$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json) Hash identifier: Xgm3wXHqupQnQKlstQHM2oI6s94d2MfINLV9r/mYnoc= Subject key identifier: 6C:EF:36:87:18:9B:3C:54:D1:F6:91:23:E7:D0:66:28:CD:6D:54:46 Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft Manifest number: 0C Signing time: Wed 05 Feb 2025 06:31:51 +0000 Manifest this update: Wed 05 Feb 2025 06:31:51 +0000 Manifest next update: Wed 12 Feb 2025 06:31:51 +0000 Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: ugzauQKi0la1Ig8CpzX52t+jJ5j6B/0094EJF2FcJRY=) 2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35 Validity Not Before: Feb 5 06:31:51 2025 GMT Not After : Feb 12 06:31:51 2025 GMT Subject: CN=67a305d7-ee84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:32:a8:d4:e4:6d:c4:e4:8a:e8:a7:75:54: 8d:5a:e4:02:1b:ff:3b:f1:59:91:3d:89:b1:63:fc: c8:8b:f1:43:57:25:c8:59:66:3d:b0:b6:f3:15:2d: da:b3:14:83:21:46:8b:dc:80:22:51:61:5a:a9:18: 91:78:cd:33:b3:03:f8:66:01:91:76:c4:f3:f3:f7: fb:6b:49:ae:c3:ef:d9:7c:ce:be:d3:bb:d7:a5:8a: 33:57:f5:57:41:61:c7:ef:59:6e:c7:7a:4c:5f:58: 27:56:e8:20:90:31:1c:f3:c2:24:76:06:88:ba:f4: 73:25:b1:0e:1e:91:7f:0e:6a:d1:f0:05:b4:09:b4: 8c:da:18:c5:ce:e4:c6:5a:61:a1:3b:2b:bc:52:d0: bc:25:88:3f:f9:34:74:bb:a1:59:aa:ca:b9:1b:03: 5d:a8:78:25:e2:ce:6c:8e:83:d7:b1:6d:64:2f:60: a5:4a:56:7d:59:28:64:d4:54:12:e5:c6:f2:aa:a5: 97:dd:75:11:e2:a0:fc:92:39:47:52:75:1c:3e:71: 5f:3c:4a:31:25:3c:93:de:25:38:0b:ef:4f:96:5d: 7d:fe:44:69:99:5c:67:16:3d:b9:34:3e:a1:98:38: 95:2d:f8:b0:71:3b:2d:35:5b:a2:a2:a6:3c:16:d4: 43:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EF:36:87:18:9B:3C:54:D1:F6:91:23:E7:D0:66:28:CD:6D:54:46 X509v3 Authority Key Identifier: keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f5:75:87:e6:d2:68:79:e3:3a:40:0c:4e:3c:e0:71:6e:dd: a6:ad:85:f7:a5:b0:01:1f:36:af:49:71:1d:1a:61:9a:11:29: b2:95:d0:06:03:aa:a0:ad:43:4c:54:81:2c:fc:a9:1c:bc:6f: 4e:cb:8f:cf:d3:31:82:30:2d:c4:70:6d:39:37:00:20:a8:f4: 69:af:34:cd:f4:2c:fb:1c:c3:d9:be:0f:c4:c7:60:7b:15:d0: 17:62:9b:98:7e:ad:48:14:a4:0d:38:06:0c:56:b8:87:c7:ee: 2d:43:af:d9:b5:32:07:89:e2:5c:1a:33:d0:91:dc:0b:56:28: 30:54:30:2f:ba:d0:34:83:a5:e9:89:71:f1:86:b6:0c:5f:ed: 40:d0:4a:6a:d9:78:50:87:28:cb:a5:36:f5:22:5f:8c:71:5e: 7e:b2:41:7b:50:50:92:26:28:51:25:ee:35:d1:21:7a:a9:60: 13:8a:db:19:39:66:45:38:21:65:c4:10:88:8a:27:c8:94:56: 8b:dd:63:03:ba:a5:ba:33:4a:b5:bb:de:66:e0:44:31:b3:e6: e7:5d:94:5c:66:e8:1b:8a:6e:5d:b9:a1:b2:34:fe:74:da:d4: 73:1b:02:49:e7:54:a7:19:5d:89:1a:39:30:4e:ff:ff:73:a3: 19:b9:7c:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoRkI2Qjk0NjM2MUYwQzVDODJFMkIwNjc0MEQ0QkE4QjBC OTkzNTNGODAeFw0yNTAyMDUwNjMxNTFaFw0yNTAyMTIwNjMxNTFaMBgxFjAUBgNV BAMTDTY3YTMwNWQ3LWVlODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6JzKo1ORtxOSK6Kd1VI1a5AIb/zvxWZE9ibFj/MiL8UNXJchZZj2wtvMVLdqz FIMhRovcgCJRYVqpGJF4zTOzA/hmAZF2xPPz9/trSa7D79l8zr7Tu9elijNX9VdB YcfvWW7HekxfWCdW6CCQMRzzwiR2Boi69HMlsQ4ekX8OatHwBbQJtIzaGMXO5MZa YaE7K7xS0LwliD/5NHS7oVmqyrkbA12oeCXizmyOg9exbWQvYKVKVn1ZKGTUVBLl xvKqpZfddRHioPySOUdSdRw+cV88SjElPJPeJTgL70+WXX3+RGmZXGcWPbk0PqGY OJUt+LBxOy01W6KipjwW1EO7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbO82hxib PFTR9pEj59BmKM1tVEYwHwYDVR0jBBgwFoAU+2uUY2HwxcguKwZ0DUuosLmTU/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1L0ExNTlGNzgyRDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNndUt3WjBEVXVvc0xtVFVf Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTJ1VVkySHd4Y2d1S3daMERVdW9zTG1UVV9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1L0ExNTlGNzgyRDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNn dUt3WjBEVXVvc0xtVFVfZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA/1dYfm0mh54zpADE484HFu3aathfelsAEfNq9JcR0aYZoRKbKV0AYD qqCtQ0xUgSz8qRy8b07Lj8/TMYIwLcRwbTk3ACCo9GmvNM30LPscw9m+D8THYHsV 0Bdim5h+rUgUpA04BgxWuIfH7i1Dr9m1MgeJ4lwaM9CR3AtWKDBUMC+60DSDpemJ cfGGtgxf7UDQSmrZeFCHKMulNvUiX4xxXn6yQXtQUJImKFEl7jXRIXqpYBOK2xk5 ZkU4IWXEEIiKJ8iUVovdYwO6pbozSrW73mbgRDGz5uddlFxm6BuKbl25obI0/nTa 1HMbAknnVKcZXYkaOTBO//9zoxm5fJk= -----END CERTIFICATE-----Generated at Thu Feb 6 04:54:43 2025 by rpki-client