$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft File: 3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json) Hash identifier: vBnrlW6+2rf7tdpLmxrjdrpLSCRli885eXtBMskWZec= Subject key identifier: FC:2B:E7:5A:B2:32:0A:E0:4B:0F:A1:9C:DA:4B:72:D6:24:7B:9F:3B Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E Certificate issuer: /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft Manifest number: 1B Signing time: Wed 05 Feb 2025 06:48:53 +0000 Manifest this update: Wed 05 Feb 2025 06:48:53 +0000 Manifest next update: Wed 12 Feb 2025 06:48:53 +0000 Files and hashes: 1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: yk8shcFoLzv4CHam7UYddJ0yyp9WkmN4WkBrHHi8XgI=) 2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: hvte1LGzH8lQs5HlVIeT4otbezAzwXIr7d7vqIECmd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D74A6 Validity Not Before: Feb 5 06:48:53 2025 GMT Not After : Feb 12 06:48:53 2025 GMT Subject: CN=67a309d5-ec47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:17:13:57:90:18:33:53:86:13:49:5a:36: 7d:67:ce:c9:ca:57:b2:2a:40:83:a0:c9:b1:a7:1d: 4d:bf:ec:a1:dc:14:9e:78:72:e5:96:59:fb:7b:86: 6a:7c:b9:07:7c:c2:62:08:e0:4b:17:52:9d:be:a1: bf:b2:d1:b0:88:69:4e:1b:67:cb:58:f0:55:f2:d9: f0:0b:75:e2:48:a9:cf:43:b8:96:c0:a1:5b:f8:6c: 72:11:4c:8c:f8:2e:76:10:89:e8:e9:fd:0d:5c:e3: 79:87:c6:86:90:a8:44:6f:0f:9d:a9:8a:53:10:47: dc:03:a4:5c:83:9b:2e:2c:0e:20:e3:89:08:77:5b: e4:64:04:00:d3:57:8b:8d:6a:b5:c9:fc:ad:b3:32: d5:0e:d6:2f:77:b8:bf:80:12:76:6a:4b:f9:c2:b0: 3c:e4:43:60:0e:4f:34:cf:8c:72:45:0c:1e:6e:d9: 15:99:29:f2:8e:42:2a:8e:c7:a7:ac:e3:47:22:b8: 51:af:89:01:0e:ba:bd:ca:23:d8:66:e1:74:73:e4: ae:c2:d4:b5:ce:ba:fd:ef:a2:0b:9f:4a:0c:99:1b: 07:6c:e5:60:27:ab:64:56:48:6f:38:50:82:4f:0b: 38:27:9b:dc:ec:6b:14:ab:39:23:ce:79:4c:60:ba: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2B:E7:5A:B2:32:0A:E0:4B:0F:A1:9C:DA:4B:72:D6:24:7B:9F:3B X509v3 Authority Key Identifier: keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ab:1d:3c:54:00:43:81:52:a2:6b:ed:e7:51:39:82:2d:92: 39:62:1c:3f:7e:04:fe:6b:f8:92:f3:16:4f:d1:bf:a3:69:39: 32:66:64:b3:e2:7d:b5:b4:3f:3c:9c:71:70:e5:b9:1c:d2:56: 59:84:3d:35:f9:11:27:97:c3:e5:e0:f1:e6:79:8b:78:7d:98: 25:53:4d:87:d5:37:37:72:92:3f:ea:bd:b5:55:a3:11:7a:6f: 4f:73:c2:a9:ea:b9:b1:a5:af:5e:c2:8d:5e:34:f3:5b:f1:26: 62:90:94:40:b8:42:0a:bf:46:00:70:1e:3a:ae:70:16:af:7d: 86:39:32:57:b3:72:2f:36:c4:31:87:57:25:63:10:3a:3b:77: 7c:8f:25:c8:d6:32:7b:fa:f6:33:a7:da:53:8a:3a:a2:dc:7c: a2:89:1a:6f:95:bb:f7:dd:4b:36:8e:74:b3:f1:01:86:4b:46: 2e:34:14:22:02:d2:1f:7a:1a:c6:64:45:be:ca:37:f7:c7:87: 0f:e6:36:9e:16:65:99:58:5f:b5:ec:b4:b6:7e:6a:4c:e3:e9: 0c:c0:b4:97:31:69:1b:80:e3:8b:b9:7c:7a:db:e8:88:e9:7c: d3:c5:45:1e:3e:34:ac:ca:38:8a:68:6e:d3:bf:41:a1:3c:a7: 7f:c6:7a:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzRBNjExMC8GA1UEBRMoREM4MEM4NUU1MTAxMDg5QUIyNDI1RDNGQzkxNzc5ODVB MDEyNUM2RTAeFw0yNTAyMDUwNjQ4NTNaFw0yNTAyMTIwNjQ4NTNaMBgxFjAUBgNV BAMTDTY3YTMwOWQ1LWVjNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIoBcTV5AYM1OGE0laNn1nzsnKV7IqQIOgybGnHU2/7KHcFJ54cuWWWft7hmp8 uQd8wmII4EsXUp2+ob+y0bCIaU4bZ8tY8FXy2fALdeJIqc9DuJbAoVv4bHIRTIz4 LnYQiejp/Q1c43mHxoaQqERvD52pilMQR9wDpFyDmy4sDiDjiQh3W+RkBADTV4uN arXJ/K2zMtUO1i93uL+AEnZqS/nCsDzkQ2AOTzTPjHJFDB5u2RWZKfKOQiqOx6es 40ciuFGviQEOur3KI9hm4XRz5K7C1LXOuv3vogufSgyZGwds5WAnq2RWSG84UIJP Czgnm9zsaxSrOSPOeUxgupSVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/CvnWrIy CuBLD6Gc2kty1iR7nzswHwYDVR0jBBgwFoAU3IDIXlEBCJqyQl0/yRd5haASXG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3NEE2LzcxNzFCQkYyRDE5 QzExRUY4M0NFQUQzQ0M0RjlBRTAyLzNJRElYbEVCQ0pxeVFsMF95UmQ1aGFBU1hH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM0lESVhsRUJDSnF5UWwwX3lSZDVoYUFTWEc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 NEE2LzcxNzFCQkYyRDE5QzExRUY4M0NFQUQzQ0M0RjlBRTAyLzNJRElYbEVCQ0px eVFsMF95UmQ1aGFBU1hHNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD2rHTxUAEOBUqJr7edROYItkjliHD9+BP5r+JLzFk/Rv6NpOTJmZLPi fbW0PzyccXDluRzSVlmEPTX5ESeXw+Xg8eZ5i3h9mCVTTYfVNzdykj/qvbVVoxF6 b09zwqnqubGlr17CjV4081vxJmKQlEC4Qgq/RgBwHjqucBavfYY5Mlezci82xDGH VyVjEDo7d3yPJcjWMnv69jOn2lOKOqLcfKKJGm+Vu/fdSzaOdLPxAYZLRi40FCIC 0h96GsZkRb7KN/fHhw/mNp4WZZlYX7XstLZ+akzj6QzAtJcxaRuA44u5fHrb6Ijp fNPFRR4+NKzKOIpobtO/QaE8p3/GekE= -----END CERTIFICATE-----Generated at Wed Feb 5 20:01:26 2025 by rpki-client