$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: NLWg+VoAvinFTjYRf8k+S/e6G5x15Sa/xqdj5Ue1aHQ= Subject key identifier: 82:70:23:7C:E9:DC:31:64:25:56:41:9A:5F:87:2B:53:86:E1:58:5B Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 3451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 3451 Signing time: Tue 18 Feb 2025 14:43:58 +0000 Manifest this update: Tue 18 Feb 2025 14:43:56 +0000 Manifest next update: Tue 25 Feb 2025 14:43:56 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: jCi+gOSKCakpEMSwwPsEjs6OgsJssEmknB/HawrqOmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Feb 2025 14:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13393 (0x3451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F Validity Not Before: Feb 18 14:43:56 2025 GMT Not After : Feb 25 14:43:56 2025 GMT Subject: CN=67b49cad-87d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:e0:af:71:81:c7:1b:55:cf:d4:02:de:c7: c8:1a:14:85:f1:b9:c4:c5:5c:57:db:1e:b8:e4:9d: ac:52:ac:2f:cb:13:b4:64:bd:fa:a6:c1:9c:d0:09: ba:d0:b4:d2:4d:61:cf:4e:54:69:5b:f6:38:b3:8f: 3f:e1:88:81:77:0d:29:08:cc:6f:7d:d7:ad:b2:94: 74:8d:f7:7b:1a:70:de:b2:80:93:cd:38:9f:fd:32: 9b:8f:42:89:c9:e3:9d:8c:ea:0e:f0:ec:67:cb:7d: f6:53:77:c2:d8:a4:32:34:72:d2:b0:3d:dc:bc:0c: 0a:9d:25:e1:07:eb:f2:5a:48:6e:96:cc:21:9c:44: 3e:94:9a:f6:a8:86:81:92:ee:de:6d:c2:cf:18:11: 0b:6b:a8:59:62:f4:f7:14:0f:e4:12:c0:67:c6:bf: bb:b5:36:71:67:13:66:b7:c7:db:22:b7:36:f7:ec: 2d:6d:64:27:e7:a2:2c:97:22:51:ed:96:2c:99:b8: 7b:24:be:56:85:1e:16:78:b3:f8:fa:81:d4:57:3b: ca:51:fe:7e:0c:62:0e:f5:0b:80:50:af:30:72:9c: 88:7b:58:2e:48:fd:3a:c3:3c:79:41:12:fe:8e:48: f7:86:9c:7c:be:a8:d3:75:92:de:90:cb:fa:0e:44: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:70:23:7C:E9:DC:31:64:25:56:41:9A:5F:87:2B:53:86:E1:58:5B X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:3b:c2:86:33:aa:4b:f1:44:d6:98:de:8c:f4:4a:35:ea:be: a8:73:08:d0:c2:e3:f1:07:c2:97:79:04:e7:61:ef:f3:4c:e4: 72:bd:61:2b:06:be:0c:2b:e6:b3:10:cb:09:b2:b3:92:5c:db: dd:2f:d2:02:7b:3f:79:6c:d5:60:44:00:aa:ba:32:2d:e8:a3: 03:f0:92:95:fd:8e:28:9b:af:9a:aa:bd:9d:91:35:e1:cc:6c: 84:7e:38:83:2c:06:8f:0d:fb:59:2a:52:ac:7f:60:81:17:cb: 7a:8c:86:71:f9:7a:3a:f2:2f:87:ea:02:f8:af:df:a7:ee:c4: ce:5b:2c:54:2d:47:e6:11:40:21:71:63:85:50:0e:2d:67:18: f6:f3:75:28:c2:4a:35:b6:d0:27:2c:f7:e6:49:3e:bf:f3:01: 7b:19:a5:75:15:fd:81:47:83:a5:3b:45:59:f9:7c:cf:37:47: 08:88:e7:12:05:a9:42:7f:f9:89:76:aa:e8:30:cd:61:be:03: c7:80:86:42:39:7f:45:19:d2:d0:df:d6:5e:67:44:9c:82:e9: 8d:ad:ad:e9:6e:0c:1a:b7:7b:2f:76:1e:94:f9:39:f0:61:93: c8:85:ee:38:24:f6:0d:ce:b5:30:e6:e6:b3:a3:f2:be:0c:eb: 97:97:c9:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjUwMjE4MTQ0MzU2WhcNMjUwMjI1MTQ0MzU2WjAYMRYwFAYD VQQDEw02N2I0OWNhZC04N2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNfgr3GBxxtVz9QC3sfIGhSF8bnExVxX2x645J2sUqwvyxO0ZL36psGc0Am6 0LTSTWHPTlRpW/Y4s48/4YiBdw0pCMxvfdetspR0jfd7GnDesoCTzTif/TKbj0KJ yeOdjOoO8Oxny332U3fC2KQyNHLSsD3cvAwKnSXhB+vyWkhulswhnEQ+lJr2qIaB ku7ebcLPGBELa6hZYvT3FA/kEsBnxr+7tTZxZxNmt8fbIrc29+wtbWQn56IslyJR 7ZYsmbh7JL5WhR4WeLP4+oHUVzvKUf5+DGIO9QuAUK8wcpyIe1guSP06wzx5QRL+ jkj3hpx8vqjTdZLekMv6DkSsJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJwI3zp 3DFkJVZBml+HK1OG4VhbMB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+O8KGM6pL8UTWmN6M9Eo16r6ocwjQwuPxB8KXeQTnYe/zTORyvWEr Br4MK+azEMsJsrOSXNvdL9ICez95bNVgRACqujIt6KMD8JKV/Y4om6+aqr2dkTXh zGyEfjiDLAaPDftZKlKsf2CBF8t6jIZx+Xo68i+H6gL4r9+n7sTOWyxULUfmEUAh cWOFUA4tZxj283Uowko1ttAnLPfmST6/8wF7GaV1Ff2BR4OlO0VZ+XzPN0cIiOcS BalCf/mJdqroMM1hvgPHgIZCOX9FGdLQ39ZeZ0ScgumNra3pbgwat3svdh6U+Tnw YZPIhe44JPYNzrUw5uazo/K+DOuXl8nu -----END CERTIFICATE-----Generated at Thu Feb 20 03:10:36 2025 by rpki-client