$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft File: _PdT00aqq5WrFMYmdRXN8T-A-7s.mft (raw, json) Hash identifier: xZmAIE2VPfLwz0qPWTCROgprsdaEuFhR11X6fK49jZk= Subject key identifier: A3:11:CD:2D:71:75:E4:77:E4:E3:84:23:4B:3A:34:0C:77:73:C0:E5 Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft Manifest number: C0 Signing time: Sat 23 Nov 2024 04:02:12 +0000 Manifest this update: Sat 23 Nov 2024 04:02:12 +0000 Manifest next update: Sat 30 Nov 2024 04:02:12 +0000 Files and hashes: 1: _PdT00aqq5WrFMYmdRXN8T-A-7s.crl (hash: Cy+7oUxmsZZ8uccbgFVgMUCEO/CMRbfakE2XRFCepKI=) 2: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (hash: Ot9cpLYOpRPaFsp3xYibZwM51C9pmXOqK219ZE/jTZk=) 3: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (hash: W7ba5JYerHkkZ4+27LlJwNkE8nn+BEtnpt42cK9Iauc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB Validity Not Before: Nov 23 04:02:12 2024 GMT Not After : Nov 30 04:02:12 2024 GMT Subject: CN=674153c4-0f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:65:8c:21:35:92:b7:c2:12:39:09:b4:b4:e5: 4b:32:1b:7c:93:ad:42:4b:a2:21:0b:a8:c9:f0:6c: 74:ba:9f:81:81:e6:90:26:ad:b1:4c:ff:13:e6:1c: 60:07:72:dd:96:fb:f0:53:cb:f0:34:13:e9:70:24: e1:b3:55:6b:fe:3d:50:f1:10:83:07:e7:2d:fc:07: 34:60:89:9b:bf:5f:73:da:dd:99:7c:da:00:8c:ac: 59:f9:52:fb:b7:95:98:9a:fd:05:66:7c:15:ab:dc: eb:6e:34:be:a9:fc:9b:b2:f2:f5:37:52:56:c8:dd: 67:50:48:94:8f:7a:49:a6:fd:d0:45:0c:bc:ee:16: 28:b9:84:fc:60:a4:fb:91:30:4e:83:80:24:c9:86: 6a:51:46:17:c1:f5:58:f7:f4:b2:34:1a:3b:bb:d2: 1e:9f:0b:07:80:85:eb:e5:8c:45:5d:5f:f7:80:23: 6a:31:c1:e5:aa:6a:41:86:7a:a9:7e:2f:26:23:e5: b6:4c:e0:9a:f3:8b:70:f2:2b:1d:73:d1:f4:99:84: e9:1b:28:26:97:32:44:25:e4:28:38:59:8d:f5:72: 6f:d2:27:25:dc:1f:17:96:ed:f5:d3:18:29:fb:21: 57:07:94:a1:50:1c:15:61:d1:da:c7:8f:47:3b:8d: 8a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:11:CD:2D:71:75:E4:77:E4:E3:84:23:4B:3A:34:0C:77:73:C0:E5 X509v3 Authority Key Identifier: keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a9:ec:bc:b9:67:c0:f2:d5:4e:ff:91:ed:98:00:55:06:90: be:1d:bb:60:02:da:fe:f4:00:5b:0b:86:24:5f:8e:41:22:bd: 0f:83:12:42:e5:22:3a:32:8c:19:5e:f7:1c:c0:26:60:e3:df: 0c:fc:2c:5e:25:dd:87:06:7d:4f:4c:5d:46:60:eb:67:c0:f1: 7c:7b:ac:a5:27:d5:49:0c:b0:46:a4:ec:db:99:b1:a9:2a:28: 71:b2:e7:77:19:42:69:72:5d:d1:0f:e2:b0:1f:c7:ce:74:7b: e6:fb:1d:0d:c2:ed:12:03:01:2c:a7:87:46:a0:06:eb:ae:22: 8a:57:0e:74:0b:12:2f:2a:52:c4:e1:b9:d8:9b:a6:bb:60:4c: fc:a5:4a:7f:93:16:01:e3:67:cf:36:25:20:76:a7:09:82:a6: 2a:65:b5:e8:a6:85:26:c7:e0:07:5d:2e:60:11:f7:92:c5:e5: 5d:0e:72:e7:a5:79:2e:41:36:22:49:65:91:18:e8:3a:41:18: 98:5b:17:22:f9:63:7f:70:cf:9c:05:d4:e0:4e:c7:a9:16:83: 2d:5b:90:d1:4b:43:f7:ab:c0:43:7a:78:e2:fa:d6:1f:0f:00: dd:6d:17:8d:fe:96:6d:ef:79:c6:5e:29:23:ea:b3:3c:2f:3a: 65:b6:ab:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGMjIxMTAvBgNVBAUTKEZDRjc1M0QzNDZBQUFCOTVBQjE0QzYyNjc1MTVDREYx M0Y4MEZCQkIwHhcNMjQxMTIzMDQwMjEyWhcNMjQxMTMwMDQwMjEyWjAYMRYwFAYD VQQDEw02NzQxNTNjNC0wZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2WMITWSt8ISOQm0tOVLMht8k61CS6IhC6jJ8Gx0up+BgeaQJq2xTP8T5hxg B3LdlvvwU8vwNBPpcCThs1Vr/j1Q8RCDB+ct/Ac0YImbv19z2t2ZfNoAjKxZ+VL7 t5WYmv0FZnwVq9zrbjS+qfybsvL1N1JWyN1nUEiUj3pJpv3QRQy87hYouYT8YKT7 kTBOg4AkyYZqUUYXwfVY9/SyNBo7u9IenwsHgIXr5YxFXV/3gCNqMcHlqmpBhnqp fi8mI+W2TOCa84tw8isdc9H0mYTpGygmlzJEJeQoOFmN9XJv0icl3B8Xlu310xgp +yFXB5ShUBwVYdHax49HO42KPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMRzS1x deR35OOEI0s6NAx3c8DlMB8GA1UdIwQYMBaAFPz3U9NGqquVqxTGJnUVzfE/gPu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DRjlCRjVGRThG MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9fUGRUMDBhcXE1V3JGTVltZFJYTjhULUEt N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19QZFQwMGFxcTVXckZNWW1kUlhOOFQtQS03cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUYyMi9DRjlCRjVGRThGMkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9fUGRUMDBhcXE1 V3JGTVltZFJYTjhULUEtN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3qey8uWfA8tVO/5HtmABVBpC+HbtgAtr+9ABbC4YkX45BIr0PgxJC 5SI6MowZXvccwCZg498M/CxeJd2HBn1PTF1GYOtnwPF8e6ylJ9VJDLBGpOzbmbGp Kihxsud3GUJpcl3RD+KwH8fOdHvm+x0Nwu0SAwEsp4dGoAbrriKKVw50CxIvKlLE 4bnYm6a7YEz8pUp/kxYB42fPNiUgdqcJgqYqZbXopoUmx+AHXS5gEfeSxeVdDnLn pXkuQTYiSWWRGOg6QRiYWxci+WN/cM+cBdTgTsepFoMtW5DRS0P3q8BDenji+tYf DwDdbReN/pZt73nGXikj6rM8LzpltqsV -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:09 2024 by rpki-client on console-ams.rpki-client.org