$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft File: oCcZWkgg89cmSk1X7pqdTCoQySM.mft (raw, json) Hash identifier: C7Wk5fYdeS4G0ktpYif9s7errdaI/KUN97Deb6mwXiE= Subject key identifier: 1C:0A:39:FA:F1:44:EF:63:01:10:48:4C:7E:6B:45:0A:3D:3E:0C:2C Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 Certificate issuer: /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft Manifest number: 10 Signing time: Tue 04 Feb 2025 14:16:29 +0000 Manifest this update: Tue 04 Feb 2025 14:16:29 +0000 Manifest next update: Tue 11 Feb 2025 14:16:29 +0000 Files and hashes: 1: oCcZWkgg89cmSk1X7pqdTCoQySM.crl (hash: v2WzBYDwS+9cJn5PBd+3pHscpgydV0ZxXx6zG2nsj6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Feb 2025 14:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621 Validity Not Before: Feb 4 14:16:29 2025 GMT Not After : Feb 11 14:16:29 2025 GMT Subject: CN=67a2213d-aa0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5b:d0:d4:d6:c2:4f:1c:59:08:94:00:86:94: 9e:96:eb:63:ba:ed:59:13:25:43:84:e5:d5:5e:c5: 24:91:72:86:94:f3:8a:8b:2a:cb:4d:61:2b:65:43: 0f:12:6b:4f:49:07:5b:4b:27:7b:77:b4:ac:a2:13: 13:16:4e:0c:53:24:18:7e:f5:4d:a3:4c:f3:be:53: 2a:3b:fc:ff:69:cd:e7:a4:f1:1a:3b:4d:55:01:76: 7d:5f:20:86:2e:be:4a:49:f9:88:ae:57:d6:df:f9: 1a:6c:5a:52:8f:5c:eb:17:77:93:78:ff:ec:33:72: 2d:98:85:96:15:e6:b5:af:33:fb:e6:93:33:85:c3: e0:e4:a9:91:a7:b6:89:6c:c4:8c:bb:2b:fa:20:3e: f9:48:4f:82:54:18:c2:30:86:b9:15:d4:bc:ed:40: 20:1e:b8:1b:23:14:5b:63:90:3d:9d:1d:53:97:d7: 9e:66:8e:67:b0:a2:f3:6a:e5:44:a4:65:f9:fc:cc: fb:b5:b9:b8:15:3f:28:ea:72:24:a5:f9:24:2b:35: c8:36:e2:13:49:31:2a:9c:bc:4f:ca:1c:ca:83:d5: a6:00:6a:97:0a:3c:b9:3a:91:c2:da:86:26:90:db: b7:6a:fd:4d:c8:2b:e4:6f:bd:9e:26:6f:b8:2b:31: a8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0A:39:FA:F1:44:EF:63:01:10:48:4C:7E:6B:45:0A:3D:3E:0C:2C X509v3 Authority Key Identifier: keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c4:5c:a3:fa:9e:b1:90:3c:6d:6c:af:44:e4:5d:52:a4:17: 45:6c:5b:7c:56:bd:e4:45:40:c6:1c:68:a3:20:39:ab:72:8d: 1d:ed:9c:b0:9c:e8:21:12:3c:8d:e5:37:2b:4a:8a:24:82:9b: 0b:44:18:8c:68:bd:e5:17:29:c0:8e:b7:f2:ab:a1:28:18:89: 8e:55:7f:01:1b:29:cd:4b:15:c1:ab:4d:d6:7f:53:e5:b7:85: 2d:25:b1:e5:0b:8d:61:2a:b1:ab:42:a1:6d:67:53:e5:33:01: f4:61:e5:b3:b7:c5:97:21:1e:70:99:b9:9e:e4:99:69:4f:56: 33:b6:24:4e:82:09:1a:67:bd:4d:f2:ca:c9:f8:fe:a6:5c:88: 1b:cf:52:8f:39:2d:aa:f5:2f:0f:f8:66:84:c9:de:18:ab:d0: 96:57:5b:e5:26:8f:3d:d7:d8:c2:03:1c:aa:de:4d:d4:80:88: e1:7c:0a:87:e9:1f:0d:a5:f2:8b:b7:fa:ed:71:c4:d6:22:00: 15:9e:29:df:25:4e:f4:a7:b6:ab:fe:03:40:2b:13:26:52:82: 3d:16:b2:3f:4c:f9:a3:62:39:05:c1:a5:6e:24:22:b2:1f:d6: 0a:c9:cd:c1:a9:20:e1:d7:90:3b:82:46:89:a3:c9:72:c1:1f: cf:ba:ec:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTYyMTExMC8GA1UEBRMoQTAyNzE5NUE0ODIwRjNENzI2NEE0RDU3RUU5QTlENEMy QTEwQzkyMzAeFw0yNTAyMDQxNDE2MjlaFw0yNTAyMTExNDE2MjlaMBgxFjAUBgNV BAMTDTY3YTIyMTNkLWFhMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaW9DU1sJPHFkIlACGlJ6W62O67VkTJUOE5dVexSSRcoaU84qLKstNYStlQw8S a09JB1tLJ3t3tKyiExMWTgxTJBh+9U2jTPO+Uyo7/P9pzeek8Ro7TVUBdn1fIIYu vkpJ+YiuV9bf+RpsWlKPXOsXd5N4/+wzci2YhZYV5rWvM/vmkzOFw+DkqZGntols xIy7K/ogPvlIT4JUGMIwhrkV1LztQCAeuBsjFFtjkD2dHVOX155mjmewovNq5USk Zfn8zPu1ubgVPyjqciSl+SQrNcg24hNJMSqcvE/KHMqD1aYAapcKPLk6kcLahiaQ 27dq/U3IK+RvvZ4mb7grMajxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHAo5+vFE 72MBEEhMfmtFCj0+DCwwHwYDVR0jBBgwFoAUoCcZWkgg89cmSk1X7pqdTCoQySMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxNjIxLzM1RURBOTJFQ0Yw RDExRUY5MkYxRUMzNkM0RjlBRTAyL29DY1pXa2dnODljbVNrMVg3cHFkVENvUXlT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb0NjWldrZ2c4OWNtU2sxWDdwcWRUQ29ReVNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx NjIxLzM1RURBOTJFQ0YwRDExRUY5MkYxRUMzNkM0RjlBRTAyL29DY1pXa2dnODlj bVNrMVg3cHFkVENvUXlTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHLEXKP6nrGQPG1sr0TkXVKkF0VsW3xWveRFQMYcaKMgOatyjR3tnLCc 6CESPI3lNytKiiSCmwtEGIxoveUXKcCOt/KroSgYiY5VfwEbKc1LFcGrTdZ/U+W3 hS0lseULjWEqsatCoW1nU+UzAfRh5bO3xZchHnCZuZ7kmWlPVjO2JE6CCRpnvU3y ysn4/qZciBvPUo85Lar1Lw/4ZoTJ3hir0JZXW+Umjz3X2MIDHKreTdSAiOF8Cofp Hw2l8ou3+u1xxNYiABWeKd8lTvSntqv+A0ArEyZSgj0Wsj9M+aNiOQXBpW4kIrIf 1grJzcGpIOHXkDuCRomjyXLBH8+67GE= -----END CERTIFICATE-----Generated at Wed Feb 5 20:10:38 2025 by rpki-client