$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: MnXcEjAZIzs36fZMijvcCOMYlp/LC+iPr1ZjSO3tok4= Subject key identifier: C8:48:56:E8:F9:E3:09:8F:D9:63:94:DC:07:EC:B4:9D:7B:3B:95:2B Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: 66 Signing time: Sat 23 Nov 2024 04:58:15 +0000 Manifest this update: Sat 23 Nov 2024 04:58:15 +0000 Manifest next update: Sat 30 Nov 2024 04:58:15 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: cRIEBvFy8R1L2egGj/OUF+xRfpe8DMuYHST1KQmCZD4=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: gsiPVh91f5x0agyT4K6ET9Cizm+TUqAkZy67lxkkwXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: Nov 23 04:58:15 2024 GMT Not After : Nov 30 04:58:15 2024 GMT Subject: CN=674160e7-5a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:f6:21:a1:25:f6:57:56:73:2e:5e:44:25: 86:42:24:88:d2:2f:7a:dd:30:f7:8f:4a:1c:3d:94: dc:65:5e:e3:e1:68:d5:d6:9f:dc:e8:07:4f:7a:d8: 77:d3:51:d2:88:53:d2:30:ca:90:27:94:e8:7c:39: 26:93:94:0d:01:23:79:19:bd:44:ae:42:36:1f:f9: 21:68:69:8e:90:04:07:25:e5:79:82:f1:83:f2:ef: 38:d1:92:96:f6:2f:9a:85:df:95:a6:46:b0:be:e5: 7a:6a:9a:71:04:52:38:8d:2c:57:10:2e:1d:83:ef: b8:88:86:2a:0a:ce:b7:dd:dc:bc:07:3e:9f:ea:87: a8:ae:ba:70:98:39:44:1e:b4:0f:e2:fe:82:2e:18: 9b:f1:69:10:62:0b:d7:f2:fa:9c:6d:b9:8c:db:52: 36:45:e8:17:57:1e:f2:5b:1b:14:11:f7:31:37:b7: 31:94:11:fa:72:b6:d4:34:b3:cc:97:30:7f:f3:e6: 02:35:40:1e:a5:2d:16:2d:8b:45:a9:e9:f4:4a:47: f1:c1:1f:9f:82:74:e0:74:fe:9b:8b:ee:7c:72:3a: da:6a:f1:44:b8:ba:e0:06:16:5e:85:2e:65:37:c1: 93:4c:f0:5a:0b:fb:75:9d:3f:e2:21:f9:ec:a4:77: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:48:56:E8:F9:E3:09:8F:D9:63:94:DC:07:EC:B4:9D:7B:3B:95:2B X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:19:d0:28:22:48:a1:c6:f1:25:76:73:d3:b5:4e:6b:e9:cb: 3a:71:6e:a5:94:e1:fc:90:bc:bf:77:9c:26:85:1f:ea:9a:9c: 63:bd:71:4f:65:93:f2:01:89:89:c4:c2:e3:b3:fc:81:f8:ea: 0a:c8:f5:87:bc:49:ec:d9:ff:5c:df:ed:5f:b7:ea:32:21:03: 91:d2:b0:53:0a:4b:d3:9f:0a:4b:70:07:a8:0d:c6:7d:c7:b4: ce:a3:9c:85:98:92:d3:3e:1e:c3:85:38:9d:44:f1:a2:19:9c: 9c:ca:ee:92:c9:07:70:3f:6f:f4:ba:26:ff:44:59:d3:11:5d: 51:5d:65:fe:e6:88:64:58:68:77:11:4e:12:4f:6f:b6:18:a3: 98:e3:7b:24:13:ac:81:96:56:66:f2:91:8b:16:69:9a:23:0b: e2:b8:23:c4:9f:4d:f3:bd:6c:9e:21:d9:d4:26:60:e4:08:bc: 3a:aa:f5:52:89:db:3a:39:49:99:49:24:d6:62:a9:41:ab:d4: 76:96:c4:26:f9:9b:a7:5d:26:ce:89:23:5a:2f:af:1d:58:92: 3e:d7:ef:c8:0c:de:c1:83:82:30:d5:20:5c:fb:90:fd:09:f8: b0:ea:75:26:6a:89:c7:c9:ef:9b:bb:0c:b4:e6:e8:96:27:db: d8:54:1c:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NEIwQTExMC8GA1UEBRMoRUU0QjA1NjE4NDM3RjE5NDhEOTI5OUY4QTRGOTI5QzE4 N0Q5N0YzMzAeFw0yNDExMjMwNDU4MTVaFw0yNDExMzAwNDU4MTVaMBgxFjAUBgNV BAMTDTY3NDE2MGU3LTVhNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCbvYhoSX2V1ZzLl5EJYZCJIjSL3rdMPePShw9lNxlXuPhaNXWn9zoB0962HfT UdKIU9IwypAnlOh8OSaTlA0BI3kZvUSuQjYf+SFoaY6QBAcl5XmC8YPy7zjRkpb2 L5qF35WmRrC+5XpqmnEEUjiNLFcQLh2D77iIhioKzrfd3LwHPp/qh6iuunCYOUQe tA/i/oIuGJvxaRBiC9fy+pxtuYzbUjZF6BdXHvJbGxQR9zE3tzGUEfpyttQ0s8yX MH/z5gI1QB6lLRYti0Wp6fRKR/HBH5+CdOB0/puL7nxyOtpq8US4uuAGFl6FLmU3 wZNM8FoL+3WdP+Ih+eykd9bNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyEhW6Pnj CY/ZY5TcB+y0nXs7lSswHwYDVR0jBBgwFoAU7ksFYYQ38ZSNkpn4pPkpwYfZfzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0QjBBLzRDRjBGNzA4MTI5 MjExRUZBQjEwNjU2NEM0RjlBRTAyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2tzRllZUTM4WlNOa3BuNHBQa3B3WWZaZnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 QjBBLzRDRjBGNzA4MTI5MjExRUZBQjEwNjU2NEM0RjlBRTAyLzdrc0ZZWVEzOFpT TmtwbjRwUGtwd1lmWmZ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKcZ0CgiSKHG8SV2c9O1TmvpyzpxbqWU4fyQvL93nCaFH+qanGO9cU9l k/IBiYnEwuOz/IH46grI9Ye8SezZ/1zf7V+36jIhA5HSsFMKS9OfCktwB6gNxn3H tM6jnIWYktM+HsOFOJ1E8aIZnJzK7pLJB3A/b/S6Jv9EWdMRXVFdZf7miGRYaHcR ThJPb7YYo5jjeyQTrIGWVmbykYsWaZojC+K4I8SfTfO9bJ4h2dQmYOQIvDqq9VKJ 2zo5SZlJJNZiqUGr1HaWxCb5m6ddJs6JI1ovrx1Ykj7X78gM3sGDgjDVIFz7kP0J +LDqdSZqicfJ75u7DLTm6JYn29hUHBE= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org