$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft File: r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json) Hash identifier: P1EJgR/mLtrRGmEWIwtf5UAqs+KmEUm0IdS4aiPvOLo= Subject key identifier: 39:F6:3B:E9:94:68:3C:2E:B2:E4:07:A8:7F:32:29:D5:63:6F:42:01 Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6 Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft Manifest number: 28 Signing time: Tue 04 Feb 2025 22:45:53 +0000 Manifest this update: Tue 04 Feb 2025 22:45:52 +0000 Manifest next update: Tue 11 Feb 2025 22:45:52 +0000 Files and hashes: 1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: nqepJa7i7d+VgQCWrirHfWQTnAVcVKudjNrSYTu2NKk=) 2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: 2bzYWZhSZUzBimn1IglwPv7AEhVCAaK8feLQOEL571A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Feb 2025 22:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D Validity Not Before: Feb 4 22:45:52 2025 GMT Not After : Feb 11 22:45:52 2025 GMT Subject: CN=67a298a1-a78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:51:09:ac:cf:5d:4e:56:64:01:5f:6c:d9: 3e:4c:e0:a0:be:cb:67:ff:8a:17:ac:04:bf:43:19: 56:f3:57:bf:e3:b4:a7:82:9a:84:3a:41:30:db:01: 53:35:f5:21:18:39:79:5f:e2:9e:1e:fd:87:ff:b6: 6e:29:80:c3:7a:3b:1b:db:3b:09:55:ff:a9:1d:07: 46:93:f7:0d:43:b7:5d:46:ae:57:9f:68:99:f9:17: b0:a9:da:4b:d4:1d:74:5b:30:34:33:f7:22:01:05: 55:db:c4:68:24:91:50:a0:e3:3b:46:20:35:fb:07: 06:62:ce:e0:69:73:79:fe:3e:d1:43:b7:b8:1f:1b: dc:55:fc:fd:20:2a:6d:7b:cf:b5:f3:eb:76:09:f6: ba:18:81:ad:3f:c9:41:c4:43:4f:b7:d0:7b:f7:7e: 4d:e4:73:47:f9:31:dc:9b:a6:6e:78:fe:dd:42:30: cd:81:bc:ca:84:dc:ea:d8:e5:6e:60:f2:bd:b5:70: 4a:8b:05:13:9d:5d:9e:b4:61:9a:d1:85:52:7a:ab: 0f:f8:f3:96:b7:28:f1:3c:da:d4:77:4a:e3:ac:13: 4d:1b:f7:4d:6c:56:64:df:e2:0b:ef:e7:8f:5c:cc: e4:ba:43:46:54:81:e2:33:b2:1b:12:c3:bd:16:1d: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F6:3B:E9:94:68:3C:2E:B2:E4:07:A8:7F:32:29:D5:63:6F:42:01 X509v3 Authority Key Identifier: keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d2:96:51:94:36:46:3b:c9:66:86:5b:50:1a:03:e7:a4:41: 99:35:9a:24:40:e0:92:d4:4c:a0:17:d0:fe:a2:1f:e2:df:16: 2e:31:76:84:b7:81:a1:8c:f8:c8:c8:ae:c8:a1:bc:73:6b:40: c2:92:95:91:54:10:d5:12:56:35:0c:bb:4c:e8:26:65:00:8f: a5:bb:3a:0b:6c:13:43:6e:5d:1c:aa:4e:ef:84:33:a1:2d:4b: 58:cd:30:5a:3a:fb:0c:33:67:32:4f:b3:ea:2b:a9:f8:ab:09: f2:b1:20:1b:12:29:1b:7a:39:3a:77:41:f6:33:e3:42:97:fe: e2:95:4c:c9:ca:29:f8:44:ba:57:30:42:dd:60:b2:76:a4:fb: 64:4b:74:c6:90:90:c7:67:f7:c7:4f:e0:c7:07:50:ef:ce:45: ad:66:ff:ef:4c:20:f0:f2:a5:05:76:c1:05:b4:54:8d:c0:f9: e9:63:d4:67:af:71:01:43:f7:43:aa:8f:d4:13:cd:d1:e3:ac: 29:cd:56:05:e7:54:5c:70:78:74:55:d5:a1:7d:8d:90:b2:cc: 95:2e:37:41:bf:de:ac:0f:60:1f:72:a2:17:c6:76:95:b1:00: 11:20:df:1a:d2:d8:b0:9d:60:a1:8a:b5:49:e2:dd:16:54:a4: 57:1a:9a:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkYyRDExMC8GA1UEBRMoQUY2NzJEQThDNUQxRDZDODBENTA2MTc4QzlFN0NCNzQ0 RjZFMzhFNjAeFw0yNTAyMDQyMjQ1NTJaFw0yNTAyMTEyMjQ1NTJaMBgxFjAUBgNV BAMTDTY3YTI5OGExLWE3OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvFFEJrM9dTlZkAV9s2T5M4KC+y2f/ihesBL9DGVbzV7/jtKeCmoQ6QTDbAVM1 9SEYOXlf4p4e/Yf/tm4pgMN6OxvbOwlV/6kdB0aT9w1Dt11GrlefaJn5F7Cp2kvU HXRbMDQz9yIBBVXbxGgkkVCg4ztGIDX7BwZizuBpc3n+PtFDt7gfG9xV/P0gKm17 z7Xz63YJ9roYga0/yUHEQ0+30Hv3fk3kc0f5Mdybpm54/t1CMM2BvMqE3OrY5W5g 8r21cEqLBROdXZ60YZrRhVJ6qw/485a3KPE82tR3SuOsE00b901sVmTf4gvv549c zOS6Q0ZUgeIzshsSw70WHZ/NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOfY76ZRo PC6y5AeofzIp1WNvQgEwHwYDVR0jBBgwFoAUr2ctqMXR1sgNUGF4yefLdE9uOOYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjJELzZGODIxMTc4QUI4 ODExRUY4MEM3NUE3NEM0RjlBRTAyL3IyY3RxTVhSMXNnTlVHRjR5ZWZMZEU5dU9P WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcjJjdHFNWFIxc2dOVUdGNHllZkxkRTl1T09ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjJELzZGODIxMTc4QUI4ODExRUY4MEM3NUE3NEM0RjlBRTAyL3IyY3RxTVhSMXNn TlVHRjR5ZWZMZEU5dU9PWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAvSllGUNkY7yWaGW1AaA+ekQZk1miRA4JLUTKAX0P6iH+LfFi4xdoS3 gaGM+MjIrsihvHNrQMKSlZFUENUSVjUMu0zoJmUAj6W7OgtsE0NuXRyqTu+EM6Et S1jNMFo6+wwzZzJPs+orqfirCfKxIBsSKRt6OTp3QfYz40KX/uKVTMnKKfhEulcw Qt1gsnak+2RLdMaQkMdn98dP4McHUO/ORa1m/+9MIPDypQV2wQW0VI3A+elj1Gev cQFD90Oqj9QTzdHjrCnNVgXnVFxweHRV1aF9jZCyzJUuN0G/3qwPYB9yohfGdpWx ABEg3xrS2LCdYKGKtUni3RZUpFcamkE= -----END CERTIFICATE-----Generated at Wed Feb 5 19:53:58 2025 by rpki-client