$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft File: itYQrIti8qb8qCWJVdXxJJJ7OgA.mft (raw, json) Hash identifier: d8vmZDeihcDeY6OPDaIh/UBrli6qHCPJQIgQzdZuwEU= Subject key identifier: C8:78:29:73:DE:BC:E5:64:27:FD:D0:FA:35:3B:8B:D2:EC:7A:B3:2C Authority key identifier: 8A:D6:10:AC:8B:62:F2:A6:FC:A8:25:89:55:D5:F1:24:92:7B:3A:00 Certificate issuer: /CN=A91BEE1D/serialNumber=8AD610AC8B62F2A6FCA8258955D5F124927B3A00 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft Manifest number: 15 Signing time: Wed 05 Feb 2025 06:24:09 +0000 Manifest this update: Wed 05 Feb 2025 06:24:08 +0000 Manifest next update: Wed 12 Feb 2025 06:24:08 +0000 Files and hashes: 1: itYQrIti8qb8qCWJVdXxJJJ7OgA.crl (hash: 8Lks+8wy4AavwYqdL2DzJpA8HcABrNZ2ELVLP+Sjquk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.crl rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE1D Validity Not Before: Feb 5 06:24:08 2025 GMT Not After : Feb 12 06:24:08 2025 GMT Subject: CN=67a30408-9429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:d2:fe:31:26:b9:33:6d:29:d7:b1:d9:c7: c8:a5:24:54:df:08:ce:cf:db:f0:90:27:6e:87:b5: 64:96:2b:3a:37:de:73:f9:1c:a0:9f:8e:08:8d:bc: f1:8b:50:dd:7c:04:8e:a6:34:f5:61:4b:95:22:59: 23:98:13:c1:8a:e5:d3:a7:6f:31:88:b0:ac:d4:4d: 6a:e1:25:28:18:ab:42:0c:9a:12:5a:be:0e:21:13: 86:53:64:19:d1:d8:7c:4c:18:ae:a5:1c:03:0d:57: d5:b2:cc:f4:70:72:1c:92:3c:df:18:5a:18:df:19: 3f:a8:34:d3:2e:66:ea:70:0c:7f:6b:e5:95:5f:23: 82:8b:8b:e4:3e:27:f4:a6:ea:bc:43:b6:cd:fe:e7: 23:a1:4e:3d:93:0b:da:a3:76:06:21:74:72:ff:83: 63:65:68:35:ad:57:6f:db:2c:04:ce:d0:8d:72:16: d2:9a:ac:42:7a:39:b4:6b:1a:c4:01:eb:ce:7f:1a: d6:fa:37:90:bd:e0:d5:2d:22:83:75:08:a0:a6:6b: 70:7f:d1:b9:24:27:05:db:4d:a3:a9:b9:c6:79:0b: 90:74:34:3e:fd:56:1c:0c:bf:cd:69:63:de:85:cd: be:28:30:a3:3b:9c:ae:1d:42:6a:22:a0:03:01:ac: 5b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:78:29:73:DE:BC:E5:64:27:FD:D0:FA:35:3B:8B:D2:EC:7A:B3:2C X509v3 Authority Key Identifier: keyid:8A:D6:10:AC:8B:62:F2:A6:FC:A8:25:89:55:D5:F1:24:92:7B:3A:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:2b:c1:72:48:d1:a1:6b:41:11:69:5d:24:06:b0:1d:89:ac: 34:e8:16:e4:cf:14:bb:86:0e:79:a8:49:35:4e:98:22:20:60: b4:77:01:32:f1:e0:25:da:61:a0:d1:f8:a8:9d:b8:a7:e2:88: 