ab:16: c0:02:7d:2b:13:99:04:a8:78:33:d3:92:11:63:be:f7:c3:7b: 5a:be:d6:f4:d3:c3:7d:eb:a4:e6:d0:c6:16:10:2b:b0:25:71: b9:8f:35:ce:45:f4:0e:9d:dc:fd:df:19:34:02:86:69:9d:39: e5:83:72:ee:42:29:1c:24:fa:c7:c2:d8:20:ee:5f:3f:b5:20: 96:42:fa:97:17:ac:51:e5:31:32:3a:3f:50:ba:96:f6:75:07: 56:8e:89:65:ae:19:9e:04:9d:ce:db:5f:d7:29:31:62:d4:09: 89:2c:0c:ab:d7:13:d1:f0:ff:a8:a7:0a:88:ec:05:be:64:00: 3e:4b:0e:3e:16:9e:e3:a3:a7:98:1f:f8:2c:06:68:b4:af:42: f0:22:fd:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDRCOTExMC8GA1UEBRMoMjc2RENGM0YyMzQxQURDN0QwQkM0NkYzNjM0NEY3MTU2 MDBEOUE1ODAeFw0yNTAyMDUwNjMwNDFaFw0yNTAyMTIwNjMwNDFaMBgxFjAUBgNV BAMTDTY3YTMwNTkxLWYxYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe19SoPMYcRl3gr8dAasNlaPNv0MWqBhgmJWCiWHl34q01s/n56ZDejAmYm7JW neEu8bgO4+OBBH+BJ3+qt/VQL4AHgSrhPcXiiF9EmeYfd0yynR1tJFnCOVg+M+l0 +lvICL3HnhiT7DQ2jC9ubqQH+cy5tfDaarvSgsm9sByP9O1br41vpHwm/MfNbdfW I+VdDz9wrjZeVJJZD8CpLmLwuIgtK/p6tYSu6SO1oEfqAYpIA9kJw1TqdUxLBBtT MP9hYfOooTwOGSODyc+/sSpX1sniW5954K5qa0R+b04IGskS8JGOQNX7rqE00WiD JJBd4ET5uEAkICz2+pzc5LczAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDQ6+fN5V gwWWc+KT/Y31bO8ct3cwHwYDVR0jBBgwFoAUJ23PPyNBrcfQvEbzY0T3FWANmlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNEI5L0NFODQwNTY4RDIz NTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1s Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSjIzUFB5TkJyY2ZRdkVielkwVDNGV0FObWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NEI5L0NFODQwNTY4RDIzNTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNm UXZFYnpZMFQzRldBTm1sZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABxswyCQ12of79cqFNqPZprHO5snQyWk55H2F4lVhm3JbbQYMXFqwucE hBK3Z2yaE0JIB7THCQGebljdaFrm1r2oxglIrGPhvNj3BD7J91UewBGjl5f+lDvl 0XMrSfsV+I1Yo39icmrJHKarFsACfSsTmQSoeDPTkhFjvvfDe1q+1vTTw33rpObQ xhYQK7AlcbmPNc5F9A6d3P3fGTQChmmdOeWDcu5CKRwk+sfC2CDuXz+1IJZC+pcX rFHlMTI6P1C6lvZ1B1aOiWWuGZ4Enc7bX9cpMWLUCYksDKvXE9Hw/6inCojsBb5k AD5LDj4WnuOjp5gf+CwGaLSvQvAi/Sc= -----END CERTIFICATE-----Generated at Wed Feb 5 20:13:28 2025 by rpki-client