$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft File: E7lE6lgzzbdBH9TsaqHJYs87CIA.mft (raw, json) Hash identifier: RuL+CNND+wi1qHY+q5l2UHbJRjG2i3Fp+MABCjxmL8g= Subject key identifier: 5C:49:40:30:8D:C6:B5:F0:A3:FB:E6:83:8E:44:9B:B0:6D:22:17:9E Authority key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80 Certificate issuer: /CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft Manifest number: 24 Signing time: Wed 05 Feb 2025 05:35:22 +0000 Manifest this update: Wed 05 Feb 2025 05:35:22 +0000 Manifest next update: Wed 12 Feb 2025 05:35:22 +0000 Files and hashes: 1: E7lE6lgzzbdBH9TsaqHJYs87CIA.crl (hash: 47oeDRJAz6Cr347L3LnlB7jTUzGFXnpqW+dsuVeR1PE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 05:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44 Validity Not Before: Feb 5 05:35:22 2025 GMT Not After : Feb 12 05:35:22 2025 GMT Subject: CN=67a2f89a-b648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:a0:b5:5c:4a:5d:aa:61:30:71:c6:09:54: 23:78:19:a4:fd:29:28:25:08:c7:d3:34:66:fb:4a: 99:ed:3b:1d:78:e5:c4:c4:c8:40:25:01:cc:1d:03: 34:fb:18:a0:ea:cb:cc:b7:35:50:e9:e1:d3:81:bc: c3:63:6f:79:d6:03:55:46:81:8b:9b:9d:75:dd:2d: ae:1a:24:d0:49:cf:4f:66:20:a8:d9:4a:b2:7d:98: 21:80:54:65:3d:5b:e5:dd:cd:4b:02:df:b7:8f:8c: 75:42:63:38:8c:5f:8a:f6:1f:f1:d9:45:7d:0c:65: 12:45:37:61:82:fe:17:f8:24:a2:d1:de:4a:6a:9e: f6:f2:d4:3b:7a:dc:30:04:91:cf:d8:49:c4:69:51: 2a:db:cf:df:31:dc:0e:01:35:ed:27:1f:df:1e:26: 79:4f:d0:8a:e7:02:1e:14:e5:34:8a:ec:fd:37:54: 74:67:2f:6f:2c:fd:43:51:07:98:08:df:37:a9:c8: d3:ff:3e:29:81:60:ac:79:24:d8:96:58:aa:db:56: 91:76:8e:9d:e5:29:2c:f8:59:66:1c:24:e7:a3:09: 04:f6:52:3f:2e:a5:cf:3b:f2:15:49:a5:bf:5a:96: 5a:6c:4f:81:55:ac:96:3b:aa:ed:aa:1c:f3:ec:70: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:49:40:30:8D:C6:B5:F0:A3:FB:E6:83:8E:44:9B:B0:6D:22:17:9E X509v3 Authority Key Identifier: keyid:13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fb:69:d4:5a:06:f3:d5:f3:c2:23:f1:9b:04:3e:a2:82:17: e9:d7:57:b0:73:1e:0b:a6:79:85:65:5e:8b:3c:80:9f:44:71: 36:5c:ca:6d:7b:cf:0b:e7:40:08:6e:f8:3a:2a:6a:6a:b5:23: 8a:6f:89:53:c2:9b:3f:1e:f6:70:4c:38:c0:36:d5:c7:59:92: 7b:12:ae:2a:f3:5e:0b:51:04:95:b2:22:7c:91:99:32:87:15: 55:fb:29:dd:38:01:fd:4c:2c:d0:1e:2e:37:cd:06:fe:81:ae: 68:6f:c3:f3:0d:36:4e:80:1f:72:29:c8:70:62:9b:f5:26:c2: 32:a3:bc:62:8b:c5:73:00:28:8e:3e:db:6c:9d:e4:9c:65:85: ee:07:f5:39:16:9b:07:d4:d8:e7:37:87:79:c3:73:75:94:e1: 28:6f:da:df:bf:da:44:7f:d2:be:fa:fa:91:1a:62:eb:2a:a3: 44:d1:1d:93:3f:d5:0f:52:55:05:2c:2f:37:29:50:59:ca:7b: 04:da:0e:68:27:fc:53:c5:ee:bc:a4:80:5a:9a:85:a0:80:64: a9:71:f3:6d:e5:59:71:92:cf:ab:53:54:4c:56:2a:21:e4:10: 6f:b4:f6:50:eb:fd:a2:52:17:1a:3a:98:4e:5d:3e:90:e9:d0: 30:95:d4:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0Y0NDExMC8GA1UEBRMoMTNCOTQ0RUE1ODMzQ0RCNzQxMUZENEVDNkFBMUM5NjJD RjNCMDg4MDAeFw0yNTAyMDUwNTM1MjJaFw0yNTAyMTIwNTM1MjJaMBgxFjAUBgNV BAMTDTY3YTJmODlhLWI2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdz6C1XEpdqmEwccYJVCN4GaT9KSglCMfTNGb7SpntOx145cTEyEAlAcwdAzT7 GKDqy8y3NVDp4dOBvMNjb3nWA1VGgYubnXXdLa4aJNBJz09mIKjZSrJ9mCGAVGU9 W+XdzUsC37ePjHVCYziMX4r2H/HZRX0MZRJFN2GC/hf4JKLR3kpqnvby1Dt63DAE kc/YScRpUSrbz98x3A4BNe0nH98eJnlP0IrnAh4U5TSK7P03VHRnL28s/UNRB5gI 3zepyNP/PimBYKx5JNiWWKrbVpF2jp3lKSz4WWYcJOejCQT2Uj8upc878hVJpb9a llpsT4FVrJY7qu2qHPPscExlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXElAMI3G tfCj++aDjkSbsG0iF54wHwYDVR0jBBgwFoAUE7lE6lgzzbdBH9TsaqHJYs87CIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDRjQ0L0UyMTlDNjM4QUUx NTExRUZCMzAyOTgzRUM0RjlBRTAyL0U3bEU2bGd6emJkQkg5VHNhcUhKWXM4N0NJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvRTdsRTZsZ3p6YmRCSDlUc2FxSEpZczg3Q0lBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD RjQ0L0UyMTlDNjM4QUUxNTExRUZCMzAyOTgzRUM0RjlBRTAyL0U3bEU2bGd6emJk Qkg5VHNhcUhKWXM4N0NJQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFv7adRaBvPV88Ij8ZsEPqKCF+nXV7BzHgumeYVlXos8gJ9EcTZcym17 zwvnQAhu+Doqamq1I4pviVPCmz8e9nBMOMA21cdZknsSrirzXgtRBJWyInyRmTKH FVX7Kd04Af1MLNAeLjfNBv6Brmhvw/MNNk6AH3IpyHBim/UmwjKjvGKLxXMAKI4+ 22yd5Jxlhe4H9TkWmwfU2Oc3h3nDc3WU4Shv2t+/2kR/0r76+pEaYusqo0TRHZM/ 1Q9SVQUsLzcpUFnKewTaDmgn/FPF7rykgFqahaCAZKlx823lWXGSz6tTVExWKiHk EG+09lDr/aJSFxo6mE5dPpDp0DCV1AU= -----END CERTIFICATE-----Generated at Wed Feb 5 21:53:44 2025 by rpki-client