$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft File: O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json) Hash identifier: yrCrwwUNQ6/xaSmKqafg5osLeLzDZiogDNkQqNicCf0= Subject key identifier: 98:16:D0:66:D5:AC:38:E2:28:B5:D4:71:88:2C:12:C3:E0:B3:14:0C Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6 Certificate issuer: /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft Manifest number: 0C Signing time: Wed 05 Feb 2025 06:32:02 +0000 Manifest this update: Wed 05 Feb 2025 06:32:01 +0000 Manifest next update: Wed 12 Feb 2025 06:32:01 +0000 Files and hashes: 1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: FmYleDwpv1YgtEyJrgMZkQS1mmwqEsXSUf3wI79EF18=) 2: 372B21F6D4BA11EFA5BAA345C4F9AE02.roa (hash: 0VQHEL6AI7GrKoKG052X6QJW7qwnCtlNzYdHLuxNwGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C022C Validity Not Before: Feb 5 06:32:01 2025 GMT Not After : Feb 12 06:32:01 2025 GMT Subject: CN=67a305e2-a0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:d8:6f:f8:be:26:db:1e:a3:e5:37:fa:9b: de:00:5e:e1:24:e6:5b:f2:d3:bb:46:a1:0a:a7:15: ee:a4:da:27:88:e4:20:14:40:46:7a:b6:0d:78:0a: 0a:44:15:50:67:b7:38:fe:05:f3:47:a2:9c:f1:e8: 6f:b8:ec:27:60:33:0c:4f:9f:80:62:10:63:fb:68: c5:2e:fb:d4:1c:78:07:b8:c9:51:f0:51:86:44:2b: e1:d7:24:6a:28:e3:14:fb:cb:62:5c:9d:12:6c:07: 36:20:d6:ae:85:2e:56:e0:33:f2:7b:ac:1c:56:42: 39:f5:41:d7:4f:e5:41:0a:30:f0:32:b0:47:b3:08: 4c:9a:62:c2:41:31:5d:b7:14:a6:2c:83:a6:aa:6c: 55:c0:99:a4:29:1f:af:73:32:b0:20:ca:28:7b:b9: ea:ce:18:c6:46:a9:58:f6:91:61:01:d1:20:19:e4: 90:58:40:41:46:9c:2e:d3:90:f1:ca:25:30:fa:ae: a2:50:02:9e:6f:bf:d1:43:d7:c6:77:dd:40:29:db: e2:22:3d:12:e4:dc:8b:c4:9b:59:8e:e2:e9:76:84: c9:b9:9b:0b:aa:36:d1:f8:a8:d8:9c:9d:88:05:97: 1d:8b:d7:3a:e1:7c:31:e6:e4:bf:35:e8:41:ab:64: dc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:16:D0:66:D5:AC:38:E2:28:B5:D4:71:88:2C:12:C3:E0:B3:14:0C X509v3 Authority Key Identifier: keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:56:62:63:33:2a:1f:16:7a:c5:b4:28:44:61:d9:15:25:33: b2:5b:c5:46:57:e8:01:5a:55:30:86:41:de:5e:b8:0c:c1:7f: a3:81:40:e7:11:c3:9d:7e:f5:7f:e6:42:6f:89:05:07:95:bc: 89:29:97:12:01:93:89:21:fe:e8:62:5f:48:2e:9d:f1:9e:fd: 21:3c:70:67:2a:b1:a2:cf:9e:b1:38:20:f5:27:96:38:56:f4: 32:46:f2:bb:23:ba:e5:09:66:40:e7:bb:d0:a0:66:93:2a:93: b3:7d:e6:92:50:1e:60:db:0e:d6:b9:82:ba:46:d1:7c:e5:e1: 74:f3:8c:48:6b:89:e8:c4:70:88:e6:6c:bc:03:46:a0:f7:05: cd:4e:2d:32:b3:44:1b:28:cf:d4:e8:8d:fa:89:f6:b3:a1:ad: 4a:4d:4e:09:dc:a0:ca:09:dd:fb:4b:c5:ef:94:a0:6a:2b:ea: d4:db:b8:79:78:7d:23:1b:5e:17:63:b8:a0:e6:fd:23:42:19: d0:be:14:8b:87:4c:aa:d7:b7:97:37:cd:73:b5:03:6f:b5:40: 0f:a1:df:a8:76:64:a5:6b:b8:1e:08:f3:9c:6e:61:bf:83:84: 76:2b:d4:26:26:09:aa:10:ed:db:02:56:07:b4:4e:5e:7b:f8: 01:eb:77:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDIyQzExMC8GA1UEBRMoM0JBMjU1OENBNUYxQTAzN0Q5Njk2RjU2N0FFODEzNjdD NkVFMzVFNjAeFw0yNTAyMDUwNjMyMDFaFw0yNTAyMTIwNjMyMDFaMBgxFjAUBgNV BAMTDTY3YTMwNWUyLWEwYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZXNhv+L4m2x6j5Tf6m94AXuEk5lvy07tGoQqnFe6k2ieI5CAUQEZ6tg14CgpE FVBntzj+BfNHopzx6G+47CdgMwxPn4BiEGP7aMUu+9QceAe4yVHwUYZEK+HXJGoo 4xT7y2JcnRJsBzYg1q6FLlbgM/J7rBxWQjn1QddP5UEKMPAysEezCEyaYsJBMV23 FKYsg6aqbFXAmaQpH69zMrAgyih7uerOGMZGqVj2kWEB0SAZ5JBYQEFGnC7TkPHK JTD6rqJQAp5vv9FD18Z33UAp2+IiPRLk3IvEm1mO4ul2hMm5mwuqNtH4qNicnYgF lx2L1zrhfDHm5L816EGrZNwZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmBbQZtWs OOIotdRxiCwSw+CzFAwwHwYDVR0jBBgwFoAUO6JVjKXxoDfZaW9WeugTZ8buNeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMjJDL0IxQzE4MjMwRDRC OTExRUY5RkE4RTI0RkM0RjlBRTAyL082SlZqS1h4b0RmWmFXOVdldWdUWjhidU5l WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTzZKVmpLWHhvRGZaYVc5V2V1Z1RaOGJ1TmVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MjJDL0IxQzE4MjMwRDRCOTExRUY5RkE4RTI0RkM0RjlBRTAyL082SlZqS1h4b0Rm WmFXOVdldWdUWjhidU5lWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAARWYmMzKh8WesW0KERh2RUlM7JbxUZX6AFaVTCGQd5euAzBf6OBQOcR w51+9X/mQm+JBQeVvIkplxIBk4kh/uhiX0gunfGe/SE8cGcqsaLPnrE4IPUnljhW 9DJG8rsjuuUJZkDnu9CgZpMqk7N95pJQHmDbDta5grpG0Xzl4XTzjEhriejEcIjm bLwDRqD3Bc1OLTKzRBsoz9TojfqJ9rOhrUpNTgncoMoJ3ftLxe+UoGor6tTbuHl4 fSMbXhdjuKDm/SNCGdC+FIuHTKrXt5c3zXO1A2+1QA+h36h2ZKVruB4I85xuYb+D hHYr1CYmCaoQ7dsCVge0Tl57+AHrd24= -----END CERTIFICATE-----Generated at Wed Feb 5 20:15:59 2025 by rpki-client