$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft File: kTOsvs_e7PTaOiIigng09bc6-qc.mft (raw, json) Hash identifier: Pj8OQpFLcxoIWDFiR1KPQVOBiFrrmf9MkQqT1UjuHR4= Subject key identifier: 9A:CE:BB:BF:97:84:13:35:22:65:AD:1C:BA:E7:D5:FE:B8:DC:FB:14 Authority key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7 Certificate issuer: /CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft Manifest number: 7D Signing time: Sat 15 Feb 2025 07:47:32 +0000 Manifest this update: Sat 15 Feb 2025 07:47:31 +0000 Manifest next update: Sat 22 Feb 2025 07:47:31 +0000 Files and hashes: 1: kTOsvs_e7PTaOiIigng09bc6-qc.crl (hash: a4OAdlEwA+abFCXwXhmTnZyBC4Py/irgSLSRCuc2qmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F79A2 Validity Not Before: Feb 15 07:47:31 2025 GMT Not After : Feb 22 07:47:31 2025 GMT Subject: CN=67b04693-ef0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:e7:ac:ea:3b:f8:aa:c5:7d:82:ce:70:b0: 75:c9:e4:9d:34:4f:7c:57:5d:08:20:c8:b1:07:8f: fd:76:68:e5:d3:02:bc:fc:75:fc:29:93:15:3b:5f: a9:ab:d8:d2:1e:c0:a8:6d:62:6b:f0:c9:e6:8b:4e: 84:16:a2:f5:21:9b:e9:46:52:91:a1:a9:83:51:48: aa:9f:bf:94:35:f6:d0:19:19:a6:bf:97:17:4a:ee: 58:f9:f2:a3:a8:16:9f:93:0b:ee:da:2c:70:0c:f8: 95:14:cc:dd:5a:bf:ba:4c:93:28:f7:eb:4d:59:39: 92:69:10:95:ff:5f:35:c9:4d:a0:96:24:83:c3:0c: e7:2d:13:28:6b:4e:49:f2:05:c8:1b:99:b1:02:c2: 22:f7:82:cb:59:6e:cd:83:2c:34:f1:30:91:a3:3a: 11:be:00:87:32:41:cc:e6:99:98:f3:24:00:df:29: b6:85:85:88:d7:0c:c4:6f:bd:5d:c9:34:70:e2:03: bb:8c:ea:16:56:fe:1b:61:3d:eb:5d:37:6a:cc:83: 39:4d:83:7d:48:3e:86:76:fe:79:e8:81:bd:06:fd: 09:96:9a:b5:cf:b0:4c:7e:e1:f2:24:76:af:55:08: 9c:16:6a:64:4c:c5:15:71:1d:ed:9d:51:f5:bd:21: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CE:BB:BF:97:84:13:35:22:65:AD:1C:BA:E7:D5:FE:B8:DC:FB:14 X509v3 Authority Key Identifier: keyid:91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:a2:33:b2:c1:03:23:a8:13:56:e2:c5:a1:0a:c4:11:22:17: aa:fa:d0:3e:fe:77:e8:4b:61:c0:e4:36:ce:43:17:99:49:19: 3a:3d:4b:2d:dc:50:88:87:95:8b:1c:36:73:4b:3a:c1:2d:9f: c5:7b:0a:57:2f:e9:b8:b9:c8:7d:9d:bc:ba:36:b3:5b:8f:ff: de:c7:b8:9a:4b:9a:9b:e0:15:78:0d:0b:7f:1a:2e:fe:ed:fb: dc:ad:1c:3d:3a:d1:ca:d0:9a:e5:47:a9:62:c2:e5:5c:aa:62: 60:d7:fa:dd:f0:59:81:5b:3d:f5:98:dc:7b:51:77:e0:49:10: 94:c2:34:6f:b3:5c:d9:91:81:3d:34:6e:00:92:99:55:7a:e4: 2b:0a:02:90:73:37:34:e5:37:c2:7c:52:2a:f2:0d:bc:1a:ee: e6:55:88:d5:cc:07:36:32:f8:40:35:fa:53:8f:1f:91:2e:0a: b1:07:e1:c7:e2:c5:dc:0b:9b:7e:49:e7:b9:3d:66:f0:d3:3d: f2:68:fd:c1:2d:12:90:fd:87:48:fd:9b:27:41:af:97:36:4e: 71:8b:ff:d1:5a:fe:9b:99:3f:e9:fc:82:79:25:ef:9e:6f:95: 86:e8:6c:7d:23:8a:82:b8:fb:83:80:d9:af:83:d2:8f:de:67: b6:84:8c:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzlBMjExMC8GA1UEBRMoOTEzM0FDQkVDRkRFRUNGNERBM0EyMjIyODI3ODM0RjVC NzNBRkFBNzAeFw0yNTAyMTUwNzQ3MzFaFw0yNTAyMjIwNzQ3MzFaMBgxFjAUBgNV BAMTDTY3YjA0NjkzLWVmMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs0Oes6jv4qsV9gs5wsHXJ5J00T3xXXQggyLEHj/12aOXTArz8dfwpkxU7X6mr 2NIewKhtYmvwyeaLToQWovUhm+lGUpGhqYNRSKqfv5Q19tAZGaa/lxdK7lj58qOo Fp+TC+7aLHAM+JUUzN1av7pMkyj3601ZOZJpEJX/XzXJTaCWJIPDDOctEyhrTkny BcgbmbECwiL3gstZbs2DLDTxMJGjOhG+AIcyQczmmZjzJADfKbaFhYjXDMRvvV3J NHDiA7uM6hZW/hthPetdN2rMgzlNg31IPoZ2/nnogb0G/QmWmrXPsEx+4fIkdq9V CJwWamRMxRVxHe2dUfW9IZYFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUms67v5eE EzUiZa0cuufV/rjc+xQwHwYDVR0jBBgwFoAUkTOsvs/e7PTaOiIigng09bc6+qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3OUEyLzFBMDVFNkVFMkQy RTExRUZBNTRDODA0MkM0RjlBRTAyL2tUT3N2c19lN1BUYU9pSWlnbmcwOWJjNi1x Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva1RPc3ZzX2U3UFRhT2lJaWduZzA5YmM2LXFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 OUEyLzFBMDVFNkVFMkQyRTExRUZBNTRDODA0MkM0RjlBRTAyL2tUT3N2c19lN1BU YU9pSWlnbmcwOWJjNi1xYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALqiM7LBAyOoE1bixaEKxBEiF6r60D7+d+hLYcDkNs5DF5lJGTo9Sy3c UIiHlYscNnNLOsEtn8V7Clcv6bi5yH2dvLo2s1uP/97HuJpLmpvgFXgNC38aLv7t +9ytHD060crQmuVHqWLC5VyqYmDX+t3wWYFbPfWY3HtRd+BJEJTCNG+zXNmRgT00 bgCSmVV65CsKApBzNzTlN8J8UiryDbwa7uZViNXMBzYy+EA1+lOPH5EuCrEH4cfi xdwLm35J57k9ZvDTPfJo/cEtEpD9h0j9mydBr5c2TnGL/9Fa/puZP+n8gnkl755v lYbobH0jioK4+4OA2a+D0o/eZ7aEjKI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:05 2025 by rpki-client