$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft File: evqYcujQ_5IpleWJO1nDIUdnsfw.mft (raw, json) Hash identifier: NXa/sPCpBzdRNlYlGKqj8lwJj0dFPcOsYaUHs13v6xY= Subject key identifier: D1:F9:2A:68:B5:4C:45:A0:19:F7:D9:47:BE:A8:9C:BC:B4:DF:5A:F9 Authority key identifier: 7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC Certificate issuer: /CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC Certificate serial: 08CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft Manifest number: 08C5 Signing time: Fri 22 Nov 2024 20:13:25 +0000 Manifest this update: Fri 22 Nov 2024 20:13:24 +0000 Manifest next update: Fri 29 Nov 2024 20:13:24 +0000 Files and hashes: 1: evqYcujQ_5IpleWJO1nDIUdnsfw.crl (hash: CPOHv4brmr73cc3xQiVf9SlA7xwBDEtMlHgJLusRJVQ=) 2: 8F1FBA54B0AA11EA9603E729C4F9AE02.roa (hash: HE0g4qbaerNpZYgQWXYLHZHHXWJ2DGWdgE2xVoh1wXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2252 (0x8cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC Validity Not Before: Nov 22 20:13:24 2024 GMT Not After : Nov 29 20:13:24 2024 GMT Subject: CN=6740e5e4-cd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3b:ac:b2:e0:fc:66:44:d1:83:cf:a4:54:46: 5d:15:19:42:a0:34:37:c7:33:bc:7f:58:9d:49:3e: ef:8b:f7:c4:6c:70:49:6c:91:ad:64:6e:62:a5:b2: d9:28:ca:f0:61:df:22:38:14:47:c2:d3:78:e2:67: e5:d5:0f:cf:0f:48:d1:29:96:03:af:0e:0f:d8:bf: 13:80:32:0d:3e:6d:29:66:28:b6:3c:16:bb:59:4f: 22:0d:ba:1f:98:0d:c2:61:af:35:ba:38:c7:6d:d7: ec:5b:dd:ed:68:ec:92:40:f0:33:c0:85:70:92:75: 9c:bc:dc:58:b2:4e:e8:08:ae:37:ca:a7:2d:54:a1: 0d:1d:7a:d0:3d:74:fc:e5:fd:fb:d1:c8:66:3d:e8: 5f:a7:92:ba:21:d9:5d:b1:e0:02:2e:8a:58:88:81: c2:98:63:c7:37:f9:d3:a1:bf:66:a8:16:69:a4:a6: a4:b3:29:ee:21:24:c9:bf:4d:b0:4a:7b:d4:33:3a: 39:a9:b9:6e:49:c3:fe:29:c2:83:13:87:32:4f:bc: eb:27:59:8f:fb:16:33:87:d5:c5:83:2e:f8:42:4a: 11:27:fc:8e:8c:d6:23:be:03:1d:82:2b:48:14:d1: 14:3a:ec:fa:54:6a:9b:b1:91:23:29:33:89:07:3e: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F9:2A:68:B5:4C:45:A0:19:F7:D9:47:BE:A8:9C:BC:B4:DF:5A:F9 X509v3 Authority Key Identifier: keyid:7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:99:10:60:2b:8b:14:67:f3:cd:5f:46:d8:81:9a:0e:94:83: f7:95:76:7a:4b:28:7c:7b:48:a1:c2:dc:10:8d:38:5f:43:1f: 55:dc:83:8b:a8:d2:b9:6d:1b:b9:e9:b7:5f:8e:0f:1d:76:e6: a9:cd:6c:b1:66:e4:73:4e:91:04:93:05:3c:43:dc:cc:4d:30: 73:c9:d1:8d:d2:b1:c9:db:0e:30:08:7c:48:66:3d:9e:e2:71: d7:f0:11:73:75:01:4e:9f:aa:0f:87:6b:f1:77:c7:19:20:5b: 2e:29:79:c3:6d:df:46:2c:05:52:29:69:b4:5c:cb:2a:b1:2e: 57:75:2a:8f:6e:58:e1:92:ca:9d:dd:17:8a:65:06:36:28:c9: 6e:89:02:a7:96:c1:62:b1:74:d1:9a:94:c1:99:d2:6c:2e:3a: d2:f8:82:d0:db:83:94:2e:e8:9d:ac:ab:2f:73:20:0e:e5:98: 09:bc:7f:3c:4e:89:82:57:e8:d8:21:74:98:29:2a:37:e6:bd: 74:95:9a:d2:bd:8b:cd:45:71:15:0d:fa:b4:48:ac:4d:08:56: ab:57:7e:cf:c7:34:45:06:cf:9d:24:db:83:77:a4:6c:4d:db: c6:fb:a4:5a:78:d6:24:c0:39:e6:29:78:51:b3:c6:b0:9b:24: cc:93:8c:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRBQTUxMTAvBgNVBAUTKDdBRkE5ODcyRThEMEZGOTIyOTk1RTU4OTNCNTlDMzIx NDc2N0IxRkMwHhcNMjQxMTIyMjAxMzI0WhcNMjQxMTI5MjAxMzI0WjAYMRYwFAYD VQQDEw02NzQwZTVlNC1jZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8zussuD8ZkTRg8+kVEZdFRlCoDQ3xzO8f1idST7vi/fEbHBJbJGtZG5ipbLZ KMrwYd8iOBRHwtN44mfl1Q/PD0jRKZYDrw4P2L8TgDINPm0pZii2PBa7WU8iDbof mA3CYa81ujjHbdfsW93taOySQPAzwIVwknWcvNxYsk7oCK43yqctVKENHXrQPXT8 5f370chmPehfp5K6IdldseACLopYiIHCmGPHN/nTob9mqBZppKaksynuISTJv02w SnvUMzo5qbluScP+KcKDE4cyT7zrJ1mP+xYzh9XFgy74QkoRJ/yOjNYjvgMdgitI FNEUOuz6VGqbsZEjKTOJBz5wIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH5Kmi1 TEWgGffZR76onLy031r5MB8GA1UdIwQYMBaAFHr6mHLo0P+SKZXliTtZwyFHZ7H8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEFBNS84MzBFMjY5NEEw QTkxMUVBQUYyRUYyMTFDNEY5QUUwMi9ldnFZY3VqUV81SXBsZVdKTzFuRElVZG5z ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2cVljdWpRXzVJcGxlV0pPMW5ESVVkbnNmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEFBNS84MzBFMjY5NEEwQTkxMUVBQUYyRUYyMTFDNEY5QUUwMi9ldnFZY3VqUV81 SXBsZVdKTzFuRElVZG5zZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1mRBgK4sUZ/PNX0bYgZoOlIP3lXZ6Syh8e0ihwtwQjThfQx9V3IOL qNK5bRu56bdfjg8dduapzWyxZuRzTpEEkwU8Q9zMTTBzydGN0rHJ2w4wCHxIZj2e 4nHX8BFzdQFOn6oPh2vxd8cZIFsuKXnDbd9GLAVSKWm0XMsqsS5XdSqPbljhksqd 3ReKZQY2KMluiQKnlsFisXTRmpTBmdJsLjrS+ILQ24OULuidrKsvcyAO5ZgJvH88 TomCV+jYIXSYKSo35r10lZrSvYvNRXEVDfq0SKxNCFarV37PxzRFBs+dJNuDd6Rs TdvG+6RaeNYkwDnmKXhRs8awmyTMk4xo -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:27 2024 by rpki-client on console-ams.rpki-client.org