$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft File: 1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json) Hash identifier: 3s/eHtjA5QDD6aDvmFp9F14DaunXvod+WbY0e34tEFQ= Subject key identifier: 17:A7:9C:6F:F2:31:06:34:90:EE:4D:CD:B3:0F:D6:D8:69:17:B4:1A Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft Manifest number: 0C Signing time: Wed 05 Feb 2025 06:32:18 +0000 Manifest this update: Wed 05 Feb 2025 06:32:18 +0000 Manifest next update: Wed 12 Feb 2025 06:32:17 +0000 Files and hashes: 1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: LnWC8bHyF999J+5qgQf6HifDfkHmemDvy5gh9QOeIpI=) 2: A8495504D4D011EFB6100F2DC4F9AE02.roa (hash: Md7FVpdf2MqwxZW9/DFpDf2r/UivUhUhenoGocEe9lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA Validity Not Before: Feb 5 06:32:18 2025 GMT Not After : Feb 12 06:32:17 2025 GMT Subject: CN=67a305f2-5126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:6e:7f:46:19:55:07:6a:50:9b:ea:a6:4e: 54:59:21:22:b8:32:35:35:92:c8:1a:3e:28:ba:81: 36:c6:8e:7a:bb:51:b8:23:38:6e:9d:aa:83:95:b7: 47:45:39:1f:af:10:c3:bf:e4:50:8f:f6:98:8d:80: 07:aa:b6:b2:00:3a:18:39:c3:af:52:91:29:de:0e: 8a:20:27:43:21:a0:68:c6:6d:82:bc:2c:df:73:8f: 52:63:2c:1d:fa:34:2f:a7:84:28:c9:17:d7:d3:99: dc:25:6c:ae:a8:0e:0a:66:91:55:a2:a1:e6:ed:bf: 45:77:ee:f5:e7:ba:a9:94:6c:9c:bd:c2:20:52:12: ea:b0:f5:4c:da:17:ad:f3:e1:db:40:49:cc:33:8e: de:a5:22:55:9d:aa:0f:0e:a7:54:6e:aa:71:fe:54: ad:12:e2:02:e9:f0:23:19:0e:e5:47:16:ae:27:67: 35:46:58:39:cc:77:c9:41:ae:7c:8a:a2:32:3f:89: 40:f5:0c:86:e6:03:02:fa:81:4e:0b:19:13:b7:b2: fe:ec:59:42:aa:4e:aa:ee:e6:5d:36:7a:e8:80:01: ce:df:a4:3f:11:82:79:75:a5:95:0e:51:12:58:88: 02:e7:1d:3a:8a:b0:c1:27:3a:4d:d2:4c:ec:67:27: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A7:9C:6F:F2:31:06:34:90:EE:4D:CD:B3:0F:D6:D8:69:17:B4:1A X509v3 Authority Key Identifier: keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:c0:52:50:39:c0:23:30:9b:41:31:21:59:06:d4:39:f4:bf: f4:70:b0:f8:16:6d:64:8a:67:3f:e5:bf:5a:2a:53:17:7c:e1: e8:c9:ce:5c:29:fc:48:46:ab:73:88:91:1a:5a:ee:69:a1:29: da:81:74:bd:8c:a8:bb:55:24:16:ff:85:bd:29:91:1a:1a:be: ac:c4:48:55:c8:3f:c8:ef:43:db:98:27:08:85:3e:83:91:8d: d1:4c:3b:c8:cb:34:a7:81:87:19:67:2e:2a:4f:e8:cd:ff:fb: bd:31:65:b6:71:96:c9:d0:6d:41:db:b8:ed:5f:c5:0e:1e:5c: 49:7d:0f:f5:58:e5:3f:40:f0:bc:1c:fe:31:b3:bd:d9:b8:be: f8:ba:70:8b:75:7f:e5:07:fc:97:7e:f3:9b:8a:82:c8:78:10: b4:fb:8b:5e:f2:4e:b5:8c:e1:e6:de:72:83:9f:07:9b:45:db: 4d:78:68:15:31:e3:c1:e4:e9:5c:f2:fe:37:71:c4:e7:f0:de: 31:3a:da:3d:e8:61:d1:5b:71:0f:93:a8:d9:93:5b:5c:19:83: 88:67:be:6d:90:c1:1d:02:17:37:7d:c0:e9:b4:c2:e0:bc:f8: 65:cc:f5:30:ef:68:6a:ce:96:a6:e3:9b:43:02:d4:a4:c6:11: a5:c6:ea:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NUVFQTExMC8GA1UEBRMoRDYwQzMwQjFBOUY1OUM5NTlBRDQ5NjdGMkY2RDU3MkFD Qjc1Mjk5QzAeFw0yNTAyMDUwNjMyMThaFw0yNTAyMTIwNjMyMTdaMBgxFjAUBgNV BAMTDTY3YTMwNWYyLTUxMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAom5/RhlVB2pQm+qmTlRZISK4MjU1ksgaPii6gTbGjnq7UbgjOG6dqoOVt0dF OR+vEMO/5FCP9piNgAeqtrIAOhg5w69SkSneDoogJ0MhoGjGbYK8LN9zj1JjLB36 NC+nhCjJF9fTmdwlbK6oDgpmkVWioebtv0V37vXnuqmUbJy9wiBSEuqw9UzaF63z 4dtAScwzjt6lIlWdqg8Op1RuqnH+VK0S4gLp8CMZDuVHFq4nZzVGWDnMd8lBrnyK ojI/iUD1DIbmAwL6gU4LGRO3sv7sWUKqTqru5l02euiAAc7fpD8Rgnl1pZUOURJY iALnHTqKsMEnOk3STOxnJ3vDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF6ecb/Ix BjSQ7k3Nsw/W2GkXtBowHwYDVR0jBBgwFoAU1gwwsan1nJWa1JZ/L21XKst1KZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUVBL0UzRkNEMTQ0RDRD RjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpXYTFKWl9MMjFYS3N0MUta dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWd3d3NhbjFuSldhMUpaX0wyMVhLc3QxS1p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 RUVBL0UzRkNEMTQ0RDRDRjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpX YTFKWl9MMjFYS3N0MUtady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKHAUlA5wCMwm0ExIVkG1Dn0v/RwsPgWbWSKZz/lv1oqUxd84ejJzlwp /EhGq3OIkRpa7mmhKdqBdL2MqLtVJBb/hb0pkRoavqzESFXIP8jvQ9uYJwiFPoOR jdFMO8jLNKeBhxlnLipP6M3/+70xZbZxlsnQbUHbuO1fxQ4eXEl9D/VY5T9A8Lwc /jGzvdm4vvi6cIt1f+UH/Jd+85uKgsh4ELT7i17yTrWM4ebecoOfB5tF2014aBUx 48Hk6Vzy/jdxxOfw3jE62j3oYdFbcQ+TqNmTW1wZg4hnvm2QwR0CFzd9wOm0wuC8 +GXM9TDvaGrOlqbjm0MC1KTGEaXG6oM= -----END CERTIFICATE-----Generated at Wed Feb 5 20:10:46 2025 by rpki-client