$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft File: X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json) Hash identifier: 4p4ZojzDrrIPCULhCrt5Ky3UmjZTpuKRPc0lVovzCp0= Subject key identifier: 21:63:C9:76:AF:51:58:DF:9C:FF:16:C2:54:00:86:21:C3:4E:4F:DB Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Certificate serial: 0786 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft Manifest number: 0775 Signing time: Fri 22 Nov 2024 21:01:29 +0000 Manifest this update: Fri 22 Nov 2024 21:01:28 +0000 Manifest next update: Fri 29 Nov 2024 21:01:28 +0000 Files and hashes: 1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: CyJ0OkgdsYjpCzexqqqQIOVkDYgsgWSImYll51EYChg=) 2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: Mb3AFxuyqsJCVgV+HTF7n8MDdauyi9spCKyVJmftERQ=) 3: 71050646F8BC11EA9EC9436CC4F9AE02.roa (hash: YzGHsfeeblg8UomF4nvhwZvWUTAdoSinf5QhYl4p8b0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1926 (0x786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Validity Not Before: Nov 22 21:01:28 2024 GMT Not After : Nov 29 21:01:28 2024 GMT Subject: CN=6740f128-4af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:f6:2d:7a:a4:9f:52:f2:60:2e:69:09:83: 32:d2:86:c5:13:8f:9f:f6:98:1e:79:67:09:38:9e: a9:5d:82:da:6a:44:df:0c:8d:17:a9:b8:db:9e:b5: 02:33:a7:08:e1:79:3b:da:4c:a1:f9:34:13:8c:70: 21:14:4b:2b:ed:da:c7:df:7d:7f:0c:f5:49:86:32: b1:fb:97:28:97:9a:fc:0c:5b:05:80:51:63:d9:18: 74:71:85:d2:d4:c3:cc:b6:bd:5d:8e:38:d3:16:8d: 9f:92:5c:04:8d:39:2d:d7:de:76:72:f8:0e:75:66: 3f:08:b1:b5:0b:73:f0:62:76:26:4a:79:87:de:52: ec:9f:be:f3:6e:7c:ef:f2:63:48:99:95:a4:e6:f8: 2b:64:7b:e2:1d:4b:fb:ae:09:5b:fc:bd:d9:33:54: 1c:25:38:a3:2b:a7:fc:dc:16:8f:f7:36:d5:a5:c1: 6c:2b:a8:5c:f9:01:c4:b9:ca:54:ef:13:3d:81:12: e9:7e:d9:a1:b3:65:ec:65:a5:fc:5e:2b:1c:87:c8: 23:a7:1d:6e:70:79:12:2b:03:6d:4d:ee:35:1d:e4: 17:32:fd:f9:b7:d9:77:25:dd:67:4e:2c:0d:55:20: cf:67:a1:3c:b3:ef:c2:20:4c:d0:08:db:8e:e2:fa: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:63:C9:76:AF:51:58:DF:9C:FF:16:C2:54:00:86:21:C3:4E:4F:DB X509v3 Authority Key Identifier: keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:03:db:92:9e:5e:e3:9d:01:fb:5d:2b:ec:0e:52:60:12:a1: 3c:0f:25:c8:03:58:6b:31:bf:bd:4f:64:4e:6c:aa:72:d4:15: e8:bb:d9:fe:a1:b4:20:2e:a5:dd:62:4e:42:e0:bf:ef:06:ab: 34:73:73:35:8c:c2:15:26:c6:68:c3:a5:d5:62:3a:f8:4a:45: b2:a7:f7:bf:b2:14:39:ff:bb:c5:34:fe:ac:b6:33:83:96:d9: f3:dc:a4:f2:9a:17:f7:30:c6:17:c4:62:81:48:77:56:af:2c: 65:3f:5a:68:a3:ab:54:89:db:76:8d:02:14:80:f6:20:ab:a0: 47:a6:4b:0c:0c:bc:91:9a:0e:c8:79:e6:c3:38:cb:12:e8:1a: 0a:7b:4b:12:51:78:07:c6:bc:28:26:cb:8a:2b:57:74:06:4d: 19:44:44:f7:8e:1c:2d:c7:4e:1d:53:00:75:e7:e7:6e:01:c9: a8:dc:6e:30:15:fe:ad:07:55:46:d6:23:c8:91:9f:57:82:e5: 38:9b:6f:89:d8:e2:3f:7f:82:95:f9:a0:54:6f:56:bf:0c:ec: e7:4d:c4:6e:da:b1:63:29:b5:ff:8f:ee:c8:69:35:63:aa:7c: e4:4d:6b:67:4e:3f:86:06:6b:b6:b8:ad:8f:09:bb:be:15:bd: ce:55:34:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz M0NEMDU0MzUwHhcNMjQxMTIyMjEwMTI4WhcNMjQxMTI5MjEwMTI4WjAYMRYwFAYD VQQDEw02NzQwZjEyOC00YWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHj2LXqkn1LyYC5pCYMy0obFE4+f9pgeeWcJOJ6pXYLaakTfDI0XqbjbnrUC M6cI4Xk72kyh+TQTjHAhFEsr7drH331/DPVJhjKx+5col5r8DFsFgFFj2Rh0cYXS 1MPMtr1djjjTFo2fklwEjTkt1952cvgOdWY/CLG1C3PwYnYmSnmH3lLsn77zbnzv 8mNImZWk5vgrZHviHUv7rglb/L3ZM1QcJTijK6f83BaP9zbVpcFsK6hc+QHEucpU 7xM9gRLpftmhs2XsZaX8Xisch8gjpx1ucHkSKwNtTe41HeQXMv35t9l3Jd1nTiwN VSDPZ6E8s+/CIEzQCNuO4voYZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFjyXav UVjfnP8WwlQAhiHDTk/bMB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4 QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTQwMy9BMUNDRUNGRUY4QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1z a1oweldxbE5Ebk16elFWRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUA9uSnl7jnQH7XSvsDlJgEqE8DyXIA1hrMb+9T2RObKpy1BXou9n+ obQgLqXdYk5C4L/vBqs0c3M1jMIVJsZow6XVYjr4SkWyp/e/shQ5/7vFNP6stjOD ltnz3KTymhf3MMYXxGKBSHdWryxlP1poo6tUidt2jQIUgPYgq6BHpksMDLyRmg7I eebDOMsS6BoKe0sSUXgHxrwoJsuKK1d0Bk0ZRET3jhwtx04dUwB15+duAcmo3G4w Ff6tB1VG1iPIkZ9XguU4m2+J2OI/f4KV+aBUb1a/DOznTcRu2rFjKbX/j+7IaTVj qnzkTWtnTj+GBmu2uK2PCbu+Fb3OVTSz -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org