$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft File: w5bB5QN9M19zQcouz4ImEwDN_pU.mft (raw, json) Hash identifier: frc3BWugH05vxtJco5VLzyrnMRbUUDJ26uzF4ZE9tzE= Subject key identifier: 6F:F3:CC:8A:08:BD:10:F3:37:90:DE:AB:82:00:AE:B5:C6:E9:85:58 Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 Certificate issuer: /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Certificate serial: 0480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft Manifest number: 047B Signing time: Sat 15 Feb 2025 01:30:58 +0000 Manifest this update: Sat 15 Feb 2025 01:30:57 +0000 Manifest next update: Sat 22 Feb 2025 01:30:57 +0000 Files and hashes: 1: w5bB5QN9M19zQcouz4ImEwDN_pU.crl (hash: 9JzLmRj+WX6OhHVcLBbSHnqWLT78T0j2DPjgoCmtsi8=) 2: FCF7126E310711ECBFFF5E62C4F9AE02.roa (hash: F3pgM3DGI+wP2jrjrPXa65ZGlXf9TnXpF1OSKK2H5GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC38C Validity Not Before: Feb 15 01:30:57 2025 GMT Not After : Feb 22 01:30:57 2025 GMT Subject: CN=67afee51-2d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:bc:d1:e9:eb:75:bb:b8:bc:e2:c5:d2:2c: 9a:b8:1a:a2:e4:84:c5:cf:0f:17:f2:a6:6c:40:54: 89:f2:0f:c6:dc:66:dc:ff:17:33:9d:45:60:49:c6: 6c:95:75:d0:d7:13:be:73:75:ac:a8:c7:5c:e4:55: 7c:70:1e:81:f9:74:ac:91:75:e2:3d:b6:2d:fd:e4: 5d:e9:6f:1b:cb:46:9e:7e:7c:e9:6f:bf:89:f8:ce: 00:37:7d:30:60:e0:a8:b0:13:b4:bb:4f:42:d1:03: 90:d2:ee:03:e9:c9:e7:4f:4e:82:d9:93:0c:3c:d7: 65:bb:4f:06:f6:c8:b4:fe:16:03:6b:e8:28:5d:6c: de:fe:cf:9a:03:0c:84:31:6c:e8:2f:40:22:c3:17: 56:d9:0e:7b:a2:54:53:55:31:55:53:29:74:82:98: f6:2e:36:26:5b:f5:d3:d4:50:a4:0c:e8:40:06:2f: 1c:be:5a:8f:75:2c:cd:52:31:3e:d3:bc:2d:9c:53: 75:f8:0e:61:6d:75:03:a1:f2:61:72:cd:a8:1e:24: 20:d1:54:74:3a:9a:a3:f0:4f:55:b0:59:63:11:a3: 35:95:2d:e4:43:f5:3a:14:ec:2c:b5:cc:41:4f:e1: 04:f6:97:3a:85:2e:2f:94:37:5d:b0:ca:45:ed:57: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F3:CC:8A:08:BD:10:F3:37:90:DE:AB:82:00:AE:B5:C6:E9:85:58 X509v3 Authority Key Identifier: keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ef:73:a9:b6:e4:9f:ac:6a:da:c5:a9:a4:28:79:b5:b6:7d: 6c:95:c1:d1:e6:9c:b5:7f:fb:6a:ef:87:33:70:a5:ae:2d:24: 6f:26:aa:ac:bc:18:cb:ca:a2:10:28:6a:16:fe:ef:e7:a8:05: e4:9d:b4:cc:d8:16:b0:38:17:85:72:c6:2a:c1:70:72:bd:00: 9d:6c:b4:0f:58:9c:7e:43:8e:e4:7d:11:f2:ec:6a:68:98:35: d5:4d:91:a7:d2:e0:b8:10:c3:40:dc:39:2c:0d:37:3d:7c:5c: 48:38:2a:3c:88:62:e5:7a:b3:d7:21:78:d1:0d:2f:00:51:fb: 4d:9b:8e:f4:73:e3:95:b3:29:3a:27:cb:8b:07:98:46:29:2c: 4f:9f:11:ef:4d:dc:7f:93:1b:27:41:71:55:b4:88:a3:3d:37: 02:3e:6d:2c:17:02:49:52:90:c8:a0:a6:33:d4:50:94:c9:e7: b4:82:db:9f:5e:10:9c:5b:f4:d1:d2:51:62:85:9e:62:61:8c: 44:83:9a:f0:d9:d2:10:a9:c1:5c:d7:b8:e0:f9:86:d6:da:57: d4:5e:43:d1:3a:4f:57:e6:ee:fe:4d:bb:db:3c:ea:fe:ae:60: 9d:01:11:1c:0b:35:fd:15:83:b5:2e:3c:5d:25:ed:51:70:e2: ee:f9:58:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzOEMxMTAvBgNVBAUTKEMzOTZDMUU1MDM3RDMzNUY3MzQxQ0EyRUNGODIyNjEz MDBDREZFOTUwHhcNMjUwMjE1MDEzMDU3WhcNMjUwMjIyMDEzMDU3WjAYMRYwFAYD VQQDEw02N2FmZWU1MS0yZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwme80enrdbu4vOLF0iyauBqi5ITFzw8X8qZsQFSJ8g/G3Gbc/xcznUVgScZs lXXQ1xO+c3WsqMdc5FV8cB6B+XSskXXiPbYt/eRd6W8by0aefnzpb7+J+M4AN30w YOCosBO0u09C0QOQ0u4D6cnnT06C2ZMMPNdlu08G9si0/hYDa+goXWze/s+aAwyE MWzoL0AiwxdW2Q57olRTVTFVUyl0gpj2LjYmW/XT1FCkDOhABi8cvlqPdSzNUjE+ 07wtnFN1+A5hbXUDofJhcs2oHiQg0VR0Opqj8E9VsFljEaM1lS3kQ/U6FOwstcxB T+EE9pc6hS4vlDddsMpF7VcFjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/zzIoI vRDzN5Deq4IArrXG6YVYMB8GA1UdIwQYMBaAFMOWweUDfTNfc0HKLs+CJhMAzf6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzM4Qy84NzA0OERBQTMx MDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0xOXpRY291ejRJbUV3RE5f cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1YkI1UU45TTE5elFjb3V6NEltRXdETl9wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzM4Qy84NzA0OERBQTMxMDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0x OXpRY291ejRJbUV3RE5fcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa73OptuSfrGraxamkKHm1tn1slcHR5py1f/tq74czcKWuLSRvJqqs vBjLyqIQKGoW/u/nqAXknbTM2BawOBeFcsYqwXByvQCdbLQPWJx+Q47kfRHy7Gpo mDXVTZGn0uC4EMNA3DksDTc9fFxIOCo8iGLlerPXIXjRDS8AUftNm470c+OVsyk6 J8uLB5hGKSxPnxHvTdx/kxsnQXFVtIijPTcCPm0sFwJJUpDIoKYz1FCUyee0gtuf XhCcW/TR0lFihZ5iYYxEg5rw2dIQqcFc17jg+YbW2lfUXkPROk9X5u7+TbvbPOr+ rmCdAREcCzX9FYO1LjxdJe1RcOLu+Vg/ -----END CERTIFICATE-----Generated at Sun Feb 16 20:20:35 2025 by rpki-client