$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft File: SoXPE4hy0-RPkNe28wKPC1BnNMw.mft (raw, json) Hash identifier: je/LmJUR5FKvgR7y4beZhW1Yp1WhK/STlD+fWsECyiI= Subject key identifier: 9E:65:42:C6:FB:98:46:0A:6F:A5:F0:2A:AC:40:61:C5:E4:A9:3B:86 Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC Certificate issuer: /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Certificate serial: 037B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft Manifest number: 0373 Signing time: Sat 23 Nov 2024 00:29:10 +0000 Manifest this update: Sat 23 Nov 2024 00:29:10 +0000 Manifest next update: Sat 30 Nov 2024 00:29:10 +0000 Files and hashes: 1: SoXPE4hy0-RPkNe28wKPC1BnNMw.crl (hash: nePPB6gziBOltXwH31zLe6kSeqz+XIiRpa6E3fVkswk=) 2: 259E1BCC09FF11EFB1919C6CC4F9AE02.roa (hash: bkwXMz/ax0ThHTElNjHP9oRkkURT+ErZY6fIjy6b9Kc=) 3: ECCC589A09FE11EFBEBB616CC4F9AE02.roa (hash: NLpKCaNzwymqX+JUy4oTmpLmRdKhH96APzizVGdYs+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Validity Not Before: Nov 23 00:29:10 2024 GMT Not After : Nov 30 00:29:10 2024 GMT Subject: CN=674121d6-ef08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:fb:35:2f:9c:08:db:80:53:9f:13:f0:b5: 70:e7:05:31:75:39:2b:87:c7:37:4e:24:12:5f:6a: 53:d2:3c:f8:8c:99:f1:30:19:b0:c2:86:70:86:f6: a0:34:d6:04:b5:79:a7:87:2b:f6:4d:5d:71:f3:e3: a4:af:03:8b:78:ce:e6:b5:6d:db:ed:51:21:c1:5c: 40:66:1e:92:04:75:33:9d:fb:2d:54:e0:e9:ed:ff: a0:a8:92:cd:f8:26:04:3b:2c:8f:8e:ca:fa:62:25: 90:a0:80:b6:60:16:7d:6c:fe:37:02:20:bb:f4:c8: 27:a5:80:0b:00:f1:bd:2d:34:27:9d:b9:16:5a:3e: 24:eb:0a:ba:e6:64:b1:19:36:83:d6:09:09:82:15: cf:1a:60:a6:29:29:95:b4:2b:b0:9f:21:8b:61:da: 08:df:22:10:d7:20:09:0a:78:3e:29:21:a8:05:75: ed:92:88:d2:8a:ef:de:d7:cf:b6:42:4a:a8:78:68: 8e:01:67:be:03:ad:eb:ae:00:d9:6e:3f:33:bc:09: e4:af:77:14:5e:bf:bd:e3:48:4f:cf:d1:2a:4d:68: 06:10:8e:e1:86:0c:2f:89:0a:11:01:d1:76:9d:40: d9:3d:da:aa:2f:b3:41:ef:33:59:00:7e:44:90:4f: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:65:42:C6:FB:98:46:0A:6F:A5:F0:2A:AC:40:61:C5:E4:A9:3B:86 X509v3 Authority Key Identifier: keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c5:4c:5a:ab:90:92:52:fe:c0:14:1e:35:48:09:fc:9f:26: 73:88:68:48:a5:10:64:06:6b:e4:33:cb:f0:98:8a:73:4c:d9: 94:4f:e9:82:d6:57:5e:3e:1f:69:b0:28:9c:a8:c7:19:8e:b8: 9f:6e:6c:b4:c9:82:d4:cd:ce:a6:dd:c4:d0:ca:4f:c6:f4:90: a6:4c:02:b6:60:41:55:48:ce:21:b6:2f:6b:e1:25:45:d6:14: dc:b5:ac:2c:de:76:8c:c3:e3:81:73:ca:f9:78:b0:90:cc:9c: 97:4a:1e:7e:2b:35:d2:84:bc:ce:ab:08:f5:97:92:5f:78:93: df:15:67:6e:2a:60:69:90:08:9a:d2:de:1c:b5:7a:f1:76:bf: 0c:a8:e8:86:39:ef:25:2e:77:3e:38:d4:de:37:a1:35:05:17: e1:6a:20:5f:36:00:13:f2:9c:b7:f8:2b:a7:1c:01:a8:4b:73: c9:ae:2f:e0:7a:f3:3e:25:4c:96:7e:06:60:53:3a:3a:88:18: 90:ed:3c:f9:d3:99:9c:68:1f:f8:93:e5:d0:05:4b:9b:ca:cf: 2c:99:73:25:d9:57:7a:d6:e2:e4:ea:3c:54:80:b5:e9:4f:b6: b8:15:ad:b3:f4:80:4b:7e:13:49:12:63:b1:43:03:98:b8:fa: f1:84:43:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwQUYxMTAvBgNVBAUTKDRBODVDRjEzODg3MkQzRTQ0RjkwRDdCNkYzMDI4RjBC NTA2NzM0Q0MwHhcNMjQxMTIzMDAyOTEwWhcNMjQxMTMwMDAyOTEwWjAYMRYwFAYD VQQDEw02NzQxMjFkNi1lZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsP7NS+cCNuAU58T8LVw5wUxdTkrh8c3TiQSX2pT0jz4jJnxMBmwwoZwhvag NNYEtXmnhyv2TV1x8+OkrwOLeM7mtW3b7VEhwVxAZh6SBHUznfstVODp7f+gqJLN +CYEOyyPjsr6YiWQoIC2YBZ9bP43AiC79MgnpYALAPG9LTQnnbkWWj4k6wq65mSx GTaD1gkJghXPGmCmKSmVtCuwnyGLYdoI3yIQ1yAJCng+KSGoBXXtkojSiu/e18+2 QkqoeGiOAWe+A63rrgDZbj8zvAnkr3cUXr+940hPz9EqTWgGEI7hhgwviQoRAdF2 nUDZPdqqL7NB7zNZAH5EkE8HNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5lQsb7 mEYKb6XwKqxAYcXkqTuGMB8GA1UdIwQYMBaAFEqFzxOIctPkT5DXtvMCjwtQZzTM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBBRi8xRTMzOUIzNjg4 REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAtUlBrTmUyOHdLUEMxQm5O TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvWFBFNGh5MC1SUGtOZTI4d0tQQzFCbk5Ndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBBRi8xRTMzOUIzNjg4REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAt UlBrTmUyOHdLUEMxQm5OTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPxUxaq5CSUv7AFB41SAn8nyZziGhIpRBkBmvkM8vwmIpzTNmUT+mC 1ldePh9psCicqMcZjrifbmy0yYLUzc6m3cTQyk/G9JCmTAK2YEFVSM4hti9r4SVF 1hTctaws3naMw+OBc8r5eLCQzJyXSh5+KzXShLzOqwj1l5JfeJPfFWduKmBpkAia 0t4ctXrxdr8MqOiGOe8lLnc+ONTeN6E1BRfhaiBfNgAT8py3+CunHAGoS3PJri/g evM+JUyWfgZgUzo6iBiQ7Tz505mcaB/4k+XQBUubys8smXMl2Vd61uLk6jxUgLXp T7a4Fa2z9IBLfhNJEmOxQwOYuPrxhEPr -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org