$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: QtGgHz/aUzoF3d1aIGIuknHWmNbNjmLqK0F9EA7drzE= Subject key identifier: F0:B9:7F:78:CF:3E:A4:94:33:33:5D:03:29:AF:A8:8C:1B:B1:A0:38 Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: 12 Signing time: Wed 05 Feb 2025 06:28:31 +0000 Manifest this update: Wed 05 Feb 2025 06:28:30 +0000 Manifest next update: Wed 12 Feb 2025 06:28:30 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: GbJUoj2CVCytPwOnQCjlHcvBZ9RKxVt2QjD2pD4vs0Y=) 2: 2CE185A4CF3E11EF92809831C4F9AE02.roa (hash: qic18VLt4fPLdZFyt0snUGiStxh75XVChLRqrx6aGwY=) 3: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: vLRSLWwCPlw1XgMXqIwjNZRh5iifhLT67LBNrNkXRO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578 Validity Not Before: Feb 5 06:28:30 2025 GMT Not After : Feb 12 06:28:30 2025 GMT Subject: CN=67a3050f-d79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:f8:f7:ae:ac:6f:c3:5d:cb:e4:fc:d1:6f: d4:ba:f3:95:bc:64:b8:eb:55:6f:30:bf:1b:ba:53: 20:80:49:9a:34:db:33:53:e7:53:4b:44:d6:89:de: 1a:3a:d3:58:d4:dd:c9:ca:e2:1e:ca:cd:da:ac:b8: 2c:9d:5d:54:43:0e:c6:20:98:49:5a:1f:ca:64:19: 57:dc:4d:13:cb:80:1f:c1:cf:db:9d:13:93:56:3c: 82:df:fb:f3:c7:05:a8:50:e8:1c:9c:71:f6:55:a4: fb:c1:ea:64:00:3f:8d:bf:f4:8c:9c:62:14:26:21: c4:89:00:56:f8:16:ac:be:0a:c1:6e:83:b9:5d:5c: 35:c2:ed:ca:b6:4a:a8:fe:89:a9:21:a1:b0:b0:ad: fa:82:fd:d1:fc:2f:10:25:94:80:32:56:d2:22:b1: ad:91:77:bc:6a:2b:33:94:fb:0a:4c:cc:92:92:c6: 19:01:1b:9c:16:ff:4d:7c:b8:86:22:7e:bb:c9:49: 40:fb:c4:9c:ab:c3:24:5d:35:dc:bb:25:6d:6b:22: 29:5c:f4:f9:94:64:58:e4:dd:29:a3:46:66:dd:a7: a5:1d:13:80:5d:62:37:c5:a6:f5:b2:7c:56:1f:50: 2c:a5:84:74:59:f0:d0:13:ac:f0:33:96:80:80:cc: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B9:7F:78:CF:3E:A4:94:33:33:5D:03:29:AF:A8:8C:1B:B1:A0:38 X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f7:89:35:f3:64:c9:d8:26:d7:f3:3b:49:e8:52:a6:77:4a: ba:b4:db:6e:ef:9f:a2:6a:ef:2f:1c:68:0a:54:02:c5:c9:4d: 08:04:03:f0:84:6a:a3:c4:64:a5:e4:ae:6b:eb:e5:97:21:69: d4:15:94:ef:c5:dc:91:b6:87:33:aa:2c:99:12:98:b7:dd:55: 33:77:b6:71:df:6d:10:b9:75:ec:e8:1f:4b:ca:1b:6a:ed:d9: e1:7b:46:5e:7d:3c:36:8c:c2:0d:43:04:dc:f4:28:ea:49:03: 71:17:9e:de:86:d3:83:fd:89:54:e6:ff:12:23:5b:e4:d1:01: 74:82:40:e1:e5:9e:16:85:65:eb:1a:c5:66:81:eb:73:40:6f: d6:53:0b:3a:15:9b:f9:27:e4:cb:75:d4:17:4b:c6:31:56:8d: 43:ae:0d:63:47:46:97:94:a5:c4:90:0f:fa:bc:da:87:3e:bb: e8:58:4f:5f:96:ed:fd:61:b8:22:8e:c5:69:ad:c8:c0:8a:69: 4b:ec:71:d8:b5:1f:da:b3:9e:7d:e0:c1:06:fe:28:b0:f6:ce: 51:80:5c:a6:3f:c3:c2:a1:fe:fe:a5:d5:73:b6:d9:2f:20:80: 70:97:e8:3e:22:6e:0d:aa:01:89:76:3e:fb:88:60:f0:a4:c1: e7:8a:d7:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUQzREFFRjdEMjc4ODM3M0VEREZDQjFBRDVDNEMyMzU2 QzU3QURFRDAeFw0yNTAyMDUwNjI4MzBaFw0yNTAyMTIwNjI4MzBaMBgxFjAUBgNV BAMTDTY3YTMwNTBmLWQ3OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChdfj3rqxvw13L5PzRb9S685W8ZLjrVW8wvxu6UyCASZo02zNT51NLRNaJ3ho6 01jU3cnK4h7KzdqsuCydXVRDDsYgmElaH8pkGVfcTRPLgB/Bz9udE5NWPILf+/PH BahQ6ByccfZVpPvB6mQAP42/9IycYhQmIcSJAFb4Fqy+CsFug7ldXDXC7cq2Sqj+ iakhobCwrfqC/dH8LxAllIAyVtIisa2Rd7xqKzOU+wpMzJKSxhkBG5wW/018uIYi frvJSUD7xJyrwyRdNdy7JW1rIilc9PmUZFjk3SmjRmbdp6UdE4BdYjfFpvWyfFYf UCylhHRZ8NATrPAzloCAzK+xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8Ll/eM8+ pJQzM10DKa+ojBuxoDgwHwYDVR0jBBgwFoAUHT2u99J4g3Pt38sa1cTCNWxXre0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzAwM0E3OURBQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSFQydTk5SjRnM1B0MzhzYTFjVENOV3hYcmUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NTc4LzAwM0E3OURBQ0YzRDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQ dDM4c2ExY1RDTld4WHJlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAb3iTXzZMnYJtfzO0noUqZ3Srq0227vn6Jq7y8caApUAsXJTQgEA/CE aqPEZKXkrmvr5ZchadQVlO/F3JG2hzOqLJkSmLfdVTN3tnHfbRC5dezoH0vKG2rt 2eF7Rl59PDaMwg1DBNz0KOpJA3EXnt6G04P9iVTm/xIjW+TRAXSCQOHlnhaFZesa xWaB63NAb9ZTCzoVm/kn5Mt11BdLxjFWjUOuDWNHRpeUpcSQD/q82oc+u+hYT1+W 7f1huCKOxWmtyMCKaUvscdi1H9qznn3gwQb+KLD2zlGAXKY/w8Kh/v6l1XO22S8g gHCX6D4ibg2qAYl2PvuIYPCkweeK1xw= -----END CERTIFICATE-----Generated at Wed Feb 5 18:58:45 2025 by rpki-client