$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft File: wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json) Hash identifier: KsjT260bjoR2kG4eQCwUapR9NSxpRwpgtGBsj1XWcFg= Subject key identifier: 10:22:9F:E3:B1:FF:88:FE:B3:24:E2:BB:C4:83:F9:EF:A5:B8:05:34 Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED Certificate issuer: /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft Manifest number: 1B Signing time: Wed 05 Feb 2025 05:17:14 +0000 Manifest this update: Wed 05 Feb 2025 05:17:13 +0000 Manifest next update: Wed 12 Feb 2025 05:17:13 +0000 Files and hashes: 1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: AOEXTzVAluJiX6+8VxzZIZks9mv6KH1wVYPk0XWPhFA=) 2: C20F79C4BEC711EFB3955851C4F9AE02.roa (hash: VTGuDVySoTaiWxAbdd/1KW1PWx6PDU5QdYkfoW8ucbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 05:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618 Validity Not Before: Feb 5 05:17:13 2025 GMT Not After : Feb 12 05:17:13 2025 GMT Subject: CN=67a2f45a-0727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0b:5b:ea:fc:6f:47:ff:fa:61:f1:84:5b:01: 38:fe:d3:b1:41:ed:92:3c:87:2f:8b:84:be:9c:31: c3:6b:75:91:c9:89:ac:24:18:63:7b:1f:5c:59:27: d2:e0:9e:41:32:83:76:00:2e:eb:a4:a7:00:45:b8: a3:c2:cf:02:a5:06:72:5e:b4:ce:4d:44:3d:2e:b1: ab:c9:e1:03:0a:5a:9e:12:af:d8:06:68:3a:c0:75: ae:ec:1e:05:26:52:fd:e2:30:f4:fb:d6:dc:cb:5e: dd:8b:5c:f3:8d:b8:ed:aa:2f:6d:a9:bb:2b:5b:5e: 92:96:63:3b:d7:00:28:f7:aa:2d:01:47:12:c9:29: 81:91:fc:20:bb:c4:17:6c:34:87:2d:bf:b8:20:4b: a8:4f:46:d4:3f:9d:09:d5:2d:d5:9e:40:62:82:84: 7c:2e:bf:d3:bc:e3:9d:e0:39:6c:d3:15:9f:61:1d: 42:3e:7c:d8:fa:f6:69:c9:ef:52:e1:50:20:e5:fc: ef:51:ef:ef:ca:f5:d4:04:e9:2a:79:ae:9c:9d:88: f6:ef:b3:6a:65:d4:fa:86:05:2f:cf:ad:27:d2:a2: 5c:52:4f:19:75:48:86:c3:a4:b4:97:0f:05:a5:00: c7:60:a3:df:22:a1:f0:9c:48:fa:b3:84:ab:05:f7: 9c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:22:9F:E3:B1:FF:88:FE:B3:24:E2:BB:C4:83:F9:EF:A5:B8:05:34 X509v3 Authority Key Identifier: keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e3:a1:c1:93:e4:f4:e9:42:4b:f7:f4:2c:16:74:e7:d8:4e: 60:54:63:4d:bb:da:72:64:ca:16:f0:a9:18:5d:95:d7:13:f7: 58:8e:f2:b5:d6:8a:43:71:71:d2:9f:c7:6a:2f:8b:86:d4:ec: 77:87:20:bc:9b:22:b0:20:62:74:10:e5:d4:cc:86:68:03:76: d2:ac:57:99:42:3d:0c:81:c5:ae:ef:b0:40:4d:cf:02:7d:d8: 68:90:e1:7e:3c:4a:a6:0f:33:77:fc:53:ea:68:a7:1c:54:47: 70:97:9e:2b:e9:aa:9e:44:e8:05:dc:15:d5:23:25:b9:df:cc: c6:4e:10:e8:7e:30:6f:a8:18:b1:9d:94:99:8f:0f:88:ab:58: 8c:29:68:90:c0:de:74:99:89:c6:7d:c6:89:a1:02:a2:0c:f5: 66:ba:f1:19:15:00:d8:9e:e8:b8:04:62:52:6e:2f:40:99:8a: 97:9b:d0:42:f0:4c:d7:0a:b1:35:f6:b6:9a:b0:04:0a:cd:8f: f3:89:11:1a:38:17:98:5f:15:35:8c:d2:ad:4d:14:b8:ef:f1: 1f:3d:34:e3:a4:69:6d:7e:8f:c1:b4:25:85:96:b1:1f:f3:09: 57:33:68:7b:bd:99:a1:b3:67:f2:07:31:df:89:39:bf:30:ac: 1a:13:f6:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTYxODExMC8GA1UEBRMoQzEzQThBQkQ1NzA0M0FBRkE1OEY1ODUzQkUyRkFCQ0E5 RjI2RjBFRDAeFw0yNTAyMDUwNTE3MTNaFw0yNTAyMTIwNTE3MTNaMBgxFjAUBgNV BAMTDTY3YTJmNDVhLTA3MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoC1vq/G9H//ph8YRbATj+07FB7ZI8hy+LhL6cMcNrdZHJiawkGGN7H1xZJ9Lg nkEyg3YALuukpwBFuKPCzwKlBnJetM5NRD0usavJ4QMKWp4Sr9gGaDrAda7sHgUm Uv3iMPT71tzLXt2LXPONuO2qL22puytbXpKWYzvXACj3qi0BRxLJKYGR/CC7xBds NIctv7ggS6hPRtQ/nQnVLdWeQGKChHwuv9O8453gOWzTFZ9hHUI+fNj69mnJ71Lh UCDl/O9R7+/K9dQE6Sp5rpydiPbvs2pl1PqGBS/PrSfSolxSTxl1SIbDpLSXDwWl AMdgo98iofCcSPqzhKsF95xnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUECKf47H/ iP6zJOK7xIP576W4BTQwHwYDVR0jBBgwFoAUwTqKvVcEOq+lj1hTvi+ryp8m8O0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNjE4L0U2RjY2REQyQkVD MzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3EtbGoxaFR2aS1yeXA4bThP MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd1RxS3ZWY0VPcS1sajFoVHZpLXJ5cDhtOE8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NjE4L0U2RjY2REQyQkVDMzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3Et bGoxaFR2aS1yeXA4bThPMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIPjocGT5PTpQkv39CwWdOfYTmBUY0272nJkyhbwqRhdldcT91iO8rXW ikNxcdKfx2ovi4bU7HeHILybIrAgYnQQ5dTMhmgDdtKsV5lCPQyBxa7vsEBNzwJ9 2GiQ4X48SqYPM3f8U+popxxUR3CXnivpqp5E6AXcFdUjJbnfzMZOEOh+MG+oGLGd lJmPD4irWIwpaJDA3nSZicZ9xomhAqIM9Wa68RkVANie6LgEYlJuL0CZipeb0ELw TNcKsTX2tpqwBArNj/OJERo4F5hfFTWM0q1NFLjv8R89NOOkaW1+j8G0JYWWsR/z CVczaHu9maGzZ/IHMd+JOb8wrBoT9v0= -----END CERTIFICATE-----Generated at Wed Feb 5 20:14:27 2025 by rpki-client