$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: 7AimoxHVVrwl1xzPwKfMBN8IIDNtGTKIyig91aFW/lg= Subject key identifier: 04:CD:BA:3F:2A:E2:C3:5C:FA:10:23:00:C7:3D:1C:2D:87:E2:31:22 Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 12 Signing time: Wed 05 Feb 2025 06:25:42 +0000 Manifest this update: Wed 05 Feb 2025 06:25:41 +0000 Manifest next update: Wed 12 Feb 2025 06:25:41 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: xEcyfynydgohluFZKQBmsNfd1Jzu0my/s0pjTo3tjWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5 Validity Not Before: Feb 5 06:25:41 2025 GMT Not After : Feb 12 06:25:41 2025 GMT Subject: CN=67a30466-4f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:6c:d4:80:de:60:95:0c:b1:68:b5:09:8a: 78:b3:f6:f8:f6:3e:55:4e:31:8f:ce:7e:af:b9:d4: c6:3c:0d:ed:2a:47:41:0a:b5:73:82:54:50:36:ed: e9:f1:4f:13:e0:bd:39:dc:38:da:1c:8d:45:a7:10: c7:61:26:29:b4:87:a4:46:dd:98:cc:bc:c5:4d:8a: ba:e8:b6:ff:42:3c:9d:de:ec:09:34:3a:10:2e:1d: 32:4f:12:91:f3:76:b2:4c:35:22:ac:7a:c9:c3:b4: 88:7a:be:53:80:ea:42:03:79:e9:24:19:2e:75:0e: b1:4f:70:7f:19:c5:0f:ca:cd:91:e4:d4:b5:19:6e: 54:a1:ad:15:b1:15:8a:97:f0:08:a2:3b:1b:02:3f: c8:b7:0d:33:fe:dc:cc:5a:5a:68:7e:20:7e:ce:16: 84:c5:b1:1a:05:3a:06:f7:04:8f:66:5c:f8:7c:f8: d9:1f:57:da:57:cc:c0:b2:c2:f2:8a:2f:89:3f:13: ad:e6:de:32:16:b4:7d:36:ee:5c:50:2b:46:af:6d: 27:cf:77:ed:ce:d9:19:49:ac:7c:32:7c:e3:b6:72: 5b:a5:29:5c:5c:98:5a:90:d2:30:d4:b5:43:1e:aa: 51:2b:9c:aa:59:06:4b:5b:ee:e0:09:21:53:f1:3d: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CD:BA:3F:2A:E2:C3:5C:FA:10:23:00:C7:3D:1C:2D:87:E2:31:22 X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:f2:a5:53:ad:8c:11:ed:53:7f:b7:5f:b2:84:33:5c:30:26: e1:a4:7e:54:26:a7:51:71:94:25:d4:dd:3d:22:eb:5d:6f:bf: 1c:6c:16:c5:45:3e:d0:7a:63:fa:a2:ea:b8:51:0b:7c:e1:2c: 19:70:17:73:ef:fb:dc:7b:d0:67:ec:fc:ce:40:a4:52:0e:4b: 40:18:7e:5e:30:f7:c6:84:d4:18:f6:6c:9b:d0:c9:1d:46:48: 2c:bb:5c:de:f7:3c:1b:88:f5:3f:7f:77:ec:99:7c:b3:15:0f: d3:48:14:10:6b:10:27:fe:87:02:58:00:1c:34:f4:de:0c:93: a9:56:a0:46:75:f0:69:d3:5b:43:f8:f3:d0:d1:6c:d4:21:11: d1:b1:51:f6:48:1f:68:bd:ac:5c:24:aa:1b:ff:76:4b:ee:9e: 0e:91:6a:2e:1e:6d:7e:96:0c:5f:48:b1:d7:e3:a8:28:1c:a6: 67:93:49:ce:94:fd:a2:0b:e3:fb:72:21:d3:78:d5:19:5b:6d: b1:5a:5b:88:3d:16:f7:97:f4:37:d9:fe:d8:4a:0b:e5:03:54: 77:09:ba:7e:77:e9:91:b7:47:6a:a0:b1:50:01:ea:2b:6b:2e: e5:70:51:44:91:dc:61:d2:d9:b5:bd:f0:90:0d:9c:cd:c6:84: 5b:26:e0:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REJGNTExMC8GA1UEBRMoQzQyOTA5NUNCMkI5NzdCMDY3MTkxMTkzQjQzQjlCMkY1 RTE5Q0FFODAeFw0yNTAyMDUwNjI1NDFaFw0yNTAyMTIwNjI1NDFaMBgxFjAUBgNV BAMTDTY3YTMwNDY2LTRmNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFLGzUgN5glQyxaLUJiniz9vj2PlVOMY/Ofq+51MY8De0qR0EKtXOCVFA27enx TxPgvTncONocjUWnEMdhJim0h6RG3ZjMvMVNirrotv9CPJ3e7Ak0OhAuHTJPEpHz drJMNSKsesnDtIh6vlOA6kIDeekkGS51DrFPcH8ZxQ/KzZHk1LUZblShrRWxFYqX 8AiiOxsCP8i3DTP+3MxaWmh+IH7OFoTFsRoFOgb3BI9mXPh8+NkfV9pXzMCywvKK L4k/E63m3jIWtH027lxQK0avbSfPd+3O2RlJrHwyfOO2clulKVxcmFqQ0jDUtUMe qlErnKpZBktb7uAJIVPxPQlnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBM26Pyri w1z6ECMAxz0cLYfiMSIwHwYDVR0jBBgwFoAUxCkJXLK5d7BnGRGTtDubL14Zyugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQkY1LzY2NTlGNTFFQ0I1 MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveENrSlhMSzVkN0JuR1JHVHREdWJMMTRaeXVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QkY1LzY2NTlGNTFFQ0I1MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdC bkdSR1R0RHViTDE0Wnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALXypVOtjBHtU3+3X7KEM1wwJuGkflQmp1FxlCXU3T0i611vvxxsFsVF PtB6Y/qi6rhRC3zhLBlwF3Pv+9x70Gfs/M5ApFIOS0AYfl4w98aE1Bj2bJvQyR1G SCy7XN73PBuI9T9/d+yZfLMVD9NIFBBrECf+hwJYABw09N4Mk6lWoEZ18GnTW0P4 89DRbNQhEdGxUfZIH2i9rFwkqhv/dkvung6Rai4ebX6WDF9IsdfjqCgcpmeTSc6U /aIL4/tyIdN41RlbbbFaW4g9FveX9DfZ/thKC+UDVHcJun536ZG3R2qgsVAB6itr LuVwUUSR3GHS2bW98JANnM3GhFsm4Bw= -----END CERTIFICATE-----Generated at Thu Feb 6 03:59:36 2025 by rpki-client