$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json) Hash identifier: JjhH7jcFWgrsUHcqx3iekWPWCtD/q6vkNeGGe0Mzj3E= Subject key identifier: 91:EF:A3:BF:7F:68:72:A6:8F:50:F4:DF:3D:97:53:85:14:2A:AD:21 Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft Manifest number: 25 Signing time: Wed 05 Feb 2025 06:14:58 +0000 Manifest this update: Wed 05 Feb 2025 06:14:58 +0000 Manifest next update: Wed 12 Feb 2025 06:14:58 +0000 Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: kS/pA3/l4FmbLDF96RZypdJ/1oDZNz7h8DGUu4C3jfw=) 2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: PjiKcHZxo3PwYpPFYpla6KazUuXCJGnKHspIakJqo2E=) 3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: jpijFayg1AhLIehVWTrf1nyIqutL0nvGe/8hsMY0L/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5 Validity Not Before: Feb 5 06:14:58 2025 GMT Not After : Feb 12 06:14:58 2025 GMT Subject: CN=67a301e2-0814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:bd:8e:33:a3:e3:9c:b9:e7:7d:fb:07:b5: 0b:d7:b8:27:47:74:08:f0:67:4f:52:7c:f1:7f:73: 60:47:0c:d6:df:ab:52:49:fd:87:23:a7:8b:bc:3f: d3:fa:df:ca:a8:1c:c8:4b:62:b5:6e:c8:54:bf:39: 5b:db:1e:ee:be:38:8b:3e:28:d6:b9:d9:47:97:01: b2:eb:f4:0e:65:7e:37:04:6d:f9:94:66:91:e5:54: b6:56:b5:f0:55:dc:1c:56:d1:4d:87:e1:75:0b:dd: 54:12:38:40:6b:38:8b:06:1c:9b:fc:85:39:bb:17: 10:b7:88:7e:1b:17:80:a2:ad:01:9a:a8:ee:57:4c: 9c:fb:3d:72:6c:e8:c2:a1:44:96:cf:e2:5d:7c:60: af:f7:d2:ab:51:b8:f6:8e:dc:cf:9b:d6:8b:eb:18: 13:89:79:af:ca:24:14:59:f1:41:f0:6c:4e:94:99: dc:36:c1:71:57:4f:5d:7e:0a:56:f3:e6:5c:f2:b4: 49:05:64:4c:9f:66:be:6d:4d:d1:d8:4e:82:88:4b: ce:81:e5:3d:15:54:b0:75:d9:08:88:ee:2b:9b:cf: a2:6d:dd:08:8c:42:08:96:fe:44:e0:ab:a3:65:68: ca:c4:c1:96:3a:8e:0f:6d:5b:40:d7:03:a1:a5:f7: 0a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EF:A3:BF:7F:68:72:A6:8F:50:F4:DF:3D:97:53:85:14:2A:AD:21 X509v3 Authority Key Identifier: keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:29:fd:ca:2d:86:09:09:48:c3:62:ff:24:7f:34:eb:3b:40: 26:ee:62:8c:b0:4f:93:18:3a:c6:da:24:bc:d7:0c:9b:23:df: e9:24:09:5e:c8:90:c6:88:08:f0:9b:35:10:f9:94:65:df:d4: 32:a1:21:ee:68:82:c7:5a:8b:f7:bf:4c:cb:f1:df:60:c5:01: 28:98:01:66:76:58:90:68:5b:52:46:9e:2b:75:3b:54:54:92: 7f:c6:8b:f2:a2:c8:c5:00:02:65:8f:b4:77:4a:e4:77:42:7a: db:a7:87:4c:2d:7a:bc:7d:fd:ef:9b:84:d0:c6:29:30:37:7c: 0d:55:be:3b:35:64:43:56:87:f1:fe:d4:61:d6:0a:0d:23:c2: c8:68:f2:8e:66:8d:96:1f:bf:7c:f4:1a:ff:45:98:bc:92:21: 4e:23:13:45:ca:39:c4:92:a7:21:ae:f5:8f:37:35:dd:d6:8d: eb:60:52:85:10:56:b9:37:96:64:ac:e7:ac:80:04:a1:e8:37: 96:be:f8:54:01:d3:7b:59:8f:2e:b7:bc:18:8d:3b:49:8f:60: a4:96:34:63:72:e9:3f:ac:ca:13:26:af:b1:2a:93:df:c7:c2: ae:72:ee:71:b5:92:a4:3a:5f:de:08:59:ce:81:1c:39:cc:b8: 36:15:a7:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTVFNTExMC8GA1UEBRMoNjkyMzZFNTk5NjMwMEEyRkQ3ODVFRjg1NzgzQzVDMjlD NUI0RTg3NDAeFw0yNTAyMDUwNjE0NThaFw0yNTAyMTIwNjE0NThaMBgxFjAUBgNV BAMTDTY3YTMwMWUyLTA4MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFCr2OM6PjnLnnffsHtQvXuCdHdAjwZ09SfPF/c2BHDNbfq1JJ/Ycjp4u8P9P6 38qoHMhLYrVuyFS/OVvbHu6+OIs+KNa52UeXAbLr9A5lfjcEbfmUZpHlVLZWtfBV 3BxW0U2H4XUL3VQSOEBrOIsGHJv8hTm7FxC3iH4bF4CirQGaqO5XTJz7PXJs6MKh RJbP4l18YK/30qtRuPaO3M+b1ovrGBOJea/KJBRZ8UHwbE6Umdw2wXFXT11+Clbz 5lzytEkFZEyfZr5tTdHYToKIS86B5T0VVLB12QiI7iubz6Jt3QiMQgiW/kTgq6Nl aMrEwZY6jg9tW0DXA6Gl9wqvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUke+jv39o cqaPUPTfPZdThRQqrSEwHwYDVR0jBBgwFoAUaSNuWZYwCi/Xhe+FeDxcKcW06HQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFNUU1L0YwRTc2RTEyQUZC RjExRUZBMjhBMzY1NEM0RjlBRTAyL2FTTnVXWll3Q2lfWGhlLUZlRHhjS2NXMDZI US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYVNOdVdaWXdDaV9YaGUtRmVEeGNLY1cwNkhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF NUU1L0YwRTc2RTEyQUZCRjExRUZBMjhBMzY1NEM0RjlBRTAyL2FTTnVXWll3Q2lf WGhlLUZlRHhjS2NXMDZIUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHMp/cothgkJSMNi/yR/NOs7QCbuYoywT5MYOsbaJLzXDJsj3+kkCV7I kMaICPCbNRD5lGXf1DKhIe5ogsdai/e/TMvx32DFASiYAWZ2WJBoW1JGnit1O1RU kn/Gi/KiyMUAAmWPtHdK5HdCetunh0wterx9/e+bhNDGKTA3fA1Vvjs1ZENWh/H+ 1GHWCg0jwsho8o5mjZYfv3z0Gv9FmLySIU4jE0XKOcSSpyGu9Y83Nd3WjetgUoUQ Vrk3lmSs56yABKHoN5a++FQB03tZjy63vBiNO0mPYKSWNGNy6T+syhMmr7Eqk9/H wq5y7nG1kqQ6X94IWc6BHDnMuDYVp1o= -----END CERTIFICATE-----Generated at Wed Feb 5 19:52:58 2025 by rpki-client