$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft File: 1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json) Hash identifier: 4iQrMUOhsS443w86VA7vVmXvLtG+O4nx6ROvV2Wozws= Subject key identifier: 17:73:30:7F:9C:9F:5E:A2:D4:CA:FE:B5:CF:B6:48:D2:A0:C4:3D:97 Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft Manifest number: 67 Signing time: Sat 23 Nov 2024 05:16:22 +0000 Manifest this update: Sat 23 Nov 2024 05:16:22 +0000 Manifest next update: Sat 30 Nov 2024 05:16:22 +0000 Files and hashes: 1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: qPDcqNLJDoJA03D36NV7Ht46Ib2tJ9DikAJnTL+4RmM=) 2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: m4oglPoB38SyEKwPfAbQcyjAIp/BCnugPm3RoOXoqoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Validity Not Before: Nov 23 05:16:22 2024 GMT Not After : Nov 30 05:16:22 2024 GMT Subject: CN=67416526-2f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:df:68:fe:31:94:e7:24:df:5b:bd:d2:6f:8b: 3e:a3:a3:e9:db:40:f3:f9:a4:9b:d8:dd:d8:44:36: 0d:6e:61:cb:3f:fd:53:3b:46:93:29:c7:cd:ac:b4: c3:f4:83:48:05:d3:3c:62:cc:3d:0c:0f:6c:43:7e: b0:5b:25:0c:ec:d3:d7:d2:6a:c7:0e:f5:eb:36:a4: 2f:be:01:9d:2b:2d:a1:cf:b8:22:f0:00:43:db:21: 0d:40:a2:46:89:25:9d:86:99:db:fb:2b:c1:b1:c7: cf:d9:94:30:1a:0c:fb:af:87:10:b8:fc:44:0f:14: ce:1f:77:f2:67:6f:c8:fd:47:af:40:b8:88:89:48: 38:28:56:2a:ed:fb:49:f8:08:42:ab:57:1f:1f:80: 1b:66:3e:22:b2:1b:ee:f9:57:d6:43:cd:4c:26:26: c7:d2:ea:2b:42:9a:3e:6f:7b:1b:3f:37:84:29:8e: 8c:4b:de:1f:64:05:e4:2a:f6:7d:f7:c2:b9:bc:39: e1:31:30:74:a8:2f:d0:2b:18:63:26:d9:be:35:9a: 8f:0e:88:de:8e:23:58:72:14:9a:c1:a3:c4:c7:a1: 03:45:04:4e:17:88:1f:92:e2:a8:d4:77:78:46:3d: 68:75:b0:55:cd:ab:93:0a:3b:51:e0:bc:dd:d9:db: 75:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:73:30:7F:9C:9F:5E:A2:D4:CA:FE:B5:CF:B6:48:D2:A0:C4:3D:97 X509v3 Authority Key Identifier: keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f9:33:d0:64:38:4f:41:27:7d:08:fb:ec:45:ea:41:44:ef: 33:e9:b2:0f:18:49:94:a7:a3:2c:cf:89:9f:cd:db:ba:91:5f: 04:09:a4:13:e4:c6:a5:7b:f6:e5:1e:20:bb:79:f0:93:34:12: ec:a0:20:5c:9e:3f:56:8d:33:31:28:69:60:e1:a1:6a:11:92: d1:53:ba:6c:bb:43:69:c2:71:cd:bb:0f:32:19:ad:8d:75:9f: 11:e8:0b:d1:8b:11:65:d6:71:fb:01:6e:cd:34:7e:e1:4b:11: c4:cd:36:cd:52:9e:0d:40:63:42:12:b8:aa:ae:44:1b:93:7c: dc:30:6d:a1:3d:4b:bc:94:6d:dc:73:05:e2:30:42:ce:3d:49: db:35:7d:b6:e6:7e:da:53:2d:fc:e1:96:73:be:68:4e:ed:1f: 6e:92:24:52:10:db:79:38:dd:27:56:af:c2:ec:44:61:38:58: e9:e7:ec:a4:25:53:f9:ea:c1:0a:1e:71:ee:3f:61:26:db:63: 30:46:e3:b1:e0:47:aa:26:a9:d7:16:49:bc:c4:89:3b:cf:4a: 3d:79:52:16:93:fe:db:6e:60:e1:9e:0d:e0:c3:7c:f6:25:ad: 05:fc:17:81:fa:d0:ad:bc:f2:f2:5e:aa:44:31:f1:9d:45:6a: 43:cf:fd:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjE5MDExMC8GA1UEBRMoRDZCRjNERTE2NDQxRUQ3RDg3NTA2REUwOUU0REQ1RDYz OEUwQkE2OTAeFw0yNDExMjMwNTE2MjJaFw0yNDExMzAwNTE2MjJaMBgxFjAUBgNV BAMTDTY3NDE2NTI2LTJmMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj32j+MZTnJN9bvdJviz6jo+nbQPP5pJvY3dhENg1uYcs//VM7RpMpx82stMP0 g0gF0zxizD0MD2xDfrBbJQzs09fSascO9es2pC++AZ0rLaHPuCLwAEPbIQ1AokaJ JZ2Gmdv7K8Gxx8/ZlDAaDPuvhxC4/EQPFM4fd/Jnb8j9R69AuIiJSDgoVirt+0n4 CEKrVx8fgBtmPiKyG+75V9ZDzUwmJsfS6itCmj5vexs/N4QpjoxL3h9kBeQq9n33 wrm8OeExMHSoL9ArGGMm2b41mo8OiN6OI1hyFJrBo8THoQNFBE4XiB+S4qjUd3hG PWh1sFXNq5MKO1HgvN3Z23UDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF3Mwf5yf XqLUyv61z7ZI0qDEPZcwHwYDVR0jBBgwFoAU1r894WRB7X2HUG3gnk3V1jjgumkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMTkwLzU3QjQwNTk0M0E4 NDExRUZBNTczMTU4NEM0RjlBRTAyLzFyODk0V1JCN1gySFVHM2duazNWMWpqZ3Vt ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXI4OTRXUkI3WDJIVUczZ25rM1YxampndW1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MTkwLzU3QjQwNTk0M0E4NDExRUZBNTczMTU4NEM0RjlBRTAyLzFyODk0V1JCN1gy SFVHM2duazNWMWpqZ3Vtay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADL5M9BkOE9BJ30I++xF6kFE7zPpsg8YSZSnoyzPiZ/N27qRXwQJpBPk xqV79uUeILt58JM0EuygIFyeP1aNMzEoaWDhoWoRktFTumy7Q2nCcc27DzIZrY11 nxHoC9GLEWXWcfsBbs00fuFLEcTNNs1Sng1AY0ISuKquRBuTfNwwbaE9S7yUbdxz BeIwQs49Sds1fbbmftpTLfzhlnO+aE7tH26SJFIQ23k43SdWr8LsRGE4WOnn7KQl U/nqwQoece4/YSbbYzBG47HgR6omqdcWSbzEiTvPSj15UhaT/ttuYOGeDeDDfPYl rQX8F4H60K288vJeqkQx8Z1FakPP/S4= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org