$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json) Hash identifier: yzW3JszavA7P6HKMH1IL+tTy+2wCWzxMQOWo9zukcOg= Subject key identifier: 3C:08:D6:72:3C:A3:71:96:9C:4D:D4:90:7E:0A:15:EA:88:C6:26:97 Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft Manifest number: F8 Signing time: Sat 15 Feb 2025 06:19:32 +0000 Manifest this update: Sat 15 Feb 2025 06:19:32 +0000 Manifest next update: Sat 22 Feb 2025 06:19:32 +0000 Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: VwfXWSxe+BMbHLn7o8/ukefW0UtGchd7U2cX1pycZyU=) 2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: voOu3FS6atcTzQMFzUe36XFmwRTAVJhuDBd+mVShCxg=) 3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: BA5CliOHfNpPWNOYw+bi2ZaU/a9tMNZNL0MSCuu6uM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD Validity Not Before: Feb 15 06:19:32 2025 GMT Not After : Feb 22 06:19:32 2025 GMT Subject: CN=67b031f4-236b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:c3:f5:55:22:eb:17:8f:bd:7c:04:c7:e4: c7:49:56:9d:47:f3:48:79:34:b2:c6:24:18:c3:37: 41:92:7f:35:78:0a:65:5d:23:d6:1e:cc:49:85:55: 87:47:4f:dc:ef:77:11:9d:58:c7:a2:f0:e6:0c:b6: 98:58:86:7e:df:85:2f:6b:ff:58:23:7f:0e:38:a0: 3d:50:ec:c9:06:8f:61:ed:2c:5a:98:62:38:be:bb: e0:62:a6:8f:e7:99:e2:4e:30:61:4e:80:6c:26:24: 86:57:0c:5e:79:22:91:b3:f5:ab:99:c6:81:4a:3a: af:50:60:97:8f:21:15:49:a2:ea:74:80:7c:3f:e8: 88:10:51:14:97:0b:d1:5b:f8:a4:fb:06:e5:1c:ab: 53:86:02:a8:0d:e1:db:b0:87:65:76:30:92:0f:ae: 8b:d0:79:96:46:45:5b:b6:00:08:ae:e5:85:66:4b: 60:37:a8:51:a3:c4:ca:0d:07:e9:c8:ec:0e:8e:8f: 0f:9c:05:9e:ca:51:fe:be:fe:c6:0e:39:ce:97:21: 33:33:d3:b2:ed:f6:98:85:8f:1e:30:ee:da:6a:71: c3:de:73:ef:c0:1a:5e:1c:aa:79:26:d0:8d:bf:fd: f2:ea:37:a2:b2:64:f2:ff:f5:ed:7f:36:46:92:9a: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:08:D6:72:3C:A3:71:96:9C:4D:D4:90:7E:0A:15:EA:88:C6:26:97 X509v3 Authority Key Identifier: keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:18:b1:04:ca:6e:37:e7:83:22:e9:69:59:52:cd:69:33:46: 96:40:f6:f7:60:1b:e6:d1:24:56:35:6d:99:6a:a9:2b:5f:aa: 2d:f8:ec:6f:17:10:72:db:41:45:47:ac:8f:76:eb:71:b6:a5: 49:95:b7:36:79:0d:e4:31:e7:eb:f2:e3:e4:cf:eb:0e:88:1f: ac:b1:2b:da:29:a1:e4:a2:bd:8c:c0:55:55:40:ac:34:bb:3e: 83:be:c2:26:c0:40:89:14:64:ae:b3:c5:0c:8a:7a:9b:5b:24: 74:e6:d2:76:92:f5:cc:f7:48:eb:d7:35:0b:a6:45:00:b5:d5: 4f:00:2f:f5:0e:fd:e3:7d:5d:06:cc:e2:76:e8:fb:c2:5e:ef: 97:d1:b5:25:02:c1:36:1d:c8:d1:e4:81:c5:fc:78:cc:fb:82: b8:10:8e:f8:f0:29:03:02:cc:33:08:c4:1a:fe:27:5d:62:fd: c7:04:80:81:73:f1:f8:76:82:65:96:90:58:4a:5b:5e:8d:16: 18:ab:1e:70:7b:44:58:c3:0d:7b:62:a0:27:89:f4:e4:ca:08: 90:88:c1:f2:83:70:c4:94:23:50:26:71:4e:23:22:04:e3:41: 97:82:a8:dc:4d:67:f6:54:0a:f3:04:98:90:85:fc:1f:4f:88: b5:30:39:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKDI3MkQ3MUFENjI2NDU3NzVDQ0RGQkI1NzcwNDc4RTU5 NDNFQTY1OTUwHhcNMjUwMjE1MDYxOTMyWhcNMjUwMjIyMDYxOTMyWjAYMRYwFAYD VQQDEw02N2IwMzFmNC0yMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBDD9VUi6xePvXwEx+THSVadR/NIeTSyxiQYwzdBkn81eAplXSPWHsxJhVWH R0/c73cRnVjHovDmDLaYWIZ+34Uva/9YI38OOKA9UOzJBo9h7SxamGI4vrvgYqaP 55niTjBhToBsJiSGVwxeeSKRs/WrmcaBSjqvUGCXjyEVSaLqdIB8P+iIEFEUlwvR W/ik+wblHKtThgKoDeHbsIdldjCSD66L0HmWRkVbtgAIruWFZktgN6hRo8TKDQfp yOwOjo8PnAWeylH+vv7GDjnOlyEzM9Oy7faYhY8eMO7aanHD3nPvwBpeHKp5JtCN v/3y6jeismTy//XtfzZGkpqOVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwI1nI8 o3GWnE3UkH4KFeqIxiaXMB8GA1UdIwQYMBaAFCctca1iZFd1zN+7V3BHjllD6mWV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC9GOUMwRTExRTc5 MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1YzWE0zN3RYY0VlT1dVUHFa WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p5MXhyV0prVjNYTTM3dFhjRWVPV1VQcVpaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC9GOUMwRTExRTc5MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1Yz WE0zN3RYY0VlT1dVUHFaWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLGLEEym4354Mi6WlZUs1pM0aWQPb3YBvm0SRWNW2ZaqkrX6ot+Oxv FxBy20FFR6yPdutxtqVJlbc2eQ3kMefr8uPkz+sOiB+ssSvaKaHkor2MwFVVQKw0 uz6DvsImwECJFGSus8UMinqbWyR05tJ2kvXM90jr1zULpkUAtdVPAC/1Dv3jfV0G zOJ26PvCXu+X0bUlAsE2HcjR5IHF/HjM+4K4EI748CkDAswzCMQa/iddYv3HBICB c/H4doJllpBYSltejRYYqx5we0RYww17YqAnifTkygiQiMHyg3DElCNQJnFOIyIE 40GXgqjcTWf2VArzBJiQhfwfT4i1MDlW -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:11 2025 by rpki-client