$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json) Hash identifier: uBxk15u2TlC43kYXEasLtuv7h59AsXU9F5OJZpFSu5U= Subject key identifier: F6:75:AA:24:2A:35:3A:A7:FF:E4:1A:38:CB:2F:B0:6F:97:A2:DC:C8 Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft Manifest number: 10 Signing time: Wed 05 Feb 2025 06:30:32 +0000 Manifest this update: Wed 05 Feb 2025 06:30:31 +0000 Manifest next update: Wed 12 Feb 2025 06:30:31 +0000 Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: LBt6VOiLA42ERQeDZSqFL1r52DOXblSAgUc07iIYJSw=) 2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: e/G+ixBQ6LN/rcfPtD+3nHt6guJrjUvteGGskuG6eAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083 Validity Not Before: Feb 5 06:30:31 2025 GMT Not After : Feb 12 06:30:31 2025 GMT Subject: CN=67a30588-0379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:f9:e6:30:8f:ce:d2:1d:a4:3f:49:34:38: 9b:8e:5d:fe:b5:3d:0b:ca:d8:77:04:f6:91:eb:7c: 20:78:9d:e3:78:3d:3b:17:12:ec:cf:92:a8:69:c6: b3:5e:e0:7e:d5:cc:d2:90:cd:dc:bd:6b:9c:da:ce: 52:fb:c9:44:4e:4b:4f:3a:97:d5:88:2a:f3:05:0a: 61:96:ec:a2:46:e7:00:ba:d4:99:52:1f:9d:29:e1: 1d:9f:0c:b5:94:fa:3d:22:5e:84:fe:7e:1d:25:ae: 6d:30:76:c1:19:55:55:31:e1:f4:0f:dc:38:9d:74: da:45:8b:d6:5c:64:34:73:d0:a4:be:07:50:f8:6a: 9f:92:32:9d:cb:8d:6d:ee:dc:e0:04:83:96:89:29: 27:56:08:4c:83:f9:9a:22:59:28:dd:ce:70:f4:8e: 51:0f:eb:6d:98:35:59:fd:da:67:b0:5e:91:4a:93: ab:81:12:0a:07:2a:7b:45:74:4e:07:eb:68:fe:c0: cd:74:22:fe:0e:16:4f:41:06:95:c3:8a:5c:0b:35: b1:35:b7:7a:7f:3a:84:52:5f:ba:d4:e5:bf:ba:ca: c6:2e:20:85:76:3f:fb:f4:94:a3:4d:15:ee:16:a3: 76:8e:5b:78:bc:62:bc:37:51:7a:a5:d4:f8:fe:a7: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:75:AA:24:2A:35:3A:A7:FF:E4:1A:38:CB:2F:B0:6F:97:A2:DC:C8 X509v3 Authority Key Identifier: keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:7b:13:68:69:a4:aa:c3:47:03:5f:f5:91:4b:9a:ce:4e:92: 96:cd:16:84:6b:8b:7d:28:15:28:b3:8e:c9:7d:4e:2b:3f:46: 89:c8:01:7b:d6:5a:69:e7:0b:5a:96:4a:ca:7b:77:fb:ba:5b: fb:1a:53:7a:9a:8c:de:09:97:33:f6:80:a9:95:71:7a:88:28: f1:5c:d5:55:2e:06:52:a6:55:b2:cf:7e:55:bb:d8:41:02:71: 54:b2:f3:f2:9e:8b:31:5c:cf:16:50:40:5b:96:37:22:be:22: cb:15:00:71:01:6a:ee:dc:0d:6e:e0:06:88:ca:85:58:10:e0: f7:bf:77:b0:fc:75:eb:f5:7d:52:db:7f:d8:fc:f4:ed:85:19: 0b:81:09:4e:ec:da:f7:a1:2f:72:2c:14:ca:f8:35:c4:89:0b: 44:e5:81:60:cd:6b:71:bb:50:f2:b8:6a:71:aa:07:0e:1c:19: e4:98:f4:9f:59:09:92:8d:af:5e:b6:d6:a5:1a:1b:f6:43:5f: c5:47:66:49:cd:77:a1:f3:70:f6:f3:a2:29:6c:4a:5f:ac:be: ea:2b:2b:1d:4d:81:28:49:37:bd:17:67:a0:00:be:cc:83:e0: df:c7:b4:32:63:7e:8a:14:a8:46:1e:7d:00:1d:9b:cc:d4:ca: 91:f7:42:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTA4MzExMC8GA1UEBRMoRThDRjIyQTA4RTQzOTFDQUQxNTBGQTMxQjQ0REM5M0M4 QUI4MjVFQTAeFw0yNTAyMDUwNjMwMzFaFw0yNTAyMTIwNjMwMzFaMBgxFjAUBgNV BAMTDTY3YTMwNTg4LTAzNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5YPnmMI/O0h2kP0k0OJuOXf61PQvK2HcE9pHrfCB4neN4PTsXEuzPkqhpxrNe 4H7VzNKQzdy9a5zazlL7yUROS086l9WIKvMFCmGW7KJG5wC61JlSH50p4R2fDLWU +j0iXoT+fh0lrm0wdsEZVVUx4fQP3DiddNpFi9ZcZDRz0KS+B1D4ap+SMp3LjW3u 3OAEg5aJKSdWCEyD+ZoiWSjdznD0jlEP622YNVn92mewXpFKk6uBEgoHKntFdE4H 62j+wM10Iv4OFk9BBpXDilwLNbE1t3p/OoRSX7rU5b+6ysYuIIV2P/v0lKNNFe4W o3aOW3i8Yrw3UXql1Pj+p7UhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9nWqJCo1 Oqf/5Bo4yy+wb5ei3MgwHwYDVR0jBBgwFoAU6M8ioI5DkcrRUPoxtE3JPIq4Jeow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MDgzL0MwNkYyRTQyRDFC MDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEpl by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk04aW9JNURrY3JSVVBveHRFM0pQSXE0SmVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MDgzL0MwNkYyRTQyRDFCMDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2Ny UlVQb3h0RTNKUElxNEplby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALF7E2hppKrDRwNf9ZFLms5OkpbNFoRri30oFSizjsl9Tis/RonIAXvW WmnnC1qWSsp7d/u6W/saU3qajN4JlzP2gKmVcXqIKPFc1VUuBlKmVbLPflW72EEC cVSy8/KeizFczxZQQFuWNyK+IssVAHEBau7cDW7gBojKhVgQ4Pe/d7D8dev1fVLb f9j89O2FGQuBCU7s2vehL3IsFMr4NcSJC0TlgWDNa3G7UPK4anGqBw4cGeSY9J9Z CZKNr1621qUaG/ZDX8VHZknNd6HzcPbzoilsSl+svuorKx1NgShJN70XZ6AAvsyD 4N/HtDJjfooUqEYefQAdm8zUypH3QqU= -----END CERTIFICATE-----Generated at Wed Feb 5 20:01:11 2025 by rpki-client