$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json) Hash identifier: EB4uznaREhlDHDCkyqM3W+ly+a1Ezh+7gTj7vqlJM1k= Subject key identifier: 20:A7:FA:E6:D7:9A:30:06:FA:D6:95:63:E1:A9:18:D2:09:37:70:E5 Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Certificate serial: 033E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft Manifest number: 033B Signing time: Sat 23 Nov 2024 00:37:33 +0000 Manifest this update: Sat 23 Nov 2024 00:37:33 +0000 Manifest next update: Sat 30 Nov 2024 00:37:33 +0000 Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: dJkoSjEJGDNdsgm265UihaSBeXDy8UGK30yE3u3Oxks=) 2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: cgSyYI5P/wggzlE/vHKgGqnNhOUL3VpZ2zoSJhZ6RSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Validity Not Before: Nov 23 00:37:33 2024 GMT Not After : Nov 30 00:37:33 2024 GMT Subject: CN=674123cd-9f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c0:0e:d5:c5:e4:4f:41:35:5d:f5:9e:37:cd: 0a:70:2e:aa:fa:3d:3f:2f:86:24:42:da:56:23:29: 03:c0:ae:e2:5b:fa:f5:0a:bc:da:38:67:94:c4:3c: 45:e9:08:f9:e8:b8:01:59:d2:24:26:49:25:59:a8: 55:59:74:25:0c:82:12:a6:aa:f0:66:2b:55:7d:ea: b9:37:79:08:e9:11:85:26:11:85:45:a8:fe:36:c5: ff:38:3a:ff:0c:0f:38:bb:ed:5a:1a:11:14:0e:54: fe:8b:e2:e1:7f:12:18:76:fa:76:1e:2b:ff:9f:79: 5b:90:57:7f:70:d1:84:d1:f3:02:75:42:95:1d:85: 96:51:56:de:64:a3:7b:e3:46:98:81:f3:a7:1a:cf: 89:d6:4f:20:c6:95:40:a0:f5:a1:e2:bc:2f:51:7f: 38:f5:85:c0:af:ab:1a:a3:9d:06:04:a1:5b:12:02: 51:c1:0f:e3:e9:8a:74:0a:8d:b6:4d:4f:af:3d:73: ad:09:c2:02:08:97:37:83:a7:4e:ba:06:c0:ad:6c: 9f:22:49:4d:c8:4c:e7:22:49:16:99:17:4f:58:45: cd:16:f2:d0:99:aa:7e:02:b0:4e:5a:e3:cc:e3:27: 19:d2:94:56:be:0b:4f:91:99:e8:a8:72:91:f9:ca: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:FA:E6:D7:9A:30:06:FA:D6:95:63:E1:A9:18:D2:09:37:70:E5 X509v3 Authority Key Identifier: keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ef:dc:29:f7:c4:e1:9a:d2:3b:3b:9e:ca:bb:55:12:ba:09: 81:81:1b:22:8a:86:ee:6b:1d:a7:12:21:cf:c2:62:8f:ac:2b: b8:bb:69:2b:15:71:5c:22:d9:19:c9:4a:1e:f1:0e:0e:3d:63: d0:7b:8a:56:6c:c3:de:a2:3b:9a:0b:3d:9e:6f:a3:ab:91:e1: 45:08:a6:6f:95:be:4f:a1:0e:53:7c:7e:95:f0:c0:e7:31:e2: 17:15:62:d6:ac:59:4d:f8:66:b5:c6:19:7a:38:0c:cf:3b:8f: 24:b4:da:5f:84:02:a1:6d:bc:36:60:22:4f:9e:33:b7:fe:d6: 73:28:9d:c6:8b:76:d4:3c:9b:89:58:a5:70:9c:d5:3a:b9:ba: 66:fd:54:df:e9:f4:b4:a0:b5:26:45:3f:b4:f7:c0:14:60:7f: 05:eb:e1:87:54:0d:8c:f8:c6:98:b4:84:aa:86:65:b7:3e:a4: b8:9e:de:be:60:e4:d1:f8:0d:e8:a5:be:a1:75:9b:d8:a2:b2: 90:ab:54:72:b8:8f:c8:ab:45:55:f2:58:6a:2d:58:1a:67:9f: 34:a3:6a:9a:80:f2:26:62:9a:a9:a2:bc:e0:2c:24:c2:c2:3e: b7:8c:7d:a8:80:c7:4f:55:cb:5f:2f:51:a3:f7:1d:87:ea:32: 1a:8c:50:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwRDYxMTAvBgNVBAUTKEZFRUU5RjM2MEE1REQxMzI4QkUxQzgyQTE3NzA3OTg5 Njg3NTlENDgwHhcNMjQxMTIzMDAzNzMzWhcNMjQxMTMwMDAzNzMzWjAYMRYwFAYD VQQDEw02NzQxMjNjZC05ZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cAO1cXkT0E1XfWeN80KcC6q+j0/L4YkQtpWIykDwK7iW/r1CrzaOGeUxDxF 6Qj56LgBWdIkJkklWahVWXQlDIISpqrwZitVfeq5N3kI6RGFJhGFRaj+NsX/ODr/ DA84u+1aGhEUDlT+i+LhfxIYdvp2Hiv/n3lbkFd/cNGE0fMCdUKVHYWWUVbeZKN7 40aYgfOnGs+J1k8gxpVAoPWh4rwvUX849YXAr6sao50GBKFbEgJRwQ/j6Yp0Co22 TU+vPXOtCcICCJc3g6dOugbArWyfIklNyEznIkkWmRdPWEXNFvLQmap+ArBOWuPM 4ycZ0pRWvgtPkZnoqHKR+cpiqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCn+ubX mjAG+taVY+GpGNIJN3DlMB8GA1UdIwQYMBaAFP7unzYKXdEyi+HIKhdweYlodZ1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTBENi9GOTY0QkMzMjlB RUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBUS0w0Y2dxRjNCNWlXaDFu VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191NmZOZ3BkMFRLTDRjZ3FGM0I1aVdoMW5VZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTBENi9GOTY0QkMzMjlBRUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBU S0w0Y2dxRjNCNWlXaDFuVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH79wp98ThmtI7O57Ku1USugmBgRsiiobuax2nEiHPwmKPrCu4u2kr FXFcItkZyUoe8Q4OPWPQe4pWbMPeojuaCz2eb6OrkeFFCKZvlb5PoQ5TfH6V8MDn MeIXFWLWrFlN+Ga1xhl6OAzPO48ktNpfhAKhbbw2YCJPnjO3/tZzKJ3Gi3bUPJuJ WKVwnNU6ubpm/VTf6fS0oLUmRT+098AUYH8F6+GHVA2M+MaYtISqhmW3PqS4nt6+ YOTR+A3opb6hdZvYorKQq1RyuI/Iq0VV8lhqLVgaZ580o2qagPImYpqporzgLCTC wj63jH2ogMdPVctfL1Gj9x2H6jIajFD6 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org