$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft File: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json) Hash identifier: UuHwPWsrJfEOyDBSBnqDqbtXLXE7vGEZclQrTCiVyMk= Subject key identifier: 50:6E:0C:F8:CF:DC:22:93:03:8A:73:13:6A:51:B7:35:B3:F1:C0:6D Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft Manifest number: 76 Signing time: Wed 19 Feb 2025 08:18:33 +0000 Manifest this update: Wed 19 Feb 2025 08:18:33 +0000 Manifest next update: Wed 26 Feb 2025 08:18:33 +0000 Files and hashes: 1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: IGMCqgHTWJUXaqOBS/vSqykIM1eecYqmBos4Gnfo2XE=) 2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: cLMsRe3bjQqt9KTlSv77ZsvirHU5HvmwxB64rB3nwQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 08:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604 Validity Not Before: Feb 19 08:18:33 2025 GMT Not After : Feb 26 08:18:33 2025 GMT Subject: CN=67b593d9-627b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:33:6b:4c:5e:40:2d:0d:fb:e6:6e:ad:b7: 66:29:1e:8a:e9:20:69:3c:a2:e8:6d:00:d9:50:ed: 91:6c:80:52:60:9f:ea:41:8c:1c:47:00:72:a4:16: e1:d6:b0:91:88:12:99:0d:90:25:b8:26:04:67:0b: 03:62:f6:15:79:03:53:80:27:91:65:11:e9:f7:f1: 1f:b6:b1:fb:56:18:ee:d6:2f:3a:b0:e4:48:7a:c9: f2:9d:6c:09:1a:05:e0:89:df:14:97:f2:7f:35:31: d8:c5:d7:50:07:22:23:4b:58:43:9a:0e:21:a7:a2: 73:53:9d:40:20:74:9d:8e:9b:ed:c5:bd:3e:95:21: 49:2c:8f:f7:06:8a:af:a8:61:8a:b7:6a:0d:da:66: 42:c3:3e:a9:d3:9e:30:75:ad:ec:30:92:7c:55:73: 1c:57:e7:e1:d2:1b:50:77:86:bc:07:9c:1f:6a:38: 01:7e:e5:e0:01:60:87:b1:67:ea:a2:83:8c:a4:eb: 86:96:f4:87:43:df:30:3f:4b:19:43:d2:bb:ae:5a: 03:e5:97:a5:a6:50:70:e1:57:ee:47:78:5d:52:1b: 42:4e:4a:24:b0:eb:9f:9d:1f:45:e8:df:4f:2a:5b: 45:66:98:a9:46:25:d4:48:e5:81:97:09:2e:ab:b5: 5b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6E:0C:F8:CF:DC:22:93:03:8A:73:13:6A:51:B7:35:B3:F1:C0:6D X509v3 Authority Key Identifier: keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:d3:a3:c0:34:1e:a3:25:cf:81:23:9d:84:8a:98:5d:e9:2d: 77:2c:20:cb:89:d3:86:1f:d4:ba:4f:30:b5:56:33:a9:23:9b: c3:6e:00:a5:71:56:56:3a:fb:93:fe:8c:65:bd:8f:49:ce:1a: 30:80:1d:e5:dd:b4:da:9f:87:47:b2:ee:2b:03:50:08:5b:0c: a8:26:9e:f5:da:d1:16:b8:a1:b0:ec:ab:db:1a:96:d8:96:9b: da:2e:5d:59:6f:31:ce:95:2e:22:e3:14:de:d9:76:92:54:5f: 2e:25:c1:3d:94:d7:c9:e3:97:06:d5:b4:f0:1a:e8:ff:fd:8f: cb:1f:7f:55:eb:43:5a:a5:82:42:1e:69:47:a4:87:b2:dc:37: 72:db:ae:06:2a:77:cf:29:eb:9d:f3:1a:8d:ef:fb:b4:57:e4: ab:2b:c3:f1:e7:b8:5c:2b:bf:7f:0a:4b:4c:b6:66:94:fd:3e: a1:81:ff:16:28:37:60:a5:d1:5d:bb:bf:16:61:56:87:7e:70: dd:f2:f0:f6:11:3d:0b:39:7e:b1:63:cd:41:08:ec:44:1d:cc: f3:01:43:e4:8f:d2:37:3f:c1:26:0c:ac:2c:f9:7c:59:93:17: 6d:1e:be:60:47:ed:30:1c:45:87:82:39:a0:4d:67:08:fb:b4: 22:6d:f3:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTYwNDExMC8GA1UEBRMoRTJGMTc3MzdCODRDMUY2Nzg2OUMwM0E0N0Y4QzQxOUZE NDIwMDE2QzAeFw0yNTAyMTkwODE4MzNaFw0yNTAyMjYwODE4MzNaMBgxFjAUBgNV BAMTDTY3YjU5M2Q5LTYyN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJnTNrTF5ALQ375m6tt2YpHorpIGk8ouhtANlQ7ZFsgFJgn+pBjBxHAHKkFuHW sJGIEpkNkCW4JgRnCwNi9hV5A1OAJ5FlEen38R+2sftWGO7WLzqw5Eh6yfKdbAka BeCJ3xSX8n81MdjF11AHIiNLWEOaDiGnonNTnUAgdJ2Om+3FvT6VIUksj/cGiq+o YYq3ag3aZkLDPqnTnjB1rewwknxVcxxX5+HSG1B3hrwHnB9qOAF+5eABYIexZ+qi g4yk64aW9IdD3zA/SxlD0ruuWgPll6WmUHDhV+5HeF1SG0JOSiSw65+dH0Xo308q W0VmmKlGJdRI5YGXCS6rtVulAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUG4M+M/c IpMDinMTalG3NbPxwG0wHwYDVR0jBBgwFoAU4vF3N7hMH2eGnAOkf4xBn9QgAWww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxNjA0LzEyMEMyQzc0M0NF QjExRUY5NEUyNEY1OUM0RjlBRTAyLzR2RjNON2hNSDJlR25BT2tmNHhCbjlRZ0FX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHZGM043aE1IMmVHbkFPa2Y0eEJuOVFnQVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx NjA0LzEyMEMyQzc0M0NFQjExRUY5NEUyNEY1OUM0RjlBRTAyLzR2RjNON2hNSDJl R25BT2tmNHhCbjlRZ0FXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMzTo8A0HqMlz4EjnYSKmF3pLXcsIMuJ04Yf1LpPMLVWM6kjm8NuAKVx VlY6+5P+jGW9j0nOGjCAHeXdtNqfh0ey7isDUAhbDKgmnvXa0Ra4obDsq9saltiW m9ouXVlvMc6VLiLjFN7ZdpJUXy4lwT2U18njlwbVtPAa6P/9j8sff1XrQ1qlgkIe aUekh7LcN3LbrgYqd88p653zGo3v+7RX5Ksrw/HnuFwrv38KS0y2ZpT9PqGB/xYo N2Cl0V27vxZhVod+cN3y8PYRPQs5frFjzUEI7EQdzPMBQ+SP0jc/wSYMrCz5fFmT F20evmBH7TAcRYeCOaBNZwj7tCJt818= -----END CERTIFICATE-----Generated at Thu Feb 20 03:34:40 2025 by rpki-client