$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft File: iAd3htZlI61ZmNY_aXr0LwOcKqk.mft (raw, json) Hash identifier: kSZqoWBPjI1eok9Y/53g5tXjdxE8Jn8MT2Ik6/fl+9E= Subject key identifier: 2F:7F:1F:DC:7B:35:5E:C1:07:BB:DF:B1:87:D0:A8:AB:37:68:96:E2 Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9 Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9 Certificate serial: 101A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft Manifest number: 100A Signing time: Fri 22 Nov 2024 17:24:35 +0000 Manifest this update: Fri 22 Nov 2024 17:24:35 +0000 Manifest next update: Fri 29 Nov 2024 17:24:35 +0000 Files and hashes: 1: iAd3htZlI61ZmNY_aXr0LwOcKqk.crl (hash: qCdwgUSgOh76+osabmU9QWOCQYv9F0xqvj+JlOuJWoM=) 2: 744CCD5834F911E98AB73628C4F9AE02.roa (hash: rk7zVOdamRthMzsKOlIOmnNeig9OCtcn4aZz/xI3jf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4122 (0x101a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9 Validity Not Before: Nov 22 17:24:35 2024 GMT Not After : Nov 29 17:24:35 2024 GMT Subject: CN=6740be53-1cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:8a:f1:c9:5c:95:a1:f5:9f:25:96:95:93: 08:32:55:63:6b:4b:cf:58:5b:d6:c6:4c:f9:fc:d8: 38:99:0e:ce:b8:3d:76:ec:dd:e4:0d:18:41:e8:6a: c3:18:54:e0:d2:02:c1:9a:4b:e1:75:2b:4d:9c:f2: 49:f2:ff:f0:aa:e5:b6:08:40:63:b9:55:af:66:86: c1:52:7a:cc:a5:5b:f7:ff:2d:29:b8:f0:79:93:2d: fa:85:49:27:97:0f:0b:36:2b:3e:e2:91:4a:e4:26: ae:67:e1:ee:bf:a5:0e:71:d8:9c:01:7f:ab:5a:35: 6b:a6:1e:60:04:5f:b3:bc:64:e9:85:3c:63:c6:4b: 8a:b6:d2:9a:f8:a7:e4:f4:5d:3e:1d:6a:67:0b:6a: c1:07:78:15:88:56:2a:37:59:8f:9b:a9:4e:ae:f5: 36:7a:88:99:29:fc:d5:a5:a0:b4:6b:37:5d:2c:6e: 94:7c:30:45:23:c6:94:db:0e:86:53:59:f6:72:69: 92:7b:e8:03:0a:b5:6a:c8:5f:b0:a6:44:4f:95:f5: a2:4d:69:1d:d3:e6:e8:e2:aa:ec:56:dd:a2:bb:cd: ca:2e:16:ac:72:e7:cd:cf:2e:e3:ec:2e:ce:7a:f0: e9:58:62:bd:1c:3e:2a:b1:f3:67:d5:ef:c7:27:1b: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7F:1F:DC:7B:35:5E:C1:07:BB:DF:B1:87:D0:A8:AB:37:68:96:E2 X509v3 Authority Key Identifier: keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:28:c2:2a:fb:47:53:ca:a1:e1:80:54:ad:77:62:0e:58:ea: 01:ef:06:fe:e1:10:7d:e3:02:20:09:0f:a0:08:83:d9:d0:03: 1c:29:04:10:82:70:4c:04:1a:2e:6f:00:cc:76:ec:5d:9d:db: 1c:06:78:86:2e:aa:6f:d5:d1:a6:c6:4b:13:a5:f3:5a:de:a7: 06:2d:bb:39:da:05:37:d7:4d:05:50:02:80:10:1a:68:47:be: f5:7b:66:c2:99:c5:b4:78:fb:66:75:bb:27:cd:d5:c5:29:38: b3:8d:5b:ee:da:d0:f6:f8:a6:9a:ad:fe:c0:90:cb:d6:b9:41: f2:ed:2c:f1:92:60:18:4b:49:40:fb:46:e2:bd:1f:a8:83:b0: a1:ad:7d:a7:4b:26:79:6e:56:9f:c9:1d:5d:2e:70:7a:ad:4e: 60:43:bf:1d:c5:3c:65:4d:19:25:c1:bf:aa:3f:92:41:08:88: ba:88:40:70:db:b3:d0:f2:00:a4:f9:e4:2d:3f:44:15:d2:15: af:bd:e4:16:04:07:ce:3d:b9:f5:9f:ab:4c:38:16:cb:49:f2: 53:d3:af:97:5d:39:a8:2b:7e:f5:23:45:5b:32:5f:05:43:2e: b9:89:bc:6a:5b:9d:8c:e1:31:a2:ae:15:5f:50:f5:54:c2:80: 86:4c:a3:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0RTIxMTAvBgNVBAUTKDg4MDc3Nzg2RDY2NTIzQUQ1OTk4RDYzRjY5N0FGNDJG MDM5QzJBQTkwHhcNMjQxMTIyMTcyNDM1WhcNMjQxMTI5MTcyNDM1WjAYMRYwFAYD VQQDEw02NzQwYmU1My0xY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgeK8clclaH1nyWWlZMIMlVja0vPWFvWxkz5/Ng4mQ7OuD127N3kDRhB6GrD GFTg0gLBmkvhdStNnPJJ8v/wquW2CEBjuVWvZobBUnrMpVv3/y0puPB5ky36hUkn lw8LNis+4pFK5CauZ+Huv6UOcdicAX+rWjVrph5gBF+zvGTphTxjxkuKttKa+Kfk 9F0+HWpnC2rBB3gViFYqN1mPm6lOrvU2eoiZKfzVpaC0azddLG6UfDBFI8aU2w6G U1n2cmmSe+gDCrVqyF+wpkRPlfWiTWkd0+bo4qrsVt2iu83KLhascufNzy7j7C7O evDpWGK9HD4qsfNn1e/HJxv/PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9/H9x7 NV7BB7vfsYfQqKs3aJbiMB8GA1UdIwQYMBaAFIgHd4bWZSOtWZjWP2l69C8DnCqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRFMi9CMjU2QjAzMDM0 RDgxMUU5OTI5ODc2NTZDNEY5QUUwMi9pQWQzaHRabEk2MVptTllfYVhyMEx3T2NL cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBZDNodFpsSTYxWm1OWV9hWHIwTHdPY0txay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTRFMi9CMjU2QjAzMDM0RDgxMUU5OTI5ODc2NTZDNEY5QUUwMi9pQWQzaHRabEk2 MVptTllfYVhyMEx3T2NLcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaKMIq+0dTyqHhgFStd2IOWOoB7wb+4RB94wIgCQ+gCIPZ0AMcKQQQ gnBMBBoubwDMduxdndscBniGLqpv1dGmxksTpfNa3qcGLbs52gU3100FUAKAEBpo R771e2bCmcW0ePtmdbsnzdXFKTizjVvu2tD2+Kaarf7AkMvWuUHy7SzxkmAYS0lA +0bivR+og7ChrX2nSyZ5blafyR1dLnB6rU5gQ78dxTxlTRklwb+qP5JBCIi6iEBw 27PQ8gCk+eQtP0QV0hWvveQWBAfOPbn1n6tMOBbLSfJT06+XXTmoK371I0VbMl8F Qy65ibxqW52M4TGirhVfUPVUwoCGTKOu -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org