$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft File: Satd0R3JItzI8j3VqSxplN1wNQQ.mft (raw, json) Hash identifier: pRrEYR59JSqDH6mN5eakgLl8TD6uoiasb0PeQm8H0Jw= Subject key identifier: 60:C7:5B:D0:66:85:8A:FD:2B:39:DB:53:16:A0:58:66:A2:31:C5:29 Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Certificate serial: 02F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft Manifest number: 02ED Signing time: Sat 23 Nov 2024 01:04:34 +0000 Manifest this update: Sat 23 Nov 2024 01:04:34 +0000 Manifest next update: Sat 30 Nov 2024 01:04:34 +0000 Files and hashes: 1: Satd0R3JItzI8j3VqSxplN1wNQQ.crl (hash: GxHPg7w5SUBCk/6nN9gTeR2AD+Zt+ogsQrJzvnt56Ko=) 2: 718673B6BB7F11EC9E187F19C4F9AE02.roa (hash: O8VxzFOTQcqKK+CbKNz7Oarn0uADD/6F4h0/93MvW2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 757 (0x2f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Validity Not Before: Nov 23 01:04:34 2024 GMT Not After : Nov 30 01:04:34 2024 GMT Subject: CN=67412a22-5790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:ff:65:13:19:16:d1:5d:be:b6:05:db:18: 6e:47:ff:47:e8:66:7f:ba:0c:c6:f6:be:de:38:6e: d2:75:83:06:4d:e8:82:a9:7e:33:d7:f3:74:c0:d3: 50:60:fa:b8:d5:66:16:8a:ad:a1:9f:4a:cf:e0:da: 7e:ea:19:11:c9:b0:c0:4c:1d:4c:f2:10:59:7f:8f: 3d:bc:dc:f0:54:8b:69:99:62:be:fe:09:26:bf:ce: 1f:b1:06:65:b4:fe:6c:70:8e:5f:7c:e4:8e:6d:dd: 2e:7f:de:d7:ce:67:1f:c4:2d:c9:1b:07:52:f7:1f: 8d:25:ac:0d:1f:01:4d:fa:96:f3:3d:fc:8e:04:3b: a2:03:49:f6:ac:fd:6c:36:54:94:ae:84:31:63:58: 6f:a6:a0:6c:d8:e1:21:1d:e8:ee:1d:19:87:67:77: a1:bd:f1:c4:a5:99:23:dc:39:6c:84:cb:df:c1:07: 5b:77:ca:ab:ae:42:af:66:22:a0:e2:27:69:50:d9: 37:19:3b:52:e9:ab:02:a3:63:cc:91:eb:52:4a:5a: 36:4a:8c:de:15:62:0c:66:04:07:b5:0d:8b:03:13: 3e:dc:d1:3d:ae:a1:c1:ad:a3:7d:cc:ce:e6:ad:a4: d8:0b:10:50:dd:9c:15:3c:f8:e7:ff:ec:20:78:95: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C7:5B:D0:66:85:8A:FD:2B:39:DB:53:16:A0:58:66:A2:31:C5:29 X509v3 Authority Key Identifier: keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:44:ac:a9:85:08:38:17:28:a4:95:ca:6e:f2:59:7a:e4:07: 15:e9:4d:00:c2:6f:cb:34:7c:17:b6:dd:19:c7:69:18:69:a5: 23:d3:de:e3:c6:e3:51:f7:d8:14:40:8b:ed:09:53:32:5d:ce: 56:ae:88:ae:6b:ff:8d:d9:23:b9:85:18:ce:52:ea:c2:f3:91: 50:ef:25:5c:4a:a2:f1:5a:ba:a8:0c:81:48:f0:f1:b5:c1:45: 3f:f0:8e:3d:4b:2a:eb:c8:a3:07:0e:43:b9:1f:40:05:c5:db: b3:db:f3:c7:5b:c3:20:de:b3:19:79:f7:78:4e:b1:0a:d6:a3: 10:ad:64:dd:e2:43:75:51:cf:c3:67:7b:af:20:a0:63:c6:15: 41:55:8a:74:e5:a1:d8:f4:f6:b2:70:a7:47:da:51:ce:87:ab: 1f:32:a2:e7:73:1c:dc:12:6c:dd:35:c4:49:33:fa:63:36:dc: 0f:28:78:4a:01:4d:a9:ae:6f:ea:20:12:30:52:e2:ca:0b:01: 06:95:5c:83:e4:25:b1:4f:60:b6:f9:94:4a:b8:7a:fa:a1:3e: 6b:64:2b:d9:8c:b6:70:e6:0b:40:b2:7e:92:04:c7:e7:bf:43: 3e:58:7f:08:f3:d3:23:17:0e:ce:1e:94:63:56:4d:21:d4:7b: f2:86:72:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0 REQ3MDM1MDQwHhcNMjQxMTIzMDEwNDM0WhcNMjQxMTMwMDEwNDM0WjAYMRYwFAYD VQQDEw02NzQxMmEyMi01NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGH/ZRMZFtFdvrYF2xhuR/9H6GZ/ugzG9r7eOG7SdYMGTeiCqX4z1/N0wNNQ YPq41WYWiq2hn0rP4Np+6hkRybDATB1M8hBZf489vNzwVItpmWK+/gkmv84fsQZl tP5scI5ffOSObd0uf97XzmcfxC3JGwdS9x+NJawNHwFN+pbzPfyOBDuiA0n2rP1s NlSUroQxY1hvpqBs2OEhHejuHRmHZ3ehvfHEpZkj3DlshMvfwQdbd8qrrkKvZiKg 4idpUNk3GTtS6asCo2PMketSSlo2SozeFWIMZgQHtQ2LAxM+3NE9rqHBraN9zM7m raTYCxBQ3ZwVPPjn/+wgeJX9VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDHW9Bm hYr9KznbUxagWGaiMcUpMB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTkzQi8xMDNDN0QxQ0JCN0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0 ekk4ajNWcVN4cGxOMXdOUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6RKyphQg4Fyiklcpu8ll65AcV6U0Awm/LNHwXtt0Zx2kYaaUj097j xuNR99gUQIvtCVMyXc5Wroiua/+N2SO5hRjOUurC85FQ7yVcSqLxWrqoDIFI8PG1 wUU/8I49SyrryKMHDkO5H0AFxduz2/PHW8Mg3rMZefd4TrEK1qMQrWTd4kN1Uc/D Z3uvIKBjxhVBVYp05aHY9PaycKdH2lHOh6sfMqLncxzcEmzdNcRJM/pjNtwPKHhK AU2prm/qIBIwUuLKCwEGlVyD5CWxT2C2+ZRKuHr6oT5rZCvZjLZw5gtAsn6SBMfn v0M+WH8I89MjFw7OHpRjVk0h1HvyhnJh -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org