$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft File: MLwu5bdWT-D98gDnibI6LA2OkiQ.mft (raw, json) Hash identifier: 8ZvYIHzZUQzv637i/s4fSplRElu3ZGO1078CfLAXbf4= Subject key identifier: BB:F7:A3:DF:17:44:64:92:6E:11:49:82:01:5D:26:B2:05:9A:4A:E7 Authority key identifier: 30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 Certificate issuer: /CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Certificate serial: 0BF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft Manifest number: 0BEF Signing time: Fri 22 Nov 2024 18:22:07 +0000 Manifest this update: Fri 22 Nov 2024 18:22:07 +0000 Manifest next update: Fri 29 Nov 2024 18:22:07 +0000 Files and hashes: 1: MLwu5bdWT-D98gDnibI6LA2OkiQ.crl (hash: fUmLrGPXGFCZd8IIkP7MSHjXBlC9qtA6lP6xNDV1isw=) 2: 9E5B75C0022D11EAAD80DA48C4F9AE02.roa (hash: olNlCN64bLbPObiQcnjy8ZCy31CgqZyVDz4boAZyKow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3061 (0xbf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAC7/serialNumber=30BC2EE5B7564FE0FDF200E789B23A2C0D8E9224 Validity Not Before: Nov 22 18:22:07 2024 GMT Not After : Nov 29 18:22:07 2024 GMT Subject: CN=6740cbcf-6ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:87:e1:74:c2:e9:69:ae:7f:70:45:ad:43: 84:9a:97:fc:ea:60:17:c0:6d:80:f7:79:7a:3e:99: e3:7b:ca:ce:b1:ed:40:5c:8b:09:83:e8:d6:90:3e: 37:df:d4:a9:fb:fe:24:26:b6:b3:11:df:20:c3:f8: bd:f9:66:c2:c9:58:2d:04:15:96:e6:97:4c:00:37: 52:82:44:4c:5f:52:8b:34:73:80:52:45:38:ae:e7: 64:a4:bb:3a:9e:a2:3e:46:5c:8a:3e:6b:e7:7a:4c: 8e:05:d3:3b:d7:97:5b:ca:d2:55:3d:a2:6a:f0:a8: 9b:8e:4a:72:b0:5b:22:76:30:35:38:8a:b0:c5:92: d6:0f:fc:e5:19:4c:ee:1f:56:0e:12:ad:46:1e:59: 0b:35:61:79:d7:56:3a:a7:da:61:ea:9a:5e:f1:09: a0:fc:9d:76:cf:35:12:5e:45:54:ec:f3:63:a1:8e: d6:48:f5:67:cb:13:af:a3:14:67:de:9b:38:6d:6e: e6:f0:3e:d0:27:79:23:31:82:bd:ae:9b:4c:6e:8a: 86:3e:ee:16:88:00:8f:06:57:ef:a4:8c:ce:73:57: f5:9c:6b:b6:26:91:59:36:85:ff:d2:40:a9:7c:0f: 49:84:c5:b1:8e:29:c3:83:99:ad:1e:0b:15:6a:ac: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F7:A3:DF:17:44:64:92:6E:11:49:82:01:5D:26:B2:05:9A:4A:E7 X509v3 Authority Key Identifier: keyid:30:BC:2E:E5:B7:56:4F:E0:FD:F2:00:E7:89:B2:3A:2C:0D:8E:92:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLwu5bdWT-D98gDnibI6LA2OkiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAC7/C139DABA022C11EABE1F0C48C4F9AE02/MLwu5bdWT-D98gDnibI6LA2OkiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a5:ae:e0:79:bd:97:05:11:09:f5:8e:4d:8d:6d:8c:e5:e1: