$ rpki-client -vvf rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft File: SrXKEMKsIigqma5r9iT5N1aEP4o.mft (raw, json) Hash identifier: Qh4h67G/yVIT1yf5iJ2/Wc6pKhX79fz1f+AMxBI5bvM= Subject key identifier: 37:ED:4C:D9:F6:6C:0A:52:D0:FA:64:FF:D9:CA:96:20:23:80:CC:76 Authority key identifier: 4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A Certificate issuer: /CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft Manifest number: FB Signing time: Sat 23 Nov 2024 03:17:20 +0000 Manifest this update: Sat 23 Nov 2024 03:17:19 +0000 Manifest next update: Sat 30 Nov 2024 03:17:19 +0000 Files and hashes: 1: SrXKEMKsIigqma5r9iT5N1aEP4o.crl (hash: vJ8uGJA0mIZ8KhE0pKQYnYX1JiNnWamZOn3Qe4bJjYI=) 2: DB0C41022A0611EE95A2F00DC4F9AE02.roa (hash: u5XCjKJ3dW4XeKjruW6bKKkvEYHMaTHcPhAzry86YE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B675/serialNumber=4AB5CA10C2AC22282A99AE6BF624F93756843F8A Validity Not Before: Nov 23 03:17:19 2024 GMT Not After : Nov 30 03:17:19 2024 GMT Subject: CN=67414940-c239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:2f:16:2d:1b:6f:eb:d4:6e:f6:bb:90:f5: 74:d1:91:9f:d7:87:14:e3:8f:de:10:79:af:9f:7d: 70:e3:a1:32:d0:0b:05:15:01:4c:13:87:d1:79:f4: c5:5b:b4:01:c4:12:a7:a2:75:4c:8d:9b:ef:88:9d: 82:09:b2:60:9f:28:6f:55:93:b6:6a:f9:51:89:c2: 9a:dc:06:39:07:17:04:6e:62:e1:a3:a3:c5:6a:56: 0b:be:23:2e:5f:f6:a2:6d:0d:92:d3:46:d8:87:e9: e2:51:e1:66:c9:6d:af:cb:a9:f5:2e:48:01:55:40: 36:0f:78:3a:18:42:1e:a8:3b:37:22:ab:82:a4:37: 68:40:3b:06:ac:03:17:dd:f6:51:da:21:1e:29:ae: 91:80:c1:be:49:43:bd:f0:e2:e8:84:ec:93:ff:dd: c4:a3:8b:99:22:38:d3:21:97:3d:4c:ac:07:b6:0d: a2:88:c1:59:03:c6:fc:5a:6a:e5:6e:ec:0b:e1:c3: 84:7a:54:a4:c8:99:ba:3e:52:59:1e:c3:e8:a5:8f: 35:8e:28:83:2d:f5:dd:07:6d:3d:47:06:30:29:79: dc:65:89:bf:b7:cd:aa:a6:c0:d2:1f:86:f8:e1:b6: a0:3b:50:fe:54:39:6a:57:90:b3:c4:82:69:46:53: 66:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:ED:4C:D9:F6:6C:0A:52:D0:FA:64:FF:D9:CA:96:20:23:80:CC:76 X509v3 Authority Key Identifier: keyid:4A:B5:CA:10:C2:AC:22:28:2A:99:AE:6B:F6:24:F9:37:56:84:3F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrXKEMKsIigqma5r9iT5N1aEP4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B675/DCAD27FC2A0511EE81982909C4F9AE02/SrXKEMKsIigqma5r9iT5N1aEP4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:0d:b7:9a:6a:fc:b9:04:0b:66:4b:2e:0f:85:4e:1b:a8:3e: