$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: AbumVk/dofCeC+9ZBCNLemBrNv9Nr5VMA131jGHwVnk= Subject key identifier: BE:34:0C:71:10:A9:97:37:AC:3E:8F:AC:D2:44:F0:54:22:C9:5D:3A Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 0103 Signing time: Sat 15 Feb 2025 06:06:38 +0000 Manifest this update: Sat 15 Feb 2025 06:06:37 +0000 Manifest next update: Sat 22 Feb 2025 06:06:37 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: XBrgS1DthyOliZQ9C/iPNTGPVixOxpOucyungwUtTWg=) 2: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: /TjW9AO7ISejU8TRY0ge1bQ+z/b39cY+4y6EmVLDEL0=) 3: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: 0GmwzEvjQkpIQOKVrUCegjL2exFdSiExkQmTbC5jqtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62 Validity Not Before: Feb 15 06:06:37 2025 GMT Not After : Feb 22 06:06:37 2025 GMT Subject: CN=67b02eee-97c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:67:ff:d4:58:9c:28:01:bf:d9:15:8d:18:8d: 39:8f:49:a2:7d:c7:85:11:dd:4c:bb:03:d2:00:eb: e6:ce:a8:02:92:73:e0:f7:2b:06:d8:3c:4c:4d:1f: 2e:45:06:9d:43:3b:f3:48:09:80:a2:9c:d7:b9:ac: 68:c8:ce:ba:01:d4:79:3d:6e:2f:64:56:c4:6a:a7: 80:a4:7f:74:f3:a1:1e:3f:f3:07:0d:7c:81:2b:c0: 52:e4:71:53:fd:e0:4c:ec:37:0a:92:04:62:47:25: 1a:7f:a8:aa:20:ef:cc:c4:79:d1:a8:41:55:29:54: d0:bf:66:1c:aa:a0:02:81:cc:10:84:75:48:23:4b: eb:ad:62:c9:54:d4:9e:6b:d2:2c:89:57:ed:f3:41: 61:07:d9:92:eb:2d:ec:9f:27:63:56:be:9f:40:48: 95:ca:34:7d:1c:2e:c8:33:da:b5:34:02:bd:1a:fd: 58:a0:af:ca:fa:23:e1:6f:83:75:04:60:5e:93:6f: 06:23:fc:6d:25:b7:3d:db:f0:40:aa:15:74:8c:47: 11:49:72:91:d0:0a:a2:e9:e5:e1:8a:2c:b8:a0:2d: 52:26:79:5f:fb:cf:c1:4d:96:06:db:ff:52:4f:cf: bb:0c:a7:5b:bc:91:06:79:ec:df:2c:d4:4f:41:4e: 38:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:34:0C:71:10:A9:97:37:AC:3E:8F:AC:D2:44:F0:54:22:C9:5D:3A X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:38:ed:a1:ff:8c:39:d1:c6:2c:d9:cd:b4:da:34:e2:28:13: e9:9e:bc:fb:f9:ce:60:82:80:86:d8:f4:70:ee:d2:af:87:49: 4a:bb:5f:e3:9f:93:39:9e:e7:1a:92:2e:fe:d3:95:a8:23:36: c8:39:2b:87:69:8c:43:fa:ba:79:37:80:29:0f:84:71:12:85: 45:65:bd:6e:b9:5a:e7:bc:4c:ee:d5:7a:97:3e:59:0f:23:4e: bd:d7:02:ff:4e:da:66:37:7c:03:82:47:95:e0:1d:98:2f:5b: 42:5c:02:f1:b3:22:a0:f0:e1:41:f6:43:d8:c1:3b:85:4f:df: cf:ed:05:1a:04:6a:e9:6d:a1:56:fa:ec:41:7b:d4:53:89:08: a1:61:a5:0a:41:d8:cf:38:a6:aa:75:48:c4:2a:df:51:ba:5c: 6e:87:8a:80:07:4d:d2:5f:56:4e:5c:03:9b:a3:a0:eb:4e:c2: 34:5a:16:5f:22:0b:20:aa:0b:9d:13:52:15:de:40:43:72:6a: 6d:ef:45:8a:1f:a8:5b:94:8a:63:30:00:2f:4e:b8:72:c5:dc: c1:25:2f:08:63:d3:c9:14:30:4d:40:0d:0a:0f:6c:d4:e5:09: ab:b2:5c:2f:65:40:5f:02:a8:29:45:4d:f5:16:0b:35:d5:70: da:80:da:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjUwMjE1MDYwNjM3WhcNMjUwMjIyMDYwNjM3WjAYMRYwFAYD VQQDEw02N2IwMmVlZS05N2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGf/1FicKAG/2RWNGI05j0mifceFEd1MuwPSAOvmzqgCknPg9ysG2DxMTR8u RQadQzvzSAmAopzXuaxoyM66AdR5PW4vZFbEaqeApH9086EeP/MHDXyBK8BS5HFT /eBM7DcKkgRiRyUaf6iqIO/MxHnRqEFVKVTQv2YcqqACgcwQhHVII0vrrWLJVNSe a9IsiVft80FhB9mS6y3snydjVr6fQEiVyjR9HC7IM9q1NAK9Gv1YoK/K+iPhb4N1 BGBek28GI/xtJbc92/BAqhV0jEcRSXKR0Aqi6eXhiiy4oC1SJnlf+8/BTZYG2/9S T8+7DKdbvJEGeezfLNRPQU44SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL40DHEQ qZc3rD6PrNJE8FQiyV06MB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZOO2h/4w50cYs2c202jTiKBPpnrz7+c5ggoCG2PRw7tKvh0lKu1/j n5M5nucaki7+05WoIzbIOSuHaYxD+rp5N4ApD4RxEoVFZb1uuVrnvEzu1XqXPlkP I0691wL/TtpmN3wDgkeV4B2YL1tCXALxsyKg8OFB9kPYwTuFT9/P7QUaBGrpbaFW +uxBe9RTiQihYaUKQdjPOKaqdUjEKt9Rulxuh4qAB03SX1ZOXAObo6DrTsI0WhZf IgsgqgudE1IV3kBDcmpt70WKH6hblIpjMAAvTrhyxdzBJS8IY9PJFDBNQA0KD2zU 5QmrslwvZUBfAqgpRU31Fgs11XDagNop -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:43 2025 by rpki-client