b9:3c:39:53:12:bf:c4:53:cf:ec:17:5d:7b:2f:2c:51:d2:93: e2:99:73:ad:98:59:84:72:3c:9f:14:12:6e:22:71:34:9f:33: d5:65:b7:7f:99:2c:a3:61:62:00:19:d0:de:bf:dd:9e:6d:0e: e0:a7:37:13:37:46:fe:fc:74:65:81:4e:3f:26:b9:7f:e0:4c: fd:09:27:db:fd:c4:e9:24:24:d2:f9:4e:7b:0f:91:4f:bc:9d: d2:c3:f5:6d:71:5f:b2:d2:a0:61:7a:23:e3:97:ec:9b:47:d0: d5:4e:e0:69:9b:70:d3:e2:aa:2f:a5:e2:b5:d0:8f:d2:98:09: 72:c9:ad:7e:ee:5c:2c:ff:dd:09:4e:00:1f:69:8a:fb:01:eb: f6:50:7a:39:b1:19:a6:3d:82:48:72:96:3a:b4:ec:c4:9a:c0: a2:da:86:39:62:68:72:a0:45:4e:25:1d:55:a0:67:73:e9:59: 71:95:94:d0:ee:50:21:53:96:96:91:51:91:92:21:b3:05:a5: bf:51:39:0f:57:f6:92:40:d1:0e:a0:60:1a:2a:fe:a5:33:ff: 97:4c:44:18:b5:d6:0d:8d:90:d0:78:58:20:8e:02:6c:a4:f4: 45:11:2f:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBQzcxMTAvBgNVBAUTKDMwQkMyRUU1Qjc1NjRGRTBGREYyMDBFNzg5QjIzQTJD MEQ4RTkyMjQwHhcNMjQxMTIyMTgyMjA3WhcNMjQxMTI5MTgyMjA3WjAYMRYwFAYD VQQDEw02NzQwY2JjZi02ZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzCH4XTC6Wmuf3BFrUOEmpf86mAXwG2A93l6Ppnje8rOse1AXIsJg+jWkD43 39Sp+/4kJrazEd8gw/i9+WbCyVgtBBWW5pdMADdSgkRMX1KLNHOAUkU4rudkpLs6 nqI+RlyKPmvnekyOBdM715dbytJVPaJq8KibjkpysFsidjA1OIqwxZLWD/zlGUzu H1YOEq1GHlkLNWF511Y6p9ph6ppe8Qmg/J12zzUSXkVU7PNjoY7WSPVnyxOvoxRn 3ps4bW7m8D7QJ3kjMYK9rptMboqGPu4WiACPBlfvpIzOc1f1nGu2JpFZNoX/0kCp fA9JhMWxjinDg5mtHgsVaqzEMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLv3o98X RGSSbhFJggFdJrIFmkrnMB8GA1UdIwQYMBaAFDC8LuW3Vk/g/fIA54myOiwNjpIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FDNy9DMTM5REFCQTAy MkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1QtRDk4Z0RuaWJJNkxBMk9r aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Md3U1YmRXVC1EOThnRG5pYkk2TEEyT2tpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0FDNy9DMTM5REFCQTAyMkMxMUVBQkUxRjBDNDhDNEY5QUUwMi9NTHd1NWJkV1Qt RDk4Z0RuaWJJNkxBMk9raVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCppa7geb2XBREJ9Y5NjW2M5eG5PDlTEr/EU8/sF117LyxR0pPimXOt mFmEcjyfFBJuInE0nzPVZbd/mSyjYWIAGdDev92ebQ7gpzcTN0b+/HRlgU4/Jrl/ 4Ez9CSfb/cTpJCTS+U57D5FPvJ3Sw/VtcV+y0qBheiPjl+ybR9DVTuBpm3DT4qov peK10I/SmAlyya1+7lws/90JTgAfaYr7Aev2UHo5sRmmPYJIcpY6tOzEmsCi2oY5 YmhyoEVOJR1VoGdz6VlxlZTQ7lAhU5aWkVGRkiGzBaW/UTkPV/aSQNEOoGAaKv6l M/+XTEQYtdYNjZDQeFggjgJspPRFES9H -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org