$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: QjmM7Ia77+tVtFiqS8sfUsItwF29Dw3gzaHcf6/AVPo= Subject key identifier: DE:C7:91:56:6F:CE:E0:F4:BA:19:C7:65:0B:DE:1E:22:63:91:53:8C Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 010D Signing time: Sat 15 Feb 2025 05:58:57 +0000 Manifest this update: Sat 15 Feb 2025 05:58:57 +0000 Manifest next update: Sat 22 Feb 2025 05:58:57 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: L6XXCAccEAdrYtUDZ2dchcynCNih4dZ3h7cR5mf82s0=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: AOPC9WbNcZUf3rw4IBXy2gFnwozs8jTrPTS3eOn6dJw=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: SfS9ZnMJ4K7BL+m5tPbXXtGeAg5+tE+/js3vJ/6kex8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37 Validity Not Before: Feb 15 05:58:57 2025 GMT Not After : Feb 22 05:58:57 2025 GMT Subject: CN=67b02d21-95f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:ec:42:2f:1a:12:77:d5:65:65:4c:d7:67: b8:80:56:07:20:68:41:9b:9a:02:39:8b:f4:91:e8: 40:04:48:6d:f6:80:6d:49:19:95:6e:7b:85:0e:dc: 6d:06:b6:09:12:74:eb:d5:c9:eb:bd:4c:c8:23:f7: 95:9b:e4:ba:ca:c5:7e:a0:26:36:6c:fb:19:58:98: a9:df:2e:92:a1:97:ad:85:3a:9d:f0:a2:e7:27:76: 1d:40:22:43:29:c0:55:4e:41:b2:d2:29:9b:b6:1f: 93:aa:32:66:5b:cc:cd:b0:99:8e:31:83:6d:ed:f9: 46:4c:84:27:0c:9e:70:54:90:bd:2f:85:2f:41:c2: 16:27:f5:5c:41:f9:c4:28:cf:95:99:97:42:28:7d: d0:b8:5c:9b:e0:bf:9c:d0:3e:32:f2:04:7a:21:cc: 02:0a:30:00:7f:f1:18:8d:67:35:24:fe:e5:17:f5: 6c:05:3f:b2:a5:50:2a:eb:72:d6:1b:d2:f7:ce:57: 12:97:7c:44:0f:fc:bf:c3:77:01:58:8e:63:cf:48: 93:2f:54:2f:bb:99:35:12:e4:78:85:cb:16:95:b6: 15:92:63:c4:42:23:29:9f:df:ec:95:e2:f8:bd:e4: a8:4c:5e:17:e2:50:96:f6:17:55:15:7b:a9:9f:2f: 68:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C7:91:56:6F:CE:E0:F4:BA:19:C7:65:0B:DE:1E:22:63:91:53:8C X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9b:18:7f:1b:58:3a:44:0c:5b:43:fe:41:b0:d8:dd:82:86: ed:15:7f:55:01:5f:a1:43:73:08:76:d3:a1:30:ad:28:e1:7a: 5d:a3:2d:49:d3:16:c2:f5:6f:3c:90:9e:d2:26:a1:8f:21:2e: 7f:49:a9:2a:11:a9:26:4e:f3:6d:e8:91:03:34:f3:1e:01:3e: 1b:79:33:6b:ff:05:35:91:0c:98:3d:85:9d:e4:34:d4:3a:51: 0e:a0:0b:30:74:64:8a:7c:3a:41:06:f3:bb:f9:b7:14:ae:c2: 57:c0:73:40:83:b7:f2:df:32:62:67:15:c4:34:84:96:42:c3: ea:05:25:ed:6f:e2:ae:c0:ea:0f:ac:fa:a8:76:a1:e9:3f:bf: e0:b5:6b:20:a9:f2:81:a6:f8:42:f0:5d:22:19:56:fa:42:1d: e1:6f:e5:9a:e8:9c:05:70:64:9c:ad:1d:fc:e2:34:64:bf:26: b9:03:64:d9:9a:4b:2b:c6:57:48:cd:9d:83:6b:9a:03:5f:48: 27:8c:eb:ce:a1:d5:e3:29:64:25:50:81:a1:b4:8b:87:11:eb: d2:42:04:b8:e4:14:69:15:cd:86:5d:82:34:96:3e:ce:59:66: e0:41:95:8e:fb:4e:25:60:ad:7d:72:72:22:3e:6a:32:5c:4c: 51:53:75:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjUwMjE1MDU1ODU3WhcNMjUwMjIyMDU1ODU3WjAYMRYwFAYD VQQDEw02N2IwMmQyMS05NWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ujsQi8aEnfVZWVM12e4gFYHIGhBm5oCOYv0kehABEht9oBtSRmVbnuFDtxt BrYJEnTr1cnrvUzII/eVm+S6ysV+oCY2bPsZWJip3y6SoZethTqd8KLnJ3YdQCJD KcBVTkGy0imbth+TqjJmW8zNsJmOMYNt7flGTIQnDJ5wVJC9L4UvQcIWJ/VcQfnE KM+VmZdCKH3QuFyb4L+c0D4y8gR6IcwCCjAAf/EYjWc1JP7lF/VsBT+ypVAq63LW G9L3zlcSl3xED/y/w3cBWI5jz0iTL1Qvu5k1EuR4hcsWlbYVkmPEQiMpn9/sleL4 veSoTF4X4lCW9hdVFXupny9omQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7HkVZv zuD0uhnHZQveHiJjkVOMMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlmxh/G1g6RAxbQ/5BsNjdgobtFX9VAV+hQ3MIdtOhMK0o4Xpdoy1J 0xbC9W88kJ7SJqGPIS5/SakqEakmTvNt6JEDNPMeAT4beTNr/wU1kQyYPYWd5DTU OlEOoAswdGSKfDpBBvO7+bcUrsJXwHNAg7fy3zJiZxXENISWQsPqBSXtb+KuwOoP rPqodqHpP7/gtWsgqfKBpvhC8F0iGVb6Qh3hb+Wa6JwFcGScrR384jRkvya5A2TZ mksrxldIzZ2Da5oDX0gnjOvOodXjKWQlUIGhtIuHEevSQgS45BRpFc2GXYI0lj7O WWbgQZWO+04lYK19cnIiPmoyXExRU3Xy -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:49 2025 by rpki-client