$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: OCcoZVl34TrOF/qK0HXyZRYYO9bcM40cZIG9nZp5c7o= Subject key identifier: EF:3B:14:A3:16:A1:C6:20:8F:57:49:DB:90:32:47:7C:92:24:F2:CD Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 018C Signing time: Sat 23 Nov 2024 02:02:52 +0000 Manifest this update: Sat 23 Nov 2024 02:02:52 +0000 Manifest next update: Sat 30 Nov 2024 02:02:52 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: spkGysBGXiRea2sjM2Nk5SY/3kMnPyJC8EmvN6b+jg8=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: pTkU8wdRwupBYI9IDH//sp/jB9W7c5nU71wrSnDuFOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Nov 23 02:02:52 2024 GMT Not After : Nov 30 02:02:52 2024 GMT Subject: CN=674137cc-c59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9e:ee:11:37:2b:c5:be:cc:b2:17:33:e9:7b: a0:1a:99:d7:e0:03:0a:c6:6d:48:c3:41:d4:cc:74: 78:2d:a4:74:f4:d6:7a:b3:70:c3:9b:f6:3c:6c:7c: 81:15:72:e8:d7:5c:fb:69:39:c1:6c:18:a8:9b:bf: 9c:d9:ce:80:5a:2b:96:0a:cc:4a:43:2f:6b:c0:b9: 91:1d:81:d0:53:f8:01:62:fa:9d:56:94:d9:29:eb: 45:4c:4e:86:93:47:8d:0b:1d:f6:4f:54:81:3e:74: 06:5a:b9:7c:2c:67:f3:2e:7a:11:30:82:a9:d1:f1: db:40:37:e0:ff:d4:2a:45:21:0c:64:d0:61:7b:da: bf:e8:24:8c:a8:70:07:16:13:0c:06:d3:d0:bb:84: 5b:cc:d7:8a:94:55:24:4c:1f:90:69:26:6f:5d:ff: 51:36:5c:25:5d:d8:15:ec:44:2f:21:68:44:2b:90: 5e:e2:fe:ed:45:c3:21:4f:30:de:fb:84:93:98:6e: 90:c1:72:93:ed:af:9b:16:59:7c:27:78:0a:67:f0: 66:76:74:7c:ae:e1:52:a6:2f:89:1c:25:13:89:3b: c6:2b:81:dd:7c:9c:30:00:9e:60:eb:98:6b:ea:25: 78:0e:da:b6:85:78:9a:29:02:61:e1:a8:4d:2c:84: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3B:14:A3:16:A1:C6:20:8F:57:49:DB:90:32:47:7C:92:24:F2:CD X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:15:88:96:e6:bc:cf:2e:78:1c:c9:62:f9:27:9a:09:98:d5: 86:07:d4:c4:8c:0a:b6:af:25:1d:ea:83:13:ae:55:de:5c:3e: 78:76:e0:ae:f2:27:ed:30:65:78:4e:72:7e:1e:e2:61:58:db: f7:13:ca:d5:c7:db:a5:fc:73:d5:c6:35:a6:7d:fc:18:2c:5f: 71:b3:c8:19:89:f2:ff:84:a6:c1:c1:56:49:a4:b2:c7:38:6b: d6:9f:f9:69:20:ad:90:63:3f:30:c0:87:f4:b8:ae:fb:d5:ce: 2c:81:29:82:45:f5:07:e9:0d:77:19:36:aa:b3:c6:b0:2d:10: 0f:5b:c3:07:2f:f9:90:68:f5:0c:68:16:fa:6e:85:0c:36:96: 96:f4:c3:b7:4e:4e:5c:37:80:b1:d2:26:13:91:93:29:91:83: 92:6e:da:65:86:76:c8:da:b3:f1:4b:38:26:51:1e:e0:1e:eb: e2:02:be:15:48:02:3a:8f:c1:14:08:c3:5f:ce:55:98:e6:44: e5:1b:4d:bd:cc:e9:69:32:32:4f:ad:49:f3:3b:b9:57:c3:88: f6:f4:48:52:22:76:d1:26:00:01:89:08:1f:58:87:5c:44:34: e7:70:74:65:6b:82:68:9d:2a:ba:82:0c:3a:db:60:04:c3:87: 64:02:a1:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjQxMTIzMDIwMjUyWhcNMjQxMTMwMDIwMjUyWjAYMRYwFAYD VQQDEw02NzQxMzdjYy1jNTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Z7uETcrxb7Mshcz6XugGpnX4AMKxm1Iw0HUzHR4LaR09NZ6s3DDm/Y8bHyB FXLo11z7aTnBbBiom7+c2c6AWiuWCsxKQy9rwLmRHYHQU/gBYvqdVpTZKetFTE6G k0eNCx32T1SBPnQGWrl8LGfzLnoRMIKp0fHbQDfg/9QqRSEMZNBhe9q/6CSMqHAH FhMMBtPQu4RbzNeKlFUkTB+QaSZvXf9RNlwlXdgV7EQvIWhEK5Be4v7tRcMhTzDe +4STmG6QwXKT7a+bFll8J3gKZ/BmdnR8ruFSpi+JHCUTiTvGK4HdfJwwAJ5g65hr 6iV4Dtq2hXiaKQJh4ahNLISATwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO87FKMW ocYgj1dJ25AyR3ySJPLNMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbFYiW5rzPLngcyWL5J5oJmNWGB9TEjAq2ryUd6oMTrlXeXD54duCu 8iftMGV4TnJ+HuJhWNv3E8rVx9ul/HPVxjWmffwYLF9xs8gZifL/hKbBwVZJpLLH OGvWn/lpIK2QYz8wwIf0uK771c4sgSmCRfUH6Q13GTaqs8awLRAPW8MHL/mQaPUM aBb6boUMNpaW9MO3Tk5cN4Cx0iYTkZMpkYOSbtplhnbI2rPxSzgmUR7gHuviAr4V SAI6j8EUCMNfzlWY5kTlG029zOlpMjJPrUnzO7lXw4j29EhSInbRJgABiQgfWIdc RDTncHRla4JonSq6ggw622AEw4dkAqFk -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org