$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json) Hash identifier: E4x+gSTioohrqOkJIhlZhuwU1R/esMsIp+dm7h/2Vyc= Subject key identifier: 88:E3:5C:11:18:2C:AE:05:11:8F:72:76:85:06:0D:26:22:4E:9A:A1 Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft Manifest number: 27 Signing time: Wed 05 Feb 2025 06:13:37 +0000 Manifest this update: Wed 05 Feb 2025 06:13:37 +0000 Manifest next update: Wed 12 Feb 2025 06:13:37 +0000 Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: 7ilzwuftE6p6BPuJ5+6u9PPayhQ1ofmcWogqQcb7qEk=) 2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: JnGUEG/UELgRSrXf0UwtaiJ+4LEhgtXWroHpv/a9KQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53 Validity Not Before: Feb 5 06:13:37 2025 GMT Not After : Feb 12 06:13:37 2025 GMT Subject: CN=67a30191-7c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:91:3e:75:8d:b0:4d:46:9e:86:ad:f4:1b: 19:74:3c:37:49:5f:3d:dd:de:b6:67:2a:d7:af:6b: bc:a1:04:b9:c5:ae:24:a5:8d:1f:d5:01:db:ee:94: df:fc:a0:29:20:70:99:d5:ac:52:55:41:57:56:e7: cf:48:8b:f1:d9:c8:6a:13:6f:a7:1e:80:5d:b0:20: 44:cd:65:5f:83:a5:7b:4c:5f:63:f5:f6:68:fa:74: da:2e:0d:ee:5f:f7:55:82:ae:1f:7f:37:2c:c2:5c: 31:aa:c9:df:87:40:1d:52:98:2c:12:1f:15:62:23: b3:bf:d9:12:e8:97:9d:3f:c1:1f:05:c5:2a:3c:35: 29:87:50:a5:a9:6b:35:e4:89:94:89:e1:57:5b:58: 85:c9:b7:12:36:c4:3b:67:14:8b:3a:f2:cb:c6:48: 1f:65:1e:bc:87:e6:4c:19:23:21:68:d0:ad:80:1e: e4:2c:06:4a:61:a1:c8:0c:dd:4a:66:ae:75:c2:ef: 5e:ad:3d:bc:cc:b3:42:8e:08:13:44:13:12:77:f1: ee:e0:d8:fb:73:13:d3:2f:96:86:fd:e9:14:79:67: 44:5e:f4:a4:44:d3:c3:35:8b:69:b5:95:50:30:8a: 1b:f3:cf:67:09:7b:11:e0:04:2d:bd:cd:cd:84:89: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E3:5C:11:18:2C:AE:05:11:8F:72:76:85:06:0D:26:22:4E:9A:A1 X509v3 Authority Key Identifier: keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:e9:f0:dc:01:f0:5f:4e:d1:38:63:6b:3b:e8:19:b4:94:83: 8b:ce:3b:88:d1:fc:95:18:1b:62:2b:e4:6f:50:90:7e:76:e4: 8c:44:d5:6c:cf:83:72:45:16:28:6b:2c:d3:c5:a0:30:99:00: f6:16:99:fa:2d:df:8b:9f:2a:ce:0c:aa:29:47:db:01:ba:ed: 3d:d8:2d:55:1d:90:0e:74:55:d4:63:86:dc:58:73:db:1c:68: 5c:3a:1f:3c:27:2a:56:69:0d:4f:a9:7f:b8:ac:69:88:3f:9b: bc:4b:97:f3:fa:e9:98:6e:ea:e9:2d:12:9d:3e:4e:94:89:a6: eb:85:1e:46:8f:80:37:a8:9c:84:11:4f:4f:86:f5:6e:b2:3a: e5:37:b2:1c:83:c9:91:b0:7b:c7:12:bb:c3:03:13:07:23:8d: 0b:5c:bf:be:7b:35:71:11:29:49:28:23:6c:cb:bb:08:04:d9: 2b:f7:16:45:e7:0b:6e:ca:d0:74:f2:57:1e:5d:89:18:a8:87: ae:87:0c:34:d8:0f:88:b5:70:74:4c:cf:c2:8a:43:9a:9b:0d: 21:fa:6a:1b:2e:c0:bc:29:a5:5c:47:53:b3:ea:52:74:7b:0d: c8:f5:8f:1c:34:16:42:a1:94:26:a2:42:4d:b0:59:8e:53:9d: 7c:27:86:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUQ1MzExMC8GA1UEBRMoOEY3NEMxNzU1RjE4ODcwOENDRTNBNjdERUMyODU5OTM2 NDhERjE4MzAeFw0yNTAyMDUwNjEzMzdaFw0yNTAyMTIwNjEzMzdaMBgxFjAUBgNV BAMTDTY3YTMwMTkxLTdjODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvmJE+dY2wTUaehq30Gxl0PDdJXz3d3rZnKteva7yhBLnFriSljR/VAdvulN/8 oCkgcJnVrFJVQVdW589Ii/HZyGoTb6cegF2wIETNZV+DpXtMX2P19mj6dNouDe5f 91WCrh9/NyzCXDGqyd+HQB1SmCwSHxViI7O/2RLol50/wR8FxSo8NSmHUKWpazXk iZSJ4VdbWIXJtxI2xDtnFIs68svGSB9lHryH5kwZIyFo0K2AHuQsBkphocgM3Upm rnXC716tPbzMs0KOCBNEExJ38e7g2PtzE9Mvlob96RR5Z0Re9KRE08M1i2m1lVAw ihvzz2cJexHgBC29zc2Eia9HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiONcERgs rgURj3J2hQYNJiJOmqEwHwYDVR0jBBgwFoAUj3TBdV8YhwjM46Z97ChZk2SN8YMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RDUzL0ZDN0Q2MDg2QUM4 MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdqTTQ2Wjk3Q2haazJTTjhZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvajNUQmRWOFlod2pNNDZaOTdDaFprMlNOOFlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 RDUzL0ZDN0Q2MDg2QUM4MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdq TTQ2Wjk3Q2haazJTTjhZTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjp8NwB8F9O0ThjazvoGbSUg4vOO4jR/JUYG2Ir5G9QkH525IxE1WzP g3JFFihrLNPFoDCZAPYWmfot34ufKs4MqilH2wG67T3YLVUdkA50VdRjhtxYc9sc aFw6HzwnKlZpDU+pf7isaYg/m7xLl/P66Zhu6uktEp0+TpSJpuuFHkaPgDeonIQR T0+G9W6yOuU3shyDyZGwe8cSu8MDEwcjjQtcv757NXERKUkoI2zLuwgE2Sv3FkXn C27K0HTyVx5diRioh66HDDTYD4i1cHRMz8KKQ5qbDSH6ahsuwLwppVxHU7PqUnR7 Dcj1jxw0FkKhlCaiQk2wWY5TnXwnhn0= -----END CERTIFICATE-----Generated at Wed Feb 5 20:15:11 2025 by rpki-client