$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft File: Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json) Hash identifier: NDVNfOBVtHTQ9XI2ohZxuQrhUovzpDmHL8lzdLNPV2c= Subject key identifier: F5:1F:D0:BA:26:35:11:DF:FF:05:61:B4:4A:AE:1D:45:6A:F4:56:3E Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C Certificate issuer: /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft Manifest number: 40 Signing time: Sat 23 Nov 2024 05:24:04 +0000 Manifest this update: Sat 23 Nov 2024 05:24:04 +0000 Manifest next update: Sat 30 Nov 2024 05:24:04 +0000 Files and hashes: 1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: mVaYFvB56ybZRfIwC/qTMKZF5Uy1q6u+H2nF2zvJ51M=) 2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: x7MCciPiMoC21iI94vanFTmv6Gh7il8p9AlIW1ZpCrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Validity Not Before: Nov 23 05:24:04 2024 GMT Not After : Nov 30 05:24:04 2024 GMT Subject: CN=674166f4-ebd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a0:89:a8:cc:03:e6:33:f1:93:8d:67:ff:a1: ac:03:a9:49:97:26:8b:60:e9:de:af:c2:a5:f3:c4: 12:5e:70:03:9f:4f:dd:69:cd:8a:02:94:82:09:79: e2:a2:f9:6f:ec:d6:6c:3f:17:53:f6:ab:6c:16:b9: da:9a:b6:99:57:5f:c7:0b:df:5a:6c:f8:8a:82:ed: 11:d5:5c:59:30:93:ba:5d:c9:2d:f9:da:2f:e3:3e: 24:1c:9f:be:a9:f2:5d:b7:01:f7:06:ba:e3:41:1a: 0b:a6:cd:8b:f9:c1:71:51:44:86:2d:bf:24:3f:a7: 6e:91:c9:6e:91:d4:3f:45:00:44:68:f1:4d:2a:49: 3a:17:13:c4:f3:cb:1f:ec:91:b0:3e:f6:54:84:38: 13:54:0f:33:58:2b:06:51:a0:55:20:99:4f:d5:dc: 6a:b9:3b:cd:5f:15:03:6e:ac:a5:12:bd:d8:88:de: f5:f5:c1:cd:20:cf:90:08:d0:f8:bc:a3:23:90:67: cd:47:56:09:6c:a5:59:6b:2e:a9:97:85:b2:5d:13: 19:e6:b7:67:57:56:b4:22:3a:78:f1:0d:ce:9b:2a: 73:fe:19:6b:68:35:e4:5f:99:30:de:47:5c:9a:7d: 73:fb:c7:a1:08:42:8b:34:5e:fe:b1:9d:09:9d:56: 73:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1F:D0:BA:26:35:11:DF:FF:05:61:B4:4A:AE:1D:45:6A:F4:56:3E X509v3 Authority Key Identifier: keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2f:2c:6d:98:5f:f8:d3:19:8a:ab:32:d3:0f:81:a6:b2:f2: fd:83:ea:a0:29:a4:51:3f:85:ce:17:eb:92:e7:a1:6b:53:49: d7:28:d8:8d:08:ae:37:b6:59:50:dc:53:3d:15:33:44:99:8a: a3:1f:8c:de:11:39:4b:3e:42:37:25:32:2e:9d:b7:61:7a:55: f9:ab:fa:ac:27:b1:90:fc:b8:80:40:ee:e7:bd:0e:5d:cf:e7: f5:a1:2f:dd:20:29:81:d4:1b:0b:cc:62:da:c1:fd:bf:a0:95: 76:60:2e:c7:ab:4b:2e:a9:ee:4b:41:ef:de:1c:30:b6:3f:8d: 3c:10:1f:6d:5a:54:12:27:c7:f0:5a:aa:9c:6e:c8:80:f6:37: 9e:8f:4c:b1:48:cc:68:db:8c:41:f3:da:2f:26:b6:72:e7:41: 25:d0:35:86:d2:9c:c3:29:f7:ed:24:34:47:2b:bb:b9:40:a9: 43:cc:ca:48:96:60:15:b2:21:e5:13:61:ed:92:9c:bf:d9:60: 67:7e:a9:6b:13:43:24:f5:f3:87:2f:c3:38:ea:25:f7:05:22: ef:0a:58:d3:c6:72:d7:ba:7a:90:5f:26:90:fd:8e:f2:38:bb: e0:e1:23:3b:5c:1c:fd:fb:54:90:0b:d1:a8:c7:b5:58:d3:97: e5:95:92:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDNDRTExMC8GA1UEBRMoMTMxRUY2MkUxMjFCMTFERTYxMDQyQzNFMjI1RTcxNkJC OTQ3OUUyQzAeFw0yNDExMjMwNTI0MDRaFw0yNDExMzAwNTI0MDRaMBgxFjAUBgNV BAMTDTY3NDE2NmY0LWViZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJoImozAPmM/GTjWf/oawDqUmXJotg6d6vwqXzxBJecAOfT91pzYoClIIJeeKi +W/s1mw/F1P2q2wWudqatplXX8cL31ps+IqC7RHVXFkwk7pdyS352i/jPiQcn76p 8l23AfcGuuNBGgumzYv5wXFRRIYtvyQ/p26RyW6R1D9FAERo8U0qSToXE8Tzyx/s kbA+9lSEOBNUDzNYKwZRoFUgmU/V3Gq5O81fFQNurKUSvdiI3vX1wc0gz5AI0Pi8 oyOQZ81HVglspVlrLqmXhbJdExnmt2dXVrQiOnjxDc6bKnP+GWtoNeRfmTDeR1ya fXP7x6EIQos0Xv6xnQmdVnPfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9R/QuiY1 Ed//BWG0Sq4dRWr0Vj4wHwYDVR0jBBgwFoAUEx72LhIbEd5hBCw+Il5xa7lHniww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEM0NFLzFDMTM3QzIwNDk1 RTExRUZCRThGMjA3OUM0RjlBRTAyL0V4NzJMaEliRWQ1aEJDdy1JbDV4YTdsSG5p dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXg3MkxoSWJFZDVoQkN3LUlsNXhhN2xIbml3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE M0NFLzFDMTM3QzIwNDk1RTExRUZCRThGMjA3OUM0RjlBRTAyL0V4NzJMaEliRWQ1 aEJDdy1JbDV4YTdsSG5pdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGwvLG2YX/jTGYqrMtMPgaay8v2D6qAppFE/hc4X65LnoWtTSdco2I0I rje2WVDcUz0VM0SZiqMfjN4ROUs+QjclMi6dt2F6Vfmr+qwnsZD8uIBA7ue9Dl3P 5/WhL90gKYHUGwvMYtrB/b+glXZgLserSy6p7ktB794cMLY/jTwQH21aVBInx/Ba qpxuyID2N56PTLFIzGjbjEHz2i8mtnLnQSXQNYbSnMMp9+0kNEcru7lAqUPMykiW YBWyIeUTYe2SnL/ZYGd+qWsTQyT184cvwzjqJfcFIu8KWNPGcte6epBfJpD9jvI4 u+DhIztcHP37VJAL0ajHtVjTl+WVknY= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org