$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json) Hash identifier: X88YOsuKLyccMlLAh9C8W4I2NzfyhwpBYhAmxDm2cTE= Subject key identifier: 6D:E1:12:E2:D9:63:60:68:69:64:B6:07:7C:8D:9B:A9:EF:13:05:4A Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft Manifest number: 033E Signing time: Sat 23 Nov 2024 01:13:43 +0000 Manifest this update: Sat 23 Nov 2024 01:13:42 +0000 Manifest next update: Sat 30 Nov 2024 01:13:42 +0000 Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: f2pPIv2dp+KwhBSooLerxio1ECyXi55rRsKis4ZfFBA=) 2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: 1zvSdpAHw0fs7lwNzlneLRJlvrtEo2uuRtlcQwqc+2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Validity Not Before: Nov 23 01:13:42 2024 GMT Not After : Nov 30 01:13:42 2024 GMT Subject: CN=67412c46-1c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6a:82:a2:af:d1:2b:c0:4a:b4:4f:83:ad:cd: 2f:02:23:2c:fe:ff:93:2b:fb:c8:ca:c7:e6:3d:12: 6a:b8:24:b5:8b:89:60:b6:94:21:19:55:42:f1:eb: b3:9d:e5:fd:bd:a0:99:95:f1:38:62:55:f8:62:71: a3:ba:c7:38:e4:9c:6a:5f:99:2b:6b:08:e1:37:a1: 33:60:66:21:52:bd:7e:8d:b3:e8:ea:7c:d5:62:0d: 91:24:e4:62:1a:7c:8a:07:70:23:69:82:51:98:b7: 9a:5c:1b:43:23:b8:db:f2:9a:fa:20:79:d0:3f:11: 79:42:df:77:c4:9f:77:7f:59:6a:5c:89:a7:9b:a9: 29:1c:9c:2e:3e:93:1d:ef:44:ac:cb:f5:d2:0c:3f: e0:e0:1a:50:80:7a:a1:fa:15:e7:20:43:16:5e:a0: 04:7c:64:57:34:14:10:0d:fd:53:7a:6e:8b:8a:ae: db:57:2f:04:96:14:9d:52:f3:85:05:ba:16:4d:97: 27:4d:44:b4:b4:0f:c6:6a:b3:eb:20:71:99:ce:e9: 8a:41:33:2d:09:1d:9e:97:6c:e8:fd:93:3a:1b:97: e7:b8:8f:ba:c2:b4:48:8d:69:0a:e1:e9:df:cc:eb: ee:7a:15:cf:3a:52:bd:08:bb:b4:d1:53:3c:eb:61: e9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E1:12:E2:D9:63:60:68:69:64:B6:07:7C:8D:9B:A9:EF:13:05:4A X509v3 Authority Key Identifier: keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:4a:33:e9:8c:c5:30:21:37:0f:dc:2b:74:de:a1:04:33:43: 46:44:ae:08:57:aa:09:17:3a:98:82:2b:14:06:2a:ae:ce:fa: 5b:d7:d0:46:d3:dd:47:93:4c:45:4c:f2:1d:12:74:ba:c2:ad: 81:1c:a8:00:52:ec:9b:ad:ba:98:53:3f:a5:49:ce:73:eb:d9: 92:4c:33:01:49:d5:b5:2c:ed:1d:ec:ec:6d:25:0b:44:78:d3: 62:e8:ef:70:cd:ca:7e:72:7c:9a:fe:de:ea:0a:89:02:9c:5c: 45:18:f0:31:b6:4c:e3:87:1d:3d:8a:80:a6:a7:a4:c7:9f:4f: f8:a7:9a:ae:1d:55:b2:aa:a3:30:97:c0:56:08:f4:f8:d6:25: e8:ce:e3:2a:00:f1:aa:40:3e:1a:f9:57:32:29:bd:c5:1c:48: fb:5b:55:bd:be:93:28:95:5b:35:61:30:b4:90:b6:bd:45:10: 7d:98:f3:4f:d8:b5:bc:6b:03:82:c7:99:ac:89:2b:86:62:3b: 12:ee:04:c2:8d:18:1c:bc:43:ca:73:6d:1f:4f:b5:d2:1f:ee: 2e:8f:12:53:2f:97:6b:30:c6:4e:2d:73:07:a7:7b:83:c5:dd: ee:c0:88:47:ed:22:c5:0c:4d:4a:c0:12:df:7a:2b:e6:15:d0: eb:bc:77:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEM3OEQxRTU5NTkxQkUwQzc1MjREMzZCREY4NUM4QUM2 RUExOTBGOEUwHhcNMjQxMTIzMDExMzQyWhcNMjQxMTMwMDExMzQyWjAYMRYwFAYD VQQDEw02NzQxMmM0Ni0xYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmqCoq/RK8BKtE+Drc0vAiMs/v+TK/vIysfmPRJquCS1i4lgtpQhGVVC8euz neX9vaCZlfE4YlX4YnGjusc45JxqX5krawjhN6EzYGYhUr1+jbPo6nzVYg2RJORi GnyKB3AjaYJRmLeaXBtDI7jb8pr6IHnQPxF5Qt93xJ93f1lqXImnm6kpHJwuPpMd 70Ssy/XSDD/g4BpQgHqh+hXnIEMWXqAEfGRXNBQQDf1Tem6Liq7bVy8ElhSdUvOF BboWTZcnTUS0tA/GarPrIHGZzumKQTMtCR2el2zo/ZM6G5fnuI+6wrRIjWkK4enf zOvuehXPOlK9CLu00VM862HpPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3hEuLZ Y2BoaWS2B3yNm6nvEwVKMB8GA1UdIwQYMBaAFMeNHllZG+DHUk02vfhcisbqGQ+O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRNZFNUVGE5LUZ5S3h1b1pE NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRN ZFNUVGE5LUZ5S3h1b1pENDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1SjPpjMUwITcP3Ct03qEEM0NGRK4IV6oJFzqYgisUBiquzvpb19BG 091Hk0xFTPIdEnS6wq2BHKgAUuybrbqYUz+lSc5z69mSTDMBSdW1LO0d7OxtJQtE eNNi6O9wzcp+cnya/t7qCokCnFxFGPAxtkzjhx09ioCmp6THn0/4p5quHVWyqqMw l8BWCPT41iXozuMqAPGqQD4a+VcyKb3FHEj7W1W9vpMolVs1YTC0kLa9RRB9mPNP 2LW8awOCx5msiSuGYjsS7gTCjRgcvEPKc20fT7XSH+4ujxJTL5drMMZOLXMHp3uD xd3uwIhH7SLFDE1KwBLfeivmFdDrvHdm -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org