47:cf:99:b4:f3:de:5c:0d:fc:c5:fd:e0:a3:38:18:26:a0:df: 3b:13:ea:24:8d:04:6a:f2:1e:dc:8a:1a:2d:40:a7:9a:da:6e: 00:11:f1:d8:7c:67:a2:9c:1b:db:d5:c9:3c:6b:b5:d3:e0:6b: 08:76:e1:79:64:05:6a:55:d7:f2:af:17:c1:9b:80:c9:87:5c: 04:3a:ef:5e:d5:99:a8:30:95:1b:47:4d:23:ac:28:79:c9:45: e1:b2:57:6b:f5:72:6b:53:8b:71:2d:b5:87:fe:f6:97:0e:22: da:6f:6c:ef:70:15:ad:e8:c8:64:e3:d3:54:f4:a5:c1:15:9e: 53:6b:c2:1b:1f:64:ee:98:ee:be:56:9e:49:3d:99:2d:f3:2c: 85:c8:d1:73:7b:ec:8e:e3:e6:5b:fb:9f:69:88:31:b9:86:23: 5a:b7:ee:ea:63:ca:e7:20:ff:80:96:7d:bc:dd:23:a6:3d:fd: 6e:ed:52:7a:1b:ad:d8:73:7e:9c:c1:f4:d0:38:3f:30:81:77: ec:67:5d:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUUxRDExMC8GA1UEBRMoOEFENjEwQUM4QjYyRjJBNkZDQTgyNTg5NTVENUYxMjQ5 MjdCM0EwMDAeFw0yNTAyMDUwNjI0MDhaFw0yNTAyMTIwNjI0MDhaMBgxFjAUBgNV BAMTDTY3YTMwNDA4LTk0MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx5NL+MSa5M20p17HZx8ilJFTfCM7P2/CQJ26HtWSWKzo33nP5HKCfjgiNvPGL UN18BI6mNPVhS5UiWSOYE8GK5dOnbzGIsKzUTWrhJSgYq0IMmhJavg4hE4ZTZBnR 2HxMGK6lHAMNV9WyzPRwchySPN8YWhjfGT+oNNMuZupwDH9r5ZVfI4KLi+Q+J/Sm 6rxDts3+5yOhTj2TC9qjdgYhdHL/g2NlaDWtV2/bLATO0I1yFtKarEJ6ObRrGsQB 685/Gtb6N5C94NUtIoN1CKCma3B/0bkkJwXbTaOpucZ5C5B0ND79VhwMv81pY96F zb4oMKM7nK4dQmoioAMBrFvvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyHgpc968 5WQn/dD6NTuL0ux6sywwHwYDVR0jBBgwFoAUitYQrIti8qb8qCWJVdXxJJJ7OgAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFRTFELzlBREFEQURFQzcw RTExRUY4MDY3QzQ2NkM0RjlBRTAyL2l0WVFySXRpOHFiOHFDV0pWZFh4SkpKN09n QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXRZUXJJdGk4cWI4cUNXSlZkWHhKSko3T2dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF RTFELzlBREFEQURFQzcwRTExRUY4MDY3QzQ2NkM0RjlBRTAyL2l0WVFySXRpOHFi OHFDV0pWZFh4SkpKN09nQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHkrwXJI0aFrQRFpXSQGsB2JrDToFuTPFLuGDnmoSTVOmCIgYLR3ATLx 4CXaYaDR+KiduKfiiEfPmbTz3lwN/MX94KM4GCag3zsT6iSNBGryHtyKGi1Ap5ra bgAR8dh8Z6KcG9vVyTxrtdPgawh24XlkBWpV1/KvF8GbgMmHXAQ6717VmagwlRtH TSOsKHnJReGyV2v1cmtTi3EttYf+9pcOItpvbO9wFa3oyGTj01T0pcEVnlNrwhsf ZO6Y7r5Wnkk9mS3zLIXI0XN77I7j5lv7n2mIMbmGI1q37upjyucg/4CWfbzdI6Y9 /W7tUnobrdhzfpzB9NA4PzCBd+xnXaU= -----END CERTIFICATE-----Generated at Thu Feb 6 04:40:13 2025 by rpki-client