$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft File: 22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json) Hash identifier: HAjjMPXGwTE4sa7WE0Sr2QzwX9JEiOFefd3vua1PnBo= Subject key identifier: 4D:90:C2:86:60:63:1A:C6:79:1E:E5:35:6B:11:91:75:87:18:0F:05 Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Certificate serial: 08D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft Manifest number: 08B9 Signing time: Fri 22 Nov 2024 20:17:55 +0000 Manifest this update: Fri 22 Nov 2024 20:17:54 +0000 Manifest next update: Fri 29 Nov 2024 20:17:54 +0000 Files and hashes: 1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: dyYyoCmGgtcM1DyZYZD17SJK3+p13ekz1B9A0LmuXnY=) 2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: Hia1kxQCYg8oyQHwZwIXTMQyGra4hQiDpSVRmvXE9k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2259 (0x8d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Validity Not Before: Nov 22 20:17:54 2024 GMT Not After : Nov 29 20:17:54 2024 GMT Subject: CN=6740e6f3-ab4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:cd:f5:8f:20:69:10:fe:9e:2c:3d:80:79: 08:04:77:e3:c2:aa:61:88:5b:c1:76:34:ca:85:93: ee:a1:e9:ab:30:ca:47:1c:0e:5d:15:e9:a0:d8:a8: cd:3b:61:43:d9:ab:b9:e2:4a:11:1f:64:05:72:18: e9:89:10:fd:4a:66:0e:02:47:d6:a3:34:ad:c2:e3: 99:35:3c:e0:eb:10:cf:68:a2:3c:e6:68:bc:67:1f: eb:b1:ce:57:a3:9b:67:a9:04:30:18:10:e7:92:77: b0:7d:7b:8b:25:96:13:8f:4f:d4:c4:ef:0c:d8:a3: 28:a6:36:5c:c2:e7:16:1d:79:95:10:81:f1:20:5c: 0b:13:ec:08:74:fb:db:c2:1b:dc:8a:0c:d2:cc:2d: 62:b1:5e:67:12:1a:92:c4:19:95:a9:3f:53:8f:ce: 8f:7a:ba:6b:50:91:16:6c:e6:54:6d:15:b0:f5:96: 69:71:e3:f7:60:94:eb:ef:0a:7a:d4:80:06:93:74: e9:6e:9c:99:77:1b:b7:57:92:ea:7a:e5:07:81:07: a9:af:40:38:22:9e:41:60:06:cb:f1:1d:ba:e5:ca: 8f:2b:07:52:fd:18:ed:77:d2:66:52:4d:f7:5f:bd: 56:26:8d:bb:9a:08:75:e0:8f:2a:df:6f:cd:4f:95: 24:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:90:C2:86:60:63:1A:C6:79:1E:E5:35:6B:11:91:75:87:18:0F:05 X509v3 Authority Key Identifier: keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3d:60:7a:e8:8d:bd:12:41:d8:1a:c9:5f:43:e5:ec:b7:60: e4:4b:18:9b:0c:f5:63:bc:ef:8c:85:f8:3d:26:80:31:b3:47: 8d:98:86:17:64:89:29:81:98:71:6d:64:ac:df:f1:29:c1:ab: 2b:35:d5:ee:f4:a3:3b:45:0c:bb:62:d8:bf:b5:36:3d:bb:a4: e2:45:5b:83:9b:b7:e8:41:1a:a3:19:36:a8:06:a8:e3:e0:69: 9f:28:4b:87:07:62:61:7c:d2:ea:83:2f:2d:42:c9:f4:91:b8: 66:0c:e5:a5:7f:ed:3a:69:7a:ad:c7:95:41:b8:a2:5e:4e:88: 1e:7d:e8:12:99:34:74:41:a1:98:1e:c4:09:83:96:0c:62:a8: 43:87:2d:43:5f:5e:47:a7:83:ce:ea:5d:06:a5:e0:3c:b5:f8: a3:fb:61:e0:53:e8:e5:23:72:eb:e0:e6:50:84:1f:5d:48:56: 96:12:6c:02:17:11:b8:e5:5a:91:9c:99:d4:84:04:1e:86:a0: 71:7e:41:a5:6c:86:9d:a8:7c:7f:3e:01:94:b7:96:ae:49:74: 8c:01:e4:19:9a:c5:67:93:12:1c:ae:20:14:51:4f:b2:a2:c9: 5e:6f:be:1d:6f:30:2b:00:78:43:73:28:50:05:cb:16:5f:cf: f1:f1:20:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3QkMxMTAvBgNVBAUTKERCNjI1MDY1N0ZFQkMxNjRFQjgyMUM3NjUyQUJFM0E4 NUZBOUFDRDQwHhcNMjQxMTIyMjAxNzU0WhcNMjQxMTI5MjAxNzU0WjAYMRYwFAYD VQQDEw02NzQwZTZmMy1hYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9XN9Y8gaRD+niw9gHkIBHfjwqphiFvBdjTKhZPuoemrMMpHHA5dFemg2KjN O2FD2au54koRH2QFchjpiRD9SmYOAkfWozStwuOZNTzg6xDPaKI85mi8Zx/rsc5X o5tnqQQwGBDnknewfXuLJZYTj0/UxO8M2KMopjZcwucWHXmVEIHxIFwLE+wIdPvb whvcigzSzC1isV5nEhqSxBmVqT9Tj86PerprUJEWbOZUbRWw9ZZpceP3YJTr7wp6 1IAGk3TpbpyZdxu3V5LqeuUHgQepr0A4Ip5BYAbL8R265cqPKwdS/Rjtd9JmUk33 X71WJo27mgh14I8q32/NT5UkCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2QwoZg YxrGeR7lNWsRkXWHGA8FMB8GA1UdIwQYMBaAFNtiUGV/68Fk64IcdlKr46hfqazU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTdCQy9BOENBRkJDMkFB MjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndXVHJnaHgyVXF2anFGLXBy TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIySlFaWF9yd1dUcmdoeDJVcXZqcUYtcHJOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTdCQy9BOENBRkJDMkFBMjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndX VHJnaHgyVXF2anFGLXByTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMPWB66I29EkHYGslfQ+Xst2DkSxibDPVjvO+Mhfg9JoAxs0eNmIYX ZIkpgZhxbWSs3/EpwasrNdXu9KM7RQy7Yti/tTY9u6TiRVuDm7foQRqjGTaoBqjj 4GmfKEuHB2JhfNLqgy8tQsn0kbhmDOWlf+06aXqtx5VBuKJeTogefegSmTR0QaGY HsQJg5YMYqhDhy1DX15Hp4PO6l0GpeA8tfij+2HgU+jlI3Lr4OZQhB9dSFaWEmwC FxG45VqRnJnUhAQehqBxfkGlbIadqHx/PgGUt5auSXSMAeQZmsVnkxIcriAUUU+y osleb74dbzArAHhDcyhQBcsWX8/x8SAB -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org