$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: XjkCWiRtiE/qu7m62NSdAQFB7hapsmZTdz1MUTC0ZMw= Subject key identifier: 5A:94:D7:BB:48:D1:E0:0E:07:85:9A:A9:11:5E:F1:FE:71:6A:A6:0A Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 023C Signing time: Sat 23 Nov 2024 01:28:11 +0000 Manifest this update: Sat 23 Nov 2024 01:28:11 +0000 Manifest next update: Sat 30 Nov 2024 01:28:11 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: g0D6yMOrW4BfmeTUUbrwiVQWm0Yw40kp95FRelIofzo=) 2: 339C9EAEA73B11EF8FE20230C4F9AE02.roa (hash: vC9li2NXJG1wX99pZcw3SSD9Sc1JGRWSXzZ6wBX+1sE=) 3: A48E2B14A73B11EF9933C14AC4F9AE02.roa (hash: sT4T0L9wC2fx0duV9VQHP26XXKTCr/0RUKMxWwegA4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: Nov 23 01:28:11 2024 GMT Not After : Nov 30 01:28:11 2024 GMT Subject: CN=67412fab-a8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:ae:98:c6:e6:4a:17:ad:65:78:9d:44:80: 09:af:49:70:5e:f8:4e:42:de:7b:af:82:f5:28:f3: d0:3c:93:84:cd:58:6d:17:6c:01:2c:4f:7e:77:59: 6a:a3:41:00:dc:7d:34:5f:16:ef:93:a9:18:55:01: db:a0:a0:47:7f:6c:f2:12:71:76:38:6c:2a:79:ab: 33:b5:f4:95:33:4c:4a:c8:b4:d3:4d:cc:9d:15:93: 03:52:13:61:fb:06:bf:38:37:fe:23:c2:a4:26:69: f6:33:ed:66:cd:1b:c2:e5:d5:33:a8:6e:29:02:55: 00:c8:30:1d:81:62:fd:06:ea:78:b7:62:21:1f:64: 57:60:48:e1:a9:40:ea:28:9b:29:8d:d8:7d:da:4d: 72:21:85:3c:90:94:bf:58:03:c2:e3:24:8d:fc:d0: a4:67:78:7c:f3:b9:25:a7:c0:33:3a:5b:28:cf:02: 09:5a:7b:b5:56:4f:98:d5:9f:74:7a:d6:65:c7:68: 89:61:e9:47:82:53:2e:b0:50:89:99:c0:65:be:a4: 40:24:70:b7:29:53:87:e4:73:13:57:fe:27:2a:9d: ed:f5:ba:34:e4:46:fe:d8:d6:32:14:d8:3d:f2:76: b8:91:9f:9f:a4:90:03:da:84:79:22:56:8d:ee:be: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:94:D7:BB:48:D1:E0:0E:07:85:9A:A9:11:5E:F1:FE:71:6A:A6:0A X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:10:54:da:30:1c:4a:ea:db:52:5d:0a:53:ff:68:c1:2e:7b: 68:eb:d9:e6:46:a9:4a:1a:ee:b0:08:32:bb:dd:72:0f:1c:9e: b5:ad:91:36:ce:aa:48:02:0f:5e:0a:4f:8e:55:7f:52:bd:32: 0f:e5:5e:34:fe:24:7c:a3:07:f0:16:7c:dc:f1:2c:7d:56:3e: be:12:6d:39:8c:5f:13:e8:46:c1:d6:5b:da:7e:f4:87:73:42: 86:f9:87:83:06:75:7a:9b:c5:f7:30:95:96:64:af:34:b7:ca: a1:20:03:c0:bd:0c:48:ab:dd:03:5a:7a:fa:f1:a7:ce:3d:8a: 59:03:03:59:86:bb:42:10:35:89:26:68:3a:91:6e:a8:eb:dc: 67:2c:09:54:8e:b9:e6:05:ab:cf:dd:fc:06:d1:a1:5b:a7:ff: fd:7d:d9:c8:a3:26:db:e1:4d:e6:fa:23:67:fc:c5:b3:9e:3a: fa:d0:4b:8d:90:82:dd:d2:eb:be:92:7d:23:d9:aa:21:86:f8: 48:f4:fe:8d:70:03:dc:cb:2d:be:25:f6:0c:e9:33:c9:da:ef: 25:7a:c6:50:9e:1f:74:51:b1:92:49:81:63:36:a6:44:9d:27: be:d7:bd:1d:f0:a3:52:93:38:e7:09:40:c0:b7:22:00:86:8e: 35:2e:86:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjQxMTIzMDEyODExWhcNMjQxMTMwMDEyODExWjAYMRYwFAYD VQQDEw02NzQxMmZhYi1hOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZOumMbmShetZXidRIAJr0lwXvhOQt57r4L1KPPQPJOEzVhtF2wBLE9+d1lq o0EA3H00Xxbvk6kYVQHboKBHf2zyEnF2OGwqeasztfSVM0xKyLTTTcydFZMDUhNh +wa/ODf+I8KkJmn2M+1mzRvC5dUzqG4pAlUAyDAdgWL9Bup4t2IhH2RXYEjhqUDq KJspjdh92k1yIYU8kJS/WAPC4ySN/NCkZ3h887klp8AzOlsozwIJWnu1Vk+Y1Z90 etZlx2iJYelHglMusFCJmcBlvqRAJHC3KVOH5HMTV/4nKp3t9bo05Eb+2NYyFNg9 8na4kZ+fpJAD2oR5IlaN7r7h3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqU17tI 0eAOB4WaqRFe8f5xaqYKMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjEFTaMBxK6ttSXQpT/2jBLnto69nmRqlKGu6wCDK73XIPHJ61rZE2 zqpIAg9eCk+OVX9SvTIP5V40/iR8owfwFnzc8Sx9Vj6+Em05jF8T6EbB1lvafvSH c0KG+YeDBnV6m8X3MJWWZK80t8qhIAPAvQxIq90DWnr68afOPYpZAwNZhrtCEDWJ Jmg6kW6o69xnLAlUjrnmBavP3fwG0aFbp//9fdnIoybb4U3m+iNn/MWznjr60EuN kILd0uu+kn0j2aohhvhI9P6NcAPcyy2+JfYM6TPJ2u8lesZQnh90UbGSSYFjNqZE nSe+170d8KNSkzjnCUDAtyIAho41LoZE -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:41 2024 by rpki-client on console-ams.rpki-client.org