e0:57:7f:8a:72:dd:df:0f:d9:22:d6:1e:61:b0:d9:18:a5:f5: e9:54:ca:c8:29:a7:79:6f:d7:ad:fb:d1:53:4d:e8:a4:de:f8: 97:89:71:70:27:ef:11:e0:1c:dd:b2:f8:09:1f:21:51:d6:ff: 4e:6c:0d:bb:47:2c:76:18:c8:76:4d:2b:ca:df:7a:00:5a:92: 24:17:3a:7f:2d:96:6d:f1:d2:a1:bb:62:20:0f:5f:ba:1d:97: ce:81:86:36:da:d3:17:3c:62:f2:4a:98:6e:6f:a6:89:8b:4b: 10:59:08:a5:d4:2f:0a:69:d1:1f:30:21:c1:5e:ae:c8:41:d7: 23:9f:b4:0e:e0:21:25:34:03:4e:cc:24:02:83:c2:a3:39:08: 1f:88:eb:25:99:77:ac:d7:96:bb:bc:bd:bc:be:53:75:cb:b5: 8f:bd:fb:f2:80:36:f3:7d:76:8a:2d:e4:f2:16:21:5d:64:8d: 80:e0:60:a7:9c:7f:b2:e2:76:60:9e:c1:34:f2:9f:0b:50:94: fc:7b:ed:1c:57:79:12:1a:f0:a1:89:62:6f:d3:1e:04:bb:8e: 08:ed:40:80:0f:e0:8a:ed:87:32:8c:81:6a:ef:16:56:7e:4e: ba:53:ae:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I2NzUxMTAvBgNVBAUTKDRBQjVDQTEwQzJBQzIyMjgyQTk5QUU2QkY2MjRGOTM3 NTY4NDNGOEEwHhcNMjQxMTIzMDMxNzE5WhcNMjQxMTMwMDMxNzE5WjAYMRYwFAYD VQQDEw02NzQxNDk0MC1jMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIMvFi0bb+vUbva7kPV00ZGf14cU44/eEHmvn31w46Ey0AsFFQFME4fRefTF W7QBxBKnonVMjZvviJ2CCbJgnyhvVZO2avlRicKa3AY5BxcEbmLho6PFalYLviMu X/aibQ2S00bYh+niUeFmyW2vy6n1LkgBVUA2D3g6GEIeqDs3IquCpDdoQDsGrAMX 3fZR2iEeKa6RgMG+SUO98OLohOyT/93Eo4uZIjjTIZc9TKwHtg2iiMFZA8b8Wmrl buwL4cOEelSkyJm6PlJZHsPopY81jiiDLfXdB209RwYwKXncZYm/t82qpsDSH4b4 4bagO1D+VDlqV5CzxIJpRlNmowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDftTNn2 bApS0Ppk/9nKliAjgMx2MB8GA1UdIwQYMBaAFEq1yhDCrCIoKpmua/Yk+TdWhD+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjY3NS9EQ0FEMjdGQzJB MDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lpZ3FtYTVyOWlUNU4xYUVQ NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyWEtFTUtzSWlncW1hNXI5aVQ1TjFhRVA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjY3NS9EQ0FEMjdGQzJBMDUxMUVFODE5ODI5MDlDNEY5QUUwMi9TclhLRU1Lc0lp Z3FtYTVyOWlUNU4xYUVQNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSDbeaavy5BAtmSy4PhU4bqD7gV3+Kct3fD9ki1h5hsNkYpfXpVMrI Kad5b9et+9FTTeik3viXiXFwJ+8R4BzdsvgJHyFR1v9ObA27Ryx2GMh2TSvK33oA WpIkFzp/LZZt8dKhu2IgD1+6HZfOgYY22tMXPGLySphub6aJi0sQWQil1C8KadEf MCHBXq7IQdcjn7QO4CElNANOzCQCg8KjOQgfiOslmXes15a7vL28vlN1y7WPvfvy gDbzfXaKLeTyFiFdZI2A4GCnnH+y4nZgnsE08p8LUJT8e+0cV3kSGvChiWJv0x4E u44I7UCAD+CK7YcyjIFq7xZWfk66U67w -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org