$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json) Hash identifier: qUejznR38yTrL5EkOMUHqrjEOHUXZbOxhBx5uBHhLzk= Subject key identifier: DC:CD:EC:D1:1E:52:CE:34:4D:FE:13:80:29:D9:66:A2:CE:70:67:2D Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1DE9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft Manifest number: 1D67 Signing time: Fri 14 Feb 2025 16:32:31 +0000 Manifest this update: Fri 14 Feb 2025 16:32:30 +0000 Manifest next update: Fri 21 Feb 2025 16:32:30 +0000 Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: 8ZSyltxJbjI5stabkAD8YOQkBj+vR887SpzNG6GLSOY=) 2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: ErQUIZBQOuclNYifsKsmx5/Jnr/1hpU5xKibhIO600k=) 3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: JDAGe4IksOtjrzlmQZ9zVBIzM1ZKwteeQYN9TBrAsPk=) 4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: nvySfMAS7TN3zTFr4mHSPK7RJZZnC8NIvHsh40VIoNk=) 5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: KptRM9OhZOY+IAnuIj6dKpgRtL+UG95HSLHK6SbwluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7657 (0x1de9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198 Validity Not Before: Feb 14 16:32:30 2025 GMT Not After : Feb 21 16:32:30 2025 GMT Subject: CN=67af701e-9560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:fc:7d:b3:5d:e4:dd:be:a3:31:58:e6:80: 21:30:fd:61:06:ec:8e:eb:32:47:de:9a:53:8e:4d: 00:a1:da:39:7a:9e:39:c3:55:99:fc:7e:0c:59:bf: c3:f9:17:2b:af:f1:fa:04:99:41:19:fc:c0:c8:cc: 3d:8c:68:b0:04:60:b1:8f:45:39:39:b3:2f:9b:33: ce:69:3f:be:8f:34:2e:7d:a0:72:aa:f2:3f:93:7c: 87:eb:bc:6c:90:42:c4:49:b4:dc:ba:52:a5:20:74: f8:f6:3d:39:cd:6e:69:57:f3:19:f5:c8:6f:f0:53: aa:a0:eb:c6:8a:04:90:9a:c7:81:bc:bb:a4:41:5a: b7:a3:48:25:d3:34:ae:d8:70:4d:72:ea:88:68:1c: 08:a0:77:84:0c:88:35:ce:a3:51:6b:d0:f2:55:b4: 59:92:f4:db:84:11:e8:48:81:f4:05:1b:2f:1e:85: d0:6a:1b:44:ad:df:9c:64:0f:01:c4:0e:e0:19:98: 35:34:eb:81:a5:8e:4b:a2:d8:e6:b5:d4:92:bb:63: 36:80:e6:cb:1f:9b:6e:50:fb:f0:c5:43:84:f6:3f: ce:2d:c8:3e:45:2f:f6:39:1a:3d:2b:b3:f6:98:38: 7f:23:e7:88:39:c7:1d:20:90:6b:39:ce:69:d2:81: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CD:EC:D1:1E:52:CE:34:4D:FE:13:80:29:D9:66:A2:CE:70:67:2D X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ca:1a:55:eb:07:8d:81:6b:49:33:01:c3:58:d3:f9:0b:2a: d7:8f:8a:9d:2c:55:cd:49:80:6b:ac:ea:26:71:32:bf:b6:04: 34:23:25:36:0e:f4:1d:2a:89:78:69:52:54:bf:e2:b8:53:e3: 47:99:c9:ef:1f:c2:22:1e:74:cb:8d:ed:28:4d:da:6a:50:05: d7:73:9f:58:3e:76:b3:9a:8c:4a:df:89:90:5b:03:77:d6:ba: 34:02:03:78:51:a1:d6:f2:e3:08:b7:7c:b9:f7:20:df:7f:29: 35:a5:57:00:e8:ea:3c:4d:fb:f4:57:99:ca:dc:25:e6:db:b6: 06:6c:21:5c:4f:c5:34:f1:0c:bb:09:06:35:68:c7:32:7c:83: a5:0e:c2:59:f2:e8:ee:79:13:67:4b:91:ea:8a:ab:ac:8c:b2: 01:67:e0:9e:4e:15:f2:36:0f:59:02:c3:aa:dd:7f:dc:fd:20: ba:0c:50:81:51:9c:93:93:37:7b:e9:d6:1a:92:de:52:62:28: d4:a4:8a:32:0b:98:46:b3:c9:b8:58:de:b5:04:95:e8:3f:80: 42:16:1f:b8:d2:74:1f:60:1a:ab:14:6b:8e:82:33:33:1b:36: 0d:74:5a:41:4e:2f:c0:70:d7:eb:3b:50:a6:9f:4c:8c:76:c7: fe:15:94:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjUwMjE0MTYzMjMwWhcNMjUwMjIxMTYzMjMwWjAYMRYwFAYD VQQDEw02N2FmNzAxZS05NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08T8fbNd5N2+ozFY5oAhMP1hBuyO6zJH3ppTjk0Aodo5ep45w1WZ/H4MWb/D +Rcrr/H6BJlBGfzAyMw9jGiwBGCxj0U5ObMvmzPOaT++jzQufaByqvI/k3yH67xs kELESbTculKlIHT49j05zW5pV/MZ9chv8FOqoOvGigSQmseBvLukQVq3o0gl0zSu 2HBNcuqIaBwIoHeEDIg1zqNRa9DyVbRZkvTbhBHoSIH0BRsvHoXQahtErd+cZA8B xA7gGZg1NOuBpY5LotjmtdSSu2M2gObLH5tuUPvwxUOE9j/OLcg+RS/2ORo9K7P2 mDh/I+eIOccdIJBrOc5p0oFRbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzN7NEe Us40Tf4TgCnZZqLOcGctMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf QlJVbi1sTTlSNmtYQjM1akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEyhpV6weNgWtJMwHDWNP5CyrXj4qdLFXNSYBrrOomcTK/tgQ0IyU2 DvQdKol4aVJUv+K4U+NHmcnvH8IiHnTLje0oTdpqUAXXc59YPnazmoxK34mQWwN3 1ro0AgN4UaHW8uMIt3y59yDffyk1pVcA6Oo8Tfv0V5nK3CXm27YGbCFcT8U08Qy7 CQY1aMcyfIOlDsJZ8ujueRNnS5HqiqusjLIBZ+CeThXyNg9ZAsOq3X/c/SC6DFCB UZyTkzd76dYakt5SYijUpIoyC5hGs8m4WN61BJXoP4BCFh+40nQfYBqrFGuOgjMz GzYNdFpBTi/AcNfrO1Cmn0yMdsf+FZTv -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:14 2025 by rpki-client