$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft File: wJ7fW2leBHksNRT0mPS7FEcJbvc.mft (raw, json) Hash identifier: hEmmgiVLZKrylWA072PY+Z5rpHC8YyfYnyxHzoAKboE= Subject key identifier: 5C:06:13:9C:C2:6E:CE:F5:BA:22:1E:59:FB:02:8E:45:5D:74:E3:28 Authority key identifier: C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 Certificate issuer: /CN=A91D8B2B/serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft Manifest number: B9 Signing time: Sat 15 Feb 2025 07:05:36 +0000 Manifest this update: Sat 15 Feb 2025 07:05:35 +0000 Manifest next update: Sat 22 Feb 2025 07:05:34 +0000 Files and hashes: 1: wJ7fW2leBHksNRT0mPS7FEcJbvc.crl (hash: 52wK6g8V33biyBd0FzYtIqaajigKLBpR+/GznoxD8eA=) 2: FC0907B8D45711EE93BD8B7CC4F9AE02.roa (hash: WEHBvskgD+7pAwM51UvYkvJPxMc31VB5wYczhy7vxrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B Validity Not Before: Feb 15 07:05:35 2025 GMT Not After : Feb 22 07:05:34 2025 GMT Subject: CN=67b03cbf-f323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:80:e9:a6:c8:6e:d2:dd:5c:a3:39:67:43:e7: b2:bc:e5:1e:7a:9d:60:72:aa:46:23:a1:e0:bf:1c: 6d:c1:25:93:2e:34:56:09:71:80:2b:ac:01:d5:b0: 80:1f:11:f8:35:f8:bb:48:2d:e0:9d:97:2d:1a:bd: d0:3e:b0:fe:44:e9:28:bc:b1:f1:85:5a:a3:59:c9: 1b:54:d1:4d:5a:db:e3:c0:4a:92:3e:40:43:cb:02: 95:e1:ed:e7:de:cc:e8:1c:cd:47:a9:32:c3:a6:7d: e3:3b:e6:23:eb:34:ec:e9:b9:3b:01:14:bb:05:45: 08:05:c2:7a:13:c8:f9:d6:05:26:d9:d4:0d:c6:e7: 4d:60:5c:ad:a5:7f:85:26:4e:00:98:6b:a0:17:21: 6b:cc:55:28:98:06:ce:61:c2:eb:55:ad:70:b9:d9: df:b0:b9:a5:bf:47:8f:7f:b1:31:f6:8b:27:15:26: 6c:85:68:25:48:2c:95:fc:25:bb:ed:fc:90:74:51: 91:6b:a1:f3:40:e8:b2:ef:4c:8a:31:fa:de:b9:e2: e5:83:02:15:42:7f:99:e0:53:42:57:01:47:58:67: 6e:a4:70:71:29:3e:2a:70:76:05:f7:99:2d:b7:c8: 93:51:75:8e:f1:3a:a7:45:a5:5f:e4:0e:ea:a6:4c: 36:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:06:13:9C:C2:6E:CE:F5:BA:22:1E:59:FB:02:8E:45:5D:74:E3:28 X509v3 Authority Key Identifier: keyid:C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:81:84:54:e3:88:3b:54:c4:f8:05:2c:20:3b:c3:e8:bd:d8: 08:82:4d:ba:fd:6c:d2:63:db:55:bd:5a:a4:89:44:c9:da:d4: 72:23:4c:c6:5c:94:bf:23:ec:3a:12:67:4c:0d:f4:80:84:39: 44:3d:05:74:fc:b0:df:25:29:08:90:68:93:3b:c7:a5:0d:6e: e9:59:e0:7e:1c:06:08:7d:b8:0d:9c:57:5a:c3:7e:0d:5f:8e: 21:ea:63:52:03:09:ad:cd:21:c4:c1:99:78:ae:80:5a:1d:56: 3d:17:47:ab:13:66:d4:1a:62:0f:22:e1:b2:d5:00:54:ba:7e: 1b:42:16:c7:fe:45:68:89:13:27:0c:0a:4d:58:58:7a:3e:0f: b6:b3:c3:54:ec:60:84:cc:93:87:36:be:60:2d:cc:84:20:a8: ac:00:47:28:97:97:05:32:f6:d1:30:ea:38:37:25:86:68:44: 73:93:cb:41:0b:b2:7d:fb:08:c3:0e:f7:c6:b3:ac:8e:10:ce: e0:35:5b:d7:48:ee:0a:09:16:46:93:f6:90:e8:47:56:28:a2: 2c:6e:5e:9a:e0:c1:ae:bf:6b:0b:10:ee:3a:f2:c3:c1:be:c5: ae:68:99:e5:46:c9:4f:d2:8b:e8:32:ee:94:91:d2:a8:e4:d7: 79:54:a5:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCMkIxMTAvBgNVBAUTKEMwOUVERjVCNjk1RTA0NzkyQzM1MTRGNDk4RjRCQjE0 NDcwOTZFRjcwHhcNMjUwMjE1MDcwNTM1WhcNMjUwMjIyMDcwNTM0WjAYMRYwFAYD VQQDEw02N2IwM2NiZi1mMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YDppshu0t1cozlnQ+eyvOUeep1gcqpGI6HgvxxtwSWTLjRWCXGAK6wB1bCA HxH4Nfi7SC3gnZctGr3QPrD+ROkovLHxhVqjWckbVNFNWtvjwEqSPkBDywKV4e3n 3szoHM1HqTLDpn3jO+Yj6zTs6bk7ARS7BUUIBcJ6E8j51gUm2dQNxudNYFytpX+F Jk4AmGugFyFrzFUomAbOYcLrVa1wudnfsLmlv0ePf7Ex9osnFSZshWglSCyV/CW7 7fyQdFGRa6HzQOiy70yKMfreueLlgwIVQn+Z4FNCVwFHWGdupHBxKT4qcHYF95kt t8iTUXWO8TqnRaVf5A7qpkw2RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwGE5zC bs71uiIeWfsCjkVddOMoMB8GA1UdIwQYMBaAFMCe31tpXgR5LDUU9Jj0uxRHCW73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEIyQi85QjgyMDZENENG OUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJIa3NOUlQwbVBTN0ZFY0pi dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dKN2ZXMmxlQkhrc05SVDBtUFM3RkVjSmJ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEIyQi85QjgyMDZENENGOUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJI a3NOUlQwbVBTN0ZFY0pidmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxgYRU44g7VMT4BSwgO8PovdgIgk26/WzSY9tVvVqkiUTJ2tRyI0zG XJS/I+w6EmdMDfSAhDlEPQV0/LDfJSkIkGiTO8elDW7pWeB+HAYIfbgNnFdaw34N X44h6mNSAwmtzSHEwZl4roBaHVY9F0erE2bUGmIPIuGy1QBUun4bQhbH/kVoiRMn DApNWFh6Pg+2s8NU7GCEzJOHNr5gLcyEIKisAEcol5cFMvbRMOo4NyWGaERzk8tB C7J9+wjDDvfGs6yOEM7gNVvXSO4KCRZGk/aQ6EdWKKIsbl6a4MGuv2sLEO468sPB vsWuaJnlRslP0ovoMu6UkdKo5Nd5VKXk -----END CERTIFICATE-----Generated at Sun Feb 16 16:04:07 2025 by rpki-client