$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json) Hash identifier: ou7gu6VmqfkIqiFcWO2kOucYOvi8RU2s+RpNgp064Ms= Subject key identifier: 2E:8B:98:28:65:BE:95:B4:D3:B7:80:A9:4B:59:8E:B3:C1:73:5A:5B Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft Manifest number: B9 Signing time: Sat 15 Feb 2025 07:06:00 +0000 Manifest this update: Sat 15 Feb 2025 07:05:59 +0000 Manifest next update: Sat 22 Feb 2025 07:05:59 +0000 Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: RPAmHoA5kAMxfMkd0aHjdw26avMUetiSW0jwnNEQrJM=) 2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: RjAnkgsXYLCqoCPEa7Dh8sDLDDkGHUa+8B9sBZhUxd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2 Validity Not Before: Feb 15 07:05:59 2025 GMT Not After : Feb 22 07:05:59 2025 GMT Subject: CN=67b03cd8-5fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:08:8c:4f:78:a5:ce:79:13:49:54:6c:11:80: 3c:10:ec:1b:78:f7:65:d3:61:ee:dd:9e:2c:68:e9: 23:ee:dc:d1:bd:da:b4:f0:59:69:34:4d:df:40:1e: 6b:6e:09:8d:97:4d:8c:bc:bf:95:67:9f:54:6f:27: 91:58:4a:46:73:46:ef:a0:0e:65:b9:d7:70:ac:fc: ed:29:13:09:0e:a1:c5:7c:24:59:06:b5:b1:67:80: b8:c9:61:b4:28:7e:24:f8:58:8e:ea:4a:3e:c2:ea: e7:27:2b:55:ab:ff:d3:c8:ec:70:64:76:d0:30:e8: 9e:df:e7:03:fb:62:23:80:c2:6b:3a:75:72:c7:2f: 73:fa:98:44:c0:66:6e:ff:b0:66:ee:9b:29:a1:d6: 3d:a1:34:fb:47:80:cf:ab:bc:86:29:2b:95:e2:b1: 30:73:35:2d:54:94:4c:35:50:e4:25:42:cd:8d:c8: 58:fa:fe:be:45:9f:03:0a:75:95:99:b1:c3:9d:9e: 00:7f:d2:f7:a8:bc:a6:55:0a:95:79:76:b3:3c:ae: d6:97:e3:37:64:08:e6:db:90:53:1d:64:21:a6:56: 34:a2:5d:2f:6d:55:e9:fd:31:8d:61:45:11:7c:0c: 70:1d:4d:53:36:45:a7:d5:b7:55:95:d5:b0:75:27: f3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8B:98:28:65:BE:95:B4:D3:B7:80:A9:4B:59:8E:B3:C1:73:5A:5B X509v3 Authority Key Identifier: keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:73:03:61:1f:e8:9c:4a:7e:ea:18:d4:1a:e1:3d:41:ab:d0: f3:5b:23:af:ad:e1:6b:81:f8:d4:6b:d8:fd:45:41:b9:d2:f9: f3:ce:49:e3:b9:10:ec:e7:5d:92:88:e3:a2:2b:5f:0b:94:f5: 3e:03:09:9a:22:86:61:1b:e7:b6:d5:63:3a:79:fa:0e:b6:05: 10:ea:5a:b4:c4:f0:9c:7d:19:b0:5c:2f:17:dc:07:85:cc:cc: d7:cf:9e:fc:87:b2:80:b6:8f:58:67:1a:56:56:c7:72:22:3d: 3e:68:15:3b:52:6e:aa:f3:b6:0a:a8:3f:c4:27:b5:bd:c2:52: 67:5d:c4:3e:7d:4a:c4:9b:be:0b:53:b4:4a:06:90:2b:b1:47: 44:d3:22:18:d7:f9:3f:70:0d:e8:43:33:1d:f7:b5:f3:17:8a: 92:b8:9e:a7:99:1c:5a:90:33:5a:46:47:bb:60:12:40:20:6d: ff:62:18:b5:a0:df:d6:6b:3d:95:54:e3:56:4e:03:0a:6a:08: ad:87:2e:09:88:bc:86:ec:3e:d4:3d:6b:68:24:92:08:8c:39: d3:1e:3f:c2:c2:8f:c8:59:f0:f7:41:d1:12:99:5a:27:56:a7: 76:ab:da:ec:93:12:49:6f:40:d3:0b:16:c5:19:c2:dc:0c:1a: e1:26:0e:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0 QjBCQUQ2NjYwHhcNMjUwMjE1MDcwNTU5WhcNMjUwMjIyMDcwNTU5WjAYMRYwFAYD VQQDEw02N2IwM2NkOC01ZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1giMT3ilznkTSVRsEYA8EOwbePdl02Hu3Z4saOkj7tzRvdq08FlpNE3fQB5r bgmNl02MvL+VZ59UbyeRWEpGc0bvoA5luddwrPztKRMJDqHFfCRZBrWxZ4C4yWG0 KH4k+FiO6ko+wurnJytVq//TyOxwZHbQMOie3+cD+2IjgMJrOnVyxy9z+phEwGZu /7Bm7pspodY9oTT7R4DPq7yGKSuV4rEwczUtVJRMNVDkJULNjchY+v6+RZ8DCnWV mbHDnZ4Af9L3qLymVQqVeXazPK7Wl+M3ZAjm25BTHWQhplY0ol0vbVXp/TGNYUUR fAxwHU1TNkWn1bdVldWwdSfzFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6LmChl vpW007eAqUtZjrPBc1pbMB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FNEM4ODUxMkQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNU OTlrbGFNY1htRmhMQzYxbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzcwNhH+icSn7qGNQa4T1Bq9DzWyOvreFrgfjUa9j9RUG50vnzzknj uRDs512SiOOiK18LlPU+AwmaIoZhG+e21WM6efoOtgUQ6lq0xPCcfRmwXC8X3AeF zMzXz578h7KAto9YZxpWVsdyIj0+aBU7Um6q87YKqD/EJ7W9wlJnXcQ+fUrEm74L U7RKBpArsUdE0yIY1/k/cA3oQzMd97XzF4qSuJ6nmRxakDNaRke7YBJAIG3/Yhi1 oN/Waz2VVONWTgMKagithy4JiLyG7D7UPWtoJJIIjDnTHj/Cwo/IWfD3QdESmVon Vqd2q9rskxJJb0DTCxbFGcLcDBrhJg5e -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:05 2025 by rpki-client